uvd-x402-sdk 2.41.0 → 2.43.0

package/dist/backend/index.js

@@ -1692,404 +1692,196 @@ function createHonoMiddleware(options) {
     await next();
   };
 }
+var MAX_SEARCH_LEN = 128;
+var HEALTH_FILTERS = [
+  "alive",
+  "degraded",
+  "auth_gated",
+  "quarantined",
+  "unknown",
+  "unprobeable",
+  "any"
+];
+var TIER_FILTERS = [
+  "first_party",
+  "vip",
+  "verified",
+  "listed"
+];
+function epochToDate(seconds) {
+  return seconds === void 0 ? void 0 : new Date(seconds * 1e3);
+}
+function isAlive(resource) {
+  return resource.health?.status === "alive";
+}
 var BazaarClient = class {
   baseUrl;
-  apiKey;
   timeout;
   constructor(options = {}) {
-    this.baseUrl = options.baseUrl || "https://bazaar.ultravioletadao.xyz";
-    this.apiKey = options.apiKey;
+    this.baseUrl = (options.baseUrl || "https://facilitator.ultravioletadao.xyz").replace(/\/+$/, "");
     this.timeout = options.timeout || 3e4;
   }
   /**
-   * Discover x402-enabled resources
-   *
-   * @param options - Discovery filters
-   * @returns Paginated list of matching resources
-   *
-   * @example
-   * ```ts
-   * // Find AI APIs on Base with USDC under $0.10
-   * const results = await bazaar.discover({
-   *   category: 'ai',
-   *   network: 'base',
-   *   token: 'USDC',
-   *   maxPrice: '0.10',
-   * });
-   *
-   * for (const resource of results.resources) {
-   *   console.log(`${resource.name}: ${resource.url}`);
-   * }
-   * ```
+   * Issue a request against the facilitator with the configured timeout.
    */
-  async discover(options = {}) {
-    const params = new URLSearchParams();
-    if (options.category) params.set("category", options.category);
-    if (options.network) params.set("network", options.network);
-    if (options.token) params.set("token", options.token);
-    if (options.provider) params.set("provider", options.provider);
-    if (options.tags?.length) params.set("tags", options.tags.join(","));
-    if (options.query) params.set("query", options.query);
-    if (options.maxPrice) params.set("maxPrice", options.maxPrice);
-    if (options.page) params.set("page", options.page.toString());
-    if (options.limit) params.set("limit", options.limit.toString());
-    if (options.sortBy) params.set("sortBy", options.sortBy);
-    if (options.sortOrder) params.set("sortOrder", options.sortOrder);
-    const url = `${this.baseUrl}/resources${params.toString() ? `?${params}` : ""}`;
+  async request(path, init) {
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), this.timeout);
     try {
-      const response = await fetch(url, {
-        method: "GET",
-        headers: { "Accept": "application/json" },
+      const response = await fetch(`${this.baseUrl}${path}`, {
+        ...init,
+        headers: { Accept: "application/json", ...init?.headers || {} },
         signal: controller.signal
       });
-      clearTimeout(timeoutId);
       if (!response.ok) {
         const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
+        throw new Error(
+          `Bazaar API error: ${response.status} - ${errorText}`
+        );
       }
       return await response.json();
-    } catch (error) {
+    } finally {
       clearTimeout(timeoutId);
-      throw error;
     }
   }
   /**
-   * Get a specific resource by ID
+   * List resources from the discovery registry.
    *
-   * @param resourceId - Resource ID
-   * @returns Resource details
-   */
-  async getResource(resourceId) {
-    const url = `${this.baseUrl}/resources/${encodeURIComponent(resourceId)}`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "GET",
-        headers: { "Accept": "application/json" },
-        signal: controller.signal
-      });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
-    }
-  }
-  /**
-   * Get a resource by its URL
+   * @param options - Server-side filters and pagination
+   * @returns One page of resources plus the total across all pages
    *
-   * @param resourceUrl - Resource URL
-   * @returns Resource details
+   * @example
+   * ```ts
+   * const page = await bazaar.listResources({ network: 'eip155:8453', health: 'alive' });
+   * ```
    */
-  async getResourceByUrl(resourceUrl) {
-    const url = `${this.baseUrl}/resources/by-url?url=${encodeURIComponent(resourceUrl)}`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "GET",
-        headers: { "Accept": "application/json" },
-        signal: controller.signal
-      });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
+  async listResources(options = {}) {
+    if (options.q !== void 0 && options.q.length > MAX_SEARCH_LEN) {
+      throw new Error(`q must be at most ${MAX_SEARCH_LEN} characters`);
     }
+    const params = new URLSearchParams();
+    params.set("limit", String(options.limit ?? 10));
+    params.set("offset", String(options.offset ?? 0));
+    if (options.category) params.set("category", options.category);
+    if (options.network) params.set("network", options.network);
+    if (options.provider) params.set("provider", options.provider);
+    if (options.tag) params.set("tag", options.tag);
+    if (options.source) params.set("source", options.source);
+    if (options.sourceFacilitator)
+      params.set("sourceFacilitator", options.sourceFacilitator);
+    if (options.health) params.set("health", options.health);
+    if (options.tier) params.set("tier", options.tier);
+    if (options.q) params.set("q", options.q);
+    return this.request(
+      `/discovery/resources?${params.toString()}`
+    );
   }
   /**
-   * Register a new resource in the Bazaar
+   * Walk the whole filtered catalog, one page at a time.
    *
-   * Requires API key authentication.
+   * Pages are fetched in sequence rather than in parallel: the read routes are
+   * rate limited, and a burst of parallel pages is how a legitimate catalog
+   * walk turns into a wall of 429s.
    *
-   * @param options - Resource registration options
-   * @returns Registered resource
+   * @param options - Same filters as {@link listResources}; `limit` is the page size
    *
    * @example
    * ```ts
-   * const resource = await bazaar.register({
-   *   url: 'https://api.example.com/v1/generate',
-   *   name: 'Image Generator API',
-   *   description: 'Generate images with AI',
-   *   category: 'ai',
-   *   networks: ['base', 'ethereum', 'polygon'],
-   *   price: '0.05',
-   *   payTo: '0x1234...',
-   *   tags: ['ai', 'image', 'generator'],
-   * });
+   * for await (const r of bazaar.iterateResources({ health: 'alive' })) {
+   *   console.log(r.url);
+   * }
    * ```
    */
-  async register(options) {
-    if (!this.apiKey) {
-      throw new Error("API key required for resource registration");
-    }
-    const url = `${this.baseUrl}/resources`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "Accept": "application/json",
-          "Authorization": `Bearer ${this.apiKey}`
-        },
-        body: JSON.stringify({
-          url: options.url,
-          name: options.name,
-          description: options.description,
-          category: options.category,
-          networks: options.networks,
-          tokens: options.tokens || ["USDC"],
-          price: options.price,
-          priceCurrency: options.priceCurrency || "USDC",
-          payTo: options.payTo,
-          mimeType: options.mimeType || "application/json",
-          outputSchema: options.outputSchema,
-          tags: options.tags
-        }),
-        signal: controller.signal
-      });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
-    }
-  }
-  /**
-   * Update an existing resource
-   *
-   * Requires API key authentication. Only the owner can update.
-   *
-   * @param resourceId - Resource ID to update
-   * @param updates - Partial update options
-   * @returns Updated resource
-   */
-  async update(resourceId, updates) {
-    if (!this.apiKey) {
-      throw new Error("API key required for resource update");
-    }
-    const url = `${this.baseUrl}/resources/${encodeURIComponent(resourceId)}`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "PATCH",
-        headers: {
-          "Content-Type": "application/json",
-          "Accept": "application/json",
-          "Authorization": `Bearer ${this.apiKey}`
-        },
-        body: JSON.stringify(updates),
-        signal: controller.signal
+  async *iterateResources(options = {}) {
+    const pageSize = options.limit ?? 100;
+    let offset = options.offset ?? 0;
+    for (; ; ) {
+      const page = await this.listResources({
+        ...options,
+        limit: pageSize,
+        offset
       });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
+      if (page.items.length === 0) return;
+      for (const item of page.items) yield item;
+      offset += page.items.length;
+      if (offset >= page.pagination.total) return;
     }
   }
   /**
-   * Delete a resource from the Bazaar
+   * Look up a single resource by its URL.
    *
-   * Requires API key authentication. Only the owner can delete.
+   * The registry keys on URL and has no by-id lookup, so this searches and
+   * then matches exactly.
    *
-   * @param resourceId - Resource ID to delete
+   * @param resourceUrl - Exact URL of the resource
+   * @returns The resource, or null when it is not registered
    */
-  async delete(resourceId) {
-    if (!this.apiKey) {
-      throw new Error("API key required for resource deletion");
-    }
-    const url = `${this.baseUrl}/resources/${encodeURIComponent(resourceId)}`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "DELETE",
-        headers: {
-          "Authorization": `Bearer ${this.apiKey}`
-        },
-        signal: controller.signal
-      });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
-    }
+  async getResourceByUrl(resourceUrl) {
+    const page = await this.listResources({
+      q: resourceUrl.slice(0, MAX_SEARCH_LEN),
+      limit: 100,
+      health: "any"
+    });
+    return page.items.find((item) => item.url === resourceUrl) ?? null;
   }
   /**
-   * Deactivate a resource (soft delete)
+   * Register a paid resource in the discovery registry.
    *
-   * Requires API key authentication. Only the owner can deactivate.
+   * Registration is open and rate limited; re-registering a known URL updates
+   * the existing record rather than creating a duplicate.
    *
-   * @param resourceId - Resource ID to deactivate
-   * @returns Updated resource with isActive: false
+   * @param options - Resource details
+   * @returns The registry's acknowledgement
    */
-  async deactivate(resourceId) {
-    if (!this.apiKey) {
-      throw new Error("API key required for resource deactivation");
-    }
-    const url = `${this.baseUrl}/resources/${encodeURIComponent(resourceId)}/deactivate`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "POST",
-        headers: {
-          "Authorization": `Bearer ${this.apiKey}`
-        },
-        signal: controller.signal
-      });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
-    }
+  async registerResource(options) {
+    const payload = {
+      url: options.url,
+      type: options.type || "http",
+      description: options.description || ""
+    };
+    if (options.accepts) payload.accepts = options.accepts;
+    if (options.metadata) payload.metadata = options.metadata;
+    return this.request("/discovery/register", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(payload)
+    });
   }
   /**
-   * Reactivate a deactivated resource
+   * Aggregate catalog metrics (60s cached server-side).
    *
-   * Requires API key authentication. Only the owner can reactivate.
-   *
-   * @param resourceId - Resource ID to reactivate
-   * @returns Updated resource with isActive: true
+   * @returns Counts by source, facilitator, network, tier and liveness
    */
-  async reactivate(resourceId) {
-    if (!this.apiKey) {
-      throw new Error("API key required for resource reactivation");
-    }
-    const url = `${this.baseUrl}/resources/${encodeURIComponent(resourceId)}/reactivate`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "POST",
-        headers: {
-          "Authorization": `Bearer ${this.apiKey}`
-        },
-        signal: controller.signal
-      });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
-    }
+  async getStats() {
+    return this.request("/discovery/stats");
   }
   /**
-   * List all resources owned by the authenticated user
-   *
-   * Requires API key authentication.
+   * Check that the facilitator serving the registry is up.
    *
-   * @param options - Pagination options
-   * @returns Paginated list of owned resources
+   * @returns True when the facilitator answers its health check
    */
-  async listMyResources(options = {}) {
-    if (!this.apiKey) {
-      throw new Error("API key required to list owned resources");
-    }
-    const params = new URLSearchParams();
-    if (options.page) params.set("page", options.page.toString());
-    if (options.limit) params.set("limit", options.limit.toString());
-    if (options.includeInactive) params.set("includeInactive", "true");
-    const url = `${this.baseUrl}/resources/mine${params.toString() ? `?${params}` : ""}`;
+  async healthCheck() {
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), this.timeout);
     try {
-      const response = await fetch(url, {
+      const response = await fetch(`${this.baseUrl}/health`, {
         method: "GET",
-        headers: {
-          "Accept": "application/json",
-          "Authorization": `Bearer ${this.apiKey}`
-        },
         signal: controller.signal
       });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
-    }
-  }
-  /**
-   * Get Bazaar API health status
-   *
-   * @returns True if the Bazaar API is healthy
-   */
-  async healthCheck() {
-    try {
-      const response = await fetch(`${this.baseUrl}/health`, {
-        method: "GET"
-      });
       return response.ok;
     } catch {
       return false;
+    } finally {
+      clearTimeout(timeoutId);
     }
   }
   /**
-   * Get Bazaar statistics
-   *
-   * @returns Global statistics about the Bazaar
+   * @deprecated Renamed to {@link listResources}, which returns the registry's
+   * real `{ items, pagination }` envelope. The old `discover()` returned a
+   * `{ resources, page, totalPages }` shape that no endpoint ever served.
    */
-  async getStats() {
-    const url = `${this.baseUrl}/stats`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
-    try {
-      const response = await fetch(url, {
-        method: "GET",
-        headers: { "Accept": "application/json" },
-        signal: controller.signal
-      });
-      clearTimeout(timeoutId);
-      if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Bazaar API error: ${response.status} - ${errorText}`);
-      }
-      return await response.json();
-    } catch (error) {
-      clearTimeout(timeoutId);
-      throw error;
-    }
+  async discover(options = {}) {
+    return this.listResources(options);
   }
 };
 var EscrowClient = class {
@@ -4081,9 +3873,12 @@ exports.ESCROW_TIMEOUT_MS = ESCROW_TIMEOUT_MS;
 exports.Erc8004Client = Erc8004Client;
 exports.EscrowClient = EscrowClient;
 exports.FacilitatorClient = FacilitatorClient;
+exports.HEALTH_FILTERS = HEALTH_FILTERS;
+exports.MAX_SEARCH_LEN = MAX_SEARCH_LEN;
 exports.OPERATOR_ABI = OPERATOR_ABI;
 exports.OPERATOR_ABI_CREATE3 = OPERATOR_ABI_CREATE3;
 exports.PAYMENT_INFO_TYPEHASH = PAYMENT_INFO_TYPEHASH;
+exports.TIER_FILTERS = TIER_FILTERS;
 exports.TIER_TIMINGS = TIER_TIMINGS;
 exports.USDC_DOMAIN_NAME = USDC_DOMAIN_NAME;
 exports.X402_CORS_HEADERS = X402_CORS_HEADERS;
@@ -4098,11 +3893,13 @@ exports.canReleaseEscrow = canReleaseEscrow;
 exports.create402Response = create402Response;
 exports.createHonoMiddleware = createHonoMiddleware;
 exports.createPaymentMiddleware = createPaymentMiddleware;
+exports.epochToDate = epochToDate;
 exports.escrowTimeRemaining = escrowTimeRemaining;
 exports.extractPaymentFromHeaders = extractPaymentFromHeaders;
 exports.getCorsHeaders = getCorsHeaders;
 exports.getEscrowContractsByChainId = getEscrowContractsByChainId;
 exports.getEscrowSupportedChainIds = getEscrowSupportedChainIds;
+exports.isAlive = isAlive;
 exports.isEscrowExpired = isEscrowExpired;
 exports.isEscrowSupportedOnChain = isEscrowSupportedOnChain;
 exports.parsePaymentHeader = parsePaymentHeader;