wolverine-ai 5.3.1 → 5.3.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolverine-ai",
-  "version": "5.3.1",
+  "version": "5.3.3",
   "description": "Self-healing Node.js server framework powered by AI. Catches crashes, diagnoses errors, generates fixes, verifies, and restarts — automatically.",
   "main": "src/index.js",
   "bin": {

package/src/middleware/x402-fastify.js

@@ -99,15 +99,20 @@ async function x402Plugin(fastify, opts) {
 
     // Build payment requirements (v1 format matching @coinbase/x402)
     const { getAddress } = await import("viem");
+    // Build full resource URL (required by facilitator)
+    const proto = request.headers["x-forwarded-proto"] || "https";
+    const host = request.headers["x-forwarded-host"] || request.headers.host || "localhost";
+    const resourceUrl = `${proto}://${host}${request.url}`;
+
     const paymentRequirements = {
       scheme: "exact",
       network: _network,
       maxAmountRequired: usdcAtomicAmount,
-      resource: `${request.method} ${request.url}`,
-      description: routeConfig.description || `Payment for ${request.method} ${request.url}`,
+      resource: resourceUrl,
+      description: routeConfig.description || `Payment of $${dollarAmount.toFixed(2)} USDC`,
       mimeType: "application/json",
       payTo: getAddress(_payTo),
-      maxTimeoutSeconds: 300,
+      maxTimeoutSeconds: 60,
       asset: getAddress(USDC_ADDRESS),
       extra: USDC_EIP712,
     };
@@ -127,20 +132,21 @@ async function x402Plugin(fastify, opts) {
       return;
     }
 
-    // Decode payment
+    // Decode payment — parse raw payload directly (matching working project pattern)
     let decodedPayment;
     try {
-      const { exact } = await import("x402/schemes");
-      const libraryDecoded = exact.evm.decodePayment(paymentHeader);
-
-      // Parse raw payload for metadata
       const raw = JSON.parse(Buffer.from(paymentHeader, "base64").toString("utf-8"));
 
+      // Validate required fields
+      if (!raw.payload?.authorization || !raw.payload?.signature) {
+        throw new Error("Missing authorization or signature");
+      }
+
       decodedPayment = {
         x402Version: raw.x402Version || 1,
         scheme: raw.scheme || "exact",
         network: raw.network || _network,
-        payload: libraryDecoded.payload,
+        payload: raw.payload,
       };
     } catch (err) {
       reply.code(402).send({ error: "Invalid payment format: " + err.message, accepts: [paymentRequirements] });
@@ -180,17 +186,17 @@ async function x402Plugin(fastify, opts) {
 
     try {
       const paymentHeader = request.headers["x-payment"] || request.headers["payment-signature"];
-      const { exact } = require("x402/schemes");
       const raw = JSON.parse(Buffer.from(paymentHeader, "base64").toString("utf-8"));
-      const libraryDecoded = exact.evm.decodePayment(paymentHeader);
-      const decodedPayment = { x402Version: raw.x402Version || 1, scheme: raw.scheme || "exact", network: raw.network || _network, payload: libraryDecoded.payload };
+      const decodedPayment = { x402Version: raw.x402Version || 1, scheme: raw.scheme || "exact", network: raw.network || _network, payload: raw.payload };
 
       const userValue = decodedPayment.payload.authorization.value;
       const { getAddress } = await import("viem");
+      const proto = request.headers["x-forwarded-proto"] || "https";
+      const host = request.headers["x-forwarded-host"] || request.headers.host || "localhost";
       const requirements = {
         scheme: "exact", network: _network, maxAmountRequired: userValue,
-        resource: `${request.method} ${request.url}`, description: "", mimeType: "application/json",
-        payTo: getAddress(_payTo), maxTimeoutSeconds: 300, asset: getAddress(USDC_ADDRESS), extra: USDC_EIP712,
+        resource: `${proto}://${host}${request.url}`, description: "", mimeType: "application/json",
+        payTo: getAddress(_payTo), maxTimeoutSeconds: 60, asset: getAddress(USDC_ADDRESS), extra: USDC_EIP712,
       };
 
       const settleResult = await _facilitatorClient.settle(decodedPayment, requirements);