wolverine-ai 5.5.1 → 6.0.0

package/.env.example

@@ -2,27 +2,29 @@
 # Copy to .env.local and fill in your keys.
 # All other settings are in server/config/settings.json
 
-# ── API Keys ─────────────────────────────────────────────────────
-# Your OpenAI API key (required)
+# ── AI API Keys (at least one required) ──────────────────────────
+# Wolverine uses these to diagnose errors and generate fixes.
+# Provider is auto-detected from model name in settings.json.
 OPENAI_API_KEY=
 ANTHROPIC_API_KEY=
 
-# ── Wolverine Platform (optional) ────────────────────────────────
-# API key for wolverine-hosted models (wolverine-test-1, wolverine-embedding-1)
-# Get your key at wolverinenode.xyz
-WOLVERINE_API_KEY=
-# ── Dashboard Admin Key  (make your own) ──────────────────────────────────────────
+# ── Dashboard Admin Key ──────────────────────────────────────────
 # Required for the agent command interface on the dashboard.
 # Generate: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
 WOLVERINE_ADMIN_KEY=
 
-# ── CDP x402 Facilitator (mainnet payments) ──────────────────────
-# Required for x402 USDC payments on Base mainnet.
-# Sign up free at https://cdp.coinbase.com → create project → get keys
-# Without these, x402 only works on testnet (Base Sepolia).
+# ── x402 Payments (optional) ─────────────────────────────────────
+# Required for x402 USDC-paid APIs on Base mainnet.
+# Sign up free at https://cdp.coinbase.com → create project → get keys.
+# Then run: wolverine --init-vault
 CDP_API_KEY_ID=
 CDP_API_KEY_SECRET=
 
+# ── Wolverine Platform (optional) ────────────────────────────────
+# API key for wolverine-hosted models (wolverine-test-1, etc.)
+# Get your key at wolverinenode.xyz
+WOLVERINE_API_KEY=
+
 # ── Custom Secrets ───────────────────────────────────────────────
 # Add any secret here — wolverine automatically redacts its value
 # from all AI calls, logs, brain storage, and dashboard output.

package/README.md

@@ -58,6 +58,49 @@ Each demo:
 
 ---
 
+## x402 Paid APIs
+
+Turn any route into a USDC-paid API with one line of config. Uses the [x402 protocol](https://docs.cdp.coinbase.com/x402/welcome) for server-to-server payments on Base.
+
+### Setup (one-time)
+
+```bash
+wolverine --init-vault                    # Create encrypted wallet
+# Add CDP keys to .env.local (free at https://cdp.coinbase.com):
+# CDP_API_KEY_ID=your-key-id
+# CDP_API_KEY_SECRET=your-key-secret
+```
+
+### Usage
+
+```javascript
+// Free route — no config needed
+fastify.get("/api/data", async () => ({ data: "free" }));
+
+// Paid route — just add x402 config
+fastify.get("/api/premium", {
+  config: { x402: { price: "$0.01", description: "Premium data" } },
+}, async (req) => ({
+  data: "premium",
+  paid: req.x402.amount,
+  txHash: req.x402.txHash,
+}));
+
+// Variable price — caller chooses amount
+fastify.post("/api/purchase", {
+  config: { x402: { variable: true, min: "$1", max: "$1000", priceField: "dollars" } },
+}, async (req) => ({
+  credits: parseFloat(req.x402.amount.replace("$", "")) * 100,
+  txHash: req.x402.txHash,
+}));
+```
+
+The middleware handles everything: 402 responses, wallet signing, CDP facilitator verification, and on-chain USDC settlement. Your handler only runs after payment confirms on Base.
+
+**Requirements:** Node 22+, CDP API keys (free tier: 1,000 tx/month), `OPENAI_API_KEY` or `ANTHROPIC_API_KEY` for healing.
+
+---
+
 ## Architecture
 
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolverine-ai",
-  "version": "5.5.1",
+  "version": "6.0.0",
   "description": "Self-healing Node.js server framework powered by AI. Catches crashes, diagnoses errors, generates fixes, verifies, and restarts — automatically.",
   "main": "src/index.js",
   "bin": {
@@ -75,6 +75,6 @@
     "stripe": "^18.0.0"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=22.0.0"
   }
 }

package/src/brain/brain.js

@@ -194,7 +194,7 @@ const SEED_DOCS = [
     metadata: { topic: "x402-paid-apis" },
   },
   {
-    text: "x402 examples — making a paid API is as simple as adding a route. FREE route: fastify.get('/api/data', async (req) => { return getData(); }). PAID route: fastify.get('/api/premium', { config: { x402: { price: '$0.01' } } }, async (req) => { return { data: 'premium', paid: req.x402.amount, txHash: req.x402.txHash }; }). CREDIT PURCHASE: fastify.post('/buy', { config: { x402: { variable: true, min: '$1', max: '$10000', priceField: 'dollars' } } }, async (req) => { const credits = parseFloat(req.x402.amount.replace('$','')) * 100; return { credits, txHash: req.x402.txHash }; }). Frontend integration: sign EIP-3009 TransferWithAuthorization with eth_signTypedData_v4, build v2 payload as { x402Version: 2, scheme: 'exact', network: 'eip155:8453', payload: { authorization: {...}, signature } }, base64 encode, send as X-PAYMENT header. Values MUST be decimal strings ('1000000' for $1) NOT hex. validAfter = String(now - 600), validBefore = String(now + 300). Both verify + settle happen in preHandler BEFORE handler runs. Handler only executes after USDC moves on-chain. req.x402 = { paid: true, amount: '$5.00', from: '0x...', txHash: '0x...', settled: true }.",
+    text: "x402 examples — making a paid API is as simple as adding a route. FREE route: fastify.get('/api/data', async (req) => { return getData(); }). PAID route: fastify.get('/api/premium', { config: { x402: { price: '$0.01' } } }, async (req) => { return { data: 'premium', paid: req.x402.amount, txHash: req.x402.txHash }; }). CREDIT PURCHASE: fastify.post('/buy', { config: { x402: { variable: true, min: '$1', max: '$10000', priceField: 'dollars' } } }, async (req) => { const credits = parseFloat(req.x402.amount.replace('$','')) * 100; return { credits, txHash: req.x402.txHash }; }). Frontend integration: sign EIP-3009 TransferWithAuthorization with eth_signTypedData_v4. v2 payload format: { x402Version: 2, payload: { authorization: { from, to, value (decimal string), validAfter (string), validBefore (string), nonce (0x hex) }, signature }, accepted: { scheme: 'exact', network: 'eip155:8453', amount: usdcAtomicUnits, asset: USDC_ADDRESS, payTo: receiverAddress, maxTimeoutSeconds: 60, extra: { name: 'USD Coin', version: '2' } } }. CRITICAL: the 'accepted' field is required for v2 — it contains the payment requirements the client accepted. Without it the facilitator returns 400 'paymentPayload is invalid'. Base64 encode the payload and send as X-PAYMENT header. Values MUST be decimal strings ('1000000' for $1) NOT hex. validAfter = String(now - 600), validBefore = String(now + 300). Both verify + settle happen in preHandler BEFORE handler runs. Handler only executes after USDC moves on-chain. req.x402 = { paid: true, amount: '$5.00', from: '0x...', txHash: '0x...', settled: true }.",
     metadata: { topic: "x402-examples" },
   },
   {

package/src/templates/server/config/settings.json

@@ -1,10 +1,13 @@
 {
+  "_": "Wolverine Server Configuration — edit these settings to customize your server. Docs: https://github.com/bobbyswhip/Wolverine",
+
   "app": {
-    "name": "Wolverine Server",
+    "name": "My Server",
     "version": "1.0.0",
     "env": "development"
   },
 
+  "_models": "AI models for each task. Provider auto-detected from name (claude-* = Anthropic, gpt-* = OpenAI). Using one model across all roles maximizes prompt cache hits. See wolverine dashboard at localhost:PORT+1/analytics for per-role cost/speed metrics.",
   "models": {
     "reasoning": "claude-sonnet-4-6",
     "coding": "claude-sonnet-4-6",
@@ -16,19 +19,23 @@
     "research": "claude-sonnet-4-6"
   },
 
+  "_embedding": "Vector embedding model for brain memory. Requires OPENAI_API_KEY.",
   "embedding": "text-embedding-3-small",
 
+  "_server": "port: server listen port | maxRetries: consecutive crashes before giving up | maxMemoryMB: OOM threshold",
   "server": {
     "port": 3000,
     "maxRetries": 3,
     "maxMemoryMB": 512
   },
 
+  "_telemetry": "Heartbeat reports server health to the dashboard. Disable for fully offline servers.",
   "telemetry": {
     "enabled": true,
     "heartbeatIntervalMs": 60000
   },
 
+  "_rateLimiting": "AI call budget. Prevents runaway costs from heal loops.",
   "rateLimiting": {
     "maxCallsPerWindow": 32,
     "windowMs": 100000,
@@ -36,6 +43,7 @@
     "maxTokensPerHour": 1000000
   },
 
+  "_healthCheck": "Probes server liveness. failThreshold consecutive failures trigger a heal. startDelayMs gives the server time to boot.",
   "healthCheck": {
     "intervalMs": 15000,
     "timeoutMs": 5000,
@@ -43,12 +51,14 @@
     "startDelayMs": 10000
   },
 
+  "_errorMonitor": "Tracks caught 500 errors per route. defaultThreshold: how many 500s before triggering a heal. cooldownMs: minimum time between heals on the same route.",
   "errorMonitor": {
     "defaultThreshold": 1,
     "windowMs": 30000,
     "cooldownMs": 60000
   },
 
+  "_autoUpdate": "Auto-updates wolverine framework from git. Only updates src/ and bin/ — never touches server/ code.",
   "autoUpdate": {
     "enabled": false,
     "intervalMs": 300000
@@ -59,6 +69,7 @@
     "cors": ["http://localhost:3000"]
   },
 
+  "_dashboard": "Dashboard serves on PORT+1. Set WOLVERINE_ADMIN_KEY in .env.local for the agent command interface.",
   "dashboard": {},
 
   "cors": {