x402-bazaar 1.2.2 → 3.0.0

package/bin/cli.js

@@ -4,6 +4,10 @@ import { Command } from 'commander';
 import { initCommand } from '../src/commands/init.js';
 import { configCommand } from '../src/commands/config.js';
 import { statusCommand } from '../src/commands/status.js';
+import { listCommand } from '../src/commands/list.js';
+import { searchCommand } from '../src/commands/search.js';
+import { callCommand } from '../src/commands/call.js';
+import { walletCommand } from '../src/commands/wallet.js';
 import chalk from 'chalk';
 
 // Global error handler
@@ -21,7 +25,7 @@ const program = new Command();
 program
   .name('x402-bazaar')
   .description(chalk.hex('#FF9900')('x402 Bazaar') + ' — Connect your AI agent to the marketplace in one command')
-  .version('1.2.2');
+  .version('3.0.0');
 
 program
   .command('init')
@@ -49,17 +53,55 @@ program
   .option('--server-url <url>', 'Server URL to check', 'https://x402-api.onrender.com')
   .action(statusCommand);
 
+program
+  .command('list')
+  .description('List all services on x402 Bazaar')
+  .option('--chain <chain>', 'Filter by chain (base or skale)')
+  .option('--category <category>', 'Filter by category (ai, data, weather, etc.)')
+  .option('--free', 'Show only free services')
+  .option('--server-url <url>', 'Server URL', 'https://x402-api.onrender.com')
+  .action(listCommand);
+
+program
+  .command('search <query>')
+  .description('Search for services by keyword')
+  .option('--server-url <url>', 'Server URL', 'https://x402-api.onrender.com')
+  .action(searchCommand);
+
+program
+  .command('call <endpoint>')
+  .description('Call a marketplace endpoint with automatic x402 payment')
+  .option('--param <key=value>', 'Add parameter (can be used multiple times)', (value, previous) => {
+    return previous ? [...previous, value] : [value];
+  }, [])
+  .option('--key <privateKey>', 'Private key for auto-payment (or set X402_PRIVATE_KEY env)')
+  .option('--server-url <url>', 'Server URL', 'https://x402-api.onrender.com')
+  .action(callCommand);
+
+program
+  .command('wallet')
+  .description('Check USDC wallet balance or generate a new wallet')
+  .option('--address <address>', 'Ethereum address to check')
+  .option('--setup', 'Generate a new wallet for auto-payment')
+  .action(walletCommand);
+
 // Default: show help if no command given
 if (process.argv.length <= 2) {
   console.log('');
-  console.log(chalk.hex('#FF9900').bold('  x402 Bazaar') + chalk.dim(' — AI Agent Marketplace CLI'));
+  console.log(chalk.hex('#FF9900').bold('  x402 Bazaar') + chalk.dim(' — AI Agent Marketplace CLI v3'));
+  console.log('');
+  console.log('  Setup commands:');
+  console.log(chalk.cyan('    npx x402-bazaar init') + chalk.dim('          Full interactive setup'));
+  console.log(chalk.cyan('    npx x402-bazaar config') + chalk.dim('        Generate MCP config'));
+  console.log(chalk.cyan('    npx x402-bazaar status') + chalk.dim('        Check server connection'));
   console.log('');
-  console.log('  Quick start:');
-  console.log(chalk.cyan('    npx x402-bazaar init') + chalk.dim('      Full interactive setup'));
-  console.log(chalk.cyan('    npx x402-bazaar status') + chalk.dim('    Check server connection'));
-  console.log(chalk.cyan('    npx x402-bazaar config') + chalk.dim('    Generate MCP config'));
+  console.log('  Marketplace commands:');
+  console.log(chalk.cyan('    npx x402-bazaar list') + chalk.dim('          Browse all services'));
+  console.log(chalk.cyan('    npx x402-bazaar search <query>') + chalk.dim('  Find services by keyword'));
+  console.log(chalk.cyan('    npx x402-bazaar call <endpoint>') + chalk.dim(' Call API with auto-payment'));
+  console.log(chalk.cyan('    npx x402-bazaar wallet') + chalk.dim('        Check balance / setup wallet'));
   console.log('');
-  console.log(chalk.dim('  Run with --help for all options'));
+  console.log(chalk.dim('  Run any command with --help for detailed options'));
   console.log('');
   process.exit(0);
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "x402-bazaar",
-  "version": "1.2.2",
-  "description": "CLI to set up x402 Bazaar MCP server for AI agents. One command to connect your agent to the marketplace.",
+  "version": "3.0.0",
+  "description": "CLI for x402 Bazaar — AI Agent Marketplace. Browse, call, and auto-pay APIs with USDC on Base. One command to connect your agent.",
   "type": "module",
   "main": "bin/cli.js",
   "bin": {
@@ -44,6 +44,7 @@
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
     "inquirer": "^9.3.0",
-    "ora": "^8.0.1"
+    "ora": "^8.0.1",
+    "viem": "^2.45.3"
   }
 }

package/src/commands/call.js

@@ -0,0 +1,305 @@
+import ora from 'ora';
+import chalk from 'chalk';
+import fs from 'fs';
+import path from 'path';
+import { log } from '../utils/logger.js';
+
+export async function callCommand(endpoint, options) {
+  if (!endpoint || endpoint.trim().length === 0) {
+    log.error('Endpoint is required');
+    log.dim('  Usage: x402-bazaar call <endpoint> [--param key=value...]');
+    log.dim('  Example: x402-bazaar call /api/weather --param city=Paris');
+    log.dim('  Example: x402-bazaar call /api/hash --param text=hello --key 0x...');
+    console.log('');
+    process.exit(1);
+  }
+
+  const serverUrl = options.serverUrl || 'https://x402-api.onrender.com';
+  const normalizedEndpoint = endpoint.startsWith('/') ? endpoint : `/${endpoint}`;
+  const fullUrl = `${serverUrl}${normalizedEndpoint}`;
+
+  log.banner();
+  log.info(`Calling endpoint: ${chalk.bold(normalizedEndpoint)}`);
+  console.log('');
+
+  // Parse params
+  const params = {};
+  if (options.param) {
+    const paramArray = Array.isArray(options.param) ? options.param : [options.param];
+    for (const p of paramArray) {
+      const [key, ...valueParts] = p.split('=');
+      if (!key || valueParts.length === 0) {
+        log.warn(`Invalid param format: ${p} (expected key=value)`);
+        continue;
+      }
+      let value = valueParts.join('=');
+      if ((value.startsWith('"') && value.endsWith('"')) ||
+          (value.startsWith("'") && value.endsWith("'"))) {
+        value = value.slice(1, -1);
+      }
+      params[key.trim()] = value;
+    }
+  }
+
+  if (Object.keys(params).length > 0) {
+    log.info('Parameters:');
+    for (const [k, v] of Object.entries(params)) {
+      log.dim(`  ${k}: ${v}`);
+    }
+    console.log('');
+  }
+
+  // Resolve private key for auto-payment
+  const privateKey = resolvePrivateKey(options);
+  const autoPay = !!privateKey;
+
+  if (autoPay) {
+    log.info(`Auto-payment: ${chalk.hex('#34D399').bold('enabled')}`);
+    try {
+      const { getAddressFromKey } = await import('../lib/payment.js');
+      const address = getAddressFromKey(privateKey);
+      log.dim(`  Wallet: ${address.slice(0, 6)}...${address.slice(-4)}`);
+    } catch { /* ignore display errors */ }
+    console.log('');
+  }
+
+  // Build URL with query params
+  let finalUrl = fullUrl;
+  if (Object.keys(params).length > 0) {
+    const queryString = new URLSearchParams(params).toString();
+    finalUrl = `${fullUrl}?${queryString}`;
+  }
+
+  const spinner = ora(`GET ${finalUrl}...`).start();
+
+  try {
+    const fetchOptions = {
+      method: 'GET',
+      headers: { 'Content-Type': 'application/json' },
+      signal: AbortSignal.timeout(30000),
+    };
+
+    const res = await fetch(finalUrl, fetchOptions);
+    spinner.stop();
+
+    // Handle 402 Payment Required
+    if (res.status === 402) {
+      console.log('');
+      log.warn(chalk.bold('Payment Required (HTTP 402)'));
+      console.log('');
+
+      let paymentInfo;
+      try {
+        paymentInfo = await res.json();
+      } catch {
+        log.error('Could not parse payment details');
+        process.exit(1);
+      }
+
+      const price = paymentInfo.payment_details?.amount || paymentInfo.price;
+      const payTo = paymentInfo.payment_details?.recipient || paymentInfo.payment_details?.walletAddress || paymentInfo.paymentAddress;
+
+      if (price) {
+        log.info(`Price: ${chalk.cyan.bold(`${price} USDC`)}`);
+      }
+      if (payTo) {
+        log.dim(`  Pay to: ${payTo}`);
+      }
+      console.log('');
+
+      // Auto-pay if key is available
+      if (autoPay && price && payTo) {
+        await handleAutoPayment(privateKey, payTo, price, finalUrl, fetchOptions);
+        return;
+      }
+
+      // No auto-pay — show instructions
+      log.separator();
+      console.log('');
+      log.info('To pay automatically, provide your private key:');
+      console.log('');
+      log.dim('  Option 1: Environment variable');
+      log.dim('    export X402_PRIVATE_KEY=0xYourPrivateKey');
+      log.dim('    npx x402-bazaar call /api/weather --param city=Paris');
+      console.log('');
+      log.dim('  Option 2: --key flag');
+      log.dim('    npx x402-bazaar call /api/weather --param city=Paris --key 0xYourKey');
+      console.log('');
+      log.dim('  Option 3: Generate a new wallet');
+      log.dim('    npx x402-bazaar wallet --setup');
+      console.log('');
+      log.dim('  Option 4: Use the MCP server (via Claude/Cursor)');
+      log.dim('    npx x402-bazaar init');
+      console.log('');
+      return;
+    }
+
+    // Handle other errors
+    if (!res.ok) {
+      console.log('');
+      log.error(`HTTP ${res.status}: ${res.statusText}`);
+      try {
+        const errorBody = await res.text();
+        if (errorBody) {
+          console.log('');
+          log.dim('Response:');
+          console.log(chalk.red(errorBody));
+        }
+      } catch { /* ignore */ }
+      console.log('');
+      process.exit(1);
+    }
+
+    // Success
+    await displayResponse(res);
+
+  } catch (err) {
+    spinner.fail('Request failed');
+    console.log('');
+
+    if (err.name === 'AbortError') {
+      log.error('Request timeout (30s)');
+      log.dim('  Try again or check status: npx x402-bazaar status');
+    } else if (err.code === 'ECONNREFUSED' || err.code === 'ENOTFOUND') {
+      log.error('Cannot connect to server');
+      log.dim(`  Server URL: ${serverUrl}`);
+    } else {
+      log.error(err.message);
+    }
+
+    console.log('');
+    process.exit(1);
+  }
+}
+
+/**
+ * Resolve private key from: --key flag > X402_PRIVATE_KEY env > ~/.x402-bazaar/wallet.json
+ */
+function resolvePrivateKey(options) {
+  if (options.key) {
+    return normalizeKey(options.key);
+  }
+
+  if (process.env.X402_PRIVATE_KEY) {
+    return normalizeKey(process.env.X402_PRIVATE_KEY);
+  }
+
+  // Try local wallet file
+  try {
+    const home = process.env.HOME || process.env.USERPROFILE;
+    const walletPath = path.join(home, '.x402-bazaar', 'wallet.json');
+    if (fs.existsSync(walletPath)) {
+      const data = JSON.parse(fs.readFileSync(walletPath, 'utf-8'));
+      if (data.privateKey) {
+        return normalizeKey(data.privateKey);
+      }
+    }
+  } catch { /* ignore */ }
+
+  return null;
+}
+
+function normalizeKey(key) {
+  key = key.trim();
+  if (!key.startsWith('0x')) key = '0x' + key;
+  if (!/^0x[a-fA-F0-9]{64}$/.test(key)) return null;
+  return key;
+}
+
+/**
+ * Handle automatic x402 payment and retry
+ */
+async function handleAutoPayment(privateKey, payTo, price, url, fetchOptions) {
+  const spinner = ora(`Sending ${price} USDC on Base mainnet...`).start();
+
+  try {
+    const { sendUsdcPayment } = await import('../lib/payment.js');
+    const payment = await sendUsdcPayment(privateKey, payTo, price);
+
+    spinner.succeed(`Payment confirmed: ${chalk.hex('#34D399').bold(`${price} USDC`)}`);
+    log.dim(`  Tx: ${payment.explorer}`);
+    console.log('');
+
+    // Retry with payment proof
+    const retrySpinner = ora('Retrying with payment proof...').start();
+
+    const retryRes = await fetch(url, {
+      ...fetchOptions,
+      headers: {
+        ...fetchOptions.headers,
+        'X-Payment-TxHash': payment.txHash,
+      },
+    });
+
+    retrySpinner.stop();
+
+    if (!retryRes.ok) {
+      console.log('');
+      log.error(`HTTP ${retryRes.status}: ${retryRes.statusText}`);
+      try {
+        const body = await retryRes.text();
+        if (body) console.log(chalk.red(body));
+      } catch { /* ignore */ }
+      console.log('');
+      process.exit(1);
+    }
+
+    await displayResponse(retryRes);
+
+  } catch (err) {
+    spinner.fail('Payment failed');
+    console.log('');
+
+    if (err.message.includes('Insufficient USDC')) {
+      log.error(err.message);
+      log.dim('  Fund your wallet with USDC on Base.');
+      log.dim('  Check balance: npx x402-bazaar wallet --address <your-address>');
+    } else {
+      log.error(err.message);
+    }
+
+    console.log('');
+    process.exit(1);
+  }
+}
+
+/**
+ * Display API response with JSON highlighting
+ */
+async function displayResponse(res) {
+  console.log('');
+  log.success(`${chalk.bold(res.status)} ${res.statusText}`);
+  console.log('');
+
+  const contentType = res.headers.get('content-type') || '';
+
+  if (contentType.includes('application/json')) {
+    const responseData = await res.json();
+    log.separator();
+    console.log('');
+    log.info('Response (JSON):');
+    console.log('');
+    console.log(highlightJson(JSON.stringify(responseData, null, 2)));
+    console.log('');
+    log.separator();
+  } else {
+    const responseText = await res.text();
+    log.separator();
+    console.log('');
+    log.info('Response:');
+    console.log('');
+    console.log(chalk.white(responseText));
+    console.log('');
+    log.separator();
+  }
+  console.log('');
+}
+
+function highlightJson(jsonString) {
+  return jsonString
+    .replace(/"([^"]+)":/g, chalk.hex('#60A5FA')('"$1"') + ':')
+    .replace(/: "([^"]+)"/g, ': ' + chalk.hex('#34D399')('"$1"'))
+    .replace(/: (\d+\.?\d*)/g, ': ' + chalk.hex('#FBBF24')('$1'))
+    .replace(/: (true|false)/g, ': ' + chalk.hex('#9333EA')('$1'))
+    .replace(/: null/g, ': ' + chalk.hex('#6B7280')('null'));
+}

package/src/commands/list.js

@@ -0,0 +1,125 @@
+import ora from 'ora';
+import chalk from 'chalk';
+import { log } from '../utils/logger.js';
+
+const CATEGORIES = [
+  'ai', 'data', 'automation', 'blockchain', 'weather', 'finance',
+  'social', 'image', 'video', 'audio', 'search', 'translation', 'other'
+];
+
+export async function listCommand(options) {
+  const serverUrl = options.serverUrl || 'https://x402-api.onrender.com';
+
+  log.banner();
+  log.info(`Fetching services from ${chalk.bold('x402 Bazaar')}`);
+  console.log('');
+
+  // Build query params
+  const params = new URLSearchParams();
+  if (options.chain) params.append('chain', options.chain);
+  if (options.category) params.append('category', options.category);
+  if (options.free) params.append('free', 'true');
+
+  const url = `${serverUrl}/api/services${params.toString() ? '?' + params.toString() : ''}`;
+
+  const spinner = ora('Loading services...').start();
+
+  try {
+    const res = await fetch(url, { signal: AbortSignal.timeout(15000) });
+
+    if (!res.ok) {
+      throw new Error(`HTTP ${res.status}: ${res.statusText}`);
+    }
+
+    const data = await res.json();
+    const services = data.services || data || [];
+
+    spinner.succeed(`Found ${chalk.bold(services.length)} service${services.length !== 1 ? 's' : ''}`);
+    console.log('');
+
+    if (services.length === 0) {
+      log.warn('No services found with these filters.');
+      log.dim('  Try: x402-bazaar list --category ai');
+      console.log('');
+      return;
+    }
+
+    // Display services table
+    log.separator();
+    console.log('');
+
+    services.forEach((service, idx) => {
+      const name = service.name || service.title || 'Unnamed Service';
+      const price = parseFloat(service.price || 0);
+      const priceLabel = price === 0
+        ? chalk.hex('#34D399').bold('FREE')
+        : chalk.cyan(`$${price.toFixed(3)} USDC`);
+
+      // Extract category from tags
+      let category = 'other';
+      if (service.tags && Array.isArray(service.tags)) {
+        const realCategories = service.tags.filter(t => CATEGORIES.includes(t.toLowerCase()));
+        if (realCategories.length > 0) {
+          category = realCategories[0];
+        }
+      }
+
+      const chain = service.chain || 'base';
+      const chainLabel = chain === 'skale'
+        ? chalk.hex('#9333EA')('SKALE')
+        : chalk.hex('#0052FF')('Base');
+
+      console.log(
+        chalk.hex('#FF9900').bold(`${(idx + 1).toString().padStart(2, ' ')}. `) +
+        chalk.white.bold(name)
+      );
+      console.log(`    ${priceLabel} ${chalk.dim('|')} ${chalk.hex('#60A5FA')(category)} ${chalk.dim('|')} ${chainLabel}`);
+
+      if (service.description) {
+        const desc = service.description.length > 80
+          ? service.description.substring(0, 77) + '...'
+          : service.description;
+        console.log(`    ${chalk.hex('#6B7280')(desc)}`);
+      }
+
+      if (service.endpoint) {
+        console.log(`    ${chalk.dim('Endpoint:')} ${chalk.hex('#FBBF24')(service.endpoint)}`);
+      }
+
+      console.log('');
+    });
+
+    log.separator();
+    console.log('');
+    log.info(`Total: ${chalk.bold(services.length)} service${services.length !== 1 ? 's' : ''}`);
+
+    // Show filter info
+    if (options.chain || options.category || options.free) {
+      console.log('');
+      log.dim('  Active filters:');
+      if (options.chain) log.dim(`    Chain: ${options.chain}`);
+      if (options.category) log.dim(`    Category: ${options.category}`);
+      if (options.free) log.dim('    Price: free only');
+      log.dim('  Run without options to see all services');
+    }
+
+    console.log('');
+
+  } catch (err) {
+    spinner.fail('Failed to fetch services');
+
+    if (err.name === 'AbortError') {
+      log.error('Request timeout — server may be sleeping (Render free tier)');
+      log.dim('  Try again in 30 seconds or check status: npx x402-bazaar status');
+    } else if (err.code === 'ECONNREFUSED' || err.code === 'ENOTFOUND') {
+      log.error('Cannot connect to server');
+      log.dim(`  Server URL: ${serverUrl}`);
+      log.dim('  Check your internet connection or try: npx x402-bazaar status');
+    } else {
+      log.error(err.message);
+    }
+
+    console.log('');
+    process.exit(1);
+  }
+}

package/src/commands/search.js

@@ -0,0 +1,120 @@
+import ora from 'ora';
+import chalk from 'chalk';
+import { log } from '../utils/logger.js';
+
+const CATEGORIES = [
+  'ai', 'data', 'automation', 'blockchain', 'weather', 'finance',
+  'social', 'image', 'video', 'audio', 'search', 'translation', 'other'
+];
+
+export async function searchCommand(query, options) {
+  if (!query || query.trim().length === 0) {
+    log.error('Search query is required');
+    log.dim('  Usage: x402-bazaar search <query>');
+    log.dim('  Example: x402-bazaar search "weather API"');
+    console.log('');
+    process.exit(1);
+  }
+
+  const serverUrl = options.serverUrl || 'https://x402-api.onrender.com';
+
+  log.banner();
+  log.info(`Searching for: ${chalk.bold(query)}`);
+  console.log('');
+
+  const url = `${serverUrl}/api/services?search=${encodeURIComponent(query)}`;
+  const spinner = ora('Searching...').start();
+
+  try {
+    const res = await fetch(url, { signal: AbortSignal.timeout(15000) });
+
+    if (!res.ok) {
+      throw new Error(`HTTP ${res.status}: ${res.statusText}`);
+    }
+
+    const data = await res.json();
+    const services = data.services || data || [];
+
+    if (services.length === 0) {
+      spinner.fail('No results found');
+      console.log('');
+      log.warn(`No services match "${query}"`);
+      log.dim('  Tips:');
+      log.dim('    • Check your spelling');
+      log.dim('    • Try broader keywords (e.g., "AI" instead of "GPT-4")');
+      log.dim('    • Browse all services: x402-bazaar list');
+      console.log('');
+      return;
+    }
+
+    spinner.succeed(`Found ${chalk.bold(services.length)} result${services.length !== 1 ? 's' : ''}`);
+    console.log('');
+
+    // Display results
+    log.separator();
+    console.log('');
+
+    services.forEach((service, idx) => {
+      const name = service.name || service.title || 'Unnamed Service';
+      const price = parseFloat(service.price || 0);
+      const priceLabel = price === 0
+        ? chalk.hex('#34D399').bold('FREE')
+        : chalk.cyan(`$${price.toFixed(3)} USDC`);
+
+      // Extract category from tags
+      let category = 'other';
+      if (service.tags && Array.isArray(service.tags)) {
+        const realCategories = service.tags.filter(t => CATEGORIES.includes(t.toLowerCase()));
+        if (realCategories.length > 0) {
+          category = realCategories[0];
+        }
+      }
+
+      const chain = service.chain || 'base';
+      const chainLabel = chain === 'skale'
+        ? chalk.hex('#9333EA')('SKALE')
+        : chalk.hex('#0052FF')('Base');
+
+      console.log(
+        chalk.hex('#FF9900').bold(`${(idx + 1).toString().padStart(2, ' ')}. `) +
+        chalk.white.bold(name)
+      );
+      console.log(`    ${priceLabel} ${chalk.dim('|')} ${chalk.hex('#60A5FA')(category)} ${chalk.dim('|')} ${chainLabel}`);
+
+      if (service.description) {
+        const desc = service.description.length > 80
+          ? service.description.substring(0, 77) + '...'
+          : service.description;
+        console.log(`    ${chalk.hex('#6B7280')(desc)}`);
+      }
+
+      if (service.endpoint) {
+        console.log(`    ${chalk.dim('Endpoint:')} ${chalk.hex('#FBBF24')(service.endpoint)}`);
+      }
+
+      console.log('');
+    });
+
+    log.separator();
+    console.log('');
+    log.info(`Total: ${chalk.bold(services.length)} result${services.length !== 1 ? 's' : ''}`);
+    console.log('');
+
+  } catch (err) {
+    spinner.fail('Search failed');
+
+    if (err.name === 'AbortError') {
+      log.error('Request timeout — server may be sleeping (Render free tier)');
+      log.dim('  Try again in 30 seconds or check status: npx x402-bazaar status');
+    } else if (err.code === 'ECONNREFUSED' || err.code === 'ENOTFOUND') {
+      log.error('Cannot connect to server');
+      log.dim(`  Server URL: ${serverUrl}`);
+      log.dim('  Check your internet connection or try: npx x402-bazaar status');
+    } else {
+      log.error(err.message);
+    }
+
+    console.log('');
+    process.exit(1);
+  }
+}

package/src/commands/wallet.js

@@ -0,0 +1,216 @@
+import ora from 'ora';
+import chalk from 'chalk';
+import fs from 'fs';
+import path from 'path';
+import { log } from '../utils/logger.js';
+
+const BASE_RPC_URL = 'https://mainnet.base.org';
+const USDC_CONTRACT_BASE = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
+const BALANCE_OF_SELECTOR = '0x70a08231';
+
+export async function walletCommand(options) {
+  log.banner();
+
+  // Handle --setup: generate a new wallet
+  if (options.setup) {
+    await setupWallet();
+    return;
+  }
+
+  if (!options.address) {
+    log.info('Check USDC balance or generate a new wallet.');
+    console.log('');
+    log.dim('  Usage:');
+    log.dim('    x402-bazaar wallet --address 0xYourAddress');
+    log.dim('    x402-bazaar wallet --setup');
+    console.log('');
+    log.dim('  Examples:');
+    log.dim('    x402-bazaar wallet --address 0xA986540F0AaDFB5Ba5ceb2b1d81d90DBE479084b');
+    log.dim('    x402-bazaar wallet --setup  (generate a new wallet for auto-payment)');
+    console.log('');
+    return;
+  }
+
+  const address = options.address.trim();
+
+  if (!/^0x[a-fA-F0-9]{40}$/.test(address)) {
+    log.error('Invalid Ethereum address format');
+    log.dim('  Expected: 0x followed by 40 hexadecimal characters');
+    log.dim(`  Got: ${address}`);
+    console.log('');
+    process.exit(1);
+  }
+
+  log.info(`Checking wallet: ${chalk.bold(maskAddress(address))}`);
+  console.log('');
+
+  const spinner = ora('Fetching USDC balance from Base...').start();
+
+  try {
+    const paddedAddress = address.slice(2).padStart(64, '0');
+    const data = BALANCE_OF_SELECTOR + paddedAddress;
+
+    const rpcPayload = {
+      jsonrpc: '2.0',
+      id: 1,
+      method: 'eth_call',
+      params: [{ to: USDC_CONTRACT_BASE, data }, 'latest'],
+    };
+
+    const res = await fetch(BASE_RPC_URL, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(rpcPayload),
+      signal: AbortSignal.timeout(15000),
+    });
+
+    if (!res.ok) throw new Error(`HTTP ${res.status}: ${res.statusText}`);
+
+    const rpcResponse = await res.json();
+    if (rpcResponse.error) throw new Error(rpcResponse.error.message || 'RPC error');
+    if (!rpcResponse.result) throw new Error('No result from RPC');
+
+    const balanceRaw = BigInt(rpcResponse.result);
+    const balanceUsdc = Number(balanceRaw) / 1_000_000;
+
+    spinner.succeed('Balance fetched');
+    console.log('');
+    log.separator();
+    console.log('');
+
+    log.info(`Address:  ${chalk.hex('#34D399')(maskAddress(address))}`);
+    log.info(`Network:  ${chalk.hex('#0052FF').bold('Base Mainnet')} (Chain ID: 8453)`);
+    log.info(`Balance:  ${chalk.cyan.bold(balanceUsdc.toFixed(6))} ${chalk.dim('USDC')}`);
+
+    console.log('');
+    log.separator();
+    console.log('');
+    log.dim(`  Explorer:  https://basescan.org/address/${address}`);
+
+    if (balanceUsdc === 0) {
+      console.log('');
+      log.warn('This wallet has no USDC.');
+      log.dim('  Send USDC on Base to this address to start using paid APIs.');
+    } else if (balanceUsdc < 0.1) {
+      console.log('');
+      log.warn('Low balance — consider adding more USDC.');
+      log.dim('  Most x402 Bazaar APIs cost $0.001-$0.05 per call.');
+    } else {
+      console.log('');
+      log.success('Wallet is funded and ready!');
+      const estimatedCalls = Math.floor(balanceUsdc / 0.005);
+      log.dim(`  Estimated API calls: ~${estimatedCalls} (at avg $0.005/call)`);
+    }
+    console.log('');
+
+  } catch (err) {
+    spinner.fail('Failed to fetch balance');
+    console.log('');
+
+    if (err.name === 'AbortError') {
+      log.error('Request timeout — Base RPC may be slow');
+    } else if (err.code === 'ECONNREFUSED' || err.code === 'ENOTFOUND') {
+      log.error('Cannot connect to Base RPC');
+    } else {
+      log.error(err.message);
+    }
+    console.log('');
+    process.exit(1);
+  }
+}
+
+/**
+ * Generate a new wallet and save to ~/.x402-bazaar/wallet.json
+ */
+async function setupWallet() {
+  log.info('Generating a new wallet for x402 Bazaar auto-payment...');
+  console.log('');
+
+  const home = process.env.HOME || process.env.USERPROFILE;
+  const dir = path.join(home, '.x402-bazaar');
+  const walletPath = path.join(dir, 'wallet.json');
+
+  // Check if wallet already exists
+  if (fs.existsSync(walletPath)) {
+    try {
+      const existing = JSON.parse(fs.readFileSync(walletPath, 'utf-8'));
+      if (existing.privateKey) {
+        const { getAddressFromKey } = await import('../lib/payment.js');
+        const address = getAddressFromKey(existing.privateKey.startsWith('0x') ? existing.privateKey : '0x' + existing.privateKey);
+        console.log('');
+        log.warn('A wallet already exists!');
+        log.info(`Address: ${chalk.hex('#34D399')(address)}`);
+        log.dim(`  File: ${walletPath}`);
+        console.log('');
+        log.dim('  To use a different wallet, delete the file and run --setup again.');
+        log.dim('  To check balance: npx x402-bazaar wallet --address ' + address);
+        console.log('');
+        return;
+      }
+    } catch { /* ignore parse errors, will overwrite */ }
+  }
+
+  const spinner = ora('Generating cryptographic key pair...').start();
+
+  try {
+    const { generatePrivateKey, privateKeyToAccount } = await import('viem/accounts');
+    const privateKey = generatePrivateKey();
+    const account = privateKeyToAccount(privateKey);
+
+    // Create directory
+    if (!fs.existsSync(dir)) {
+      fs.mkdirSync(dir, { recursive: true });
+    }
+
+    // Save wallet (private key stored locally)
+    fs.writeFileSync(walletPath, JSON.stringify({
+      address: account.address,
+      privateKey: privateKey,
+      network: 'base',
+      created: new Date().toISOString(),
+    }, null, 2), 'utf-8');
+
+    spinner.succeed('Wallet generated!');
+    console.log('');
+    log.separator();
+    console.log('');
+
+    log.info(`Address:     ${chalk.hex('#34D399').bold(account.address)}`);
+    log.info(`Network:     ${chalk.hex('#0052FF').bold('Base Mainnet')}`);
+    log.info(`Saved to:    ${chalk.dim(walletPath)}`);
+
+    console.log('');
+    log.separator();
+    console.log('');
+
+    log.info('Next steps:');
+    console.log('');
+    log.dim('  1. Fund this wallet with USDC on Base:');
+    log.dim(`     Send USDC to ${chalk.hex('#34D399')(account.address)}`);
+    log.dim('     + a tiny amount of ETH for gas (~$0.01)');
+    console.log('');
+    log.dim('  2. Call paid APIs automatically:');
+    log.dim(`     ${chalk.cyan('npx x402-bazaar call /api/weather --param city=Paris')}`);
+    log.dim('     (auto-payment will use your saved wallet)');
+    console.log('');
+    log.dim('  3. Or set the env variable for any tool:');
+    log.dim(`     export X402_PRIVATE_KEY=${privateKey}`);
+    console.log('');
+
+    log.warn('Keep your private key safe! Anyone with it can spend your funds.');
+    log.dim(`  Backup: ${walletPath}`);
+    console.log('');
+
+  } catch (err) {
+    spinner.fail('Wallet generation failed');
+    console.log('');
+    log.error(err.message);
+    console.log('');
+    process.exit(1);
+  }
+}
+
+function maskAddress(address) {
+  if (address.length < 12) return address;
+  return `${address.slice(0, 6)}...${address.slice(-4)}`;
+}

package/src/lib/payment.js

@@ -0,0 +1,106 @@
+import { createWalletClient, createPublicClient, http, parseUnits, encodeFunctionData } from 'viem';
+import { base } from 'viem/chains';
+import { privateKeyToAccount } from 'viem/accounts';
+
+const USDC_CONTRACT = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
+const USDC_ABI = [
+  {
+    name: 'transfer',
+    type: 'function',
+    inputs: [
+      { name: 'to', type: 'address' },
+      { name: 'amount', type: 'uint256' },
+    ],
+    outputs: [{ type: 'bool' }],
+  },
+  {
+    name: 'balanceOf',
+    type: 'function',
+    inputs: [{ name: 'account', type: 'address' }],
+    outputs: [{ type: 'uint256' }],
+    stateMutability: 'view',
+  },
+];
+
+/**
+ * Send USDC payment on Base mainnet
+ * @param {string} privateKey - Hex private key (with 0x prefix)
+ * @param {string} toAddress - Recipient wallet address
+ * @param {number} amountUsdc - Amount in USDC (e.g., 0.005)
+ * @returns {{ txHash: string, explorer: string }}
+ */
+export async function sendUsdcPayment(privateKey, toAddress, amountUsdc) {
+  const account = privateKeyToAccount(privateKey);
+
+  const walletClient = createWalletClient({
+    account,
+    chain: base,
+    transport: http('https://mainnet.base.org'),
+  });
+
+  const publicClient = createPublicClient({
+    chain: base,
+    transport: http('https://mainnet.base.org'),
+  });
+
+  // Convert USDC amount to 6-decimal units
+  const amount = parseUnits(amountUsdc.toString(), 6);
+
+  // Check balance first
+  const balance = await publicClient.readContract({
+    address: USDC_CONTRACT,
+    abi: USDC_ABI,
+    functionName: 'balanceOf',
+    args: [account.address],
+  });
+
+  if (balance < amount) {
+    const balanceUsdc = Number(balance) / 1_000_000;
+    throw new Error(`Insufficient USDC balance: ${balanceUsdc.toFixed(6)} USDC (need ${amountUsdc} USDC)`);
+  }
+
+  // Send the USDC transfer
+  const txHash = await walletClient.writeContract({
+    address: USDC_CONTRACT,
+    abi: USDC_ABI,
+    functionName: 'transfer',
+    args: [toAddress, amount],
+  });
+
+  // Wait for confirmation
+  await publicClient.waitForTransactionReceipt({ hash: txHash, confirmations: 1 });
+
+  return {
+    txHash,
+    explorer: `https://basescan.org/tx/${txHash}`,
+    from: account.address,
+    amount: amountUsdc,
+  };
+}
+
+/**
+ * Get the wallet address from a private key
+ */
+export function getAddressFromKey(privateKey) {
+  const account = privateKeyToAccount(privateKey);
+  return account.address;
+}
+
+/**
+ * Get USDC balance for an address
+ */
+export async function getUsdcBalance(address) {
+  const publicClient = createPublicClient({
+    chain: base,
+    transport: http('https://mainnet.base.org'),
+  });
+
+  const balance = await publicClient.readContract({
+    address: USDC_CONTRACT,
+    abi: USDC_ABI,
+    functionName: 'balanceOf',
+    args: [address],
+  });
+
+  return Number(balance) / 1_000_000;
+}