x402-surface-check 0.2.29 → 0.2.31

package/bin/x402-surface-check.mjs

@@ -343,7 +343,7 @@ function manifestEndpointPaymentSignal(endpoint) {
   if (!endpoint || typeof endpoint !== 'object') return 0
   if (Number(endpoint.phase1_response?.status) === 402) return 2
   if (/payment-required|x-payment|402/i.test(String(endpoint.phase1_response?.header ?? ''))) return 2
-  if (/^\$?\d+(\.\d+)?/.test(String(endpoint.price ?? endpoint.cost ?? endpoint.amount ?? ''))) return 1
+  if (/^\$?\d+(\.\d+)?/.test(String(endpoint.price ?? endpoint.priceUsd ?? endpoint.price_usd ?? endpoint.cost ?? endpoint.amount ?? ''))) return 1
   if (/payment|required|402/i.test(String(endpoint.description ?? ''))) return 1
   if (endpoint.accepts || endpoint.schemes || endpoint.payment || endpoint['x-payment-info']) return 1
   return 0
@@ -415,13 +415,52 @@ function endpointEntries(document, sourceUrl, limit) {
       })
     }
   }
+  if (Array.isArray(document.routes)) {
+    for (const route of document.routes) {
+      if (!route || typeof route !== 'object') continue
+      const exampleCall = Array.isArray(route.exampleCalls)
+        ? route.exampleCalls.find(call => call?.url)
+        : undefined
+      const rawPath = exampleCall?.url ?? route.url ?? route.endpoint ?? route.path
+      if (!rawPath) continue
+      const method = String(route.method ?? exampleCall?.method ?? 'GET').toUpperCase()
+      const paymentSignal = manifestEndpointPaymentSignal(route)
+      const hasPathParameters = /\{[^}]+\}/.test(String(rawPath))
+      if (paymentSignal === 0 && (method !== 'GET' || hasPathParameters)) continue
+      entries.push({
+        name: route.id ?? route.reportType ?? route.agentName ?? String(rawPath).split('/').filter(Boolean).at(-1) ?? String(rawPath),
+        url: manifestEndpointUrl(rawPath, route, baseUrl, sourceUrl),
+        method,
+        requestBody: manifestEndpointBody(route, document),
+        publicDiscovery: paymentSignal === 0,
+      })
+    }
+  }
   const endpointMaps = []
   if (!Array.isArray(document.endpoints) && document.endpoints && typeof document.endpoints === 'object') {
     endpointMaps.push(document.endpoints)
   }
-  if (document.tools && typeof document.tools === 'object') {
+  if (document.tools && typeof document.tools === 'object' && !Array.isArray(document.tools)) {
     endpointMaps.push(document.tools)
   }
+  if (Array.isArray(document.tools)) {
+    for (const tool of document.tools) {
+      if (!tool || typeof tool !== 'object') continue
+      const rawPath = tool.url ?? tool.endpoint ?? tool.path
+      if (!rawPath) continue
+      const method = String(tool.method ?? 'POST').toUpperCase()
+      const paymentSignal = manifestEndpointPaymentSignal(tool)
+      const hasPathParameters = /\{[^}]+\}/.test(String(rawPath))
+      if (paymentSignal === 0 && (method !== 'GET' || hasPathParameters)) continue
+      entries.push({
+        name: tool.id ?? tool.name ?? String(rawPath).split('/').filter(Boolean).at(-1) ?? String(rawPath),
+        url: manifestEndpointUrl(rawPath, tool, baseUrl, sourceUrl),
+        method,
+        requestBody: manifestEndpointBody(tool, document),
+        publicDiscovery: paymentSignal === 0,
+      })
+    }
+  }
   for (const endpointMap of endpointMaps) {
     for (const [key, endpoint] of Object.entries(endpointMap)) {
       if (typeof endpoint === 'string') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "x402-surface-check",
-  "version": "0.2.29",
+  "version": "0.2.31",
   "description": "No-payment x402 public-surface checker for manifests, OpenAPI specs, and HTTP 402 challenges.",
   "type": "module",
   "bin": {