x402-trust-layer 5.1.0

package/dist/config.d.ts

@@ -0,0 +1,94 @@
+import { type ChainKey } from "./lib/chains.js";
+export declare const ALLOWED_NETWORKS: Set<string>;
+export declare function isAllowedNetwork(caip2Network: string): boolean;
+/** CDP facilitator — required for CDP Bazaar catalog indexing on agentic.market */
+export declare const CDP_FACILITATOR_URL = "https://api.cdp.coinbase.com/platform/v2/x402/facilitator";
+export declare const config: {
+    port: number;
+    publicBaseUrl: string;
+    canonicalOrigin: string;
+    payTo: string;
+    payToEvm: string;
+    chains: ("solana" | "base" | "polygon" | "base_sepolia" | "solana_devnet")[];
+    networks: string[];
+    primaryChain: ChainKey;
+    facilitatorUrl: string;
+    cdpFacilitatorEnabled: boolean;
+    baseRpcUrl: string;
+    alchemyApiKey: string;
+    erc8004IdentityRegistry: string;
+    erc8004ReputationRegistry: string;
+    trustScoreCacheTtlSec: number;
+    network: ChainKey;
+    attestationHmacSecret: string;
+    testnetMode: boolean;
+    allowVerifierProbeIds: boolean;
+    /** Optional server secret for verifier synthetic probes (header X-Verifier-Fast-Path-Secret). */
+    verifierFastPathSecret: string;
+    webhookAdminSecret: string;
+    /** Production A2A orchestrator requires A2A_ORCHESTRATOR_ENABLED=1 (uses server payer keys). */
+    a2aOrchestratorEnabled: boolean;
+    zkSimulateAllowed: boolean;
+};
+export declare const pricing: {
+    readonly paymentCompiler: "0.15";
+    readonly facilitatorFailover: "0.05";
+    readonly mppBroker: "0.02";
+    readonly mppSessionV2: "0.03";
+    readonly spendGovernor: "0.03";
+    readonly identityGate: "0.05";
+    readonly riskGate: "0.08";
+    readonly apiRouter: "0.02";
+    readonly researchBrief: "0.20";
+    readonly receiptAuditor: "0.05";
+    readonly refundArbiter: "0.08";
+    readonly budgetAllocator: "0.03";
+    readonly settlementGraph: "0.02";
+    readonly qualityMonitor: "0.03";
+    readonly evidenceLocker: "0.10";
+    readonly agentEscrow: "0.12";
+    readonly preX402Guard: "0.05";
+    readonly pipelineExecute: "0.25";
+    readonly x402Proxy: "0.08";
+    readonly attestationIssue: "0.04";
+    readonly attestationVerify: "0.02";
+    readonly trustRegistry: "0.02";
+    readonly marketBuyAdvisor: "0.08";
+    readonly auditionCoach: "0.06";
+    readonly merchantTrust: "0.06";
+    readonly mandateCompile: "0.08";
+    readonly mandateVerify: "0.02";
+    readonly railOptimizer: "0.04";
+    readonly complianceLedger: "0.12";
+    readonly disputeResolve: "0.10";
+    readonly qualityEscrow: "0.10";
+    readonly agentVerify: "0.04";
+    readonly mandateDiff: "0.04";
+    readonly qualityEscrowSemantic: "0.12";
+    readonly merchantCertify: "0.15";
+    readonly buyerGate: "0.03";
+    readonly pipelineTrustV2: "0.35";
+    readonly bondSlash: "0.03";
+    readonly protocolFullTrust: "0.45";
+    readonly protocolPassportIssue: "0.06";
+    readonly protocolPassportVerify: "0.02";
+    readonly protocolTrustScoreV2: "0.08";
+    readonly protocolFraudScan: "0.10";
+    readonly protocolOracleConsensus: "0.12";
+    readonly protocolExecutionIssue: "0.05";
+    readonly protocolExecutionVerify: "0.03";
+    readonly protocolReasoningCommit: "0.08";
+    readonly protocolReasoningDisclose: "0.04";
+    readonly protocolEscrowCreate: "0.08";
+    readonly protocolEscrowTransition: "0.06";
+    readonly protocolEscrowStatus: "0.02";
+    readonly protocolReplayBind: "0.02";
+    readonly protocolReplayVerify: "0.02";
+    readonly protocolZkProve: "0.15";
+    readonly protocolCreditScore: "0.06";
+    readonly protocolComplianceAssess: "0.10";
+    readonly a2aExecute: "0.10";
+    readonly bedrockPreflight: "0.05";
+};
+export declare function assertProductionSecrets(): void;
+export declare function assertConfig(): void;

package/dist/config.js

@@ -0,0 +1,223 @@
+import dotenv from "dotenv";
+import { randomBytes } from "node:crypto";
+import { parseChainList, caip2Networks, normalizeToCaip2, NETWORK_ALIAS_TO_CAIP2, } from "./lib/chains.js";
+dotenv.config();
+function env(name) {
+    return (process.env[name] ?? "").trim();
+}
+const DEFAULT_CANONICAL_ORIGIN = "https://x402trustlayer.xyz";
+function resolvePublicBaseUrl(port) {
+    const raw = env("PUBLIC_BASE_URL") || env("CANONICAL_PUBLIC_URL");
+    let url = "";
+    if (raw)
+        url = raw.replace(/\/$/, "");
+    else if (process.env.RAILWAY_PUBLIC_DOMAIN) {
+        url = `https://${process.env.RAILWAY_PUBLIC_DOMAIN}`;
+    }
+    else if (process.env.RENDER_EXTERNAL_URL) {
+        url = process.env.RENDER_EXTERNAL_URL.replace(/\/$/, "");
+    }
+    else {
+        url = `http://127.0.0.1:${port}`;
+    }
+    if (url.startsWith("http://") && !url.includes("127.0.0.1") && !url.includes("localhost")) {
+        url = `https://${url.slice(7)}`;
+    }
+    return url;
+}
+function resolveAttestationHmacSecret() {
+    const configured = env("ATTESTATION_HMAC_SECRET");
+    if (configured.length >= 32)
+        return configured;
+    const isProd = process.env.NODE_ENV === "production" ||
+        !!process.env.RAILWAY_ENVIRONMENT ||
+        !!process.env.RAILWAY_PUBLIC_DOMAIN;
+    if (isProd) {
+        throw new Error("ATTESTATION_HMAC_SECRET is required in production (32+ chars). Generate: openssl rand -hex 32");
+    }
+    const fallback = env("ATTESTATION_DEV_SECRET");
+    if (fallback.length >= 16)
+        return fallback;
+    return `dev-${randomBytes(16).toString("hex")}`;
+}
+function resolveChains() {
+    if (env("X402_TESTNET") === "1" || env("TESTNET") === "1") {
+        return parseChainList(env("NETWORKS") || "base-sepolia,solana-devnet");
+    }
+    return parseChainList(env("NETWORKS") || env("NETWORK") || "base,solana,polygon");
+}
+const chains = resolveChains();
+export const ALLOWED_NETWORKS = new Set(chains.map((c) => NETWORK_ALIAS_TO_CAIP2[c] ?? caip2Networks([c])[0]).filter(Boolean));
+export function isAllowedNetwork(caip2Network) {
+    const n = normalizeToCaip2(caip2Network);
+    if (env("X402_TESTNET") === "1" || env("TESTNET") === "1") {
+        return (ALLOWED_NETWORKS.has(n) ||
+            n === "eip155:84532" ||
+            n === "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1");
+    }
+    return ALLOWED_NETWORKS.has(n);
+}
+/** CDP facilitator — required for CDP Bazaar catalog indexing on agentic.market */
+export const CDP_FACILITATOR_URL = "https://api.cdp.coinbase.com/platform/v2/x402/facilitator";
+const ALLOWED_FACILITATOR_ORIGINS = new Set([
+    "https://x402.dexter.cash",
+    "https://api.cdp.coinbase.com",
+    "https://x402.org",
+]);
+function normalizeFacilitatorUrl(url) {
+    return url.replace(/\/$/, "");
+}
+function assertFacilitatorAllowed(url) {
+    let origin = "";
+    try {
+        origin = new URL(url).origin;
+    }
+    catch {
+        throw new Error(`Invalid FACILITATOR_URL: ${url}`);
+    }
+    if (!ALLOWED_FACILITATOR_ORIGINS.has(origin)) {
+        throw new Error(`FACILITATOR_URL origin not allowlisted: ${origin}. Allowed: ${[...ALLOWED_FACILITATOR_ORIGINS].join(", ")}`);
+    }
+}
+function resolveFacilitatorUrl() {
+    const explicit = env("FACILITATOR_URL");
+    if (explicit) {
+        const u = normalizeFacilitatorUrl(explicit);
+        assertFacilitatorAllowed(u);
+        return u;
+    }
+    if (env("X402_TESTNET") === "1" || env("TESTNET") === "1") {
+        return "https://x402.org/facilitator";
+    }
+    if (env("USE_CDP_FACILITATOR") === "1" || env("AGENTIC_CDP") === "1") {
+        return CDP_FACILITATOR_URL;
+    }
+    return "https://x402.dexter.cash";
+}
+export const config = {
+    port: Number(process.env.PORT ?? 3402),
+    publicBaseUrl: resolvePublicBaseUrl(Number(process.env.PORT ?? 3402)),
+    canonicalOrigin: DEFAULT_CANONICAL_ORIGIN,
+    payTo: env("PAY_TO_ADDRESS") || env("PAY_TO"),
+    payToEvm: env("PAY_TO_EVM") || env("PAY_TO_ADDRESS_EVM") || "",
+    chains,
+    networks: caip2Networks(chains),
+    primaryChain: (chains[0] ?? "solana"),
+    facilitatorUrl: resolveFacilitatorUrl(),
+    cdpFacilitatorEnabled: resolveFacilitatorUrl() === CDP_FACILITATOR_URL ||
+        env("USE_CDP_FACILITATOR") === "1" ||
+        env("AGENTIC_CDP") === "1",
+    baseRpcUrl: env("BASE_RPC_URL") || "https://mainnet.base.org",
+    alchemyApiKey: env("ALCHEMY_API_KEY"),
+    erc8004IdentityRegistry: env("ERC8004_IDENTITY_REGISTRY") || "0x8004A169FB4a3325136EB29fA0ceB6D2e539a432",
+    erc8004ReputationRegistry: env("ERC8004_REPUTATION_REGISTRY") || "0x8004BAa17C55a88189AE136b182e5fdA19dE9b63",
+    trustScoreCacheTtlSec: Number(env("TRUSTSCORE_CACHE_TTL_SEC") || "120"),
+    network: (chains[0] ?? "solana"),
+    attestationHmacSecret: resolveAttestationHmacSecret(),
+    testnetMode: env("X402_TESTNET") === "1" || env("TESTNET") === "1",
+    allowVerifierProbeIds: env("ALLOW_VERIFIER_PROBE_IDS") === "1",
+    /** Optional server secret for verifier synthetic probes (header X-Verifier-Fast-Path-Secret). */
+    verifierFastPathSecret: env("VERIFIER_FAST_PATH_SECRET"),
+    webhookAdminSecret: env("WEBHOOK_ADMIN_SECRET"),
+    /** Production A2A orchestrator requires A2A_ORCHESTRATOR_ENABLED=1 (uses server payer keys). */
+    a2aOrchestratorEnabled: env("A2A_ORCHESTRATOR_ENABLED") === "1",
+    zkSimulateAllowed: env("ALLOW_ZK_SIMULATE") === "1" ||
+        !(process.env.NODE_ENV === "production" || !!process.env.RAILWAY_ENVIRONMENT),
+};
+export const pricing = {
+    paymentCompiler: "0.15",
+    facilitatorFailover: "0.05",
+    mppBroker: "0.02",
+    mppSessionV2: "0.03",
+    spendGovernor: "0.03",
+    identityGate: "0.05",
+    riskGate: "0.08",
+    apiRouter: "0.02",
+    researchBrief: "0.20",
+    receiptAuditor: "0.05",
+    refundArbiter: "0.08",
+    budgetAllocator: "0.03",
+    settlementGraph: "0.02",
+    qualityMonitor: "0.03",
+    evidenceLocker: "0.10",
+    agentEscrow: "0.12",
+    preX402Guard: "0.05",
+    pipelineExecute: "0.25",
+    x402Proxy: "0.08",
+    attestationIssue: "0.04",
+    attestationVerify: "0.02",
+    trustRegistry: "0.02",
+    marketBuyAdvisor: "0.08",
+    auditionCoach: "0.06",
+    merchantTrust: "0.06",
+    mandateCompile: "0.08",
+    mandateVerify: "0.02",
+    railOptimizer: "0.04",
+    complianceLedger: "0.12",
+    disputeResolve: "0.10",
+    qualityEscrow: "0.10",
+    agentVerify: "0.04",
+    mandateDiff: "0.04",
+    qualityEscrowSemantic: "0.12",
+    merchantCertify: "0.15",
+    buyerGate: "0.03",
+    pipelineTrustV2: "0.35",
+    bondSlash: "0.03",
+    protocolFullTrust: "0.45",
+    protocolPassportIssue: "0.06",
+    protocolPassportVerify: "0.02",
+    protocolTrustScoreV2: "0.08",
+    protocolFraudScan: "0.10",
+    protocolOracleConsensus: "0.12",
+    protocolExecutionIssue: "0.05",
+    protocolExecutionVerify: "0.03",
+    protocolReasoningCommit: "0.08",
+    protocolReasoningDisclose: "0.04",
+    protocolEscrowCreate: "0.08",
+    protocolEscrowTransition: "0.06",
+    protocolEscrowStatus: "0.02",
+    protocolReplayBind: "0.02",
+    protocolReplayVerify: "0.02",
+    protocolZkProve: "0.15",
+    protocolCreditScore: "0.06",
+    protocolComplianceAssess: "0.10",
+    a2aExecute: "0.10",
+    bedrockPreflight: "0.05",
+};
+function isProductionEnv() {
+    return (process.env.NODE_ENV === "production" ||
+        !!process.env.RAILWAY_ENVIRONMENT ||
+        !!process.env.RAILWAY_PUBLIC_DOMAIN);
+}
+export function assertProductionSecrets() {
+    if (!isProductionEnv())
+        return;
+    const required = [
+        { name: "ATTESTATION_HMAC_SECRET", value: config.attestationHmacSecret, minLen: 32 },
+        { name: "PAY_TO_ADDRESS", value: config.payTo, minLen: 16 },
+        { name: "PAY_TO_EVM", value: config.payToEvm, minLen: 16 },
+    ];
+    for (const { name, value, minLen } of required) {
+        if (!value || value.length < minLen) {
+            console.error(`FATAL: ${name} not set or too short for production.`);
+            process.exit(1);
+        }
+    }
+    if (!config.webhookAdminSecret || config.webhookAdminSecret.length < 16) {
+        console.warn("[config] WEBHOOK_ADMIN_SECRET not set — webhook register/list/delete return 503 until configured.");
+    }
+    if (!config.zkSimulateAllowed) {
+        console.warn("[config] ALLOW_ZK_SIMULATE not set — POST /api/protocol/zk/prove returns 503 in production.");
+    }
+}
+export function assertConfig() {
+    if (!config.payTo) {
+        throw new Error("Missing PAY_TO_ADDRESS. Set it in Railway/Render Variables (or .env locally) to your USDC receive wallet.");
+    }
+    assertProductionSecrets();
+    if (config.publicBaseUrl.includes("railway.app") &&
+        !env("PUBLIC_BASE_URL") &&
+        !env("CANONICAL_PUBLIC_URL")) {
+        console.warn(`[config] PUBLIC_BASE_URL not set — discovery URLs use ${config.publicBaseUrl}. Set PUBLIC_BASE_URL=${DEFAULT_CANONICAL_ORIGIN} for x402trustlayer.xyz indexing.`);
+    }
+}

package/dist/index.d.ts

@@ -0,0 +1 @@
+import "./lib/db.js";