x402lint 0.2.0__tar.gz

x402lint-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,18 @@
+name: ci
+on:
+  push:
+  pull_request:
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python: ["3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - run: pip install pytest build
+      - run: python -m pytest -q
+      - run: python -m build

x402lint-0.2.0/.gitignore

@@ -0,0 +1,7 @@
+.venv/
+__pycache__/
+*.pyc
+dist/
+build/
+*.egg-info/
+.pytest_cache/

x402lint-0.2.0/CHANGELOG.md

@@ -0,0 +1,18 @@
+# Changelog
+
+## 0.2.0 (unreleased)
+
+- `facilitator [url]` — fetch `GET /supported` and list the
+  `(x402Version, scheme, network)` triples a facilitator settles; warns on
+  unknown schemes / non-CAIP-2 v2 networks. Defaults to `x402.org/facilitator`.
+- `survey [catalogue]` — pull a discovery catalogue (default: Coinbase CDP),
+  take the busiest N resources, and run `check` on each. Uses the resource's
+  advertised `bazaar` input method + example query params so the request
+  actually triggers a 402 (`--no-hints` to disable). Aggregate conformance count.
+- New `x402lint.catalog` module (pure parsing, fixture-tested).
+
+## 0.1.0 (unreleased)
+
+- `check <url>` — lint an endpoint's x402 402 challenge (v1 body + v2 header formats)
+- `decode <blob>` — pretty-print / classify a base64 x402 header blob
+- Fixture-based test suite (recorded real responses, no network)

x402lint-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Arden Instance
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

x402lint-0.2.0/PKG-INFO

@@ -0,0 +1,146 @@
+Metadata-Version: 2.5
+Name: x402lint
+Version: 0.2.0
+Summary: Lint an HTTP endpoint's x402 (agent payments) conformance and decode X-PAYMENT blobs
+Project-URL: Homepage, https://github.com/arden-instance/x402lint
+Author: Arden Instance
+License-Expression: MIT
+License-File: LICENSE
+Keywords: agents,base,cli,http-402,lint,payments,usdc,x402
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Internet :: WWW/HTTP
+Classifier: Topic :: Software Development :: Testing
+Classifier: Topic :: Utilities
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+
+# x402lint
+
+A conformance linter for the [x402](https://x402.org) agent-payments protocol.
+Point it at an HTTP endpoint that charges for access and it tells you whether the
+`402 Payment Required` challenge it returns is well-formed — the check an agent
+runtime does before it will pay.
+
+```
+$ x402lint check https://riddlex402.vercel.app/api/riddle
+PASS  status: HTTP 402 Payment Required
+INFO  format: x402 v2 (payment-required header)
+PASS  header-decode: payment-required header is base64 JSON
+PASS  x402Version: 2
+PASS  error: 'Payment required'
+PASS  resource.url: https://riddlex402.vercel.app/api/riddle
+PASS  accepts: 1 payment option(s)
+PASS  accepts[0].required: all required fields present
+PASS  accepts[0].scheme: 'exact'
+PASS  accepts[0].network: eip155:8453 (CAIP-2)
+PASS  accepts[0].amount: 2000 atomic units
+PASS  accepts[0].asset: valid EVM address
+PASS  accepts[0].payTo: valid EVM address
+PASS  accepts[0].maxTimeoutSeconds: 300
+PASS  accepts[0].extra: EIP-712 domain: name='USD Coin' version='2'
+INFO  discovery: advertises the 'bazaar' discovery extension
+
+14 pass, 0 warn, 0 fail  (CONFORMANT)
+```
+
+## Install
+
+```
+pip install x402lint
+```
+
+Pure standard library, Python 3.12+.
+
+## Commands
+
+### `x402lint check <url>`
+
+Fetches `<url>` with no payment header, expects a `402`, and checks the payment
+challenge:
+
+- status is exactly `402`
+- **wire format** — v2 (`payment-required` base64 header, the common case today)
+  or v1 (`x402Version: 1` JSON body). Reports which.
+- the challenge document decodes / parses
+- `x402Version` is an integer, `error` is a human-readable string
+- `accepts` is a non-empty array, and for every entry:
+  - required fields present (`scheme`, `network`, amount, `asset`, `payTo`,
+    `maxTimeoutSeconds`)
+  - `scheme` in a known set (`exact`, `upto`, `batch-settlement`) — unknown warns
+  - `network` is CAIP-2 shaped (v2) or a recognised name (v1) — unknown warns
+  - amount is a base-10 string of a positive integer (atomic units)
+  - `asset` / `payTo` are valid `0x…` addresses on EVM networks
+  - `exact`/EVM entries carry `extra.name` + `extra.version` for the EIP-712 domain
+  - v1 entries carry an absolute `resource` URL
+- discovery metadata (`extensions.bazaar` / v1 `outputSchema`) — reported, not required
+
+`--json` emits a machine-readable report (for CI). Exit code: `0` conformant
+(warnings allowed), `1` any failure, `2` tool error.
+
+### `x402lint decode <blob>`
+
+Pretty-prints any base64 x402 header blob — `payment-required`, `X-PAYMENT`,
+`payment-response` — and labels what kind of document it is. `-` reads stdin.
+
+```
+curl -sD - https://weather.payapi.market/current \
+  | grep -i ^payment-required: | cut -d' ' -f2 \
+  | x402lint decode -
+```
+
+### `x402lint facilitator [url]`
+
+Fetches `GET <url>/supported` and lists every `(x402Version, scheme, network)`
+triple the facilitator can `verify` / `settle`, plus its advertised extensions.
+Warns on unknown schemes or non-CAIP-2 v2 networks. `url` defaults to
+`https://x402.org/facilitator` (the public testnet facilitator). `--json`.
+
+```
+$ x402lint facilitator
+  v2  exact              eip155:84532
+  v2  upto               eip155:84532 +extra
+  v2  batch-settlement   eip155:84532
+  ...
+11 kind(s): schemes batch-settlement, exact, upto; 9 network(s); versions 1, 2
+```
+
+### `x402lint survey [catalogue]`
+
+Pulls a discovery catalogue (`catalogue` defaults to the Coinbase CDP
+`.../x402/discovery/resources` list), takes the `--limit` busiest resources by
+30-day call volume, and runs `check` on each — a quick "state of x402
+conformance" snapshot. It replays each resource's advertised `bazaar` input
+method and example query params so the request actually reaches the paywall
+(`--no-hints` to force a plain `GET`). `--json`.
+
+```
+$ x402lint survey --limit 8
+ok   v2  https://x402.twit.sh/tweets/search?from=elonmusk&minLikes=100&words=bitcoin
+FAIL v2  https://x402.tavily.com/search
+       - accepts[1].amount: 'amount' must be a base-10 string of a positive integer, got '0.016'
+...
+7/8 endpoints conformant
+```
+
+## Roadmap
+
+- `x402lint roundtrip <url>` — a full paid round-trip on Base Sepolia testnet
+
+## Protocol notes
+
+Two wire formats exist. **v2** (`x402Version: 2`, Linux Foundation spec) is
+dominant in the wild as of 2026: the `PaymentRequired` document travels
+base64-encoded in the `payment-required` response header, networks are CAIP-2
+ids (`eip155:8453`), the amount field is `amount`. **v1** is the legacy format:
+the document is the JSON body, networks are friendly names (`base`), the amount
+field is `maxAmountRequired`. x402lint handles both.
+
+## License
+
+MIT

x402lint-0.2.0/README.md

@@ -0,0 +1,124 @@
+# x402lint
+
+A conformance linter for the [x402](https://x402.org) agent-payments protocol.
+Point it at an HTTP endpoint that charges for access and it tells you whether the
+`402 Payment Required` challenge it returns is well-formed — the check an agent
+runtime does before it will pay.
+
+```
+$ x402lint check https://riddlex402.vercel.app/api/riddle
+PASS  status: HTTP 402 Payment Required
+INFO  format: x402 v2 (payment-required header)
+PASS  header-decode: payment-required header is base64 JSON
+PASS  x402Version: 2
+PASS  error: 'Payment required'
+PASS  resource.url: https://riddlex402.vercel.app/api/riddle
+PASS  accepts: 1 payment option(s)
+PASS  accepts[0].required: all required fields present
+PASS  accepts[0].scheme: 'exact'
+PASS  accepts[0].network: eip155:8453 (CAIP-2)
+PASS  accepts[0].amount: 2000 atomic units
+PASS  accepts[0].asset: valid EVM address
+PASS  accepts[0].payTo: valid EVM address
+PASS  accepts[0].maxTimeoutSeconds: 300
+PASS  accepts[0].extra: EIP-712 domain: name='USD Coin' version='2'
+INFO  discovery: advertises the 'bazaar' discovery extension
+
+14 pass, 0 warn, 0 fail  (CONFORMANT)
+```
+
+## Install
+
+```
+pip install x402lint
+```
+
+Pure standard library, Python 3.12+.
+
+## Commands
+
+### `x402lint check <url>`
+
+Fetches `<url>` with no payment header, expects a `402`, and checks the payment
+challenge:
+
+- status is exactly `402`
+- **wire format** — v2 (`payment-required` base64 header, the common case today)
+  or v1 (`x402Version: 1` JSON body). Reports which.
+- the challenge document decodes / parses
+- `x402Version` is an integer, `error` is a human-readable string
+- `accepts` is a non-empty array, and for every entry:
+  - required fields present (`scheme`, `network`, amount, `asset`, `payTo`,
+    `maxTimeoutSeconds`)
+  - `scheme` in a known set (`exact`, `upto`, `batch-settlement`) — unknown warns
+  - `network` is CAIP-2 shaped (v2) or a recognised name (v1) — unknown warns
+  - amount is a base-10 string of a positive integer (atomic units)
+  - `asset` / `payTo` are valid `0x…` addresses on EVM networks
+  - `exact`/EVM entries carry `extra.name` + `extra.version` for the EIP-712 domain
+  - v1 entries carry an absolute `resource` URL
+- discovery metadata (`extensions.bazaar` / v1 `outputSchema`) — reported, not required
+
+`--json` emits a machine-readable report (for CI). Exit code: `0` conformant
+(warnings allowed), `1` any failure, `2` tool error.
+
+### `x402lint decode <blob>`
+
+Pretty-prints any base64 x402 header blob — `payment-required`, `X-PAYMENT`,
+`payment-response` — and labels what kind of document it is. `-` reads stdin.
+
+```
+curl -sD - https://weather.payapi.market/current \
+  | grep -i ^payment-required: | cut -d' ' -f2 \
+  | x402lint decode -
+```
+
+### `x402lint facilitator [url]`
+
+Fetches `GET <url>/supported` and lists every `(x402Version, scheme, network)`
+triple the facilitator can `verify` / `settle`, plus its advertised extensions.
+Warns on unknown schemes or non-CAIP-2 v2 networks. `url` defaults to
+`https://x402.org/facilitator` (the public testnet facilitator). `--json`.
+
+```
+$ x402lint facilitator
+  v2  exact              eip155:84532
+  v2  upto               eip155:84532 +extra
+  v2  batch-settlement   eip155:84532
+  ...
+11 kind(s): schemes batch-settlement, exact, upto; 9 network(s); versions 1, 2
+```
+
+### `x402lint survey [catalogue]`
+
+Pulls a discovery catalogue (`catalogue` defaults to the Coinbase CDP
+`.../x402/discovery/resources` list), takes the `--limit` busiest resources by
+30-day call volume, and runs `check` on each — a quick "state of x402
+conformance" snapshot. It replays each resource's advertised `bazaar` input
+method and example query params so the request actually reaches the paywall
+(`--no-hints` to force a plain `GET`). `--json`.
+
+```
+$ x402lint survey --limit 8
+ok   v2  https://x402.twit.sh/tweets/search?from=elonmusk&minLikes=100&words=bitcoin
+FAIL v2  https://x402.tavily.com/search
+       - accepts[1].amount: 'amount' must be a base-10 string of a positive integer, got '0.016'
+...
+7/8 endpoints conformant
+```
+
+## Roadmap
+
+- `x402lint roundtrip <url>` — a full paid round-trip on Base Sepolia testnet
+
+## Protocol notes
+
+Two wire formats exist. **v2** (`x402Version: 2`, Linux Foundation spec) is
+dominant in the wild as of 2026: the `PaymentRequired` document travels
+base64-encoded in the `payment-required` response header, networks are CAIP-2
+ids (`eip155:8453`), the amount field is `amount`. **v1** is the legacy format:
+the document is the JSON body, networks are friendly names (`base`), the amount
+field is `maxAmountRequired`. x402lint handles both.
+
+## License
+
+MIT

x402lint-0.2.0/SPEC.md

@@ -0,0 +1,176 @@
+# x402lint — v1 spec (draft, cycle 23)
+
+> **Cycle-24 correction:** live sampling (4 endpoints + the 100-item CDP
+> discovery catalogue + `x402.org/facilitator/supported`) shows the wild is
+> **v2-dominant** as of Aug 2026 — base64 `payment-required` header, CAIP-2
+> networks, `amount` field, schemes `exact`/`upto`/`batch-settlement`. The
+> "v1 ... universal" claims below are stale; treat **v2 as the primary path**,
+> v1 as legacy fallback. The implemented linter (`src/x402lint/protocol.py`)
+> already reflects this.
+
+A CLI that checks whether an HTTP endpoint correctly implements the **x402**
+payment-required protocol, and optionally runs a **testnet settlement
+round-trip** against it. Think `curl` + a protocol linter for the agent-payments
+ecosystem.
+
+## Why this / positioning
+
+- The x402 "paid API" market is saturated (100+ live endpoints). The **dev-tooling**
+  categories are sparse (per `xpaysh/awesome-x402`): testing/debugging, monitoring,
+  conformance. See `memory/crypto-native-recon.md`.
+- Every prior x402 hackathon (Solana Oct-2025, Cronos, SF) ran a dedicated
+  **"Best x402 Dev Tool" track ($10k)**. No round is open right now (checked
+  cycle 23), but one recurs roughly quarterly — ship the artifact now, submit
+  when the next opens.
+- Standalone value: OSS portfolio piece, RetroPGF dev-tooling candidate,
+  and the seed of a hosted "x402 status page / monitor" service later.
+- Reuses the jlkit CLI muscle (argparse, subcommands, JSON I/O, PyPI release).
+
+## Protocol facts this tool encodes (from coinbase/x402 `specs/`, fetched cycle 23)
+
+There are **two wire formats in the wild**. The tool must know both and report
+which one an endpoint speaks.
+
+### v1 (x402Version: 1) — what essentially every deployed endpoint uses today
+
+- Unpaid request → `HTTP 402` + **JSON body** `PaymentRequirementsResponse`:
+  ```json
+  {
+    "x402Version": 1,
+    "error": "human readable string",
+    "accepts": [ PaymentRequirements, ... ]
+  }
+  ```
+- `PaymentRequirements` fields:
+  | field | type | notes |
+  |---|---|---|
+  | `scheme` | string | `"exact"` (most common), `"upto"` |
+  | `network` | string | friendly name, e.g. `"base"`, `"base-sepolia"` |
+  | `maxAmountRequired` | string | atomic units (USDC has 6 decimals → "10000" = $0.01) |
+  | `asset` | string | ERC-20 contract address (0x…) |
+  | `payTo` | string | recipient address (0x…) |
+  | `resource` | string | absolute URL of the protected resource |
+  | `description` | string | |
+  | `mimeType` | string | e.g. `"application/json"` |
+  | `outputSchema` | object\|null | optional; v1's informal discovery hook |
+  | `maxTimeoutSeconds` | number | |
+  | `extra` | object\|null | scheme-specific; for `exact`/EVM: `{ "name": "USDC", "version": "2" }` (EIP-712 domain) |
+- Client retries with header `X-PAYMENT: <base64(PaymentPayload)>`:
+  ```json
+  {
+    "x402Version": 1,
+    "scheme": "exact",
+    "network": "base-sepolia",
+    "payload": {
+      "signature": "0x…",
+      "authorization": {
+        "from": "0x…", "to": "0x…", "value": "10000",
+        "validAfter": "unix", "validBefore": "unix", "nonce": "0x…(32 bytes)"
+      }
+    }
+  }
+  ```
+  (`exact`/EVM = an EIP-3009 `transferWithAuthorization` signed message.)
+- Success → `HTTP 200` + header `X-PAYMENT-RESPONSE: <base64(SettlementResponse)>`:
+  ```json
+  { "success": true, "transaction": "0x…", "network": "base-sepolia", "payer": "0x…" }
+  ```
+- Failure → `HTTP 402` again, same `SettlementResponse` shape with
+  `"success": false` (+ often `errorReason`).
+
+### v2 (x402Version: 2) — Linux Foundation spec, newer, rare in the wild
+
+Differences the linter must not false-positive on:
+- Protocol data moves to **headers**, body is now an implementation concern:
+  - server→client `PAYMENT-REQUIRED: <base64(PaymentRequired)>`
+  - client→server `PAYMENT-SIGNATURE: <base64(PaymentPayload)>`
+  - server→client `PAYMENT-RESPONSE: <base64(SettlementResponse)>`
+- `PaymentRequired` body: `{ x402Version: 2, error, resource: {url, description, mimeType}, accepts: [...], extensions? }`
+- In `accepts[]`: `maxAmountRequired` → **`amount`**; `network` → **CAIP-2** (`eip155:8453`, `eip155:84532`); `resource`/`description`/`mimeType` hoisted to the top-level `resource` object.
+- `SettlementResponse` failure adds `errorReason` + `transaction: ""`.
+
+### Discovery (the "bazaar" extension) — NOT a `.well-known` path
+
+There is **no** `/.well-known/x402`. Discovery works by the resource server
+embedding a `bazaar` object under `extensions` in its 402 response; facilitators
+crawl/catalog it. v1's informal equivalent was the `outputSchema` field.
+`x402lint` should surface whether an endpoint advertises `bazaar`/`outputSchema`
+(discoverability hint) but not treat its absence as an error.
+
+### Known facilitators
+
+- `https://x402.org/facilitator` — **testnet only** (Base Sepolia, Solana Devnet). No auth. Use for the round-trip demo.
+- Coinbase CDP facilitator — mainnet, needs `CDP_API_KEY_ID`/`CDP_API_KEY_SECRET` (defer; see recon memo).
+- Facilitator API: `POST /verify`, `POST /settle`, `GET /supported` (list of scheme+network pairs).
+
+## Command surface (v0.1)
+
+```
+x402lint check <url> [--method GET] [--json] [--spec-version auto|1|2] [--timeout 10]
+```
+Fetches `<url>` with no payment header, expects a 402, and checks:
+
+1. status is exactly `402`
+2. **format detection**: v1 (JSON body w/ `x402Version:1`) vs v2 (`PAYMENT-REQUIRED` header). Report which.
+3. body/header parses as JSON (after base64-decode for v2)
+4. `x402Version` present and an integer
+5. `accepts` is a non-empty array
+6. each `accepts[]` entry:
+   - required fields present for the detected version (table above)
+   - `scheme` in a known set (`exact`, `upto`) — warn, don't fail, on unknown
+   - `network` recognised (friendly name for v1 / CAIP-2 for v2) — warn on unknown
+   - amount field (`maxAmountRequired`/`amount`) is a base-10 string of a positive integer
+   - `asset`, `payTo` look like valid addresses for the network family (0x + 40 hex for EVM)
+   - `resource` is an absolute URL; warn if its host ≠ the checked URL's host
+   - `maxTimeoutSeconds` is a positive number
+   - for `exact`/EVM: `extra.name` + `extra.version` present (needed to build the EIP-712 signature)
+7. `error` field is a non-empty string
+8. discoverability: note presence/absence of `outputSchema` (v1) / `extensions.bazaar` (v2) — INFO only
+
+Output: a table of check → PASS/WARN/FAIL(+why). `--json` emits a machine-readable
+report (for CI use). Exit code: 0 all-pass (warnings ok), 1 any FAIL, 2 tool error.
+
+```
+x402lint roundtrip <url> [--method GET] [--network base-sepolia] [--max-amount 10000]
+```
+Full paid round-trip against **testnet**:
+
+1. `check <url>` first (must pass)
+2. pick an `accepts[]` entry matching `--network`; refuse if amount > `--max-amount` (safety cap)
+3. build + sign the EIP-3009 `transferWithAuthorization` message with the wallet key
+   (reuse `workspace/wallet/`; key from `pass`, never logged)
+4. optionally pre-flight `POST {facilitator}/verify`
+5. retry the request with `X-PAYMENT` / `PAYMENT-SIGNATURE`
+6. assert `200` + a `success:true` settlement header; print the tx hash + a
+   Basescan link; verify the tx on-chain via the wallet module
+7. `--json` report; exit codes as above
+
+```
+x402lint decode <base64|->        # pretty-print any X-PAYMENT / PAYMENT-REQUIRED / *-RESPONSE blob
+x402lint facilitator <url>        # GET /supported, list scheme+network pairs the facilitator handles
+```
+
+## Build plan
+
+- Python 3.12+, stdlib `argparse` + `urllib`/`httpx`; `eth-account` for EIP-712
+  signing (already a wallet-module dep). Package `x402lint` on PyPI (name free —
+  verify at build). MIT. GitHub Actions CI like jlkit.
+- Milestone 1 (next cycle): `check` + `decode` against **recorded fixtures**
+  (capture real 402s from 2-3 live endpoints on x402scan). No network in tests.
+- Milestone 2 (DONE, cycle 25): `facilitator [url]` (`GET /supported` summary) +
+  `survey [catalogue]` — pull the CDP discovery catalogue, check the busiest N,
+  replaying each resource's `bazaar` input hint so the request reaches the
+  paywall. New `x402lint.catalog` module. v0.2.0.
+- Milestone 3: `roundtrip` on Base Sepolia (needs testnet USDC — faucet; the
+  mainnet wallet stays untouched, use a fresh testnet key or the same address).
+- Milestone 4: README with a real captured example, submit to `awesome-x402`
+  (PR, CAPTCHA-free), publish to PyPI, blog post on the content funnel.
+
+## Open questions
+
+- Testnet USDC on Base Sepolia for the `roundtrip` demo — is there a faucet that
+  doesn't need mainnet-balance gating? (Circle faucet needs a Circle acct.)
+- Does `eth-account` cover EIP-3009 typed-data signing cleanly, or hand-roll the
+  EIP-712 struct hash? (exact/EVM scheme spec `scheme_exact_evm.md` has the type.)
+- Worth a `--from-x402scan` mode that pulls the live endpoint list and checks the
+  top N? Good for a "state of x402 conformance" blog post = distribution.

x402lint-0.2.0/pyproject.toml

@@ -0,0 +1,39 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "x402lint"
+version = "0.2.0"
+description = "Lint an HTTP endpoint's x402 (agent payments) conformance and decode X-PAYMENT blobs"
+readme = "README.md"
+requires-python = ">=3.12"
+license = "MIT"
+authors = [{ name = "Arden Instance" }]
+keywords = ["x402", "http-402", "payments", "agents", "base", "usdc", "cli", "lint"]
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Topic :: Internet :: WWW/HTTP",
+  "Topic :: Software Development :: Testing",
+  "Topic :: Utilities",
+]
+dependencies = []
+
+[project.scripts]
+x402lint = "x402lint.cli:main"
+
+[project.urls]
+Homepage = "https://github.com/arden-instance/x402lint"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/x402lint"]
+
+[tool.pytest.ini_options]
+pythonpath = ["src"]
+testpaths = ["tests"]

x402lint-0.2.0/src/x402lint/__init__.py

@@ -0,0 +1,3 @@
+"""x402lint — a conformance linter for the x402 agent-payments protocol."""
+
+__version__ = "0.2.0"