buyer

type AuthsFile ¶

type AuthsFile map[string][]*PreSignedAuth

AuthsFile is the top-level structure for the pre-signed authorizations file, loaded from the x402-buyer-auths ConfigMap. Keys are upstream names matching Config.Upstreams.

func LoadAuths(path string) (AuthsFile, error)

type Config ¶

type Config struct {
	Upstreams map[string]UpstreamConfig `json:"upstreams"`
}

Config is the top-level sidecar configuration, loaded from a JSON file mounted from the x402-buyer-config ConfigMap.

func LoadConfig(path string) (*Config, error)

type PreSignedAuth ¶

type PreSignedAuth struct {
	Signature   string `json:"signature"`
	From        string `json:"from"`
	To          string `json:"to"`
	Value       string `json:"value"`
	ValidAfter  string `json:"validAfter"`
	ValidBefore string `json:"validBefore"`
	Nonce       string `json:"nonce"`
}

PreSignedAuth is a single pre-signed ERC-3009 TransferWithAuthorization voucher. Each voucher is single-use — consumed when the facilitator calls settle() on-chain.

type PreSignedSigner ¶

type PreSignedSigner struct {
	// contains filtered or unexported fields
}

PreSignedSigner implements x402.Signer using pre-signed ERC-3009 TransferWithAuthorization vouchers. It pops one auth from the pool per Sign() call. The pool is finite — once exhausted, CanSign returns false.

Thread-safe via sync.Mutex.

func NewPreSignedSigner(network, payTo, asset, price string, auths []*PreSignedAuth, spent int, onConsume func(*PreSignedAuth) error) *PreSignedSigner

func (s *PreSignedSigner) CanSign(req *x402.PaymentRequirement) bool

func (s *PreSignedSigner) GetMaxAmount() *big.Int

func (s *PreSignedSigner) GetPriority() int

func (s *PreSignedSigner) GetTokens() []x402.TokenConfig

func (s *PreSignedSigner) Network() string

func (s *PreSignedSigner) Remaining() int

func (s *PreSignedSigner) Scheme() string

func (s *PreSignedSigner) Sign(req *x402.PaymentRequirement) (*x402.PaymentPayload, error)

func (s *PreSignedSigner) Spent() int

type Proxy ¶

type Proxy struct {
	// contains filtered or unexported fields
}

Proxy is an OpenAI-compatible reverse proxy that routes requests to upstream x402-gated endpoints, attaching pre-signed payment headers automatically.

Routing:

• OpenAI-compatible chat/responses paths resolve the upstream from the requested model.
• /upstream/<name>/... remains available for compatibility.

func NewProxy(cfg *Config, auths AuthsFile, state *StateStore) (*Proxy, error)

func (p *Proxy) Reload(cfg *Config, auths AuthsFile) error

func (p *Proxy) ServeHTTP(w http.ResponseWriter, r *http.Request)

type StateStore ¶ added in v0.7.0

type StateStore struct {
	// contains filtered or unexported fields
}

StateStore tracks consumed authorization nonces so hot reloads and restarts do not reintroduce already-spent vouchers from the ConfigMap source.

func LoadStateStore(path string) (*StateStore, error)

func (s *StateStore) ConsumedCount(upstream string) int

func (s *StateStore) IsConsumed(upstream, nonce string) bool

func (s *StateStore) MarkConsumed(upstream, nonce string) error

type UpstreamConfig ¶

type UpstreamConfig struct {
	// URL is the upstream base URL (e.g. "https://seller.example.com/services/qwen").
	URL string `json:"url"`

	// RemoteModel is the concrete upstream model served by this purchased route.
	// The LiteLLM paid/* namespace resolves to this model before the sidecar
	// forwards the request to the seller.
	RemoteModel string `json:"remoteModel,omitempty"`

	// Network is the blockchain network identifier (e.g. "base-sepolia").
	Network string `json:"network"`

	// PayTo is the seller's receiving address.
	PayTo string `json:"payTo"`

	// Asset is the token contract address (e.g. USDC on Base Sepolia).
	Asset string `json:"asset"`

	// Price is the amount in atomic units per request (e.g. "1000" for 0.001 USDC).
	Price string `json:"price"`
}

UpstreamConfig describes a single x402-gated upstream endpoint.