x402

type AssetInfo struct {
	Address        string
	Symbol         string
	Decimals       int
	TransferMethod string
	EIP712Name     string
	EIP712Version  string

	// EIP2612GasSponsoring is true when the token supports ERC20Permit and
	// the facilitator can batch permit() with transferFrom on settle, letting
	// buyers skip the one-time approve(Permit2, max) tx. Surfaced to buyers
	// via the top-level `extensions.eip2612GasSponsoring` field on the 402
	// response.
	EIP2612GasSponsoring bool
}

type ChainInfo struct {
	// Name is the human-friendly identifier used by the CLI (e.g., "base-sepolia").
	Name string

	// NetworkID is the v1 wire-format network name sent to the facilitator.
	NetworkID string

	// CAIP2Network is the v2 wire-format network identifier.
	CAIP2Network string

	// USDCAddress is the USDC token contract address on this chain.
	USDCAddress string

	// Decimals is the token decimal precision (6 for USDC).
	Decimals int

	// EIP3009Name is the EIP-712 domain name for TransferWithAuthorization.
	EIP3009Name string

	// EIP3009Version is the EIP-712 domain version.
	EIP3009Version string
}

type ConfigAccumulator struct {
	// contains filtered or unexported fields
}

type ForwardAuthConfig struct {
	// FacilitatorURL is the x402 facilitator service URL (e.g., "https://x402.org/facilitator").
	FacilitatorURL string

	// VerifyOnly skips blockchain settlement when true. Used by the Traefik
	// ForwardAuth verifier where only payment verification is needed.
	//
	// INVARIANT: VerifyOnly MUST be true whenever this middleware is used
	// behind Traefik ForwardAuth. The auth hop runs before the upstream is
	// contacted and cannot observe the upstream's status; settling there
	// debits the payer before the upstream has proven it served the request.
	// VerifyOnly=false is only safe for in-process middleware (e.g. the
	// standalone inference gateway) that sees the real upstream status.
	//
	// NewForwardAuthMiddleware logs a loud warning when VerifyOnly is false
	// so operators who flip this in x402-pricing.yaml notice in logs.
	VerifyOnly bool

	// Extensions, if non-nil, is emitted as the top-level `extensions` field
	// on 402 responses. Used to advertise capabilities like
	// `eip2612GasSponsoring` (gasless Permit2 approve) so buyers take the
	// matching flow. See BuildExtensionsForAsset for how this is populated.
	Extensions map[string]any
}

type PricingConfig struct {
	// Wallet is the USDC recipient address for all payments.
	Wallet string `yaml:"wallet"`

	// Chain is the blockchain network name (e.g., "base-sepolia", "base").
	Chain string `yaml:"chain"`

	// FacilitatorURL is the x402 facilitator service URL.
	FacilitatorURL string `yaml:"facilitatorURL"`

	// VerifyOnly skips blockchain settlement after successful verification.
	VerifyOnly bool `yaml:"verifyOnly"`

	// Routes defines per-route pricing rules. First match wins.
	Routes []RouteRule `yaml:"routes"`
}

type RouteRule struct {
	// Pattern is a path matching pattern. Supports:
	//   - Exact match: "/health"
	//   - Prefix match: "/rpc/*" (matches /rpc/anything)
	//   - Glob match: "/inference-*/v1/*"
	Pattern string `yaml:"pattern"`

	// Price is the USDC amount per request (e.g., "0.0001").
	Price string `yaml:"price"`

	// Description is a human-readable label for this route (optional).
	Description string `yaml:"description"`

	// PayTo overrides the global wallet for this route (x402: payTo).
	// If empty, falls back to PricingConfig.Wallet.
	PayTo string `yaml:"payTo,omitempty"`

	// Network overrides the global chain for this route (human-friendly).
	// If empty, falls back to PricingConfig.Chain.
	Network string `yaml:"network,omitempty"`

	// AssetAddress overrides the default token contract address for this route.
	AssetAddress string `yaml:"assetAddress,omitempty"`

	// AssetSymbol records the token symbol used for this route.
	AssetSymbol string `yaml:"assetSymbol,omitempty"`

	// AssetDecimals overrides the token decimals for this route.
	AssetDecimals int `yaml:"assetDecimals,omitempty"`

	// AssetTransferMethod overrides the x402 transfer method for this route.
	AssetTransferMethod string `yaml:"assetTransferMethod,omitempty"`

	// EIP712Name overrides the EIP-712 domain name for this route's asset.
	EIP712Name string `yaml:"eip712Name,omitempty"`

	// EIP712Version overrides the EIP-712 domain version for this route's asset.
	EIP712Version string `yaml:"eip712Version,omitempty"`

	// UpstreamAuth is injected as the Authorization header on approved requests.
	// The shared seller gateway injects this header on approved upstream
	// requests. This lets the upstream (e.g., LiteLLM) authenticate the request
	// without exposing the key to buyers.
	UpstreamAuth string `yaml:"upstreamAuth,omitempty"`

	// UpstreamURL is the in-cluster HTTP base URL for the protected upstream.
	// The shared seller gateway proxies matched paid routes to this target after
	// successful payment verification.
	UpstreamURL string `yaml:"upstreamURL,omitempty"`

	// StripPrefix is removed from the incoming request path before proxying to
	// the upstream. For ServiceOffers this is usually /services/<offer-name>.
	StripPrefix string `yaml:"stripPrefix,omitempty"`

	// PriceModel records which price field produced the enforced request price.
	// It is metadata only; the verifier always enforces Price.
	PriceModel string `yaml:"priceModel,omitempty"`

	// PerMTok stores the original per-million-token price when Price was
	// approximated for phase 1 request-based gating.
	PerMTok string `yaml:"perMTok,omitempty"`

	// ApproxTokensPerRequest stores the fixed token estimate used to derive
	// Price from PerMTok during phase 1.
	ApproxTokensPerRequest int `yaml:"approxTokensPerRequest,omitempty"`

	// OfferNamespace identifies the originating ServiceOffer namespace.
	OfferNamespace string `yaml:"offerNamespace,omitempty"`

	// OfferName identifies the originating ServiceOffer name.
	OfferName string `yaml:"offerName,omitempty"`
}

type TokenEntry struct {
	// Address is the ERC-20 contract address on the target chain.
	Address string

	// Symbol is the human-friendly token symbol (e.g. "USDC", "OBOL").
	Symbol string

	// Decimals is the token precision in atomic units (6 for USDC, 18 for OBOL).
	Decimals int

	// TransferMethod is the x402 asset transfer method.
	// "eip3009" — token natively implements transferWithAuthorization (USDC, EURC).
	// "permit2" — uses Uniswap Permit2 for authorization (any ERC-20).
	TransferMethod string

	// EIP712Name is the EIP-712 domain name for signing.
	EIP712Name string

	// EIP712Version is the EIP-712 domain version for signing.
	EIP712Version string

	// EIP2612GasSponsoring is true when the token implements EIP-2612
	// (ERC20Permit) and the configured facilitator can batch the permit() call
	// with the on-chain transferFrom during settlement, sponsoring gas. When
	// true, the seller's 402 advertises `eip2612GasSponsoring` in extensions
	// so buyers skip the one-time approve(Permit2, max) step. Only relevant
	// for permit2 transfer methods.
	EIP2612GasSponsoring bool
}

type Verifier struct {
	// contains filtered or unexported fields
}