Pay x402 gateways when the HTTP node meets one (@profullstack/x402-client)

The HTTP call node fetches through a paidFetch: with X402_PRIVATE_KEY set
on the orchestrator, a 402 carrying an x402 offer is signed with the
shared crawler wallet, the pass is filed by origin and presented on every
later call to that site. Without the key it is the global fetch,
unchanged. Capped at five dollars a payment. The client is listed in
minimumReleaseAgeExclude because it was published today and pnpm 11
refuses packages younger than a day.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NSGS7Sy3QmEgTNZDg4eq7g

Author: ralyodio

package.json

@@ -24,16 +24,17 @@
     "security:patch": "SOCKET_API_TOKEN=${SOCKET_API_TOKEN} node scripts/socket-patch.mjs"
   },
   "devDependencies": {
+    "chai": "^5.1.2",
     "dotenv": "^17.2.3",
     "inquirer": "^12.9.6",
     "prettier": "^3.3.3",
-    "vitest": "^3.2.4",
-    "chai": "^5.1.2"
+    "vitest": "^3.2.4"
   },
   "dependencies": {
+    "@meshhook/shared": "workspace:*",
+    "@profullstack/x402-client": "0.2.0",
     "fast-xml-parser": "^5.3.0",
     "jmespath": "^0.16.0",
-    "openai": "^6.3.0",
-    "@meshhook/shared": "workspace:*"
+    "openai": "^6.3.0"
   }
 }

pnpm-lock.yaml

@@ -11,3 +11,8 @@ packages:
 # esbuild links the platform binary Vite uses to bundle the SvelteKit app.
 allowBuilds:
   esbuild: true
+
+# The x402 client was published today; pnpm 11 refuses packages younger than a day
+# unless they are listed here.
+minimumReleaseAgeExclude:
+  - '@profullstack/x402-client@0.2.0'

pnpm-workspace.yaml

@@ -0,0 +1,19 @@
+/**
+ * The fetch the HTTP node calls out with — paying when asked.
+ *
+ * A URL behind an x402 gateway answers with 402 and an offer. With
+ * `X402_PRIVATE_KEY` set on the orchestrator, the client signs the offer with
+ * the shared crawler wallet, buys the pass, files it by origin and presents
+ * it on every later call to that site. Without the key this is the global
+ * fetch, unchanged. Capped at five dollars a payment.
+ */
+
+import { createClient } from '@profullstack/x402-client';
+
+const key = globalThis.process?.env?.X402_PRIVATE_KEY;
+
+/** The paying client, or null when no key is configured. */
+export const x402 = key ? createClient({ key, maxUsd: 5 }) : null;
+
+/** @type {typeof fetch} */
+export const paidFetch = x402 ? (input, init) => x402.fetch(input, init) : (input, init) => globalThis.fetch(input, init);

src/lib/paid-fetch.js

@@ -34,6 +34,8 @@
  * const result = await node.execute({ userId: 123, token: 'abc', name: 'John', email: 'john@example.com' });
  */
 
+import { paidFetch } from '../lib/paid-fetch.js';
+
 /**
  * Custom error class for HTTP call errors
  */
@@ -176,7 +178,7 @@ export class HttpCallNode {
     const timeoutId = setTimeout(() => controller.abort(), this.timeout);
 
     try {
-      const response = await fetch(url, {
+      const response = await paidFetch(url, {
         ...options,
         signal: controller.signal,
       });