v0.14.1
What's Changed
Fixes caller attribution in usage reporting (the POST /api/v2/tools/usage integration) and corrects the trust model.
- x402 calls now attribute the on-chain payer as
caller_address, instead of a placeholder address. The x402 gate records the payer; the reporter now uses it. - EIP-3009-authenticated calls now forward the caller's original signed authorization.
predicateGatestashes the verified authorization onctx.callerAuthorization, the handler threads it ontoInvocationEvent.callerAuthorization, and the reporter forwards it. The server no longer signs a fresh authorization as itself. - Removed
walletClient,operatorAddress, andtokenAddressfromEip3009UsageReporterConfig. Usage reporting is a service-side responsibility authenticated byapiKey; there is no caller self-reporting or server-side signing path.signZeroValueAuthorizationremains exported for buildingAuthorization: EIP-3009request headers.
Docs (README + bundled tool-builder skill) updated to match.
Full Changelog: v0.14.0...v0.14.1