Skip to content

v0.14.1

Choose a tag to compare

@ryanio ryanio released this 05 Jun 21:51
· 32 commits to main since this release

What's Changed

Fixes caller attribution in usage reporting (the POST /api/v2/tools/usage integration) and corrects the trust model.

  • x402 calls now attribute the on-chain payer as caller_address, instead of a placeholder address. The x402 gate records the payer; the reporter now uses it.
  • EIP-3009-authenticated calls now forward the caller's original signed authorization. predicateGate stashes the verified authorization on ctx.callerAuthorization, the handler threads it onto InvocationEvent.callerAuthorization, and the reporter forwards it. The server no longer signs a fresh authorization as itself.
  • Removed walletClient, operatorAddress, and tokenAddress from Eip3009UsageReporterConfig. Usage reporting is a service-side responsibility authenticated by apiKey; there is no caller self-reporting or server-side signing path. signZeroValueAuthorization remains exported for building Authorization: EIP-3009 request headers.

Docs (README + bundled tool-builder skill) updated to match.

Full Changelog: v0.14.0...v0.14.1