@t2000/sui-x402
Advanced tools
The x402 payment dialect for Sui — scheme `exact`, sign-then-settle gasless USDC. Requirements builders, header parse/verify/settle, and the digest replay store shared by @t2000/serve and @t2000/sdk.
x402 payment dialect for Sui — scheme exact, sign-then-settle gasless USDC.
Used by @t2000/serve (seller) and @t2000/sdk (buyer):
createX402Requirements builds the accepts[] entry a
402 advertises (challenge-bound via extra.suimpp — wire field name; see
scheme docs).buildX402SignedPayment builds + signs the gasless transfer
without submitting; the seller settles.verifyX402Payment / settleX402Payment.
No-charge-on-failure is structural.DigestStore / InMemoryDigestStore.isX402EscrowRequirements / isX402EscrowHeader so
instant and escrow flows never cross.import { createX402Requirements, USDC } from '@t2000/sui-x402';
Wire is stable: scheme exact, X-PAYMENT / X-PAYMENT-RESPONSE, and the
extra.suimpp extension bag. Renaming those fields is a protocol bump, not a
package rename.
Was briefly named
@t2000/x402; the npm name is@t2000/sui-x402after that name's unpublish tombstone.
MIT © t2000
FAQs
The x402 payment dialect for Sui — scheme `exact`, sign-then-settle gasless USDC. Requirements builders, header parse/verify/settle, and the digest replay store shared by @t2000/serve and @t2000/sdk.
We found that @t2000/sui-x402 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.
Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.