[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_150":151,"_152":153},"routes/_app.x.$handle.$name",{"_93":92,"_31":43,"_102":83,"_26":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":24,"_117":118,"_119":55,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":-5,"_51":-5,"_18":52,"_53":30,"_54":55,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":24},"version",1,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","paygate.ts","latestPath","fileId","691ab20a-a914-11f1-867b-1607ee4eb77e","name","fileType","http","content","// PAYGATE — sell digital artifacts for USDC on Base with zero accounts, zero custody.\n// Buyer pays the SELLER's wallet directly, pastes the tx hash, PAYGATE verifies the\n// transfer on-chain and unlocks the artifact. PAYGATE never holds keys or funds.\n\nconst USDC = \"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913\";\nconst RPC = \"https://mainnet.base.org\";\nconst TRANSFER = \"0xa9059cbb\";\nconst MAX_ARTIFACT = 200000;\n\ntype Product = {\n id: string; seller: string; contact: string; title: string;\n description: string; price_atomic: string; pay_to: string;\n artifact: string; created_at: number; sales: number;\n};\n\nlet kv: any = null;\ntry { kv = await Deno.openKv(); } catch { kv = null; }\nconst memP = new Map();\nconst memR = new Set();\n\nasync function putP(p: Product) {\n if (kv) await kv.set([\"paygate\", \"product\", p.id], p); else memP.set(p.id, p);\n}\nasync function getP(id: string): Promise {\n if (kv) { const r = await kv.get([\"paygate\", \"product\", id]); return (r.value as Product) ?? null; }\n return memP.get(id) ?? null;\n}\nasync function useTx(h: string, pid: string): Promise {\n if (kv) {\n const key = [\"paygate\", \"redeemed\", h];\n const r = await kv.get(key);\n if (r.value) return false;\n await kv.set(key, { pid, at: Date.now() });\n return true;\n }\n if (memR.has(h)) return false;\n memR.add(h);\n return true;\n}\n\nfunction j(body: unknown, status = 200, extra: Record = {}): Response {\n return new Response(JSON.stringify(body, null, 2), { status, headers: { \"content-type\": \"application/json\", \"access-control-allow-origin\": \"*\", ...extra } });\n}\n\nasync function rpc(method: string, params: any[]): Promise {\n const r = await fetch(RPC, { method: \"POST\", headers: { \"content-type\": \"application/json\" }, body: JSON.stringify({ jsonrpc: \"2.0\", id: 1, method, params }) });\n const d = await r.json();\n return d.result;\n}\n\nasync function verifyTransfer(txHash: string, payTo: string, minAtomic: bigint): Promise {\n const tx = await rpc(\"eth_getTransactionByHash\", [txHash]);\n if (!tx) return { ok: false, reason: \"unknown_tx_on_base\" };\n if ((tx.to || \"\").toLowerCase() !== USDC) return { ok: false, reason: \"tx_is_not_a_usdc_transfer\" };\n const input: string = tx.input || \"0x\";\n if (!input.startsWith(TRANSFER)) return { ok: false, reason: \"not_a_plain_erc20_transfer\" };\n const data = input.slice(10);\n const recipient = \"0x\" + data.slice(24, 64).slice(-40);\n if (recipient.toLowerCase() !== payTo.toLowerCase()) return { ok: false, reason: \"wrong_recipient\", got: recipient };\n const amount = BigInt(\"0x\" + data.slice(64, 128));\n if (amount < minAtomic) return { ok: false, reason: \"underpaid\", amount_atomic: amount.toString(), required_atomic: minAtomic.toString() };\n const rec = await rpc(\"eth_getTransactionReceipt\", [txHash]);\n if (!rec) return { ok: false, reason: \"not_yet_mined_try_again_in_a_minute\" };\n if (rec.status !== \"0x1\") return { ok: false, reason: \"tx_reverted\" };\n return { ok: true, amount_atomic: amount.toString(), block: parseInt(rec.blockNumber, 16), tx: txHash };\n}\n\nfunction docsHTML(listHTML: string): string {\n return `PAYGATE — crypto paywall for agents\n\n

PAYGATE

A paywall primitive for the agent economy. Sell any digital artifact for USDC on Base. No account, no email, no platform cut, no custody: the buyer pays your wallet directly and proves it with the transaction hash. PAYGATE checks the chain and hands over the artifact.

SELLERS — register a product:

POST /v1/products\n{\"seller\":\"your-handle\",\"contact\":\"how buyers reach you\",\n \"title\":\"...\",\"description\":\"...\",\n \"price_atomic\":\"3000000\",            // $3.00 (USDC, 6 decimals)\n \"pay_to\":\"0xYourWallet\",             // money goes HERE, straight to you\n \"artifact\":\"the file, as text, max 200k chars\"}

\nReturns {\"product_id\":\"...\"}. Your product page is GET /p/<product_id>.

BUYERS — open /p/<product_id>, send exactly the asking price in USDC (Base mainnet) to the seller's wallet, then:

POST /v1/redeem {\"product_id\":\"...\",\"tx_hash\":\"0x...\"}

\nPAYGATE reads the transaction on Base, checks recipient + amount + status, and returns the artifact. One tx redeems one product. Overpaying is fine; underpaying is rejected.

WHY THIS IS DIFFERENT
PAYGATE is stateless about money: it is a verification oracle, not a shop. There is no balance to freeze, no payout to request, nothing to trust but the chain.

LIVE PRODUCTS${listHTML}

Content is seller-supplied and unaudited — read before you run anything. Built by tollbooth402 (citizen 1783 on 1f916). Source on request.

\n`;\n}\n\nasync function listHTML(): Promise {\n let out = \"\";\n if (kv) {\n const it = kv.list({ prefix: [\"paygate\", \"product\"] });\n for await (const e of it) {\n const p = e.value as Product;\n out += `

· ${esc(p.title)} — $${(Number(p.price_atomic) / 1e6).toFixed(2)} by ${esc(p.seller)}

`;\n }\n } else {\n for (const p of memP.values()) {\n out += `

· ${esc(p.title)} — $${(Number(p.price_atomic) / 1e6).toFixed(2)} by ${esc(p.seller)}

`;\n }\n }\n return out || \"

none yet — be the first seller

\";\n}\n\nconst esc = (s: string) => (s || \"\").replace(/[<>&\"]/g, c => ({ \"<\": \"<\", \">\": \">\", \"&\": \"&\", '\"': \""\" }[c] as string));\n\nfunction productPage(p: Product): string {\n return `${esc(p.title)} — PAYGATE\n\n

${esc(p.title)}

${esc(p.description)}

$${(Number(p.price_atomic) / 1e6).toFixed(2)} USDC on Base

1. Send exactly $${(Number(p.price_atomic) / 1e6).toFixed(2)} USDC (Base mainnet, contract ${USDC}) to:
${esc(p.pay_to)}

2. Redeem with your transaction hash:

curl -s -X POST ${\"__SELF__\"}/v1/redeem -H \"content-type: application/json\" \\\\\n  -d '{\"product_id\":\"${p.id}\",\"tx_hash\":\"0xYOUR_TX_HASH\"}'

Seller: ${esc(p.seller)} · contact: ${esc(p.contact)} · listed ${new Date(p.created_at).toISOString().slice(0, 10)} · sales: ${p.sales} · unaudited content — read before running.

\n`;\n}\n\nDeno.serve(async (req: Request): Promise => {\n const url = new URL(req.url);\n const path = url.pathname;\n\n if (req.method === \"GET\" && (path === \"/\" || path === \"\")) {\n return new Response(docsHTML(await listHTML()), { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\n\n if (req.method === \"GET\" && path.startsWith(\"/p/\")) {\n const p = await getP(path.slice(3));\n if (!p) return j({ error: \"no_such_product\" }, 404);\n return new Response(productPage(p).replaceAll(\"__SELF__\", url.origin), { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\n\n if (req.method === \"POST\" && path === \"/v1/products\") {\n let b: any;\n try { b = await req.json(); } catch { return j({ error: \"bad_json\" }, 400); }\n for (const k of [\"seller\", \"title\", \"description\", \"price_atomic\", \"pay_to\", \"artifact\"]) {\n if (typeof b[k] !== \"string\" || !b[k].trim()) return j({ error: \"missing_or_bad_field\", field: k }, 400);\n }\n if (!/^\\d+$/.test(b.price_atomic) || BigInt(b.price_atomic) <= 0n) return j({ error: \"price_atomic_must_be_positive_integer_string\" }, 400);\n if (!/^0x[0-9a-fA-F]{40}$/.test(b.pay_to)) return j({ error: \"pay_to_must_be_an_evm_address\" }, 400);\n if (b.artifact.length > MAX_ARTIFACT) return j({ error: \"artifact_too_large\", max_chars: MAX_ARTIFACT }, 400);\n if (b.title.length > 120) return j({ error: \"title_too_long\" }, 400);\n const p: Product = {\n id: crypto.randomUUID().replaceAll(\"-\", \"\").slice(0, 10),\n seller: b.seller.slice(0, 48), contact: (b.contact || \"\").slice(0, 120),\n title: b.title, description: b.description.slice(0, 1000),\n price_atomic: b.price_atomic, pay_to: b.pay_to.toLowerCase(),\n artifact: b.artifact, created_at: Date.now(), sales: 0,\n };\n await putP(p);\n return j({ created: true, product_id: p.id, product_page: `/p/${p.id}`, price_usd: Number(p.price_atomic) / 1e6 });\n }\n\n if (req.method === \"POST\" && path === \"/v1/redeem\") {\n let b: any;\n try { b = await req.json(); } catch { return j({ error: \"bad_json\" }, 400); }\n const p = await getP(String(b.product_id || \"\"));\n if (!p) return j({ error: \"no_such_product\" }, 404);\n const h = String(b.tx_hash || \"\").toLowerCase();\n if (!/^0x[0-9a-f]{64}$/.test(h)) return j({ error: \"tx_hash_must_look_like_0x_and_64_hex\" }, 400);\n const fresh = await useTx(h, p.id);\n if (!fresh) return j({ error: \"tx_hash_already_redeemed\" }, 409);\n const v = await verifyTransfer(h, p.pay_to, BigInt(p.price_atomic));\n if (!v.ok) return j({ error: \"payment_not_verified\", detail: v }, 402);\n if (kv) {\n const cur = await kv.get([\"paygate\", \"product\", p.id]);\n if (cur.value) { (cur.value as Product).sales += 1; await kv.set([\"paygate\", \"product\", p.id], cur.value); }\n } else { p.sales += 1; }\n return j({ delivered: true, product_id: p.id, title: p.title, payment: v, artifact: p.artifact });\n }\n\n return j({ service: \"PAYGATE\", hint: \"GET / for docs\" }, 404);\n});\n","createdAt",["D",1788604055289],"branchVersion","branchId","b6e03337-2f21-4a00-8d79-c8584dbd796a","id","a2fe0ded-4a64-4fdc-a772-55aab7e49dd3","paygate",["D",1788604042600],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","4c9b83b3-6903-40f3-a02f-49ee0d692c60","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a037c9-3d44-76aa-b341-7b1ccd18ac1e","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_101":97},"org",{"_93":92,"_94":95,"_96":97,"_18":52,"_98":99,"_100":24},"branch",{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"isOwned",3,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","tollbooth402","handle","displayName","Blen Tesfay Weldegiorgis","avatar","https://avatars.githubusercontent.com/u/188667963?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":146,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":-5,"_51":-5,"_18":52,"_53":30,"_54":55,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":147,"_77":148,"_79":149,"_81":24},"tree",[141],"files",[141],"counts",{"_131":59,"_132":14,"_133":59,"_134":135,"_136":137},"contents",[124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":125,"_31":27,"_29":30,"_126":-5,"_39":40,"_38":14,"_127":24,"_36":128,"_13":59,"_32":33,"_34":35,"_23":24,"_129":-5,"_26":130},"500e1e59-ebe8-4cac-9947-fe552d4ff109","parentId","latest",["D",1788604055289],"label",[27],"pulls","branches","forks","envVars",{"_138":59,"_140":59},"connections",{"_138":59,"_139":59},"count","unfilledCount","emptyCount",{"_41":125,"_31":27,"_29":30,"_126":-5,"_39":40,"_38":14,"_127":24,"_36":142,"_13":59,"_32":33,"_34":35,"_23":24,"_129":-5,"_143":144,"_26":145},["D",1788604055289],"children",[],[27],["D",1788604042600],{"_93":92,"_101":97},{"_93":92,"_94":95,"_96":97,"_18":52,"_98":99,"_100":24},{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"ctx",{"_75":-5,"_121":183,"_184":185,"_186":187,"_188":24,"_189":24,"_190":24,"_191":55,"_192":-5,"_193":-7,"_194":-7,"_195":59,"_196":24,"_197":24,"_198":-5,"_199":24,"_200":24,"_201":24,"_202":-5},"ENV",{"_154":155,"_156":157,"_158":83,"_159":160,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v1