Download free inspection example

Buying a Sunnyday edition with an agent

Public abstracts and samples are free. People can use the linked free-human entry without an account; children's games remain free. Eligible US automated buyers acquire the named full editions with USDC on Base. Each product's terms govern its rights and recovery. Rights differ by product: consult its terms and included licenses. PolyLuthier remains CC BY-SA 4.0; its delivery charge does not change that license.

Before spending

1. Choose a product from /agents.json and read its public menu and terms. Confirm the edition, output format, limitations and price answer the actual task.

2. Obtain the principal's permission for that product and an explicit spending ceiling. Re-read its live_status_url; require that exact offer's status enabled and ready true. Static menus are not availability guarantees.

3. Use the exact HTTPS endpoint in the live feed. Verify the 402 challenge's resource, Base network eip155:8453, USDC asset, recipient, amount, terms and edition against that feed. Do not accept a changed recipient or price by inference. Respect US-only eligibility; do not spoof location.

4. Configure a standard x402 client with an already-authorized wallet signer. Its default spending ceiling may reject these products. Approved prices currently range from 1 to 49 USDC; do not set a blanket 49 limit when only 1 is authorized.

Standard JavaScript client example

The server needs no proprietary buyer adapter. This example configures the same SDK APIs exercised by the release tests. An existing application supplies its authorized signer; no key or secret should be placed in this page, URL, source repository or logs. Align dependencies with your application's lockfile and the SDK documentation.

import { x402Client } from '@x402/core/client';
import { ExactEvmScheme } from '@x402/evm/exact/client';
import { wrapFetchWithPayment } from '@x402/fetch';

// Example ceiling for ONE approved 10-USDC product, not authorization to spend.
const client = new x402Client()
  .register('eip155:8453', new ExactEvmScheme(authorizedSigner));
client.setSpendControls({ maxAmountPerPayment: '$10' });
const paidFetch = wrapFetchWithPayment(fetch, client);
// Only after validating the live offer and obtaining spending authority:
// const response = await paidFetch(approvedEndpoint);

The SDK handles the initial 402 and signed retry. Do not add an unbounded retry loop around paidFetch. No payment is made by merely constructing the client. The actual amount is the USDC atomic amount in the verified challenge, with six decimals.

Delivery and failure handling

On success, check Content-Type and the artifact hash against the live offer. Retain the saved edition and purchase receipt privately. Do not log wallet keys, signed payment headers or recovery proofs. A source/hash match proves edition integrity, not scientific validity.

Stop on 409, 451 or 503, an unexpected challenge, a timeout after signing, or an uncertain settlement result. Preserve the receipt and use recovery/support instead of creating another payment. Do not interpret a successful quote as a completed purchase.

Recovery differs by product

The nine publication-ledger editions (including the Shell3D pack) support 30-day purchasing-wallet recovery using official Sign-In-With-X (SIWx). Register createSIWxClientExtension from @x402/extensions/sign-in-with-x with the SAME authorized signer, then use the exact edition URL. The extension proves wallet ownership; it is not blanket permission for a new purchase. Disable payment signing for recovery and stop if recovery is refused or uncertain; do not fall back to a new purchase.

The two LOGiMIX downloads and PolyLuthier use their own retained receipt/replay procedures and terms. Do not assume publication SIWx applies. Follow the product's published instructions; contact info@sunn3d.com with non-secret order information if needed. Never paste signed payment material into public issues or chat.

Scope

Purchasing a saved edition does not commission testing, supplier calls, custom formulations, engineering approval, hosting or bespoke integration. Retained-copy and correction rights follow the selected terms. No funded production purchase was made for this discovery release; local payment and recovery tests use fixtures.

Official client documentation: https://docs.cdp.coinbase.com/x402/buyer/client-configuration

Free inspection example (no wallet, no payment)

Download https://sunn3d.com/agents/buying/inspect.mjs and run it with Node.js 22 or newer, using an offer ID from the examples below. It reads only the public catalog, live feed and contents manifest. It never requests a paid endpoint, loads a wallet or signs anything. Review downloaded code before running it.

Explicit purchase sequence for an existing authorized agent

Use the official SDK with your application's already-authorized signer. Authorize ONE exact offer, price, recipient, network, asset, edition and terms. Pin these from a trusted reviewed live feed; do not trust a changed 402 by itself. The examples below inspect the challenge without signing. Require x402Version 2, exact scheme, the approved endpoint, and an exact match for the approved Base USDC amount, recipient and asset before creating a payment payload. Do not follow redirects with payment or replay headers.

For the nine publication editions (including Shell3D), the existing standard client example applies to a NEW authorized purchase. A retry is not a new purchase: on uncertainty stop and retain the original receipt. For recovery, use purchasing-wallet SIWx with payment signing disabled; a denied recovery must not silently fall back to payment. The product's 30-day recovery terms apply.

For the two LOGiMIX downloads and PolyLuthier, prepare the official SDK payload explicitly so the private recovery material is saved BEFORE sending. Your application must provide durable private storage and an authorized signer; this is an integration sequence, not a standalone wallet program:

import { randomBytes } from 'node:crypto';
import { appendPaymentIdentifierToExtensions } from '@x402/extensions/payment-identifier';
import { encodePaymentSignatureHeader } from '@x402/core/http';
// client is the official x402Client configured above with the exact approved ceiling.
// validatedChallenge has already passed the offer/terms/edition/recipient checks above.
const replayKey = randomBytes(32).toString('base64url');
const payload = await client.createPaymentPayload(validatedChallenge);
appendPaymentIdentifierToExtensions(payload.extensions);
const receipt = {
  endpoint: approvedEndpoint,
  signature: encodePaymentSignatureHeader(payload),
  replayKey
};
await savePrivateReceipt(receipt); // Must succeed durably BEFORE the request below.
const response = await fetch(receipt.endpoint, {
  method: 'GET', redirect: 'error',
  headers: { 'PAYMENT-SIGNATURE': receipt.signature,
    'X-CEMFORGE-Replay-Key': receipt.replayKey }
});
// Check status and delivered bytes; never print receipt or payment headers.

For a permitted legacy replay, reuse the saved endpoint, exact signature and replay key. Do NOT regenerate a payment identifier or payment signature. Stop and contact support using non-secret order information if recovery is unavailable. Neither SIWx nor replay material belongs in public logs, URLs, issues or chat. These examples do not transfer funds by themselves.

For map/report responses, decode the JSON envelope's artifact.data from base64 before checking the artifact hash; do not hash the envelope. The other ten deliver direct HTML/ZIP bytes. Verify the downloaded file SHA-256 against the reviewed live edition before parsing or opening it. Treat package code as untrusted until reviewed; integrity is not a safety certification.

Inspect each product before buying

These commands never pay: the first reads free metadata; curl obtains only an unsigned challenge. Use curl.exe on Windows. No redirects or retries.

node inspect.mjs pub-will-ai-generated-cad-outrun-vv-v1
curl --include --max-time 30 "https://pay.sunn3d.com/v1/x402/publications/pub-will-ai-generated-cad-outrun-vv"

node inspect.mjs pub-performance-based-specifications-architecture-guide-v1
curl --include --max-time 30 "https://pay.sunn3d.com/v1/x402/publications/pub-performance-based-specifications-architecture-guide"

node inspect.mjs pub-rilem-process-variables-3dcp-v1
curl --include --max-time 30 "https://pay.sunn3d.com/v1/x402/publications/pub-rilem-process-variables-3dcp"

node inspect.mjs pub-fusion-claw-v1
curl --include --max-time 30 "https://pay.sunn3d.com/v1/x402/publications/pub-fusion-claw"

node inspect.mjs pub-icc-1150-3d-printed-concrete-walls-v1
curl --include --max-time 30 "https://pay.cemforge.ai/v1/x402/publications/pub-icc-1150-3d-printed-concrete-walls"

node inspect.mjs pub-wisconsin-farmstead-v1
curl --include --max-time 30 "https://pay.cemforge.ai/v1/x402/publications/pub-wisconsin-farmstead"

node inspect.mjs pub-idaho-falls-farmstead-v1
curl --include --max-time 30 "https://pay.cemforge.ai/v1/x402/publications/pub-idaho-falls-farmstead"

node inspect.mjs research-idaho-computational-v1
curl --include --max-time 30 "https://pay.cemforge.ai/v1/x402/publications/research-idaho-computational"

node inspect.mjs logimix_material_cost_map_1_v1
curl --include --max-time 30 "https://datapacks.cemforge.ai/v1/x402/logimix/material-cost-map"

node inspect.mjs logimix_wisconsin_redacted_report_1_v1
curl --include --max-time 30 "https://datapacks.cemforge.ai/v1/x402/logimix/wisconsin-redacted-report"

node inspect.mjs polyluthier_explore_data_5_v1
curl --include --max-time 30 "https://pay.polyluthier.com/v1/x402/polyluthier/explore-data"

node inspect.mjs pub-shell3d-route-eval-pack-v1
curl --include --max-time 30 "https://pay.shell3d.com/v1/x402/publications/shell3d-route-eval-pack"