X402 Git

genesiscode2026/api-response-contract-guard · v1.0.0

What an agent reads when it fetches this URL: the whole manifest, in order, with the offer on the last line as a 402 it can pay. Nothing here is a button — an agent does not click, it signs. The page a person reads is here.

Pack · 1 script · 1 source file · 1 test file · 4 examples · 4 docs · 1 config file · 1 asset · 13 files · text 14.2 kB · binary 6 B (0%) · JavaScript 100% · licence undetermined

scan passed 2026-09-17 · scanner 2026.09.1 · 1 release · last release today · 20% of files seen elsewhere

computed 2026-09-17 21:47 UTC · analyzer 0.1.0

Security scan report

Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.

secrets
none found
X402 Git
size limits
within caps
X402 Git
known malware
no dependency manifests to check
OSV
known vulnerabilities
no dependency manifests to check
OSV
dependency behaviour
nothing on a direct dependency · 1 in transitive packages
Socket
instruction smuggling
none found
X402 Git
what it can do
listed below
X402 Git

What this can do

Tools
none
Runs
bin/api-response-guard.js
Talks to
nothing
Reads
no environment variables
At install
nothing runs
Links to
  • img.shields.io
  • www.getly.store
Findings (2)
  • LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
  • LOWbin/api-response-guard.js — Ships the script bin/api-response-guard.js

Description self_reported

Written by the creator. Not verified by this platform — everything above and below this section is computed from the repository.

Asserts live HTTP responses against schema contracts, halting CI/QA test suites on payload drift.

When to use it. When requiring verified Code Snippets functionality in autonomous workflows

Readme

api-response-contract-guard

Asserts live HTTP responses or fixture payloads against JSON Schema contracts, halting test suites on payload drift.

Version License: MIT Zero Dependencies

What Can Break?

Backend deployments that omit critical JSON keys, return unexpected null values, or send mismatched data types to clients.

What Does This Tool Check?

Live response JSON payloads vs contract schema, required presence, type assertions, and nullability.

What Does It NOT Check?

Server SSL certificates or HTTP proxy caching headers.

How Fast Can I Run It?

Under 5 seconds. Zero external dependencies. Pure Node.js standard library.

# Clone and run
git clone git@github.com:genesiscode2026/api-response-contract-guard.git
cd api-response-contract-guard

# Execute 60-second demo
./bin/api-response-guard.js --help
./bin/api-response-guard.js --contract examples/contract.json --response examples/response.json

What Do I Get?

  • Deterministic CLI Exit Codes: Returns code 0 on backward-compatible contracts; returns code 1 on breaking drift.
  • Machine-Readable JSON: Pass --json to integrate directly into GitHub Actions, GitLab CI, or pre-commit hooks.
  • Human-Readable Diffs: Clear, actionable error reports with exact field pointers.

Commercial Distribution

  • Catalog ID: P48
  • Price Band: standard micro-tool ($15)
  • List Price: $15 USD
  • License: GENESIS Commercial Source License v1.0
  • Seller: genesiscode2026
  • Official Storefront: Genesis Code on Getly

Contents

13 files · 14.2 kB · computed 2026-09-17
SizePath
2.1 kBLICENSE
457 BQUICKSTART.md
1.8 kBREADME.md
326 BSECURITY.md
6 BVERSION · binary
5.4 kBbin/api-response-guard.js
400 Bexamples/contract.json
67 Bexamples/response.json
400 Bexamples/v1.json
67 Bexamples/v2.json
607 Bpackage.json
2 kBsrc/detector.js
496 Btests/test_detector.js
computed 2026-09-17 21:47 UTC · analyzer 0.1.0

Dependencies

None found in the software bill of materials for this release.

computed 2026-09-17 21:47 UTC · analyzer 0.1.0

Releases

1 release · last release today
VersionDateScanChangedNotes
v1.0.02026-09-17pass—Commercial release v1.0.0 for api-response-contract-guard

Machine-readable at https://x402git.com/api/v/genesiscode2026/api-response-contract-guard/releases. Entries cannot be deleted by the creator.

Order

GET v1.0.0 · $15 · new releases $5

The resource endpoint answers 402 with the price and the exact bytes to sign; the same request carrying PAYMENT-SIGNATURE returns a signed download URL. Access is granted only after settlement returns a transaction hash. A person can do the same thing with a browser wallet on the product page.

# the 402, with the price and the exact bytes to sign
curl -si https://x402git.com/api/r/genesiscode2026/api-response-contract-guard

# what your wallet already owns, and what the next fetch would cost it
curl -s https://x402git.com/api/v/genesiscode2026/api-response-contract-guard \
  -H "X-Wallet-Signature: 0xYOURADDRESS.<nonce>.<signature>"

The first request answers this — a real quote, made for this page load:

HTTP/1.1 402 Payment Required
Content-Type: application/json

{
  "x402Version": 2,
  "resource": {
    "url": "https://x402git.com/api/r/genesiscode2026/api-response-contract-guard",
    "description": "genesiscode2026/api-response-contract-guard v1.0.0 — release. Asserts live HTTP responses against schema contracts, halting CI/QA test suites on payload drift. Security scan passed; signed download, 5-minute URL.",
    "mimeType": "application/zip",
    "serviceName": "api-response-contract-guard",
    "tags": [
      "pack",
      "scripts",
      "source",
      "tests",
      "examples"
    ]
  },
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "amount": "15000000",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "payTo": "0xDbd32F7565FFdb901Ea48281777aD03d35bB4b60",
      "maxTimeoutSeconds": 300,
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "maxAmountRequired": "15000000",
      "resource": "https://x402git.com/api/r/genesiscode2026/api-response-contract-guard",
      "description": "genesiscode2026/api-response-contract-guard v1.0.0 — release. Asserts live HTTP responses against schema contracts, halting CI/QA test suites on payload drift. Security scan passed; signed download, 5-minute URL.",
      "mimeType": "application/zip"
    }
  ],
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "queryParams": {},
          "method": "GET"
        },
        "output": {
          "type": "json",
          "example": {
            "version": "1.0.0",
            "artifact_sha256": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
            "download_url": "https://storage.example/genesiscode2026/api-response-contract-guard/1.0.0.zip?signed=…",
            "expires_at": "2026-09-16T12:05:00.000Z",
            "version_endpoint": "https://x402git.com/api/r/genesiscode2026/api-response-contract-guard/v/1.0.0",
            "manifest_url": "https://x402git.com/api/label/genesiscode2026/api-response-contract-guard",
            "all_versions": false
          }
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "type": "object",
        "properties": {
          "input": {
            "type": "object",
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "type": "string",
                "enum": [
                  "GET"
                ]
              },
              "queryParams": {
                "type": "object",
                "properties": {}
              }
            },
            "required": [
              "type",
              "method"
            ],
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object",
                "properties": {
                  "version": {
                    "type": "string",
                    "description": "Semantic version of the release served."
                  },
                  "artifact_sha256": {
                    "type": "string",
                    "description": "sha256 of the zip; verify the download against it."
                  },
                  "download_url": {
                    "type": "string",
                    "description": "Signed URL over the exact bytes that were scanned. Valid five minutes."
                  },
                  "expires_at": {
                    "type": "string",
                    "format": "date-time"
                  },
                  "version_endpoint": {
                    "type": "string",
                    "description": "Re-fetch this exact version later, free, with X-Wallet-Signature."
                  },
                  "manifest_url": {
                    "type": "string",
                    "description": "The public manifest for this listing."
                  },
                  "all_versions": {
                    "type": "boolean",
                    "description": "True when the purchase covers every later release too."
                  }
                },
                "required": [
                  "version",
                  "artifact_sha256",
                  "download_url",
                  "expires_at",
                  "version_endpoint",
                  "manifest_url",
                  "all_versions"
                ],
                "additionalProperties": false
              }
            },
            "required": [
              "type"
            ]
          }
        },
        "required": [
          "input"
        ]
      }
    }
  },
  "extra": {
    "kind": "new",
    "version": "1.0.0",
    "manifest_url": "https://x402git.com/api/label/genesiscode2026/api-response-contract-guard",
    "scan_badge_url": "https://x402git.com/api/label/genesiscode2026/api-response-contract-guard#scan",
    "update_price_micro": "5000000",
    "quote_id": "q_a7dcec496f0d0b441b826c2d3f1b47f4",
    "valid_before": "2026-09-17T23:52:54.014Z",
    "instructions": "This is an x402 paywall, not an error. To buy: sign accepts[0] from the 402 as an EIP-3009 USDC authorization on Base with your own wallet, then GET https://x402git.com/api/r/genesiscode2026/api-response-contract-guard again with the payment in the PAYMENT-SIGNATURE header and extra.quote_id in X-Quote-Id — or, over MCP, call `purchase` again with the same payment as `payment_signature`. The full procedure is at https://x402git.com/.well-known/agent-skills/buy-a-repo/SKILL.md; the same tools are an MCP server at https://x402git.com/api/mcp. No wallet? A person can buy at https://x402git.com/genesiscode2026/api-response-contract-guard, and the free manifest at https://x402git.com/api/label/genesiscode2026/api-response-contract-guard shows what is inside before anyone pays.",
    "listing_url": "https://x402git.com/genesiscode2026/api-response-contract-guard",
    "skill_url": "https://x402git.com/.well-known/agent-skills/buy-a-repo/SKILL.md",
    "mcp_url": "https://x402git.com/api/mcp"
  }
}
Resource
https://x402git.com/api/r/genesiscode2026/api-response-contract-guard
Manifest
https://x402git.com/api/label/genesiscode2026/api-response-contract-guard
Version
https://x402git.com/api/v/genesiscode2026/api-response-contract-guard
Artifact sha256
24c83569da42860e7cf969dc8a4b22766216046ead179d5d4a67e6681cd67860

Later releases cost $5, and never more than the update price in force when you bought. One charge per update, whatever the release cadence.

Sold by genesiscode2026. Read the terms and the route documentation before you script against this. Base URL https://x402git.com.