feat: add Base USDC and Agent Wallet payments

README.md

@@ -5,6 +5,7 @@ the npm TypeScript SDK packages only:
 
 - `@bankofai/x402-core@1.0.1`
 - `@bankofai/x402-evm@1.0.1`
+- `@bankofai/x402-fetch@1.0.1`
 - `@bankofai/x402-tron@1.0.1`
 
 Stablecoin payments support `scheme=exact` and TRON `scheme=exact_gasfree`.
@@ -16,7 +17,7 @@ from the payment token, so the payer does not need TRX.
 Install the CLI package:
 
 ```bash
-npm install -g @bankofai/x402-cli@1.0.1
+npm install -g @bankofai/x402-cli@1.0.2
 x402-cli --version
 ```
 
@@ -86,6 +87,9 @@ x402-cli pay http://127.0.0.1:4020/pay \
 
 For automated or unfamiliar endpoints, set `--max-amount` or
 `--max-raw-amount` before allowing the CLI to sign a payment.
+Registered token decimals are authoritative and cannot be overridden with
+`--decimals`. For an explicit unregistered non-Base asset, pass both `--asset`
+and `--decimals`.
 
 Pay a TRON GasFree endpoint (the CLI normally selects this automatically from
 the server challenge):
@@ -119,10 +123,41 @@ completed) from `delivered` (HTTP business response succeeded). A settled
 upstream failure has `paid=true`, `settled=true`, and `delivered=false` and
 includes its transaction information.
 
-For EVM networks use `EVM_PRIVATE_KEY` or `PRIVATE_KEY`.
+By default, `x402-cli pay` resolves the active wallet from
+`@bankofai/agent-wallet` for the selected payment network and delegates signing
+to the wallet. If configured wallets exist but none is active, the CLI stops
+before signing instead of silently selecting the first available wallet. The
+CLI does not read private keys from `wallets_config.json`.
+Use `AGENT_WALLET_DIR` to select a non-default Agent Wallet directory, or
+`--wallet-id`/`AGENT_WALLET_ID` to explicitly select a configured wallet.
+For EVM payments, the CLI checks the selected payer's token balance before
+signing and returns the resolved wallet ID, address, and raw balance in its
+result. The EIP-712 payer must match that same address.
+
+For development and CI only, `--private-key`, `EVM_PRIVATE_KEY`,
+`TRON_PRIVATE_KEY`, or `PRIVATE_KEY` can explicitly override Agent Wallet.
 Prefer environment variables over `--private-key` in shared environments,
 because command-line arguments may be visible to other local processes.
 
+Pay a Base Mainnet USDC endpoint:
+
+```bash
+x402-cli pay https://api.example.com/pay \
+  --network base-mainnet \
+  --token USDC \
+  --max-amount 0.01 \
+  --rpc-url <production-rpc-url>
+```
+
+Base uses the x402 `exact` EVM flow with USDC EIP-3009 authorization. The
+built-in public RPC fallback is intended for development; production callers
+should supply `--rpc-url`, `EVM_RPC_URL_8453`/`EVM_RPC_URL_84532`, or
+`EVM_RPC_URL`.
+
+The probe and signed retry do not automatically follow HTTP redirects. If an
+endpoint redirects, inspect the destination and invoke the final trusted URL
+explicitly so `PAYMENT-SIGNATURE` is never forwarded to another origin.
+
 If the gateway settles a payment but the upstream request fails, JSON error
 output includes `error.details.paymentResponse` for reconciliation. Do not retry
 such a request blindly; inspect the transaction and provider behavior first.
@@ -140,6 +175,32 @@ x402-cli roundtrip \
   --token USDT
 ```
 
+With `--json`, roundtrip emits one JSON document containing separate `serve`
+and `pay` results.
+
+### Gateway and Catalog
+
+Inspect and validate local Gateway providers:
+
+```bash
+x402-cli gateway check ./providers --json
+x402-cli gateway catalog build ./providers --json
+x402-cli gateway catalog search "token price" --catalog ./dist/catalog.json --json
+```
+
+Search and cache a hosted or local Catalog:
+
+```bash
+x402-cli catalog search "Base USDC" --json
+x402-cli catalog update --catalog https://catalog.example/api/catalog.json --json
+x402-cli catalog show defillama --json
+x402-cli catalog endpoints defillama --json
+x402-cli catalog pay-json defillama --json
+```
+
+Use `x402-cli gateway --help`, `x402-cli gateway catalog --help`, and
+`x402-cli catalog <command> --help` for command-specific options.
+
 ## Networks
 
 Supported built-in token registry:
@@ -149,13 +210,17 @@ Supported built-in token registry:
 - `tron:0x94a9059e` USDT
 - `eip155:56` USDT
 - `eip155:97` USDT, USDC
+- `eip155:8453` USDC
+- `eip155:84532` USDC
 
 Non-CAIP TRON aliases are rejected. Use the canonical TRON IDs above.
 
 EVM convenience aliases accepted:
 
 - `bsc-mainnet` -> `eip155:56`
 - `bsc-testnet` -> `eip155:97`
+- `base-mainnet` -> `eip155:8453`
+- `base-sepolia` -> `eip155:84532`
 
 ## Facilitator