Add L402 paywall support, remove keys.ListAsync()

- Add L402Resource with CreateChallengeAsync(), VerifyAsync(), PayAsync()
- Add L402 request/response models
- Register L402 on ILnBotClient interface and LnBotClient
- Remove Keys.ListAsync() — server endpoint removed
- Remove ApiKeyResponse type
- Bump version to 0.5.0

Made-with: Cursor

Author: realbub

README.md

@@ -143,6 +143,32 @@ using var client = new LnBotClient("key_...", new LnBotClientOptions
 
 ---
 
+## L402 paywalls
+
+```csharp
+// Create a challenge (server side)
+var challenge = await client.L402.CreateChallengeAsync(new CreateL402ChallengeRequest
+{
+    Amount = 100,
+    Description = "API access",
+    ExpirySeconds = 3600,
+});
+
+// Pay the challenge (client side)
+var result = await client.L402.PayAsync(new PayL402Request
+{
+    WwwAuthenticate = challenge.WwwAuthenticate,
+});
+
+// Verify a token (server side, stateless)
+var v = await client.L402.VerifyAsync(new VerifyL402Request
+{
+    Authorization = result.Authorization!,
+});
+```
+
+---
+
 ## Features
 
 - **Zero dependencies** — `System.Net.Http` + `System.Text.Json` only

src/LnBot/ILnBotClient.cs

@@ -28,6 +28,9 @@ public interface ILnBotClient : IDisposable
     /// <summary>API key management.</summary>
     KeysResource Keys { get; }
 
+    /// <summary>L402 paywall authentication.</summary>
+    L402Resource L402 { get; }
+
     /// <summary>Real-time event stream.</summary>
     EventsResource Events { get; }
 

src/LnBot/LnBot.csproj

@@ -10,7 +10,7 @@
 
     <!-- NuGet package metadata -->
     <PackageId>LnBot</PackageId>
-    <Version>0.4.0</Version>
+    <Version>0.5.0</Version>
     <Authors>LnBot</Authors>
     <Description>The official .NET SDK for LnBot — Bitcoin for AI Agents. Create wallets, send and receive sats over the Lightning Network.</Description>
     <PackageTags>bitcoin;lightning;lightning-network;lnbot;sdk;payments;sats</PackageTags>

src/LnBot/LnBotClient.cs

@@ -12,7 +12,7 @@ namespace LnBot;
 /// </summary>
 public sealed class LnBotClient : ILnBotClient
 {
-    internal const string Version = "0.4.0";
+    internal const string Version = "0.5.0";
     internal static readonly string DefaultBaseUrl = "https://api.ln.bot";
 
     private static readonly JsonSerializerOptions JsonOptions = new()
@@ -46,6 +46,9 @@ public sealed class LnBotClient : ILnBotClient
     /// <summary>API key management.</summary>
     public KeysResource Keys { get; }
 
+    /// <summary>L402 paywall authentication.</summary>
+    public L402Resource L402 { get; }
+
     /// <summary>Real-time event stream.</summary>
     public EventsResource Events { get; }
 
@@ -96,6 +99,7 @@ public LnBotClient(string? apiKey = null, LnBotClientOptions? options = null)
         Transactions = new TransactionsResource(this);
         Webhooks = new WebhooksResource(this);
         Keys = new KeysResource(this);
+        L402 = new L402Resource(this);
         Events = new EventsResource(this);
         Backup = new BackupResource(this);
         Restore = new RestoreResource(this);

src/LnBot/Models/Requests.cs

@@ -121,3 +121,46 @@ public sealed class PaginationParams
     public int? Limit { get; set; }
     public int? After { get; set; }
 }
+
+// ---------------------------------------------------------------------------
+// L402
+// ---------------------------------------------------------------------------
+
+public sealed class CreateL402ChallengeRequest
+{
+    [JsonPropertyName("amount")]
+    public required long Amount { get; set; }
+
+    [JsonPropertyName("description")]
+    public string? Description { get; set; }
+
+    [JsonPropertyName("expirySeconds")]
+    public int? ExpirySeconds { get; set; }
+
+    [JsonPropertyName("caveats")]
+    public List<string>? Caveats { get; set; }
+}
+
+public sealed class VerifyL402Request
+{
+    [JsonPropertyName("authorization")]
+    public required string Authorization { get; set; }
+}
+
+public sealed class PayL402Request
+{
+    [JsonPropertyName("wwwAuthenticate")]
+    public required string WwwAuthenticate { get; set; }
+
+    [JsonPropertyName("maxFee")]
+    public long? MaxFee { get; set; }
+
+    [JsonPropertyName("reference")]
+    public string? Reference { get; set; }
+
+    [JsonPropertyName("wait")]
+    public bool? Wait { get; set; }
+
+    [JsonPropertyName("timeout")]
+    public int? Timeout { get; set; }
+}

src/LnBot/Models/Responses.cs

@@ -182,24 +182,6 @@ public sealed class TransactionResponse
     public DateTimeOffset? CreatedAt { get; init; }
 }
 
-public sealed class ApiKeyResponse
-{
-    [JsonPropertyName("id")]
-    public required string Id { get; init; }
-
-    [JsonPropertyName("name")]
-    public required string Name { get; init; }
-
-    [JsonPropertyName("hint")]
-    public required string Hint { get; init; }
-
-    [JsonPropertyName("createdAt")]
-    public DateTimeOffset? CreatedAt { get; init; }
-
-    [JsonPropertyName("lastUsedAt")]
-    public DateTimeOffset? LastUsedAt { get; init; }
-}
-
 public sealed class RotateApiKeyResponse
 {
     [JsonPropertyName("key")]
@@ -301,3 +283,64 @@ public sealed class RestorePasskeyCompleteResponse
     [JsonPropertyName("secondaryKey")]
     public required string SecondaryKey { get; init; }
 }
+
+// ---------------------------------------------------------------------------
+// L402
+// ---------------------------------------------------------------------------
+
+public sealed class L402ChallengeResponse
+{
+    [JsonPropertyName("macaroon")]
+    public required string Macaroon { get; init; }
+
+    [JsonPropertyName("invoice")]
+    public required string Invoice { get; init; }
+
+    [JsonPropertyName("paymentHash")]
+    public required string PaymentHash { get; init; }
+
+    [JsonPropertyName("expiresAt")]
+    public required DateTimeOffset ExpiresAt { get; init; }
+
+    [JsonPropertyName("wwwAuthenticate")]
+    public required string WwwAuthenticate { get; init; }
+}
+
+public sealed class VerifyL402Response
+{
+    [JsonPropertyName("valid")]
+    public required bool Valid { get; init; }
+
+    [JsonPropertyName("paymentHash")]
+    public string? PaymentHash { get; init; }
+
+    [JsonPropertyName("caveats")]
+    public List<string>? Caveats { get; init; }
+
+    [JsonPropertyName("error")]
+    public string? Error { get; init; }
+}
+
+public sealed class L402PayResponse
+{
+    [JsonPropertyName("authorization")]
+    public string? Authorization { get; init; }
+
+    [JsonPropertyName("paymentHash")]
+    public required string PaymentHash { get; init; }
+
+    [JsonPropertyName("preimage")]
+    public string? Preimage { get; init; }
+
+    [JsonPropertyName("amount")]
+    public required long Amount { get; init; }
+
+    [JsonPropertyName("fee")]
+    public long? Fee { get; init; }
+
+    [JsonPropertyName("paymentNumber")]
+    public required int PaymentNumber { get; init; }
+
+    [JsonPropertyName("status")]
+    public required string Status { get; init; }
+}

src/LnBot/Resources/KeysResource.cs

@@ -10,12 +10,6 @@ public sealed class KeysResource
     private readonly LnBotClient _client;
     internal KeysResource(LnBotClient client) => _client = client;
 
-    /// <summary>
-    /// Lists all API keys (metadata only, not the key values).
-    /// </summary>
-    public Task<List<ApiKeyResponse>> ListAsync(CancellationToken cancellationToken = default)
-        => _client.GetAsync<List<ApiKeyResponse>>("/v1/keys", cancellationToken);
-
     /// <summary>
     /// Rotates an API key. The old key is immediately invalidated.
     /// </summary>

src/LnBot/Resources/L402Resource.cs

@@ -0,0 +1,22 @@
+namespace LnBot.Resources;
+
+using LnBot.Models;
+
+/// <summary>L402 paywall authentication.</summary>
+public sealed class L402Resource
+{
+    private readonly LnBotClient _client;
+    internal L402Resource(LnBotClient client) => _client = client;
+
+    /// <summary>Creates an L402 challenge (invoice + macaroon) for paywall authentication.</summary>
+    public Task<L402ChallengeResponse> CreateChallengeAsync(CreateL402ChallengeRequest request, CancellationToken cancellationToken = default)
+        => _client.PostAsync<L402ChallengeResponse>("/v1/l402/challenges", request, cancellationToken);
+
+    /// <summary>Verifies an L402 authorization token (stateless).</summary>
+    public Task<VerifyL402Response> VerifyAsync(VerifyL402Request request, CancellationToken cancellationToken = default)
+        => _client.PostAsync<VerifyL402Response>("/v1/l402/verify", request, cancellationToken);
+
+    /// <summary>Pays an L402 challenge and returns a ready-to-use Authorization header.</summary>
+    public Task<L402PayResponse> PayAsync(PayL402Request request, CancellationToken cancellationToken = default)
+        => _client.PostAsync<L402PayResponse>("/v1/l402/pay", request, cancellationToken);
+}