@aifinpay/mcp 2.3.1 → 2.5.0

package/README.md

@@ -4,14 +4,16 @@ AiFinPay MCP server for persistent agent identity, Agent Passport resolution,
 route discovery and non-signing settlement invoices. Canonical domain:
 **aifinpay.io**.
 
-Version **2.2.4**. Owner-enabled native Polygon v1.4 purchases with
-`payable_fetch` are released (since 2.2.0). Without payment configuration the
-server keeps its inspection-only tool inventory.
+Version **2.5.0**. Owner-enabled v1.4 purchases with `payable_fetch` are
+released: on Polygon since 2.2.0, on Base (ETH or USDC) since 2.5.0; site-wide
+batches with `scope: "merchant"` since 2.4.1. Without payment configuration the server keeps
+its inspection-only tool inventory.
 
 ## Enable native paid GET requests
 
 Use a persistent wallet created with public `npx @aifinpay/mcp init` or an
-existing configured identity. Keep its passphrase private. The owner must set:
+existing configured identity. Keep its passphrase private. The owner adds these
+to the server's `env` (`init` prints the same block):
 
 ```json
 {
@@ -20,36 +22,81 @@ existing configured identity. Keep its passphrase private. The owner must set:
   "AIFINPAY_GATEWAY_PATH_MODE": "direct",
   "AIFINPAY_MAX_USD": "0.15",
   "AIFINPAY_DAILY_USD": "1.00",
-  "AIFINPAY_MAX_GAS_POL": "0.05"
+  "AIFINPAY_MAX_GAS_POL": "0.3"
 }
 ```
 
 Limits are examples, not authorization. USD limits cover purchases; gas has its
-own per-transaction POL cap. Origins are exact HTTPS origins authorized by the
+own POL cap. Origins are exact HTTPS origins authorized by the
 owner. `direct` uses the full path for self-hosted sites; `gateway` uses the
 merchant slug on the hosted gateway. Restart/reconnect the MCP process after
 changing its environment.
 
+`AIFINPAY_MAX_GAS_POL` caps the worst case, not the fee you expect to pay.
+Before signing, the client prices the estimated gas plus 20% at the maximum fee
+per gas the Polygon RPC quotes, and refuses with `V14_GAS_BUDGET_EXCEEDED` if
+that exceeds the cap. The worst case follows the gas price: at about 280 gwei
+(September 2026) it is about 0.10 POL for a POL payment and about 0.21 POL for
+USDC, which needs a token approval and the settlement. `0.3` covers both at that
+price; check the current Polygon gas price and raise the cap when it is higher.
+The fee actually charged is usually a fraction of the cap, but the wallet must
+hold the batch price plus the worst case before it signs.
+
 To pay in USDC instead of native POL, the owner also sets
-`"AIFINPAY_PAY_ASSET": "USDC"`. The wallet then needs USDC for the batch and a
-little POL for gas (an exact-amount token approval plus the settlement, both
-within `AIFINPAY_MAX_GAS_POL` together). Unset or `"POL"` keeps native POL.
+`"AIFINPAY_PAY_ASSET": "USDC"`. The wallet then needs USDC for the batch and
+POL for gas: an exact-amount token approval plus the settlement, both within
+`AIFINPAY_MAX_GAS_POL` together. Unset or `"POL"` keeps native POL.
+
+### Paying on another chain
+
+`AIFINPAY_PAY_CHAIN` picks the chain `payable_fetch` settles on: `polygon`
+(default) or `base`. Only the owner sets it, and a merchant is paid on a chain
+only if its quote is for that chain; a quote for any other chain is refused,
+never followed. On Base the batch is paid in ETH (or `AIFINPAY_PAY_ASSET:
+"USDC"`) and gas is ETH, so the cap is `AIFINPAY_MAX_GAS`, in ETH:
+
+```json
+{
+  "AIFINPAY_PAY_CHAIN": "base",
+  "AIFINPAY_MAX_GAS": "0.0002"
+}
+```
+
+`AIFINPAY_MAX_GAS` is the gas cap in the pay chain's native currency;
+`AIFINPAY_MAX_GAS_POL` remains accepted on Polygon and is refused on Base rather
+than read as ETH (0.3 POL is about $0.04; 0.3 ETH is several hundred dollars).
+On Base the worst case includes the L1 data fee, typically well under 0.0001 ETH
+for one settlement. The wallet's EVM address is the same on every chain, so
+fund it with ETH on Base, not on Ethereum mainnet. `AIFINPAY_RPC_URL` optionally
+replaces the chain's public RPC (`https://mainnet.base.org`,
+`https://polygon.drpc.org`).
+
+A payment still pending on one chain is recovered only with that chain
+configured; switching chains never re-sends or forgets it.
 
 Call `payable_fetch({"url":"https://merchant.example/api/data"})`. The tool
-uses the original signed v1.4 quote, independent fresh POL/USD pricing, SDK
+uses the original signed v1.4 quote, independent fresh native/USD pricing, SDK
 runtime/signer verification and owner limits. It persists the prepared transaction
 before sending, verifies the receipt, and reuses the purchased batch. No special
-merchant script, alternate contract or facilitator fallback is used. GET,
-Polygon live mode only, in POL or the configured stablecoin; Amoy payment
-receipts are not supported. The smallest batch is $0.10 plus gas, so keep `AIFINPAY_MAX_USD`
+merchant script, alternate contract or facilitator fallback is used. GET, live
+mode only, on the configured chain, in its native currency or the configured
+stablecoin; Amoy payment receipts are not supported. The smallest batch is $0.10 plus gas, so keep `AIFINPAY_MAX_USD`
 a little above the batch you expect to buy.
 
+To buy access to a whole site rather than one endpoint, call
+`payable_fetch({"url":"https://merchant.example/api/data","scope":"merchant"})`.
+One batch then covers every path on that merchant, and each request still costs
+its own listed price, so a premium page drains more of it than a standard API
+call. The price, the owner limits and the approved origins do not change. An
+origin missing from `AIFINPAY_GATEWAY_ORIGINS` is refused by name; only the
+owner can add it.
+
 ### Network access
 
 A sandbox that allowlists outbound hosts must allow `api.aifinpay.io` (quotes and
-receipts) and a Polygon RPC. The independent POL/USD rate comes from Chainlink
-on Polygon over that same RPC, then `api.coinbase.com`, then `api.coingecko.com`;
-one of them is enough. If none answers, `payable_fetch` stops before paying and
+receipts) and an RPC for the pay chain. The independent POL/USD or ETH/USD rate
+comes from Chainlink on that chain over the same RPC, then `api.coinbase.com`,
+then `api.coingecko.com`; one of them is enough. If none answers, `payable_fetch` stops before paying and
 the error names each host it tried.
 
 ## Link the agent to its owner's dashboard
@@ -80,10 +127,18 @@ state file in chat. Unconfirmed payments consume the budget conservatively.
 | `agent_passport_resolve` | Resolve the global Agent Passport identity.              |
 | `settlement_routes`      | Read the available verified settlement routes.           |
 | `settlement_invoice`     | Prepare a non-signing settlement invoice.                |
-
-`payable_fetch` appears only with valid owner payment configuration and a persistent wallet.
-Legacy `agent_call`, `agent_quote`, `pay_with_split` and `quote_split` remain
-unregistered.
+| `agent_history`          | Read indexed settlements or retained receipt batches.    |
+| `settlement_solana`      | Build a non-signing Solana settlement invoice.           |
+| `settlement_casper`      | Build a non-signing Casper settlement invoice.           |
+| `deployment_info`        | Read deployments: addresses, assets, settlement status.  |
+
+`payable_fetch` is registered when the owner sets `AIFINPAY_PAYMENTS_ENABLED=1`
+with a persistent wallet. With payments enabled and any owner limit missing or
+invalid, the server refuses to start rather than hiding the tool. It accepts
+only `url`, `max_amount_usd` and `scope`; `max_amount_usd` can lower the owner's
+per-payment cap for one call, never raise it. `dev_payment_quote` is registered
+only with `AIFINPAY_MODE=dev`. Legacy `agent_call`, `agent_quote`,
+`pay_with_split` and `quote_split` remain unregistered.
 
 ## Persistent wallet selection
 
@@ -142,7 +197,7 @@ A client configuration can use the keystore without embedding its secret:
   "mcpServers": {
     "aifinpay": {
       "command": "npx",
-      "args": ["-y", "@aifinpay/mcp@2.2.0"],
+      "args": ["-y", "@aifinpay/mcp@2.5.0"],
       "env": {
         "AIFINPAY_AGENTS_FILE": "/absolute/project/aifinpay/agents.json",
         "AIFINPAY_AGENT_ID": "research-agent"
@@ -158,8 +213,12 @@ After the pinned dependencies are published, source checkouts can run
 `node /absolute/path/to/mcp/bin/aifinpay-mcp.js` instead.
 
 If using the legacy keystore, run `npx @aifinpay/mcp init` once and omit the
-project-file variables. Optional `AIFINPAY_WALLET_PASSPHRASE` encrypts that
-legacy file at creation. An already connected server can load it with
+project-file variables. `AIFINPAY_WALLET_PASSPHRASE` encrypts that legacy file
+at creation, and the server's `env` needs the same value to open it; `init`
+prints a block with a placeholder for it. Clients that expand variables in their
+config, such as Claude Code's `.mcp.json`, can use
+`"${AIFINPAY_WALLET_PASSPHRASE}"` instead of writing the passphrase into the
+file. An already connected server can load it with
 `agent_reload`; it does not need a new conversation. A changed package or
 launch environment requires a server reconnect, subject to host support.
 
@@ -173,13 +232,17 @@ snapshot. Verify `agent_address` against the wallet you intend to use.
 
 ## Other environment variables
 
-| Variable                     | Default               | Purpose                                                                              |
-| ---------------------------- | --------------------- | ------------------------------------------------------------------------------------ |
-| `AIFINPAY_BASE_URL`          | `https://aifinpay.io` | Backend URL.                                                                         |
-| `AIFINPAY_TIMEOUT_MS`        | `30000`               | Request timeout.                                                                     |
-| `AIFINPAY_MAX_USD`           | —                     | Configures the underlying agent's per-call cap; it does not enable signing.          |
-| `AIFINPAY_GATEWAY_ORIGINS`   | SDK default           | Comma-separated exact HTTPS origins trusted for AIFP-1 settlement.                   |
-| `AIFINPAY_GATEWAY_PATH_MODE` | `gateway`             | Use `gateway` for merchant-slug identity or `direct` for full request-path identity. |
+| Variable                     | Default               | Purpose                                                                               |
+| ---------------------------- | --------------------- | ------------------------------------------------------------------------------------- |
+| `AIFINPAY_BASE_URL`          | `https://aifinpay.io` | Backend URL. Unset, `payable_fetch` quotes and verifies at `https://api.aifinpay.io`. |
+| `AIFINPAY_TIMEOUT_MS`        | `30000`               | Request timeout.                                                                      |
+| `AIFINPAY_MAX_USD`           | —                     | Per-payment USD cap for `payable_fetch`; required when payments are enabled.          |
+| `AIFINPAY_GATEWAY_ORIGINS`   | —                     | Comma-separated exact HTTPS origins the agent may pay; required with payments.        |
+| `AIFINPAY_GATEWAY_PATH_MODE` | `gateway`             | Use `gateway` for merchant-slug identity or `direct` for full request-path identity.  |
+| `AIFINPAY_PAY_CHAIN`         | `polygon`             | Chain `payable_fetch` settles on: `polygon` or `base`.                                |
+| `AIFINPAY_MAX_GAS`           | —                     | Gas cap per payment in the pay chain's native currency (POL, ETH).                    |
+| `AIFINPAY_RPC_URL`           | chain's public RPC    | HTTPS RPC for the pay chain.                                                          |
+| `AIFINPAY_CLAIM_ORIGINS`     | AiFinPay dashboards   | Exact origins `agent_claim_self` may link the agent to.                               |
 
 `agent_history({address, source:"transactions"})` reads indexed Polygon
 settlements; `source:"receipts"` reads retained batches, including test-mode
@@ -204,7 +267,7 @@ The programmatic equivalents of identity environment options are `seedHash`,
 - AIFINPAY_MODE=dev: expose dev_payment_quote; requires a separate dev base URL.
 
 - AIFINPAY_TIMEOUT_MS: SDK request timeout.
-- AIFINPAY_MAX_USD: legacy per-call budget; does not enable signing.
+- AIFINPAY_MAX_USD: per-payment USD cap for payable_fetch; required with payments.
 - AIFINPAY_TRUSTED_HOSTS: exact hosts allowed to bypass the DNS pre-check.
 - AIFINPAY_ALLOW_PRIVATE_FETCH=1: explicit local-development network access.
   Never enable this on the public hosted MCP.

package/bin/aifinpay-mcp.js

@@ -77,10 +77,14 @@ it up automatically — you do not have to put the secret in a config file.
 
 Env (all optional):
   SEED_HASH              32-byte hex seed; highest priority\n  AIFINPAY_AGENTS_FILE    default ./aifinpay/agents.json; second priority\n  AIFINPAY_AGENT_ID       select one record when the file has multiple agents\n  AIFINPAY_AGENT_SECRET   legacy base58 secret; after project wallet sources
-  AIFINPAY_MAX_USD        hard cap per single payment — set this
+  AIFINPAY_WALLET_PASSPHRASE  opens an encrypted keystore; the server needs it too
   AIFINPAY_BASE_URL       default https://aifinpay.io
   AIFINPAY_TIMEOUT_MS     default 30000
   AIFINPAY_HOME           default ~/.aifinpay
+
+Payments (payable_fetch) are off until the owner sets all of
+AIFINPAY_PAYMENTS_ENABLED=1, AIFINPAY_GATEWAY_ORIGINS, AIFINPAY_MAX_USD,
+AIFINPAY_DAILY_USD and AIFINPAY_MAX_GAS_POL. init prints an example block.
 `);
   process.exit(0);
 }
@@ -152,6 +156,19 @@ function readKeystore() {
   return typeof parsed?.secretB58 === "string" ? parsed : null;
 }
 
+// The owner settings that register payable_fetch, as init prints them. README
+// "Enable native paid GET requests" shows the same block; a test keeps the two
+// equal and starts a server with it. The gas cap is a worst case at the current
+// Polygon gas price, not the fee: 0.05 POL refused every payment at ~280 gwei.
+const PAYMENT_ENV = {
+  AIFINPAY_PAYMENTS_ENABLED: "1",
+  AIFINPAY_GATEWAY_ORIGINS: "https://merchant.example",
+  AIFINPAY_GATEWAY_PATH_MODE: "direct",
+  AIFINPAY_MAX_USD: "0.15",
+  AIFINPAY_DAILY_USD: "1.00",
+  AIFINPAY_MAX_GAS_POL: "0.3",
+};
+
 if (arg === "init") {
   const { Agent, AiFinPayAgent } = await import("@aifinpay/agent");
 
@@ -249,36 +266,59 @@ if (arg === "init") {
   }
 
   const agent = await AiFinPayAgent.fromSolanaSecret(store.secretB58);
+  // The server cannot open an encrypted keystore without the passphrase, so a
+  // config block without it does not start.
+  const encrypted = freshlyCreated ? Boolean(PASSPHRASE) : Boolean(store.encrypted);
 
   process.stdout.write(
     `Your agent's addresses — the EVM one is the same on every EVM chain:\n\n` +
       `  EVM     ${agent.evmAddress}\n` +
       `  Solana  ${agent.solanaAddress}\n` +
       `  Casper  ${agent.casperAddress}\n\n` +
-      `Add this to your MCP client config and connect/reconnect this MCP server:\n\n` +
+      `Add this to your MCP client config and connect/reconnect this MCP server.\n` +
+      `As printed it cannot pay; payable_fetch appears once you add the payment\n` +
+      `settings further down:\n\n` +
       JSON.stringify(
         {
           mcpServers: {
             aifinpay: {
               command: "npx",
               args: ["-y", `@aifinpay/mcp@${VERSION}`],
-              env: { AIFINPAY_MAX_USD: "0.10" },
+              env: encrypted ? { AIFINPAY_WALLET_PASSPHRASE: "<the passphrase you used for init>" } : {},
             },
           },
         },
         null,
         2
       ) +
-      `\n\nThe secret is NOT in that block on purpose — the server reads the\n` +
+      `\n\n` +
+      (encrypted
+        ? `The server opens the encrypted wallet with AIFINPAY_WALLET_PASSPHRASE. If your\n` +
+          `client expands variables in its config (Claude Code's .mcp.json does), write\n` +
+          `"\${AIFINPAY_WALLET_PASSPHRASE}" there instead of the passphrase itself.\n`
+        : "") +
+      `The wallet secret is NOT in that block on purpose — the server reads the\n` +
       `keystore. If this server is already connected, call agent_reload after init.\nA new conversation is not required by this server.\n\n` +
       `Back up ${KEYSTORE}. It is the only copy. The derivation is not\n` +
       `BIP-39, so no standard wallet can recover this from a phrase.\n\n` +
-      `The EVM address is used for Polygon payments. Check its balance before\n` +
-      `funding it or paying for calls.\n\n` +
-      `To let it pay, fund the EVM address with POL on Polygon (the smallest\n` +
-      `batch is $0.10 plus gas) and add to the env block above:\n` +
-      `  AIFINPAY_PAYMENTS_ENABLED=1  AIFINPAY_MAX_USD=0.15  AIFINPAY_DAILY_USD=1.00\n` +
-      `  AIFINPAY_MAX_GAS_POL=0.05     AIFINPAY_GATEWAY_ORIGINS=https://<site it may pay>\n\n` +
+      `To let it pay, add these to "env" above, then reconnect the server:\n\n` +
+      JSON.stringify(PAYMENT_ENV, null, 2) +
+      `\n\n` +
+      `  AIFINPAY_GATEWAY_ORIGINS    exact HTTPS origins it may pay, comma-separated;\n` +
+      `                              replace the example. No wildcards.\n` +
+      `  AIFINPAY_GATEWAY_PATH_MODE  "direct" for a site that runs its own AiFinPay\n` +
+      `                              paywall, "gateway" for gateway.aifinpay.io.\n` +
+      `  AIFINPAY_MAX_USD            per payment. The smallest batch is $0.10, so\n` +
+      `                              keep it a little above the batch you expect.\n` +
+      `  AIFINPAY_DAILY_USD          total over any 24 hours.\n` +
+      `  AIFINPAY_MAX_GAS_POL        worst-case network fee of one payment, checked\n` +
+      `                              before signing. It follows Polygon's gas price:\n` +
+      `                              at ~280 gwei it is ~0.10 POL paying in POL and\n` +
+      `                              ~0.21 POL paying in USDC. A lower cap refuses\n` +
+      `                              the payment; raise it when gas is higher.\n\n` +
+      `Fund the EVM address on Polygon with the batch price plus the gas cap, in POL.\n` +
+      `To pay in USDC, also set "AIFINPAY_PAY_ASSET": "USDC" and hold USDC for the\n` +
+      `batch plus POL up to the gas cap. Check the balance before funding or paying.\n\n` +
       `See its balance, payments and receipts in your dashboard:\n` +
       `  https://dash.aifinpay.io → My Agents → Claim via MCP, then give the\n` +
       `  one-time URL to the agent (tool agent_claim_self).\n`

package/dist/config.d.ts

@@ -17,9 +17,17 @@ export interface McpConfig {
     /** Owner opt-in; never accepted from tool arguments. */
     paymentsEnabled?: boolean;
     dailyAmountUsd?: number;
+    /** Chain payable_fetch settles on: "polygon" (default) or "base". Set by
+     *  the owner only; never inferred from a quote or a tool argument. */
+    payChain?: string;
+    /** RPC for the pay chain; defaults to the chain's public RPC. */
+    rpcUrl?: string;
+    /** Gas cap per payment, in the pay chain's native currency (POL, ETH). */
+    maxGas?: string;
+    /** Same cap under its original name; accepted on Polygon only. */
     maxGasPol?: string;
-    /** What payable_fetch pays with: "POL" (default) or a stablecoin the SDK
-     *  pins for Polygon v1.4, e.g. "USDC". Gas is paid in POL either way. */
+    /** What payable_fetch pays with: the chain's native currency (default) or a
+     *  stablecoin the SDK pins for that chain, e.g. "USDC". Gas is native either way. */
     payAsset?: string;
     /** Hard cap on a single payment to prevent runaway agents. */
     maxAmountUsd?: number;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wDAAwD;IACxD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;6EACyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;;;+CAW2C;IAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAEvC;;;;;;;;;8CAS0C;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CA0B7C;AA0DD,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAiC/D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wDAAwD;IACxD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;0EACsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;yFACqF;IACrF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;;;+CAW2C;IAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAEvC;;;;;;;;;8CAS0C;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CA6B7C;AA0DD,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAuD/D"}

package/dist/config.js

@@ -1,3 +1,4 @@
+import { payChain } from "./pay-chains.js";
 export function loadConfigFromEnv() {
     if (process.env.AIFINPAY_MODE && !["live", "dev"].includes(process.env.AIFINPAY_MODE)) {
         throw new Error("AIFINPAY_MODE must be live or dev");
@@ -8,6 +9,9 @@ export function loadConfigFromEnv() {
     return {
         paymentsEnabled: process.env.AIFINPAY_PAYMENTS_ENABLED === "1",
         dailyAmountUsd: process.env.AIFINPAY_DAILY_USD ? Number(process.env.AIFINPAY_DAILY_USD) : undefined,
+        payChain: process.env.AIFINPAY_PAY_CHAIN || undefined,
+        rpcUrl: process.env.AIFINPAY_RPC_URL || undefined,
+        maxGas: process.env.AIFINPAY_MAX_GAS || undefined,
         maxGasPol: process.env.AIFINPAY_MAX_GAS_POL || undefined,
         payAsset: process.env.AIFINPAY_PAY_ASSET || undefined,
         devMode: process.env.AIFINPAY_MODE === "dev",
@@ -84,7 +88,19 @@ export function validatePaymentConfig(config) {
     if (!config.paymentsEnabled)
         throw new Error("Payments disabled; owner must set AIFINPAY_PAYMENTS_ENABLED=1");
     if (config.devMode)
-        throw new Error("MCP receipt payments currently support Polygon live mode only");
+        throw new Error("MCP receipt payments support live mode only");
+    const chain = payChain(config.payChain);
+    if (config.rpcUrl !== undefined) {
+        let rpc;
+        try {
+            rpc = new URL(config.rpcUrl);
+        }
+        catch {
+            rpc = undefined;
+        }
+        if (!rpc || rpc.protocol !== "https:" || rpc.username || rpc.password)
+            throw new Error("AIFINPAY_RPC_URL must be an https URL without credentials");
+    }
     for (const [name, value] of [
         ["AIFINPAY_MAX_USD", config.maxAmountUsd],
         ["AIFINPAY_DAILY_USD", config.dailyAmountUsd],
@@ -104,14 +120,21 @@ export function validatePaymentConfig(config) {
         }))
         throw new Error("Payments require explicit exact HTTPS AIFINPAY_GATEWAY_ORIGINS");
     if (config.payAsset !== undefined && !/^[A-Z][A-Z0-9.]{1,11}$/.test(config.payAsset))
-        throw new Error('AIFINPAY_PAY_ASSET must be "POL" or a stablecoin symbol such as "USDC"');
-    const gas = config.maxGasPol;
+        throw new Error(`AIFINPAY_PAY_ASSET must be "${chain.native}" or a stablecoin symbol such as "USDC"`);
+    // The POL-named cap means POL. Read on another chain it would silently cap
+    // ETH gas at a number chosen for POL — 0.3 POL is ~$0.04, 0.3 ETH is ~$800.
+    if (config.maxGasPol !== undefined && chain.name !== "polygon")
+        throw new Error(`AIFINPAY_MAX_GAS_POL caps POL gas and does not apply on ${chain.name}; set AIFINPAY_MAX_GAS in ${chain.native}`);
+    if (config.maxGas !== undefined && config.maxGasPol !== undefined && config.maxGas !== config.maxGasPol)
+        throw new Error("AIFINPAY_MAX_GAS and AIFINPAY_MAX_GAS_POL disagree; set one");
+    const name = config.maxGas !== undefined ? "AIFINPAY_MAX_GAS" : "AIFINPAY_MAX_GAS_POL";
+    const gas = config.maxGas ?? config.maxGasPol;
     if (typeof gas !== "string" || !/^(?:0|[1-9][0-9]*)(?:\.[0-9]{1,18})?$/.test(gas))
-        throw new Error("AIFINPAY_MAX_GAS_POL must be a positive decimal with at most 18 places");
+        throw new Error(`${name} must be a positive decimal with at most 18 places: the gas cap per payment in ${chain.native}`);
     const [whole, fraction = ""] = gas.split(".");
     const wei = BigInt(whole) * 10n ** 18n + BigInt(fraction.padEnd(18, "0"));
     if (wei <= 0n || wei >= 2n ** 256n)
-        throw new Error("AIFINPAY_MAX_GAS_POL is outside the supported range");
+        throw new Error(`${name} is outside the supported range`);
     return wei;
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AA+DA,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAC9D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACnG,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACxD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACrD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,KAAK;QAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAC/B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACzD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS;QAClD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,SAAS;QACrE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS;QAC9D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QAChG,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7F,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAClE,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC7E,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC;AAED;;;oDAGoD;AACpD,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;mFAEmF;AACnF,SAAS,YAAY,CAAC,GAAuB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAM,CAAC;QACX,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,gBAAgB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,uDAAuD;gBACxF,oBAAoB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,CAChD,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,8BAA8B;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,6BAA6B;gBAC9D,oEAAoE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,oDAAoD,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrG,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;QACzC,CAAC,oBAAoB,EAAE,MAAM,CAAC,cAAc,CAAC;KACrC,EAAE,CAAC;QACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,IACE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1B,OAAO,CACL,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3G,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC3G,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAyE3C,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAC9D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACnG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACrD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;QACjD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;QACjD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACxD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACrD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,KAAK;QAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAC/B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACzD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS;QAClD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,SAAS;QACrE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS;QAC9D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QAChG,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7F,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAClE,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC7E,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC;AAED;;;oDAGoD;AACpD,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;mFAEmF;AACnF,SAAS,YAAY,CAAC,GAAuB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAM,CAAC;QACX,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,gBAAgB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,uDAAuD;gBACxF,oBAAoB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,CAChD,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,8BAA8B;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,6BAA6B;gBAC9D,oEAAoE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,oDAAoD,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YACnE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;QACzC,CAAC,oBAAoB,EAAE,MAAM,CAAC,cAAc,CAAC;KACrC,EAAE,CAAC;QACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,IACE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1B,OAAO,CACL,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3G,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,MAAM,yCAAyC,CAAC,CAAC;IACxG,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAC5D,MAAM,IAAI,KAAK,CACb,2DAA2D,KAAK,CAAC,IAAI,6BAA6B,KAAK,CAAC,MAAM,EAAE,CACjH,CAAC;IACJ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS;QACrG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACvF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC;IAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,kFAAkF,KAAK,CAAC,MAAM,EAAE,CACxG,CAAC;IACJ,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;IAC9F,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -4,7 +4,8 @@
  *
  * Tools: public addresses, history, quotas, passport resolution, non-signing
  * settlement invoices, local wallet reload, and opt-in dev batch quoting.
- * Signing tools are not registered in this RC.
+ * The one signing tool, payable_fetch, is registered only when the owner
+ * enables payments with every limit set.
  *
  * Quick start (stdio transport for Claude Desktop / MCP-aware runtimes):
  *

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -4,7 +4,8 @@
  *
  * Tools: public addresses, history, quotas, passport resolution, non-signing
  * settlement invoices, local wallet reload, and opt-in dev batch quoting.
- * Signing tools are not registered in this RC.
+ * The one signing tool, payable_fetch, is registered only when the owner
+ * enables payments with every limit set.
  *
  * Quick start (stdio transport for Claude Desktop / MCP-aware runtimes):
  *

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/native-price.d.ts

@@ -1,5 +1,6 @@
+import { type PayChain } from "./pay-chains.js";
 /**
- * Independent POL/USD rate for payable_fetch.
+ * Independent native/USD rate for payable_fetch: POL on Polygon, ETH on Base.
  *
  * payable_fetch values a v1.4 quote in USD with a rate it fetches itself —
  * never the quote API's own — so the owner's per-payment and daily USD limits
@@ -9,23 +10,31 @@
  * it began, with nothing to try instead.
  *
  * Sources, in order; the first fresh, sane answer wins:
- *   1. Chainlink POL/USD on Polygon, read over the agent's own Polygon RPC —
- *      the host the payment already needs, so no extra allowlist entry.
+ *   1. Chainlink <native>/USD on the payment chain, read over the agent's own
+ *      RPC for that chain — the host the payment already needs, so no extra
+ *      allowlist entry.
  *   2. api.coinbase.com spot price.
- *   3. api.coingecko.com, id polygon-ecosystem-token. NOT matic-network: that
- *      id stopped updating in February 2026 and answers a stale, higher price.
+ *   3. api.coingecko.com.
+ * Feed addresses and ids live in pay-chains.ts.
  */
-export declare const CHAINLINK_POL_USD_POLYGON = "0xAB594600376Ec9fD91F8e885dADF0CE036862dE0";
+export declare const CHAINLINK_POL_USD_POLYGON: `0x${string}`;
 export interface NativePrice {
     usd: number;
     observedAtMs: number;
-    source: "chainlink-polygon" | "coinbase" | "coingecko";
+    source: `chainlink-${string}` | "coinbase" | "coingecko";
 }
 type FetchImpl = (input: string, init?: RequestInit) => Promise<Response>;
 /**
- * The first independent POL/USD rate any source gives. Throws one error naming
- * every source tried, so an agent in a restricted sandbox knows what to allow.
+ * The first independent native/USD rate any source gives for the payment
+ * chain. Throws one error naming every source tried, so an agent in a
+ * restricted sandbox knows what to allow.
  */
+export declare function independentNativeUsd(opts: {
+    fetchImpl: FetchImpl;
+    chain: PayChain;
+    rpc?: string;
+}): Promise<NativePrice>;
+/** The Polygon rate, as before chains were configurable. */
 export declare function independentPolUsd(opts: {
     fetchImpl: FetchImpl;
     polygonRpc?: string;

package/dist/native-price.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-price.d.ts","sourceRoot":"","sources":["../src/native-price.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,eAAO,MAAM,yBAAyB,+CAA+C,CAAC;AAOtF,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,mBAAmB,GAAG,UAAU,GAAG,WAAW,CAAC;CACxD;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAsE1E;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAoBjH"}
+{"version":3,"file":"native-price.d.ts","sourceRoot":"","sources":["../src/native-price.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;;;;;;;;;;;;;;;;GAiBG;AAEH,eAAO,MAAM,yBAAyB,eAAwC,CAAC;AAO/E,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,aAAa,MAAM,EAAE,GAAG,UAAU,GAAG,WAAW,CAAC;CAC1D;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAoE1E;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,WAAW,CAAC,CAsBvB;AAED,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAE3G"}