@aifinpay/mcp 2.4.1 → 2.7.0

package/README.md

@@ -4,9 +4,12 @@ AiFinPay MCP server for persistent agent identity, Agent Passport resolution,
 route discovery and non-signing settlement invoices. Canonical domain:
 **aifinpay.io**.
 
-Version **2.4.1**. Owner-enabled native Polygon v1.4 purchases with
-`payable_fetch` are released (since 2.2.0); site-wide batches with
-`scope: "merchant"` since 2.4.1. Without payment configuration the server keeps
+Version **2.7.0** is prepared in this checkout, requiring agent2.5.0 and canonical skill2.8.0.
+The published baseline checked2026-10-04 was MCP2.5.0. Package publication and
+real registry dependency/lock refresh remain release gates; a source-cohort
+build does not prove those steps. Owner-enabled v1.4 purchases with `payable_fetch` are
+released: on Polygon since 2.2.0, on Base (ETH or USDC) since 2.5.0; site-wide
+batches with `scope: "merchant"` since 2.4.1. Without payment configuration the server keeps
 its inspection-only tool inventory.
 
 ## Enable native paid GET requests
@@ -47,13 +50,41 @@ To pay in USDC instead of native POL, the owner also sets
 POL for gas: an exact-amount token approval plus the settlement, both within
 `AIFINPAY_MAX_GAS_POL` together. Unset or `"POL"` keeps native POL.
 
+### Paying on another chain
+
+`AIFINPAY_PAY_CHAIN` explicitly picks the chain `payable_fetch` settles on:
+`polygon` by default, or an exact supported name in the capability list below.
+Only the owner sets it, and a merchant is paid on a chain
+only if its quote is for that chain; a quote for any other chain is refused,
+never followed. On Base the batch is paid in ETH (or `AIFINPAY_PAY_ASSET:
+"USDC"`) and gas is ETH, so the cap is `AIFINPAY_MAX_GAS`, in ETH:
+
+```json
+{
+  "AIFINPAY_PAY_CHAIN": "base",
+  "AIFINPAY_MAX_GAS": "0.0002"
+}
+```
+
+`AIFINPAY_MAX_GAS` is the gas cap in the pay chain's native currency;
+`AIFINPAY_MAX_GAS_POL` remains accepted on Polygon and is refused on Base rather
+than read as ETH (0.3 POL is about $0.04; 0.3 ETH is several hundred dollars).
+On Base the worst case includes L1 data and operator fees; the owner must set
+the cap from the current estimate. The wallet's EVM address is the same on every chain, so
+fund it with ETH on Base, not on Ethereum mainnet. `AIFINPAY_RPC_URL` optionally
+replaces the chain's public RPC (`https://mainnet.base.org`,
+`https://polygon.drpc.org`).
+
+A payment still pending on one chain is recovered only with that chain
+configured; switching chains never re-sends or forgets it.
+
 Call `payable_fetch({"url":"https://merchant.example/api/data"})`. The tool
-uses the original signed v1.4 quote, independent fresh POL/USD pricing, SDK
+uses the original signed v1.4 quote, independent fresh native/USD pricing, SDK
 runtime/signer verification and owner limits. It persists the prepared transaction
 before sending, verifies the receipt, and reuses the purchased batch. No special
-merchant script, alternate contract or facilitator fallback is used. GET,
-Polygon live mode only, in POL or the configured stablecoin; Amoy payment
-receipts are not supported. The smallest batch is $0.10 plus gas, so keep `AIFINPAY_MAX_USD`
+merchant script, alternate contract or facilitator fallback is used. GET on the configured chain; EVM receipt payments use live
+mode only, in its native currency or the configured
+stablecoin; Amoy payment receipts are not supported. The smallest batch is $0.10 plus gas, so keep `AIFINPAY_MAX_USD`
 a little above the batch you expect to buy.
 
 To buy access to a whole site rather than one endpoint, call
@@ -67,9 +98,10 @@ owner can add it.
 ### Network access
 
 A sandbox that allowlists outbound hosts must allow `api.aifinpay.io` (quotes and
-receipts) and a Polygon RPC. The independent POL/USD rate comes from Chainlink
-on Polygon over that same RPC, then `api.coinbase.com`, then `api.coingecko.com`;
-one of them is enough. If none answers, `payable_fetch` stops before paying and
+receipts) and an RPC for the pay chain. The independent native/USD rate
+uses the pinned Chainlink feed on Polygon/Base, then `api.coinbase.com`,
+then `api.coingecko.com`; other chains use those HTTP price sources.
+If none provides a valid fresh rate, `payable_fetch` stops before paying and
 the error names each host it tried.
 
 ## Link the agent to its owner's dashboard
@@ -78,15 +110,18 @@ The owner sees the agent's balance, payments and receipts at
 https://dash.aifinpay.io → My Agents. There, **Claim via MCP** generates a
 one-time URL; pass it to `agent_claim_self`. The tool contacts only AiFinPay
 origins, signs only the claim challenge for this agent's own address, and moves
-no funds. Offer this to the owner after `init`.
+no funds. The owner-selected payment family must be confirmed successfully;
+the second wallet is best-effort. Use the selected wallet's Fund panel for
+available networks and assets; binding does not activate a disabled network.
+Offer this to the owner after `init`.
 
-Private recovery state lives at `AIFINPAY_HOME/payments/<evm-address>/state.json`
+Private recovery state for all payment families lives at `AIFINPAY_HOME/payments/<evm-address>/state.json`
 (default home `~/.aifinpay`). State is mode600 in mode700 directories, atomically
 written and fsynced. One operation lock serializes the wallet across processes.
 A retry recovers a pending receipt before allowing another purchase. A process
 crash leaves the lock for owner reconciliation; it is never stolen automatically.
-If a prepared transaction was never broadcast or reverted, reconcile its exact
-hash before clearing anything. Never put raw transactions, receipt JWTs or the
+If a prepared transaction was never broadcast or its outcome remains unknown,
+reconcile its exact hash before clearing anything. Never put raw transactions, receipt JWTs or the
 state file in chat. Unconfirmed payments consume the budget conservatively.
 
 ## Tools
@@ -100,10 +135,18 @@ state file in chat. Unconfirmed payments consume the budget conservatively.
 | `agent_passport_resolve` | Resolve the global Agent Passport identity.              |
 | `settlement_routes`      | Read the available verified settlement routes.           |
 | `settlement_invoice`     | Prepare a non-signing settlement invoice.                |
-
-`payable_fetch` appears only with valid owner payment configuration and a persistent wallet.
-Legacy `agent_call`, `agent_quote`, `pay_with_split` and `quote_split` remain
-unregistered.
+| `agent_history`          | Read indexed settlements or retained receipt batches.    |
+| `settlement_solana`      | Build a non-signing Solana settlement invoice.           |
+| `settlement_casper`      | Build a non-signing Casper settlement invoice.           |
+| `deployment_info`        | Read deployments: addresses, assets, settlement status.  |
+
+`payable_fetch` is registered when the owner sets `AIFINPAY_PAYMENTS_ENABLED=1`
+with a persistent wallet. With payments enabled and any owner limit missing or
+invalid, the server refuses to start rather than hiding the tool. It accepts
+only `url`, `max_amount_usd` and `scope`; `max_amount_usd` can lower the owner's
+per-payment cap for one call, never raise it. `dev_payment_quote` is registered
+only with `AIFINPAY_MODE=dev`. Legacy `agent_call`, `agent_quote`,
+`pay_with_split` and `quote_split` remain unregistered.
 
 ## Persistent wallet selection
 
@@ -162,7 +205,7 @@ A client configuration can use the keystore without embedding its secret:
   "mcpServers": {
     "aifinpay": {
       "command": "npx",
-      "args": ["-y", "@aifinpay/mcp@2.4.1"],
+      "args": ["-y", "@aifinpay/mcp"],
       "env": {
         "AIFINPAY_AGENTS_FILE": "/absolute/project/aifinpay/agents.json",
         "AIFINPAY_AGENT_ID": "research-agent"
@@ -197,23 +240,30 @@ snapshot. Verify `agent_address` against the wallet you intend to use.
 
 ## Other environment variables
 
-| Variable                     | Default               | Purpose                                                                              |
-| ---------------------------- | --------------------- | ------------------------------------------------------------------------------------ |
-| `AIFINPAY_BASE_URL`          | `https://aifinpay.io` | Backend URL.                                                                         |
-| `AIFINPAY_TIMEOUT_MS`        | `30000`               | Request timeout.                                                                     |
-| `AIFINPAY_MAX_USD`           | —                     | Configures the underlying agent's per-call cap; it does not enable signing.          |
-| `AIFINPAY_GATEWAY_ORIGINS`   | SDK default           | Comma-separated exact HTTPS origins trusted for AIFP-1 settlement.                   |
-| `AIFINPAY_GATEWAY_PATH_MODE` | `gateway`             | Use `gateway` for merchant-slug identity or `direct` for full request-path identity. |
-
-`agent_history({address, source:"transactions"})` reads indexed Polygon
-settlements; `source:"receipts"` reads retained batches, including test-mode
+| Variable                     | Default               | Purpose                                                                               |
+| ---------------------------- | --------------------- | ------------------------------------------------------------------------------------- |
+| `AIFINPAY_BASE_URL`          | `https://aifinpay.io` | Backend URL. Unset, `payable_fetch` quotes and verifies at `https://api.aifinpay.io`. |
+| `AIFINPAY_TIMEOUT_MS`        | `30000`               | Request timeout.                                                                      |
+| `AIFINPAY_MAX_USD`           | —                     | Per-payment USD cap for `payable_fetch`; required when payments are enabled.          |
+| `AIFINPAY_GATEWAY_ORIGINS`   | —                     | Comma-separated exact HTTPS origins the agent may pay; required with payments.        |
+| `AIFINPAY_GATEWAY_PATH_MODE` | `gateway`             | Use `gateway` for merchant-slug identity or `direct` for full request-path identity.  |
+| `AIFINPAY_PAY_CHAIN`         | `polygon`             | Owner-selected payment chain; see the2.7.0 source capability list.                    |
+| `AIFINPAY_MAX_GAS`           | —                     | Gas cap per payment in the pay chain's native currency (POL, ETH, AVAX, BNB, XRP).    |
+| `AIFINPAY_RPC_URL`           | chain's public RPC    | HTTPS RPC for the pay chain.                                                          |
+| `AIFINPAY_CLAIM_ORIGINS`     | AiFinPay dashboards   | Exact origins `agent_claim_self` may link the agent to.                               |
+
+`agent_history({address, source:"transactions", network:"polygon"})` reads
+indexed settlements for that network when the backend's durable indexer serves
+it. The dated production baseline has Polygon indexing; another client chain
+descriptor alone does not prove history coverage. `source:"receipts"` reads retained batches, including test-mode
 payments. Pass `passport` instead of, or alongside, `address` to resolve a
 public passport first. A backend without the passport resolver cannot satisfy
 passport-only queries. No secret API key is needed for public metadata.
 
 Responses do not include bearer receipts. Limits are 1..100; follow
 `next_offset`. History source/coverage is explicit: it is not a full wallet
-explorer. Dev networks currently use receipt history, not the Polygon ledger.
+explorer. Test-mode indexing depends on backend capabilities; retained receipt
+history is a separate source and does not establish mainnet activation.
 
 ```
 const { server } = await createServer(loadConfigFromEnv());
@@ -228,7 +278,7 @@ The programmatic equivalents of identity environment options are `seedHash`,
 - AIFINPAY_MODE=dev: expose dev_payment_quote; requires a separate dev base URL.
 
 - AIFINPAY_TIMEOUT_MS: SDK request timeout.
-- AIFINPAY_MAX_USD: legacy per-call budget; does not enable signing.
+- AIFINPAY_MAX_USD: per-payment USD cap for payable_fetch; required with payments.
 - AIFINPAY_TRUSTED_HOSTS: exact hosts allowed to bypass the DNS pre-check.
 - AIFINPAY_ALLOW_PRIVATE_FETCH=1: explicit local-development network access.
   Never enable this on the public hosted MCP.
@@ -246,3 +296,83 @@ executor; this MCP does not expose Amoy paid receipt purchases.
 ## License
 
 MIT.
+
+## Additional EVM networks in the 2.7.0 source candidate
+
+Owner `AIFINPAY_PAY_CHAIN` accepts polygon, base, optimism, arbitrum, avalanche,
+bnb, unichain, xrplevm and robinhood. `AIFINPAY_MAX_GAS` is in the selected native
+POL/ETH/AVAX/BNB/XRP currency; the legacy POL cap applies only on Polygon. Assets
+must be pinned for that chain, including BNB 18-decimal USDC/USDT and Robinhood
+18-decimal USDe/6-decimal USDG. XRPL EVM has native XRP only. Metadata comes from
+agent 2.5.0; the backend must still authorize and serve that merchant/network.
+Source support does not activate networks in production. Pending journals retain
+the original chain and are recovered without another settlement. A legacy
+missing-chain journal is adopted only when the owner-configured chain and the
+actual signed transaction's chain ID, payer, pinned target and exact call agree.
+Insufficient evidence requires manual receipt reconciliation. A later quote
+expiry does not invalidate receipt recovery for an existing payment.
+
+Release order: publish reviewed canonical skill2.8.0 and agent2.5.0, refresh MCP
+dependencies and lock from those real registry releases, pass standalone MCP
+CI, then publish MCP2.7.0. This candidate is tested against fresh source-packed
+agent2.5.0 and skill2.8.0. The existing registry entries remain until publication;
+no npm integrity/resolution is fabricated. An old2.3.x agent cannot build the
+new descriptor/helper imports, and old skill2.6.0 cannot satisfy the exact
+release-target guard. Hosted source CI uses `scripts/check-mcp-source-cohort.mjs`: a byte-preserving fixed registry bootstrap and genuine same-commit Node plus fully pinned canonical skill packages in disposable directories. Exact package bytes, versions, bundled skill and full tests must pass; the registry publication guard must still refuse this source cohort. Standalone release CI requires the refreshed real registry lock. Never publish the candidate with the old registry dependency lock.
+
+Use one shared local filesystem for a wallet's ledger/journal and reconcile
+pending transactions before downgrading. Node 2.4 reservations never expire for
+an unknown outcome; receipt failures never refund confirmed spend. Older SDK
+versions can expire or reset this state. Custom capped v1.4 ledger adapters need
+the new bound preparation/recovery/completion hooks; absence refuses payment.
+
+## Solana source candidate
+
+Version2.7 targets NodeSDK2.5 and canonical skill2.8. These are coordinated
+release targets; source integration does not establish npm publication or
+activate a network. The published deployments1.1.3 Solana entries remain
+disabled. `payable_fetch` retains the SDK availability check and cannot
+override it.
+
+For a separately accepted and served Solana route, the owner sets
+`AIFINPAY_PAY_CHAIN=solana`, explicit `AIFINPAY_SOLANA_NETWORK=mainnet` with
+live mode (or devnet with dev mode), and a trusted HTTPS `AIFINPAY_RPC_URL`.
+`AIFINPAY_MAX_FEE_LAMPORTS` is a positive integer cap on transaction fees plus
+required account rent; EVM gas caps cannot be used on Solana. Native SOL and
+network-pinned classic SPL assets are selected with `AIFINPAY_PAY_ASSET`.
+Existing payments opt-in, approved origins and per-payment/daily USD caps
+remain required.
+
+Before a Solana quote request, SDK2.5 saves the exact signed authorization,
+nonce and owner context in its shared private ledger. After a timeout or
+restart it replays that admission instead of generating a new nonce. The
+per-payment limit stays fixed for that admission across daily rollover;
+MCP still checks the current daily allowance before submission. An exact
+authenticated non-admission response can close only an unreserved local
+intent. It never refunds an issued backend quote reservation. Keep pending
+2.5 ledger state when upgrading; reconcile it before downgrade and never
+delete state to retry a payment.
+
+The private durable journal keeps the full signed Solana transaction and
+base58 signature before submission, including fee/rent in the admission
+amount. Payer identities retain case. Restart/retry recovers the original
+receipt; timeout or blockhash expiry never triggers a replacement payment.
+The same local wallet budget remains shared across payment families.
+
+A proven finalized Solana transaction failure is returned as an error, without
+a receipt or replacement payment. After the SDK verifies the exact signed
+transaction and canonical finalized block and durably reconciles its bound
+ledger, MCP atomically retains the actual fee debit and clears its pending
+purchase guard. Its private journal keeps the original signature and failed
+status. Missing or mismatched evidence retains the full reservation; expiry
+alone cannot release it. A persistence failure can be retried without resending.
+
+Before publication, install the actual published coordinated Node/skill
+versions and refresh the real registry lock; a locally packed source cohort
+is test evidence only. Do not publish with the previous dependency lock.
+
+Solana `agent_history` and `agent_quota` use the exact case-sensitive local
+Solana address and owner-configured cluster plus independently pinned program.
+They request the new program's indexed settlements and retained receipts; the
+legacy program and another cluster are separate histories. Explicit EVM
+history selection continues to use the wallet's EVM address.

package/dist/config.d.ts

@@ -8,7 +8,7 @@ export interface McpConfig {
     agentId?: string;
     walletHome?: string;
     walletPassphrase?: string;
-    /** Enables dev discovery/quoting only; never enables settlement signing. */
+    /** Dev environment. EVM payments stay live-only; Solana requires explicit devnet. */
     devMode?: boolean;
     /** Custom AiFinPay backend URL. Defaults to production. */
     baseUrl?: string;
@@ -17,9 +17,21 @@ export interface McpConfig {
     /** Owner opt-in; never accepted from tool arguments. */
     paymentsEnabled?: boolean;
     dailyAmountUsd?: number;
+    /** Chain payable_fetch settles on: "polygon" (default), another supported EVM chain, or "solana". Set by
+     *  the owner only; never inferred from a quote or a tool argument. */
+    payChain?: string;
+    /** RPC for the pay chain; defaults to the chain's public RPC. */
+    rpcUrl?: string;
+    /** Gas cap per payment, in the pay chain's native currency (POL, ETH). */
+    maxGas?: string;
+    /** Owner-selected cluster, independently bound to live/prod or dev mode. */
+    solanaNetwork?: "mainnet" | "devnet";
+    /** Integer lamports for transaction fees and required account rent. */
+    maxFeeLamports?: string;
+    /** Same cap under its original name; accepted on Polygon only. */
     maxGasPol?: string;
-    /** What payable_fetch pays with: "POL" (default) or a stablecoin the SDK
-     *  pins for Polygon v1.4, e.g. "USDC". Gas is paid in POL either way. */
+    /** What payable_fetch pays with: the chain's native currency (default) or a
+     *  stablecoin the SDK pins for that chain, e.g. "USDC". Gas is native either way. */
     payAsset?: string;
     /** Hard cap on a single payment to prevent runaway agents. */
     maxAmountUsd?: number;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wDAAwD;IACxD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;6EACyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;;;+CAW2C;IAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAEvC;;;;;;;;;8CAS0C;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CA0B7C;AA0DD,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAiC/D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qFAAqF;IACrF,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wDAAwD;IACxD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;0EACsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IACrC,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;yFACqF;IACrF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;;;+CAW2C;IAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAEvC;;;;;;;;;8CAS0C;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CA+B7C;AAgED,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAkF/D"}

package/dist/config.js

@@ -1,3 +1,5 @@
+import { paymentStableAsset, solanaStableMint } from "@aifinpay/agent";
+import { payChain } from "./pay-chains.js";
 export function loadConfigFromEnv() {
     if (process.env.AIFINPAY_MODE && !["live", "dev"].includes(process.env.AIFINPAY_MODE)) {
         throw new Error("AIFINPAY_MODE must be live or dev");
@@ -8,6 +10,11 @@ export function loadConfigFromEnv() {
     return {
         paymentsEnabled: process.env.AIFINPAY_PAYMENTS_ENABLED === "1",
         dailyAmountUsd: process.env.AIFINPAY_DAILY_USD ? Number(process.env.AIFINPAY_DAILY_USD) : undefined,
+        payChain: process.env.AIFINPAY_PAY_CHAIN || undefined,
+        rpcUrl: process.env.AIFINPAY_RPC_URL || undefined,
+        maxGas: process.env.AIFINPAY_MAX_GAS || undefined,
+        solanaNetwork: parseSolanaNetwork(process.env.AIFINPAY_SOLANA_NETWORK),
+        maxFeeLamports: process.env.AIFINPAY_MAX_FEE_LAMPORTS || undefined,
         maxGasPol: process.env.AIFINPAY_MAX_GAS_POL || undefined,
         payAsset: process.env.AIFINPAY_PAY_ASSET || undefined,
         devMode: process.env.AIFINPAY_MODE === "dev",
@@ -25,6 +32,13 @@ export function loadConfigFromEnv() {
         trustedHosts: splitList(process.env.AIFINPAY_TRUSTED_HOSTS),
     };
 }
+function parseSolanaNetwork(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (raw === "mainnet" || raw === "devnet")
+        return raw;
+    throw new Error("AIFINPAY_SOLANA_NETWORK must be mainnet or devnet");
+}
 function parseGatewayPathMode(raw) {
     if (raw === undefined || raw.trim() === "")
         return "gateway";
@@ -83,8 +97,20 @@ function splitOrigins(raw) {
 export function validatePaymentConfig(config) {
     if (!config.paymentsEnabled)
         throw new Error("Payments disabled; owner must set AIFINPAY_PAYMENTS_ENABLED=1");
-    if (config.devMode)
-        throw new Error("MCP receipt payments currently support Polygon live mode only");
+    const chain = payChain(config.payChain);
+    if (config.devMode && chain.name !== "solana")
+        throw new Error("MCP receipt payments support live mode only");
+    if (config.rpcUrl !== undefined) {
+        let rpc;
+        try {
+            rpc = new URL(config.rpcUrl);
+        }
+        catch {
+            rpc = undefined;
+        }
+        if (!rpc || rpc.protocol !== "https:" || rpc.username || rpc.password)
+            throw new Error("AIFINPAY_RPC_URL must be an https URL without credentials");
+    }
     for (const [name, value] of [
         ["AIFINPAY_MAX_USD", config.maxAmountUsd],
         ["AIFINPAY_DAILY_USD", config.dailyAmountUsd],
@@ -103,15 +129,47 @@ export function validatePaymentConfig(config) {
             }
         }))
         throw new Error("Payments require explicit exact HTTPS AIFINPAY_GATEWAY_ORIGINS");
-    if (config.payAsset !== undefined && !/^[A-Z][A-Z0-9.]{1,11}$/.test(config.payAsset))
-        throw new Error('AIFINPAY_PAY_ASSET must be "POL" or a stablecoin symbol such as "USDC"');
-    const gas = config.maxGasPol;
+    if (chain.name === "solana") {
+        const expectedNetwork = config.devMode ? "devnet" : "mainnet";
+        if (config.solanaNetwork !== expectedNetwork)
+            throw new Error(`AIFINPAY_SOLANA_NETWORK must be ${expectedNetwork} for the configured AIFINPAY_MODE`);
+        if (!config.rpcUrl)
+            throw new Error("Solana payments require an explicit owner-trusted AIFINPAY_RPC_URL");
+        if (config.maxGas !== undefined || config.maxGasPol !== undefined)
+            throw new Error("Solana uses AIFINPAY_MAX_FEE_LAMPORTS for fees and rent; EVM gas caps do not apply");
+        if (config.payAsset !== undefined && config.payAsset !== "SOL") {
+            try {
+                solanaStableMint(config.solanaNetwork, config.payAsset);
+            }
+            catch {
+                throw new Error("AIFINPAY_PAY_ASSET is not pinned for the selected Solana network");
+            }
+        }
+        const fee = config.maxFeeLamports;
+        if (typeof fee !== "string" || !/^[1-9][0-9]*$/.test(fee) || BigInt(fee) > 2n ** 64n - 1n)
+            throw new Error("AIFINPAY_MAX_FEE_LAMPORTS must be a positive uint64 integer covering transaction fees and account rent");
+        return BigInt(fee);
+    }
+    if (config.solanaNetwork !== undefined || config.maxFeeLamports !== undefined)
+        throw new Error("Solana network and lamport fee settings require AIFINPAY_PAY_CHAIN=solana");
+    if (config.payAsset !== undefined &&
+        config.payAsset !== chain.native &&
+        !paymentStableAsset(chain.name, config.payAsset))
+        throw new Error(`AIFINPAY_PAY_ASSET must be "${chain.native}" or a stablecoin symbol pinned for ${chain.name}`);
+    // The POL-named cap means POL. Read on another chain it would silently cap
+    // ETH gas at a number chosen for POL — 0.3 POL is ~$0.04, 0.3 ETH is ~$800.
+    if (config.maxGasPol !== undefined && chain.name !== "polygon")
+        throw new Error(`AIFINPAY_MAX_GAS_POL caps POL gas and does not apply on ${chain.name}; set AIFINPAY_MAX_GAS in ${chain.native}`);
+    if (config.maxGas !== undefined && config.maxGasPol !== undefined && config.maxGas !== config.maxGasPol)
+        throw new Error("AIFINPAY_MAX_GAS and AIFINPAY_MAX_GAS_POL disagree; set one");
+    const name = config.maxGas !== undefined ? "AIFINPAY_MAX_GAS" : "AIFINPAY_MAX_GAS_POL";
+    const gas = config.maxGas ?? config.maxGasPol;
     if (typeof gas !== "string" || !/^(?:0|[1-9][0-9]*)(?:\.[0-9]{1,18})?$/.test(gas))
-        throw new Error("AIFINPAY_MAX_GAS_POL must be a positive decimal with at most 18 places");
+        throw new Error(`${name} must be a positive decimal with at most 18 places: the gas cap per payment in ${chain.native}`);
     const [whole, fraction = ""] = gas.split(".");
     const wei = BigInt(whole) * 10n ** 18n + BigInt(fraction.padEnd(18, "0"));
     if (wei <= 0n || wei >= 2n ** 256n)
-        throw new Error("AIFINPAY_MAX_GAS_POL is outside the supported range");
+        throw new Error(`${name} is outside the supported range`);
     return wei;
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AA+DA,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAC9D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACnG,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACxD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACrD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,KAAK;QAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAC/B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACzD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS;QAClD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,SAAS;QACrE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS;QAC9D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QAChG,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7F,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAClE,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC7E,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC;AAED;;;oDAGoD;AACpD,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;mFAEmF;AACnF,SAAS,YAAY,CAAC,GAAuB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAM,CAAC;QACX,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,gBAAgB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,uDAAuD;gBACxF,oBAAoB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,CAChD,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,8BAA8B;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,6BAA6B;gBAC9D,oEAAoE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,oDAAoD,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrG,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;QACzC,CAAC,oBAAoB,EAAE,MAAM,CAAC,cAAc,CAAC;KACrC,EAAE,CAAC;QACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,IACE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1B,OAAO,CACL,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3G,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC3G,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AA6E3C,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAC9D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACnG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACrD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;QACjD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;QACjD,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACtE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,SAAS;QAClE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACxD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS;QACrD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,KAAK;QAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;QAC/B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACzD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS;QAClD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,SAAS;QACrE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS;QAC9D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QAChG,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7F,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAClE,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC7E,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuB;IACjD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC;AAED;;;oDAGoD;AACpD,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;mFAEmF;AACnF,SAAS,YAAY,CAAC,GAAuB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAM,CAAC;QACX,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,gBAAgB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,uDAAuD;gBACxF,oBAAoB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,CAChD,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,8BAA8B;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,6BAA6B;gBAC9D,oEAAoE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,oDAAoD,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC9G,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YACnE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC;QACzC,CAAC,oBAAoB,EAAE,MAAM,CAAC,cAAc,CAAC;KACrC,EAAE,CAAC;QACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,IACE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1B,OAAO,CACL,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3G,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,MAAM,CAAC,aAAa,KAAK,eAAe;YAC1C,MAAM,IAAI,KAAK,CAAC,mCAAmC,eAAe,mCAAmC,CAAC,CAAC;QACzG,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC1G,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAC/D,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC;QAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,EAAE;YACvF,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;QACJ,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAC3E,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,IACE,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC7B,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM;QAChC,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC;QAEhD,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,MAAM,uCAAuC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClH,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAC5D,MAAM,IAAI,KAAK,CACb,2DAA2D,KAAK,CAAC,IAAI,6BAA6B,KAAK,CAAC,MAAM,EAAE,CACjH,CAAC;IACJ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS;QACrG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACvF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC;IAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,kFAAkF,KAAK,CAAC,MAAM,EAAE,CACxG,CAAC;IACJ,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;IAC9F,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -4,7 +4,8 @@
  *
  * Tools: public addresses, history, quotas, passport resolution, non-signing
  * settlement invoices, local wallet reload, and opt-in dev batch quoting.
- * Signing tools are not registered in this RC.
+ * The one signing tool, payable_fetch, is registered only when the owner
+ * enables payments with every limit set.
  *
  * Quick start (stdio transport for Claude Desktop / MCP-aware runtimes):
  *

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -4,7 +4,8 @@
  *
  * Tools: public addresses, history, quotas, passport resolution, non-signing
  * settlement invoices, local wallet reload, and opt-in dev batch quoting.
- * Signing tools are not registered in this RC.
+ * The one signing tool, payable_fetch, is registered only when the owner
+ * enables payments with every limit set.
  *
  * Quick start (stdio transport for Claude Desktop / MCP-aware runtimes):
  *

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/native-price.d.ts

@@ -1,5 +1,6 @@
+import { type PayChain } from "./pay-chains.js";
 /**
- * Independent POL/USD rate for payable_fetch.
+ * Independent native/USD rate for payable_fetch: POL on Polygon, ETH on Base.
  *
  * payable_fetch values a v1.4 quote in USD with a rate it fetches itself —
  * never the quote API's own — so the owner's per-payment and daily USD limits
@@ -9,23 +10,31 @@
  * it began, with nothing to try instead.
  *
  * Sources, in order; the first fresh, sane answer wins:
- *   1. Chainlink POL/USD on Polygon, read over the agent's own Polygon RPC —
- *      the host the payment already needs, so no extra allowlist entry.
+ *   1. Chainlink <native>/USD on the payment chain, read over the agent's own
+ *      RPC for that chain — the host the payment already needs, so no extra
+ *      allowlist entry.
  *   2. api.coinbase.com spot price.
- *   3. api.coingecko.com, id polygon-ecosystem-token. NOT matic-network: that
- *      id stopped updating in February 2026 and answers a stale, higher price.
+ *   3. api.coingecko.com.
+ * Feed addresses and ids live in pay-chains.ts.
  */
-export declare const CHAINLINK_POL_USD_POLYGON = "0xAB594600376Ec9fD91F8e885dADF0CE036862dE0";
+export declare const CHAINLINK_POL_USD_POLYGON: `0x${string}` | undefined;
 export interface NativePrice {
     usd: number;
     observedAtMs: number;
-    source: "chainlink-polygon" | "coinbase" | "coingecko";
+    source: `chainlink-${string}` | "coinbase" | "coingecko";
 }
 type FetchImpl = (input: string, init?: RequestInit) => Promise<Response>;
 /**
- * The first independent POL/USD rate any source gives. Throws one error naming
- * every source tried, so an agent in a restricted sandbox knows what to allow.
+ * The first independent native/USD rate any source gives for the payment
+ * chain. Throws one error naming every source tried, so an agent in a
+ * restricted sandbox knows what to allow.
  */
+export declare function independentNativeUsd(opts: {
+    fetchImpl: FetchImpl;
+    chain: PayChain;
+    rpc?: string;
+}): Promise<NativePrice>;
+/** The Polygon rate, as before chains were configurable. */
 export declare function independentPolUsd(opts: {
     fetchImpl: FetchImpl;
     polygonRpc?: string;

package/dist/native-price.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-price.d.ts","sourceRoot":"","sources":["../src/native-price.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,eAAO,MAAM,yBAAyB,+CAA+C,CAAC;AAOtF,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,mBAAmB,GAAG,UAAU,GAAG,WAAW,CAAC;CACxD;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAsE1E;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAoBjH"}
+{"version":3,"file":"native-price.d.ts","sourceRoot":"","sources":["../src/native-price.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;;;;;;;;;;;;;;;;GAiBG;AAEH,eAAO,MAAM,yBAAyB,2BAAwC,CAAC;AAO/E,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,aAAa,MAAM,EAAE,GAAG,UAAU,GAAG,WAAW,CAAC;CAC1D;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAoE1E;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,WAAW,CAAC,CAsBvB;AAED,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAE3G"}