@ametyst/cli 0.2.43 → 0.2.45

package/dist/index.js

@@ -109691,7 +109691,39 @@ async function runStartSession(ctx, timing = new TimingCollector("start_session"
   }
   return { responseKey: "unlocked_pending_authorization", credentials, timingReport: timing.report() };
 }
+var WALLET_SCOPED_CREDENTIAL_KEYS = [
+  "virtualWalletId",
+  "virtualWalletName",
+  "virtualWalletStatus",
+  "walletAddress",
+  "paymentManagerAddress",
+  "jwtToken",
+  "policyId",
+  "policyName",
+  "policyDescription",
+  "policyOnchainPermissions",
+  "policyValidUntil",
+  "policyPrecheckPassed",
+  "virtualWalletKernelAccountClient",
+  "permissionPlugin",
+  "kernelDomain",
+  "authorizationStatus",
+  "pendingWalletId",
+  "authorizationRequestId"
+];
+function clearWalletScopedCredentials(target) {
+  for (const key of WALLET_SCOPED_CREDENTIAL_KEYS) {
+    delete target[key];
+  }
+}
+function sameAddress(a, b) {
+  return String(a ?? "").toLowerCase() === String(b ?? "").toLowerCase();
+}
 function mergeStartSessionCredentials(target, patch, responseKey) {
+  const walletChanged = patch.eoaAddress !== void 0 && !sameAddress(patch.eoaAddress, target.eoaAddress);
+  if (walletChanged) {
+    clearWalletScopedCredentials(target);
+  }
   if (patch.walletKeystoreJson !== void 0) {
     target.walletKeystoreJson = patch.walletKeystoreJson;
   }
@@ -109700,10 +109732,16 @@ function mergeStartSessionCredentials(target, patch, responseKey) {
     target.signerAddress = patch.eoaAddress;
   }
   if (responseKey === "wrong_passphrase" || responseKey === "no_keystore") {
-    return;
+    return { walletChanged };
   }
   const { walletKeystoreJson: _wk, eoaAddress: _eo, ...rest } = patch;
   applyCredentialsPatch(target, rest);
+  if (walletChanged && target.policyId === void 0) {
+    target.requiresNewPolicy = true;
+  } else if (target.policyId !== void 0) {
+    delete target.requiresNewPolicy;
+  }
+  return { walletChanged };
 }
 
 // src/mcp-server/system-prompt.ts
@@ -111185,7 +111223,12 @@ server.tool(
           readPolicyActiveOnchain: buildPolicyActiveOnchainReader(sdk)
         }
       );
-      mergeStartSessionCredentials(currentCredentials, result.credentials, result.responseKey);
+      const { walletChanged } = mergeStartSessionCredentials(currentCredentials, result.credentials, result.responseKey);
+      if (walletChanged) {
+        walletsCache = null;
+        policiesCache = null;
+        transactionsCache = null;
+      }
       if (result.responseKey === "wrong_passphrase" || result.responseKey === "confirm_reset") {
         currentCredentials.wrongPassphraseAttempts = (currentCredentials.wrongPassphraseAttempts ?? 0) + 1;
       } else {
@@ -112309,6 +112352,24 @@ server.tool(
           }
         }
       }
+      if (currentCredentials.requiresNewPolicy && !currentCredentials.policyId) {
+        logSpendTelemetryEarlyErr();
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                success: false,
+                error: "policy_required_for_new_wallet",
+                guidance: {
+                  say_to_user: "Your wallet was reset, so this is a brand-new wallet with a new address. The spending policy your admin approved belonged to the old one and no longer applies \u2014 you need to request a new policy before you can pay.",
+                  next_action: "Call getAvailablePolicies, let the user pick one, then call requestAccess with it. Once the admin approves it, retry this spend."
+                }
+              }, null, 2)
+            }
+          ]
+        };
+      }
       const kernelClient = currentCredentials.virtualWalletKernelAccountClient;
       const apiKey = currentCredentials.apiKey;
       if (!kernelClient || !apiKey) {
@@ -113134,7 +113195,7 @@ async function startMCPServer(walletKeystoreJson, eoaAddress, config, versionNot
 
 // src/version.ts
 init_esm_shims();
-var CLI_VERSION = true ? "0.2.43" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.2.45" : "0.0.0-dev";
 
 // src/version-check.ts
 init_esm_shims();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ametyst/cli",
-  "version": "0.2.43",
+  "version": "0.2.45",
   "private": false,
   "description": "Ametyst CLI — embedded MCP server, wallet ops, agent payments",
   "type": "module",
@@ -37,7 +37,6 @@
     }
   },
   "dependencies": {
-    "@ametyst-dev/sdk-prod": "^0.8.34",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@napi-rs/keyring": "1.1.7",
     "mcp-use": "1.24.2"
@@ -78,10 +77,10 @@
     "esbuild@>=0.27.3 <0.28.1": "0.28.1"
   },
   "optionalDependencies": {
-    "@ametyst/cli-darwin-arm64": "0.2.43",
-    "@ametyst/cli-darwin-x64": "0.2.43",
-    "@ametyst/cli-linux-x64-gnu": "0.2.43",
-    "@ametyst/cli-win32-x64-msvc": "0.2.43"
+    "@ametyst/cli-darwin-arm64": "0.2.45",
+    "@ametyst/cli-darwin-x64": "0.2.45",
+    "@ametyst/cli-linux-x64-gnu": "0.2.45",
+    "@ametyst/cli-win32-x64-msvc": "0.2.45"
   },
   "scripts": {
     "build:native": "cd native && cargo build --release && napi build --release",