@arispay/payagent-mcp 2.0.2 → 2.6.0

package/dist/index.d.ts

@@ -1,2 +1 @@
-
-export {  }
+#!/usr/bin/env node

package/dist/index.js

@@ -1,91 +1,560 @@
 #!/usr/bin/env node
+#!/usr/bin/env node
 
 // src/index.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-import { payFetchDelegated, getUSDCBalance, formatUSDC } from "payagent";
-var arispayUrl = process.env.ARISPAY_URL ?? "https://api.arispay.app";
-var agentKey = process.env.ARISPAY_AGENT_KEY;
-var walletAddress = process.env.PAYAGENT_WALLET;
-if (!agentKey) {
-  console.error(
-    "Error: ARISPAY_AGENT_KEY environment variable is required.\nProvision an agent at https://payagent.arispay.app to get a key."
+import {
+  DelegationClient,
+  HostedTopupNotConfiguredError,
+  bootstrapAgent,
+  BootstrapError,
+  formatUSDC,
+  getAgent,
+  getApiKey,
+  getArispayUrl,
+  getUSDCBalance,
+  launchAgent,
+  listAgents,
+  payFetchDelegated
+} from "payagent";
+
+// src/pay-api-helpers.ts
+function looksLikeInsufficientFunds(message) {
+  if (!/402/.test(message)) return false;
+  return /insufficient|insufficient_funds|insufficient_balance|exceeds_balance|invalid_transfer/i.test(
+    message
   );
-  process.exit(1);
 }
-var fetch402 = payFetchDelegated({
-  arispayUrl,
-  apiKey: agentKey
-});
+
+// src/index.ts
+var arispayUrl = getArispayUrl(process.env.ARISPAY_URL);
+var legacyAgentKey = process.env.ARISPAY_AGENT_KEY;
+var legacyWalletAddress = process.env.PAYAGENT_WALLET;
+function resolveAgent(name) {
+  if (name) return getAgent(name);
+  const agents = listAgents();
+  return agents[0];
+}
+function resolveAgentKey(name) {
+  if (name) {
+    const stored = getAgent(name);
+    if (stored) return { key: stored.apiKey, source: `agent \`${name}\`` };
+    return void 0;
+  }
+  if (legacyAgentKey) return { key: legacyAgentKey, source: "ARISPAY_AGENT_KEY" };
+  const first = listAgents()[0];
+  if (first) return { key: first.apiKey, source: `agent \`${first.name}\`` };
+  return void 0;
+}
+function requireDevKey() {
+  const key = getApiKey();
+  if (!key) {
+    throw new Error(
+      "No ArisPay developer key found. Run `npx payagent init` or set ARISPAY_API_KEY."
+    );
+  }
+  return key;
+}
+function textResult(text, isError = false) {
+  return {
+    content: [{ type: "text", text }],
+    ...isError ? { isError } : {}
+  };
+}
 var server = new McpServer({
   name: "payagent",
-  version: "2.0.0"
+  version: "2.1.0"
 });
 server.tool(
   "pay_api",
   {
     url: z.string().describe("The full URL of the API endpoint to call"),
     method: z.enum(["GET", "POST", "PUT", "DELETE", "PATCH"]).default("GET").describe("HTTP method"),
-    headers: z.record(z.string(), z.string()).optional().describe("Additional HTTP headers to include"),
-    body: z.string().optional().describe("Request body (for POST/PUT/PATCH)")
+    headers: z.record(z.string(), z.string()).optional().describe("Additional HTTP headers"),
+    body: z.string().optional().describe("Request body (for POST/PUT/PATCH)"),
+    agent: z.string().optional().describe("Optional: name of a locally-stored agent to pay with. Defaults to ARISPAY_AGENT_KEY or the first stored agent.")
   },
-  async ({ url, method, headers, body }) => {
+  async ({ url, method, headers, body, agent }) => {
+    const resolved = resolveAgentKey(agent);
+    if (!resolved) {
+      return textResult(
+        [
+          "No agent available. Cold-start in one call:",
+          '  bootstrap_agent({ email: "you@example.com", name: "<your-name>" })',
+          "",
+          "Or, if a developer key is already paired (`npx payagent init`):",
+          "  create_agent({ name, perTx, daily, monthly })",
+          "",
+          "Or set ARISPAY_AGENT_KEY for legacy single-agent mode."
+        ].join("\n"),
+        true
+      );
+    }
     try {
-      const response = await fetch402(url, {
-        method,
-        headers,
-        body
-      });
+      const fetch402 = payFetchDelegated({ arispayUrl, apiKey: resolved.key });
+      const response = await fetch402(url, { method, headers, body });
       const responseBody = await response.text();
-      return {
-        content: [
-          {
-            type: "text",
-            text: [
-              `HTTP ${response.status}`,
-              "",
-              responseBody
-            ].join("\n")
-          }
-        ]
-      };
+      return textResult(
+        [`HTTP ${response.status} (paid via ${resolved.source})`, "", responseBody].join("\n")
+      );
     } catch (err) {
-      return {
-        content: [
-          {
-            type: "text",
-            text: `Error: ${err instanceof Error ? err.message : String(err)}`
-          }
-        ],
-        isError: true
-      };
+      const message = err instanceof Error ? err.message : String(err);
+      if (looksLikeInsufficientFunds(message)) {
+        const onrampHint = await tryGetOnrampHint(agent);
+        return textResult(
+          [
+            `Error: ${message}`,
+            "",
+            "This looks like the agent wallet is out of USDC. Fund it and retry:",
+            ...onrampHint ?? [
+              "  Use the `fund_agent` tool with hosted=true to mint a Coinbase Onramp URL,",
+              "  or send USDC on Base directly to the wallet address from `check_wallet`."
+            ]
+          ].join("\n"),
+          true
+        );
+      }
+      return textResult(`Error: ${message}`, true);
     }
   }
 );
+async function tryGetOnrampHint(agentName) {
+  const stored = resolveAgent(agentName);
+  if (!stored) return void 0;
+  const devKey = getApiKey();
+  if (!devKey) return void 0;
+  try {
+    const client = new DelegationClient(arispayUrl, devKey);
+    const link = await client.getHostedTopup(stored.agentId, {});
+    return [
+      `  Coinbase Onramp:  ${link.fundingUrl}`,
+      `  URL valid until:  ${link.expiresAt}`,
+      `  Or send USDC on ${link.network} directly to ${link.walletAddress}`
+    ];
+  } catch (err) {
+    if (err instanceof HostedTopupNotConfiguredError) return void 0;
+    return void 0;
+  }
+}
 server.tool(
   "check_wallet",
-  {},
-  async () => {
-    const lines = [
-      `ArisPay URL: ${arispayUrl}`,
-      `Agent key:   ${agentKey.slice(0, 10)}\u2026`
-    ];
+  {
+    agent: z.string().optional().describe("Optional: name of a locally-stored agent. Defaults to legacy ARISPAY_WALLET mode.")
+  },
+  async ({ agent }) => {
+    const resolved = resolveAgent(agent);
+    const walletAddress = resolved?.walletAddress ?? legacyWalletAddress;
+    const keyTail = resolved?.apiKey.slice(-4) ?? (legacyAgentKey ? legacyAgentKey.slice(-4) : void 0);
+    const lines = [`ArisPay URL: ${arispayUrl}`];
+    if (resolved) lines.push(`Agent:       ${resolved.name} (${resolved.agentId})`);
+    if (keyTail) lines.push(`Agent key:   ap_\u2026${keyTail}`);
     if (walletAddress) {
       lines.push(`Wallet:      ${walletAddress}`);
       try {
-        const raw = await getUSDCBalance(walletAddress, "base");
-        lines.push(`Balance:     ${formatUSDC(raw)} USDC on Base`);
+        const raw = await getUSDCBalance(walletAddress, resolved?.network ?? "base");
+        lines.push(`Balance:     ${formatUSDC(raw)} USDC on ${resolved?.network ?? "base"}`);
       } catch (err) {
         lines.push(`Balance:     unavailable (${err instanceof Error ? err.message : String(err)})`);
       }
     } else {
-      lines.push("", "Set PAYAGENT_WALLET=0x\u2026 in env to include on-chain balance.");
+      lines.push("", "No wallet known. Use `create_agent` or set PAYAGENT_WALLET for legacy mode.");
+    }
+    lines.push("", "Manage limits + full history: https://arispay.app/dashboard");
+    return textResult(lines.join("\n"));
+  }
+);
+server.tool(
+  "create_agent",
+  {
+    name: z.string().describe("Local identifier for this agent. Used by later tools."),
+    perTx: z.number().int().positive().describe("Per-transaction spend cap in cents."),
+    daily: z.number().int().positive().describe("Daily spend cap in cents."),
+    monthly: z.number().int().positive().describe("Monthly spend cap in cents."),
+    allowedDomains: z.array(z.string()).optional().describe("If provided, restrict this agent to paying only these domains."),
+    network: z.enum(["base", "base-sepolia", "ethereum", "polygon"]).default("base").describe("EVM network the agent pays on."),
+    agentType: z.string().optional().describe('Optional metadata label (e.g. "hermes").')
+  },
+  async ({ name, perTx, daily, monthly, allowedDomains, network, agentType }) => {
+    try {
+      requireDevKey();
+      const agent = await launchAgent({
+        name,
+        limits: { perTx, daily, monthly },
+        allowedDomains,
+        network,
+        agentType
+      });
+      const lines = [
+        `\u2713 Agent \`${name}\` created.`,
+        `  Agent ID:  ${agent.agentId}`,
+        `  Wallet:    ${agent.walletAddress}`,
+        `  Network:   ${agent.network}`,
+        `  Limits:    ${perTx}\xA2 / tx, ${daily}\xA2 / day, ${monthly}\xA2 / month`,
+        "",
+        `  Fund the wallet with USDC on ${agent.network}, then call \`get_balance\` with name="${name}".`
+      ];
+      return textResult(lines.join("\n"));
+    } catch (err) {
+      return textResult(`create_agent failed: ${err instanceof Error ? err.message : String(err)}`, true);
+    }
+  }
+);
+server.tool(
+  "fund_agent",
+  {
+    name: z.string().describe("Name of a locally-stored agent."),
+    hosted: z.boolean().optional().describe(
+      "If true, request a provider-hosted onramp URL (Coinbase, etc.) instead of the plain wallet address. Requires ARISPAY_ONRAMP_PROVIDER on the API deployment."
+    ),
+    amount: z.number().optional().describe("Preset top-up amount in dollars. Only meaningful with `hosted: true`.")
+  },
+  async ({ name, hosted, amount }) => {
+    const stored = getAgent(name);
+    if (!stored) return textResult(`No locally-stored agent named \`${name}\`.`, true);
+    if (hosted) {
+      const devKey = getApiKey();
+      if (!devKey) {
+        return textResult(
+          "No ArisPay developer key found. Run `npx payagent init` first.",
+          true
+        );
+      }
+      const client = new DelegationClient(arispayUrl, devKey);
+      try {
+        const link = await client.getHostedTopup(stored.agentId, { amount });
+        const lines2 = [
+          `Top up \`${name}\` via ${link.provider}:`,
+          "",
+          `  ${link.fundingUrl}`,
+          "",
+          `  Wallet:  ${link.walletAddress}`,
+          `  Network: ${link.network}`,
+          `  URL valid until: ${link.expiresAt}`,
+          "",
+          "Share that URL with the end-user; the onramp deposits USDC straight to the agent's wallet."
+        ];
+        return textResult(lines2.join("\n"));
+      } catch (err) {
+        if (err instanceof HostedTopupNotConfiguredError) {
+          return textResult(
+            [
+              "Hosted onramp is not configured on this ArisPay deployment.",
+              "Falling back to the manual path:",
+              "",
+              `  Send USDC on ${stored.network ?? "base"} to ${stored.walletAddress}`,
+              "",
+              "Ask the deployment owner to set ARISPAY_ONRAMP_PROVIDER=coinbase (+ COINBASE_ONRAMP_APP_ID) to enable hosted top-ups."
+            ].join("\n")
+          );
+        }
+        return textResult(
+          `fund_agent (hosted) failed: ${err instanceof Error ? err.message : String(err)}`,
+          true
+        );
+      }
+    }
+    const lines = [
+      `Fund \`${name}\` by sending USDC on ${stored.network ?? "base"} to:`,
+      "",
+      `  ${stored.walletAddress}`,
+      "",
+      "Pass `hosted: true` to get a Coinbase onramp URL instead (requires ARISPAY_ONRAMP_PROVIDER).",
+      "Call `get_balance` when the deposit lands."
+    ];
+    return textResult(lines.join("\n"));
+  }
+);
+server.tool(
+  "get_balance",
+  {
+    name: z.string().describe("Name of a locally-stored agent.")
+  },
+  async ({ name }) => {
+    const stored = getAgent(name);
+    if (!stored) return textResult(`No locally-stored agent named \`${name}\`.`, true);
+    try {
+      const devKey = requireDevKey();
+      const client = new DelegationClient(arispayUrl, devKey);
+      const balance = await client.getBalance(stored.agentId);
+      const human = formatUSDC(BigInt(balance.usdcBalance || "0"));
+      const lines = [
+        `${name}: ${human} USDC on ${balance.network}`,
+        balance.fundedAt ? `  First funded at: ${balance.fundedAt}` : "  Not yet funded.",
+        `  Wallet: ${balance.walletAddress}`
+      ];
+      return textResult(lines.join("\n"));
+    } catch (err) {
+      return textResult(`get_balance failed: ${err instanceof Error ? err.message : String(err)}`, true);
+    }
+  }
+);
+server.tool(
+  "create_enduser",
+  {
+    externalId: z.string().describe("Your own stable id for this customer (e.g. `tg:12345`)."),
+    email: z.string().optional().describe("Optional email for compliance / receipts."),
+    findOrCreate: z.boolean().optional().describe("If true, return the existing user instead of erroring on externalId collision.")
+  },
+  async ({ externalId, email, findOrCreate }) => {
+    try {
+      const devKey = requireDevKey();
+      const client = new DelegationClient(arispayUrl, devKey);
+      const user = await client.createEndUser({ externalId, email, findOrCreate });
+      const lines = [
+        `\u2713 End-user \`${externalId}\` ready.`,
+        `  ArisPay id:   ${user.id}`,
+        `  Has card:     ${user.hasPaymentMethod ? "yes" : "no"}`,
+        `  Has wallet:   ${user.hasWallet ? "yes" : "no"}`
+      ];
+      return textResult(lines.join("\n"));
+    } catch (err) {
+      return textResult(
+        `create_enduser failed: ${err instanceof Error ? err.message : String(err)}`,
+        true
+      );
+    }
+  }
+);
+server.tool(
+  "attach_card_for_user",
+  {
+    userId: z.string().describe("The ArisPay-internal end-user id (not externalId)."),
+    agentName: z.string().optional().describe("Optional locally-stored agent name to scope the card-setup session to.")
+  },
+  async ({ userId, agentName }) => {
+    try {
+      const devKey = requireDevKey();
+      const client = new DelegationClient(arispayUrl, devKey);
+      const agentId = agentName ? getAgent(agentName)?.agentId : void 0;
+      const session = await client.createCardSetupSession({ endUserId: userId, agentId });
+      const lines = [
+        `Card-entry URL for user \`${userId}\`:`,
+        "",
+        `  ${session.setupUrl}`,
+        "",
+        `  Expires at: ${session.expiresAt}`,
+        "",
+        "Share this URL with the end-user. They enter the card on ArisPay's hosted page; we handle tokenization + 3DS.",
+        "Call `get_user_status` afterwards to confirm the card is attached."
+      ];
+      return textResult(lines.join("\n"));
+    } catch (err) {
+      return textResult(
+        `attach_card_for_user failed: ${err instanceof Error ? err.message : String(err)}`,
+        true
+      );
+    }
+  }
+);
+server.tool(
+  "set_user_limits",
+  {
+    userId: z.string().describe("ArisPay-internal end-user id."),
+    agentName: z.string().describe("Locally-stored agent name."),
+    perTx: z.number().int().optional().describe("Per-transaction cap in cents. Omit to inherit agent defaults."),
+    daily: z.number().int().optional().describe("Daily cap in cents."),
+    monthly: z.number().int().optional().describe("Monthly cap in cents."),
+    allowedMcc: z.array(z.string()).optional().describe("Allowed Merchant Category Codes."),
+    blockedMcc: z.array(z.string()).optional().describe("Blocked MCCs.")
+  },
+  async ({ userId, agentName, perTx, daily, monthly, allowedMcc, blockedMcc }) => {
+    try {
+      const stored = getAgent(agentName);
+      if (!stored) {
+        return textResult(`No locally-stored agent named \`${agentName}\`.`, true);
+      }
+      const devKey = requireDevKey();
+      const client = new DelegationClient(arispayUrl, devKey);
+      const limit = await client.setUserLimits(userId, {
+        agentId: stored.agentId,
+        maxPerTransaction: perTx ?? null,
+        maxDaily: daily ?? null,
+        maxMonthly: monthly ?? null,
+        allowedMerchantCategories: allowedMcc,
+        blockedMerchantCategories: blockedMcc
+      });
+      return textResult(
+        [
+          `\u2713 Limits set for \`${userId}\` on agent \`${agentName}\`.`,
+          `  per-tx ${limit.maxPerTransaction ?? "inherit"}\xA2, daily ${limit.maxDaily ?? "inherit"}\xA2, monthly ${limit.maxMonthly ?? "inherit"}\xA2`
+        ].join("\n")
+      );
+    } catch (err) {
+      return textResult(
+        `set_user_limits failed: ${err instanceof Error ? err.message : String(err)}`,
+        true
+      );
+    }
+  }
+);
+server.tool(
+  "get_user_status",
+  {
+    userId: z.string().describe("ArisPay-internal end-user id.")
+  },
+  async ({ userId }) => {
+    try {
+      const devKey = requireDevKey();
+      const client = new DelegationClient(arispayUrl, devKey);
+      const user = await client.getEndUser(userId);
+      const lines = [
+        `${user.externalId} (${user.id})`,
+        `  email:    ${user.email ?? "\u2014"}`,
+        `  card:     ${user.hasPaymentMethod ? `${user.cardBrand ?? "card"} \u2026${user.cardLast4 ?? "????"}` : "\u2014"}`,
+        `  wallet:   ${user.walletAddress ?? "\u2014"}${user.walletChain ? ` on ${user.walletChain}` : ""}`
+      ];
+      if (user.hasWallet) {
+        try {
+          const w = await client.getWalletStatus(userId);
+          lines.push(`  balance:   ${w.usdcBalance} USDC base units`);
+          lines.push(`  allowance: ${w.usdcAllowance} (${w.allowanceSufficient ? "ok" : "insufficient"})`);
+          lines.push(`  ready:     ${w.ready}`);
+        } catch {
+        }
+      }
+      return textResult(lines.join("\n"));
+    } catch (err) {
+      return textResult(
+        `get_user_status failed: ${err instanceof Error ? err.message : String(err)}`,
+        true
+      );
+    }
+  }
+);
+server.tool(
+  "pay_merchant",
+  {
+    agentName: z.string().describe("Name of the locally-stored agent making the payment."),
+    merchantUrl: z.string().describe("Canonical merchant URL (stored on the payment record)."),
+    amount: z.number().int().positive().describe("Amount in cents."),
+    memo: z.string().describe("Human-readable memo attached to the payment."),
+    userId: z.string().optional().describe("Optional ArisPay end-user id. Required when the agent is in platform mode."),
+    rail: z.enum(["card", "crypto", "balance", "mpp"]).optional().describe("Force a specific rail. Default: server-picked based on agent mode + userId."),
+    merchantName: z.string().optional().describe("Optional human-readable merchant name."),
+    merchantCategoryCode: z.string().optional().describe("MCC for spend-limit enforcement.")
+  },
+  async ({ agentName, merchantUrl, amount, memo, userId, rail, merchantName, merchantCategoryCode }) => {
+    try {
+      const stored = getAgent(agentName);
+      if (!stored) {
+        return textResult(`No locally-stored agent named \`${agentName}\`.`, true);
+      }
+      const devKey = requireDevKey();
+      const client = new DelegationClient(arispayUrl, devKey);
+      const payment = await client.createPayment(stored.agentId, {
+        amount,
+        memo,
+        merchantUrl,
+        merchantName,
+        merchantCategoryCode,
+        userId,
+        rail
+      });
+      const lines = [
+        `Payment ${payment.id}: ${payment.status}`,
+        `  rail:    ${payment.rail}`,
+        `  amount:  ${payment.amount}\xA2 ${payment.currency}`
+      ];
+      if (payment.merchantName) lines.push(`  merchant: ${payment.merchantName}`);
+      if (payment.txHash) lines.push(`  tx hash:  ${payment.txHash}`);
+      if (payment.nextAction) {
+        lines.push(`  next action: ${payment.nextAction.type}`);
+        if (payment.nextAction.challengeUrl) {
+          lines.push(`  3DS challenge URL: ${payment.nextAction.challengeUrl}`);
+        }
+      }
+      if (payment.error) {
+        lines.push(`  error:   ${payment.error.code} \u2014 ${payment.error.message}`);
+      }
+      return textResult(lines.join("\n"), payment.status === "failed");
+    } catch (err) {
+      return textResult(
+        `pay_merchant failed: ${err instanceof Error ? err.message : String(err)}`,
+        true
+      );
+    }
+  }
+);
+server.tool(
+  "bootstrap_agent",
+  {
+    email: z.string().describe("Email for the new ArisPay developer account."),
+    name: z.string().optional().describe("Human name. Falls back to the email local-part."),
+    orgName: z.string().optional().describe(`Workspace / org name. Falls back to "<name>'s Team".`),
+    agentName: z.string().optional().describe('Local name for the provisioned agent. Default: "default".'),
+    perTx: z.number().int().positive().optional().describe("Per-tx cap in cents. Default: 50."),
+    daily: z.number().int().positive().optional().describe("Daily cap in cents. Default: 1000."),
+    monthly: z.number().int().positive().optional().describe("Monthly cap in cents. Default: 10000."),
+    allowedDomains: z.array(z.string()).optional().describe("Domains the agent may pay. Empty = unrestricted."),
+    fund: z.number().positive().optional().describe("Optional preset USD amount; mints a Coinbase Onramp URL pre-set to this value.")
+  },
+  async ({ email, name, orgName, agentName, perTx, daily, monthly, allowedDomains, fund }) => {
+    try {
+      const result = await bootstrapAgent({
+        email,
+        name,
+        orgName,
+        agentName,
+        limits: { perTx, daily, monthly },
+        allowedDomains,
+        fund,
+        arispayUrl: process.env.ARISPAY_URL,
+        clientId: "payagent-mcp-bootstrap"
+      });
+      const lines = [
+        `\u2713 Account: ${result.email}  (org \`${result.orgName}\`)`,
+        `\u2713 Agent:   ${result.agentName}  (${result.agentId})`,
+        `  Wallet:  ${result.walletAddress}  (${result.network})`,
+        `  Limits:  ${result.limits.perTx}\xA2 / tx, ${result.limits.daily}\xA2 / day, ${result.limits.monthly}\xA2 / month`,
+        ""
+      ];
+      if (result.fundingUrl) {
+        lines.push("Fund this wallet via Coinbase Onramp:");
+        lines.push(`  ${result.fundingUrl}`);
+        if (result.fundingExpiresAt) lines.push(`  URL valid until: ${result.fundingExpiresAt}`);
+        lines.push(`  Or send USDC on ${result.network} directly to ${result.walletAddress}.`);
+      } else {
+        if (result.fundingUrlError) {
+          lines.push(`Onramp not available (${result.fundingUrlError}).`);
+        }
+        lines.push(`Fund the wallet by sending USDC on ${result.network} to ${result.walletAddress}.`);
+        lines.push(
+          `Or call \`fund_agent\` with name="${result.agentName}", hosted=true to mint a Coinbase Onramp URL on demand.`
+        );
+      }
+      return textResult(lines.join("\n"));
+    } catch (err) {
+      if (err instanceof BootstrapError) {
+        return textResult(`bootstrap_agent failed (${err.code}): ${err.message}`, true);
+      }
+      return textResult(
+        `bootstrap_agent failed: ${err instanceof Error ? err.message : String(err)}`,
+        true
+      );
+    }
+  }
+);
+server.tool(
+  "list_agents",
+  {},
+  async () => {
+    const agents = listAgents();
+    if (!agents.length) {
+      return textResult("No agents stored locally. Create one with `create_agent`.");
     }
-    lines.push("", "Delegation limits + full spend history: https://payagent.arispay.app");
-    return {
-      content: [{ type: "text", text: lines.join("\n") }]
-    };
+    const lines = agents.map(
+      (a) => [
+        a.name,
+        `  agent id:  ${a.agentId}`,
+        `  wallet:    ${a.walletAddress}`,
+        `  network:   ${a.network ?? "base"}`,
+        `  limits:    ${a.limits.perTx}\xA2 / tx, ${a.limits.daily}\xA2 / day, ${a.limits.monthly}\xA2 / month`,
+        `  created:   ${a.createdAt}`
+      ].join("\n")
+    );
+    return textResult(lines.join("\n\n"));
   }
 );
 async function main() {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * payagent-mcp — MCP server that lets AI agents pay for APIs.\n *\n * Thin wrapper around `payagent`'s delegated signing path. No private keys\n * touch this process — ArisPay holds a Coinbase CDP-managed wallet and\n * enforces spend limits server-side.\n *\n * Configuration via environment variables:\n *   - ARISPAY_URL:         ArisPay API base URL (default: https://api.arispay.app)\n *   - ARISPAY_AGENT_KEY:   The agent-scoped API key returned by createX402Agent (required)\n *   - PAYAGENT_WALLET:     Optional wallet address for `check_wallet` tool output\n */\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { z } from 'zod';\nimport { payFetchDelegated, getUSDCBalance, formatUSDC } from 'payagent';\n\n// ── Config from env ─────────────────────────────────\n\nconst arispayUrl = process.env.ARISPAY_URL ?? 'https://api.arispay.app';\nconst agentKey = process.env.ARISPAY_AGENT_KEY;\nconst walletAddress = process.env.PAYAGENT_WALLET;\n\nif (!agentKey) {\n  console.error(\n    'Error: ARISPAY_AGENT_KEY environment variable is required.\\n' +\n    'Provision an agent at https://payagent.arispay.app to get a key.',\n  );\n  process.exit(1);\n}\n\nconst fetch402 = payFetchDelegated({\n  arispayUrl,\n  apiKey: agentKey,\n});\n\n// ── MCP Server ──────────────────────────────────────\n\nconst server = new McpServer({\n  name: 'payagent',\n  version: '2.0.0',\n});\n\nserver.tool(\n  'pay_api',\n  {\n    url: z.string().describe('The full URL of the API endpoint to call'),\n    method: z\n      .enum(['GET', 'POST', 'PUT', 'DELETE', 'PATCH'])\n      .default('GET')\n      .describe('HTTP method'),\n    headers: z\n      .record(z.string(), z.string())\n      .optional()\n      .describe('Additional HTTP headers to include'),\n    body: z\n      .string()\n      .optional()\n      .describe('Request body (for POST/PUT/PATCH)'),\n  },\n  async ({ url, method, headers, body }) => {\n    try {\n      const response = await fetch402(url, {\n        method,\n        headers,\n        body,\n      });\n      const responseBody = await response.text();\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: [\n              `HTTP ${response.status}`,\n              '',\n              responseBody,\n            ].join('\\n'),\n          },\n        ],\n      };\n    } catch (err) {\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `Error: ${err instanceof Error ? err.message : String(err)}`,\n          },\n        ],\n        isError: true,\n      };\n    }\n  },\n);\n\nserver.tool(\n  'check_wallet',\n  {},\n  async () => {\n    const lines = [\n      `ArisPay URL: ${arispayUrl}`,\n      `Agent key:   ${agentKey.slice(0, 10)}…`,\n    ];\n\n    if (walletAddress) {\n      lines.push(`Wallet:      ${walletAddress}`);\n      try {\n        const raw = await getUSDCBalance(walletAddress, 'base');\n        lines.push(`Balance:     ${formatUSDC(raw)} USDC on Base`);\n      } catch (err) {\n        lines.push(`Balance:     unavailable (${err instanceof Error ? err.message : String(err)})`);\n      }\n    } else {\n      lines.push('', 'Set PAYAGENT_WALLET=0x… in env to include on-chain balance.');\n    }\n\n    lines.push('', 'Delegation limits + full spend history: https://payagent.arispay.app');\n\n    return {\n      content: [{ type: 'text' as const, text: lines.join('\\n') }],\n    };\n  },\n);\n\n// ── Start ───────────────────────────────────────────\n\nasync function main() {\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n}\n\nmain().catch((err) => {\n  console.error('Fatal:', err);\n  process.exit(1);\n});\n"],"mappings":";;;AAYA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAClB,SAAS,mBAAmB,gBAAgB,kBAAkB;AAI9D,IAAM,aAAa,QAAQ,IAAI,eAAe;AAC9C,IAAM,WAAW,QAAQ,IAAI;AAC7B,IAAM,gBAAgB,QAAQ,IAAI;AAElC,IAAI,CAAC,UAAU;AACb,UAAQ;AAAA,IACN;AAAA,EAEF;AACA,UAAQ,KAAK,CAAC;AAChB;AAEA,IAAM,WAAW,kBAAkB;AAAA,EACjC;AAAA,EACA,QAAQ;AACV,CAAC;AAID,IAAM,SAAS,IAAI,UAAU;AAAA,EAC3B,MAAM;AAAA,EACN,SAAS;AACX,CAAC;AAED,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,KAAK,EAAE,OAAO,EAAE,SAAS,0CAA0C;AAAA,IACnE,QAAQ,EACL,KAAK,CAAC,OAAO,QAAQ,OAAO,UAAU,OAAO,CAAC,EAC9C,QAAQ,KAAK,EACb,SAAS,aAAa;AAAA,IACzB,SAAS,EACN,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAC7B,SAAS,EACT,SAAS,oCAAoC;AAAA,IAChD,MAAM,EACH,OAAO,EACP,SAAS,EACT,SAAS,mCAAmC;AAAA,EACjD;AAAA,EACA,OAAO,EAAE,KAAK,QAAQ,SAAS,KAAK,MAAM;AACxC,QAAI;AACF,YAAM,WAAW,MAAM,SAAS,KAAK;AAAA,QACnC;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,YAAM,eAAe,MAAM,SAAS,KAAK;AAEzC,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM;AAAA,cACJ,QAAQ,SAAS,MAAM;AAAA,cACvB;AAAA,cACA;AAAA,YACF,EAAE,KAAK,IAAI;AAAA,UACb;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,UAClE;AAAA,QACF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACF;AAEA,OAAO;AAAA,EACL;AAAA,EACA,CAAC;AAAA,EACD,YAAY;AACV,UAAM,QAAQ;AAAA,MACZ,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,SAAS,MAAM,GAAG,EAAE,CAAC;AAAA,IACvC;AAEA,QAAI,eAAe;AACjB,YAAM,KAAK,gBAAgB,aAAa,EAAE;AAC1C,UAAI;AACF,cAAM,MAAM,MAAM,eAAe,eAAe,MAAM;AACtD,cAAM,KAAK,gBAAgB,WAAW,GAAG,CAAC,eAAe;AAAA,MAC3D,SAAS,KAAK;AACZ,cAAM,KAAK,6BAA6B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG;AAAA,MAC7F;AAAA,IACF,OAAO;AACL,YAAM,KAAK,IAAI,kEAA6D;AAAA,IAC9E;AAEA,UAAM,KAAK,IAAI,sEAAsE;AAErF,WAAO;AAAA,MACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,MAAM,KAAK,IAAI,EAAE,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAIA,eAAe,OAAO;AACpB,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAChC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,MAAM,UAAU,GAAG;AAC3B,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/pay-api-helpers.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * payagent-mcp — MCP server for agent-side x402 payments + headless launch.\n *\n * Six tools over stdio:\n *   - pay_api(url, ...)        — paid HTTP request via delegated signing\n *   - check_wallet()           — report current agent credentials + on-chain balance\n *   - create_agent(...)        — provision a new x402 agent (calls /v1/agents/x402)\n *   - fund_agent({ name })     — return the wallet address + instructions for deposit\n *   - get_balance({ name })    — on-server USDC balance + fundedAt latch\n *   - list_agents()            — enumerate locally-cached agents\n *\n * Config store lives at ~/.payagent/config.json (shared with the `payagent`\n * CLI). Credentials created via `npx payagent init` + `payagent agent create`\n * are immediately available here; equally, agents created via\n * `create_agent` are immediately visible to the CLI.\n *\n * Two auth modes, picked at request time:\n *   1. Legacy single-agent: ARISPAY_AGENT_KEY set → pay_api + check_wallet use it directly.\n *   2. Multi-agent: no env var, credentials come from the shared config store.\n *      Management tools (create / fund / get_balance / list) always use the\n *      developer key from the config store (or ARISPAY_API_KEY env).\n */\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { z } from 'zod';\nimport {\n  DelegationClient,\n  HostedTopupNotConfiguredError,\n  bootstrapAgent,\n  BootstrapError,\n  formatUSDC,\n  getAgent,\n  getApiKey,\n  getArispayUrl,\n  getUSDCBalance,\n  launchAgent,\n  listAgents,\n  payFetchDelegated,\n  type StoredAgent,\n} from 'payagent';\nimport { looksLikeInsufficientFunds } from './pay-api-helpers.js';\n\n// ── Configuration ─────────────────────────────────────\n\nconst arispayUrl = getArispayUrl(process.env.ARISPAY_URL);\n/** Legacy single-agent key (kept for backwards compatibility). */\nconst legacyAgentKey = process.env.ARISPAY_AGENT_KEY;\nconst legacyWalletAddress = process.env.PAYAGENT_WALLET;\n\nfunction resolveAgent(name?: string): StoredAgent | undefined {\n  if (name) return getAgent(name);\n  const agents = listAgents();\n  return agents[0];\n}\n\n/**\n * Look up the agent-scoped key to use for paid requests.\n * Priority: explicit agent name → legacy env var → first stored agent.\n */\nfunction resolveAgentKey(name?: string): { key: string; source: string } | undefined {\n  if (name) {\n    const stored = getAgent(name);\n    if (stored) return { key: stored.apiKey, source: `agent \\`${name}\\`` };\n    return undefined;\n  }\n  if (legacyAgentKey) return { key: legacyAgentKey, source: 'ARISPAY_AGENT_KEY' };\n  const first = listAgents()[0];\n  if (first) return { key: first.apiKey, source: `agent \\`${first.name}\\`` };\n  return undefined;\n}\n\nfunction requireDevKey(): string {\n  const key = getApiKey();\n  if (!key) {\n    throw new Error(\n      'No ArisPay developer key found. Run `npx payagent init` or set ARISPAY_API_KEY.',\n    );\n  }\n  return key;\n}\n\nfunction textResult(text: string, isError = false) {\n  return {\n    content: [{ type: 'text' as const, text }],\n    ...(isError ? { isError } : {}),\n  };\n}\n\n// ── MCP Server ────────────────────────────────────────\n\nconst server = new McpServer({\n  name: 'payagent',\n  version: '2.1.0',\n});\n\n// --- pay_api ----------------------------------------------------------------\n\nserver.tool(\n  'pay_api',\n  {\n    url: z.string().describe('The full URL of the API endpoint to call'),\n    method: z\n      .enum(['GET', 'POST', 'PUT', 'DELETE', 'PATCH'])\n      .default('GET')\n      .describe('HTTP method'),\n    headers: z.record(z.string(), z.string()).optional().describe('Additional HTTP headers'),\n    body: z.string().optional().describe('Request body (for POST/PUT/PATCH)'),\n    agent: z\n      .string()\n      .optional()\n      .describe('Optional: name of a locally-stored agent to pay with. Defaults to ARISPAY_AGENT_KEY or the first stored agent.'),\n  },\n  async ({ url, method, headers, body, agent }) => {\n    const resolved = resolveAgentKey(agent);\n    if (!resolved) {\n      return textResult(\n        [\n          'No agent available. Cold-start in one call:',\n          '  bootstrap_agent({ email: \"you@example.com\", name: \"<your-name>\" })',\n          '',\n          'Or, if a developer key is already paired (`npx payagent init`):',\n          '  create_agent({ name, perTx, daily, monthly })',\n          '',\n          'Or set ARISPAY_AGENT_KEY for legacy single-agent mode.',\n        ].join('\\n'),\n        true,\n      );\n    }\n    try {\n      const fetch402 = payFetchDelegated({ arispayUrl, apiKey: resolved.key });\n      const response = await fetch402(url, { method, headers, body });\n      const responseBody = await response.text();\n      return textResult(\n        [`HTTP ${response.status} (paid via ${resolved.source})`, '', responseBody].join('\\n'),\n      );\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      // Detect \"agent wallet has no USDC\" — surface a Coinbase Onramp URL\n      // inline so Claude / the host doesn't have to make a second tool\n      // call to figure out the recovery path. We're conservative about\n      // the trigger: only do this on a 402-after-signed-payment with a\n      // funds-shaped error in the seller response. Other failures\n      // (allowed-domain block, agent suspended, network) propagate as-is.\n      if (looksLikeInsufficientFunds(message)) {\n        const onrampHint = await tryGetOnrampHint(agent);\n        return textResult(\n          [\n            `Error: ${message}`,\n            '',\n            'This looks like the agent wallet is out of USDC. Fund it and retry:',\n            ...(onrampHint ?? [\n              '  Use the `fund_agent` tool with hosted=true to mint a Coinbase Onramp URL,',\n              '  or send USDC on Base directly to the wallet address from `check_wallet`.',\n            ]),\n          ].join('\\n'),\n          true,\n        );\n      }\n      return textResult(`Error: ${message}`, true);\n    }\n  },\n);\n\n/**\n * Best-effort: mint an Onramp URL for the named agent (or the first one\n * in the local store). Returns the lines to append to the error message,\n * or `undefined` if we can't get one (no dev key, no Onramp configured,\n * no agent name resolvable).\n */\nasync function tryGetOnrampHint(agentName?: string): Promise<string[] | undefined> {\n  const stored = resolveAgent(agentName);\n  if (!stored) return undefined;\n  const devKey = getApiKey();\n  if (!devKey) return undefined;\n  try {\n    const client = new DelegationClient(arispayUrl, devKey);\n    const link = await client.getHostedTopup(stored.agentId, {});\n    return [\n      `  Coinbase Onramp:  ${link.fundingUrl}`,\n      `  URL valid until:  ${link.expiresAt}`,\n      `  Or send USDC on ${link.network} directly to ${link.walletAddress}`,\n    ];\n  } catch (err) {\n    if (err instanceof HostedTopupNotConfiguredError) return undefined;\n    return undefined;\n  }\n}\n\n// --- check_wallet ----------------------------------------------------------\n\nserver.tool(\n  'check_wallet',\n  {\n    agent: z\n      .string()\n      .optional()\n      .describe('Optional: name of a locally-stored agent. Defaults to legacy ARISPAY_WALLET mode.'),\n  },\n  async ({ agent }) => {\n    const resolved = resolveAgent(agent);\n    const walletAddress = resolved?.walletAddress ?? legacyWalletAddress;\n    const keyTail = resolved?.apiKey.slice(-4) ?? (legacyAgentKey ? legacyAgentKey.slice(-4) : undefined);\n\n    const lines = [`ArisPay URL: ${arispayUrl}`];\n    if (resolved) lines.push(`Agent:       ${resolved.name} (${resolved.agentId})`);\n    if (keyTail) lines.push(`Agent key:   ap_…${keyTail}`);\n\n    if (walletAddress) {\n      lines.push(`Wallet:      ${walletAddress}`);\n      try {\n        const raw = await getUSDCBalance(walletAddress, (resolved?.network as 'base') ?? 'base');\n        lines.push(`Balance:     ${formatUSDC(raw)} USDC on ${resolved?.network ?? 'base'}`);\n      } catch (err) {\n        lines.push(`Balance:     unavailable (${err instanceof Error ? err.message : String(err)})`);\n      }\n    } else {\n      lines.push('', 'No wallet known. Use `create_agent` or set PAYAGENT_WALLET for legacy mode.');\n    }\n\n    lines.push('', 'Manage limits + full history: https://arispay.app/dashboard');\n    return textResult(lines.join('\\n'));\n  },\n);\n\n// --- create_agent ----------------------------------------------------------\n\nserver.tool(\n  'create_agent',\n  {\n    name: z.string().describe('Local identifier for this agent. Used by later tools.'),\n    perTx: z.number().int().positive().describe('Per-transaction spend cap in cents.'),\n    daily: z.number().int().positive().describe('Daily spend cap in cents.'),\n    monthly: z.number().int().positive().describe('Monthly spend cap in cents.'),\n    allowedDomains: z\n      .array(z.string())\n      .optional()\n      .describe('If provided, restrict this agent to paying only these domains.'),\n    network: z\n      .enum(['base', 'base-sepolia', 'ethereum', 'polygon'])\n      .default('base')\n      .describe('EVM network the agent pays on.'),\n    agentType: z.string().optional().describe('Optional metadata label (e.g. \"hermes\").'),\n  },\n  async ({ name, perTx, daily, monthly, allowedDomains, network, agentType }) => {\n    try {\n      requireDevKey(); // fail fast with a helpful message if not signed in\n      const agent = await launchAgent({\n        name,\n        limits: { perTx, daily, monthly },\n        allowedDomains,\n        network,\n        agentType,\n      });\n      const lines = [\n        `✓ Agent \\`${name}\\` created.`,\n        `  Agent ID:  ${agent.agentId}`,\n        `  Wallet:    ${agent.walletAddress}`,\n        `  Network:   ${agent.network}`,\n        `  Limits:    ${perTx}¢ / tx, ${daily}¢ / day, ${monthly}¢ / month`,\n        '',\n        `  Fund the wallet with USDC on ${agent.network}, then call \\`get_balance\\` with name=\"${name}\".`,\n      ];\n      return textResult(lines.join('\\n'));\n    } catch (err) {\n      return textResult(`create_agent failed: ${err instanceof Error ? err.message : String(err)}`, true);\n    }\n  },\n);\n\n// --- fund_agent ------------------------------------------------------------\n\nserver.tool(\n  'fund_agent',\n  {\n    name: z.string().describe('Name of a locally-stored agent.'),\n    hosted: z\n      .boolean()\n      .optional()\n      .describe(\n        'If true, request a provider-hosted onramp URL (Coinbase, etc.) instead of the plain wallet address. Requires ARISPAY_ONRAMP_PROVIDER on the API deployment.',\n      ),\n    amount: z\n      .number()\n      .optional()\n      .describe('Preset top-up amount in dollars. Only meaningful with `hosted: true`.'),\n  },\n  async ({ name, hosted, amount }) => {\n    const stored = getAgent(name);\n    if (!stored) return textResult(`No locally-stored agent named \\`${name}\\`.`, true);\n\n    if (hosted) {\n      const devKey = getApiKey();\n      if (!devKey) {\n        return textResult(\n          'No ArisPay developer key found. Run `npx payagent init` first.',\n          true,\n        );\n      }\n      const client = new DelegationClient(arispayUrl, devKey);\n      try {\n        const link = await client.getHostedTopup(stored.agentId, { amount });\n        const lines = [\n          `Top up \\`${name}\\` via ${link.provider}:`,\n          '',\n          `  ${link.fundingUrl}`,\n          '',\n          `  Wallet:  ${link.walletAddress}`,\n          `  Network: ${link.network}`,\n          `  URL valid until: ${link.expiresAt}`,\n          '',\n          'Share that URL with the end-user; the onramp deposits USDC straight to the agent\\'s wallet.',\n        ];\n        return textResult(lines.join('\\n'));\n      } catch (err) {\n        if (err instanceof HostedTopupNotConfiguredError) {\n          return textResult(\n            [\n              'Hosted onramp is not configured on this ArisPay deployment.',\n              'Falling back to the manual path:',\n              '',\n              `  Send USDC on ${stored.network ?? 'base'} to ${stored.walletAddress}`,\n              '',\n              'Ask the deployment owner to set ARISPAY_ONRAMP_PROVIDER=coinbase (+ COINBASE_ONRAMP_APP_ID) to enable hosted top-ups.',\n            ].join('\\n'),\n          );\n        }\n        return textResult(\n          `fund_agent (hosted) failed: ${err instanceof Error ? err.message : String(err)}`,\n          true,\n        );\n      }\n    }\n\n    const lines = [\n      `Fund \\`${name}\\` by sending USDC on ${stored.network ?? 'base'} to:`,\n      '',\n      `  ${stored.walletAddress}`,\n      '',\n      'Pass `hosted: true` to get a Coinbase onramp URL instead (requires ARISPAY_ONRAMP_PROVIDER).',\n      'Call `get_balance` when the deposit lands.',\n    ];\n    return textResult(lines.join('\\n'));\n  },\n);\n\n// --- get_balance -----------------------------------------------------------\n\nserver.tool(\n  'get_balance',\n  {\n    name: z.string().describe('Name of a locally-stored agent.'),\n  },\n  async ({ name }) => {\n    const stored = getAgent(name);\n    if (!stored) return textResult(`No locally-stored agent named \\`${name}\\`.`, true);\n    try {\n      const devKey = requireDevKey();\n      const client = new DelegationClient(arispayUrl, devKey);\n      const balance = await client.getBalance(stored.agentId);\n      const human = formatUSDC(BigInt(balance.usdcBalance || '0'));\n      const lines = [\n        `${name}: ${human} USDC on ${balance.network}`,\n        balance.fundedAt\n          ? `  First funded at: ${balance.fundedAt}`\n          : '  Not yet funded.',\n        `  Wallet: ${balance.walletAddress}`,\n      ];\n      return textResult(lines.join('\\n'));\n    } catch (err) {\n      return textResult(`get_balance failed: ${err instanceof Error ? err.message : String(err)}`, true);\n    }\n  },\n);\n\n// --- create_enduser --------------------------------------------------------\n\nserver.tool(\n  'create_enduser',\n  {\n    externalId: z.string().describe('Your own stable id for this customer (e.g. `tg:12345`).'),\n    email: z.string().optional().describe('Optional email for compliance / receipts.'),\n    findOrCreate: z\n      .boolean()\n      .optional()\n      .describe('If true, return the existing user instead of erroring on externalId collision.'),\n  },\n  async ({ externalId, email, findOrCreate }) => {\n    try {\n      const devKey = requireDevKey();\n      const client = new DelegationClient(arispayUrl, devKey);\n      const user = await client.createEndUser({ externalId, email, findOrCreate });\n      const lines = [\n        `✓ End-user \\`${externalId}\\` ready.`,\n        `  ArisPay id:   ${user.id}`,\n        `  Has card:     ${user.hasPaymentMethod ? 'yes' : 'no'}`,\n        `  Has wallet:   ${user.hasWallet ? 'yes' : 'no'}`,\n      ];\n      return textResult(lines.join('\\n'));\n    } catch (err) {\n      return textResult(\n        `create_enduser failed: ${err instanceof Error ? err.message : String(err)}`,\n        true,\n      );\n    }\n  },\n);\n\n// --- attach_card_for_user -------------------------------------------------\n\nserver.tool(\n  'attach_card_for_user',\n  {\n    userId: z.string().describe('The ArisPay-internal end-user id (not externalId).'),\n    agentName: z\n      .string()\n      .optional()\n      .describe('Optional locally-stored agent name to scope the card-setup session to.'),\n  },\n  async ({ userId, agentName }) => {\n    try {\n      const devKey = requireDevKey();\n      const client = new DelegationClient(arispayUrl, devKey);\n      const agentId = agentName ? getAgent(agentName)?.agentId : undefined;\n      const session = await client.createCardSetupSession({ endUserId: userId, agentId });\n      const lines = [\n        `Card-entry URL for user \\`${userId}\\`:`,\n        '',\n        `  ${session.setupUrl}`,\n        '',\n        `  Expires at: ${session.expiresAt}`,\n        '',\n        'Share this URL with the end-user. They enter the card on ArisPay\\'s hosted page; we handle tokenization + 3DS.',\n        'Call `get_user_status` afterwards to confirm the card is attached.',\n      ];\n      return textResult(lines.join('\\n'));\n    } catch (err) {\n      return textResult(\n        `attach_card_for_user failed: ${err instanceof Error ? err.message : String(err)}`,\n        true,\n      );\n    }\n  },\n);\n\n// --- set_user_limits -------------------------------------------------------\n\nserver.tool(\n  'set_user_limits',\n  {\n    userId: z.string().describe('ArisPay-internal end-user id.'),\n    agentName: z.string().describe('Locally-stored agent name.'),\n    perTx: z.number().int().optional().describe('Per-transaction cap in cents. Omit to inherit agent defaults.'),\n    daily: z.number().int().optional().describe('Daily cap in cents.'),\n    monthly: z.number().int().optional().describe('Monthly cap in cents.'),\n    allowedMcc: z.array(z.string()).optional().describe('Allowed Merchant Category Codes.'),\n    blockedMcc: z.array(z.string()).optional().describe('Blocked MCCs.'),\n  },\n  async ({ userId, agentName, perTx, daily, monthly, allowedMcc, blockedMcc }) => {\n    try {\n      const stored = getAgent(agentName);\n      if (!stored) {\n        return textResult(`No locally-stored agent named \\`${agentName}\\`.`, true);\n      }\n      const devKey = requireDevKey();\n      const client = new DelegationClient(arispayUrl, devKey);\n      const limit = await client.setUserLimits(userId, {\n        agentId: stored.agentId,\n        maxPerTransaction: perTx ?? null,\n        maxDaily: daily ?? null,\n        maxMonthly: monthly ?? null,\n        allowedMerchantCategories: allowedMcc,\n        blockedMerchantCategories: blockedMcc,\n      });\n      return textResult(\n        [\n          `✓ Limits set for \\`${userId}\\` on agent \\`${agentName}\\`.`,\n          `  per-tx ${limit.maxPerTransaction ?? 'inherit'}¢, daily ${limit.maxDaily ?? 'inherit'}¢, monthly ${limit.maxMonthly ?? 'inherit'}¢`,\n        ].join('\\n'),\n      );\n    } catch (err) {\n      return textResult(\n        `set_user_limits failed: ${err instanceof Error ? err.message : String(err)}`,\n        true,\n      );\n    }\n  },\n);\n\n// --- get_user_status -------------------------------------------------------\n\nserver.tool(\n  'get_user_status',\n  {\n    userId: z.string().describe('ArisPay-internal end-user id.'),\n  },\n  async ({ userId }) => {\n    try {\n      const devKey = requireDevKey();\n      const client = new DelegationClient(arispayUrl, devKey);\n      const user = await client.getEndUser(userId);\n      const lines = [\n        `${user.externalId} (${user.id})`,\n        `  email:    ${user.email ?? '—'}`,\n        `  card:     ${user.hasPaymentMethod ? `${user.cardBrand ?? 'card'} …${user.cardLast4 ?? '????'}` : '—'}`,\n        `  wallet:   ${user.walletAddress ?? '—'}${user.walletChain ? ` on ${user.walletChain}` : ''}`,\n      ];\n      if (user.hasWallet) {\n        try {\n          const w = await client.getWalletStatus(userId);\n          lines.push(`  balance:   ${w.usdcBalance} USDC base units`);\n          lines.push(`  allowance: ${w.usdcAllowance} (${w.allowanceSufficient ? 'ok' : 'insufficient'})`);\n          lines.push(`  ready:     ${w.ready}`);\n        } catch {\n          // getWalletStatus fails if wallet not configured — ignore.\n        }\n      }\n      return textResult(lines.join('\\n'));\n    } catch (err) {\n      return textResult(\n        `get_user_status failed: ${err instanceof Error ? err.message : String(err)}`,\n        true,\n      );\n    }\n  },\n);\n\n// --- pay_merchant ----------------------------------------------------------\n\nserver.tool(\n  'pay_merchant',\n  {\n    agentName: z.string().describe('Name of the locally-stored agent making the payment.'),\n    merchantUrl: z.string().describe('Canonical merchant URL (stored on the payment record).'),\n    amount: z.number().int().positive().describe('Amount in cents.'),\n    memo: z.string().describe('Human-readable memo attached to the payment.'),\n    userId: z\n      .string()\n      .optional()\n      .describe('Optional ArisPay end-user id. Required when the agent is in platform mode.'),\n    rail: z\n      .enum(['card', 'crypto', 'balance', 'mpp'])\n      .optional()\n      .describe('Force a specific rail. Default: server-picked based on agent mode + userId.'),\n    merchantName: z.string().optional().describe('Optional human-readable merchant name.'),\n    merchantCategoryCode: z.string().optional().describe('MCC for spend-limit enforcement.'),\n  },\n  async ({ agentName, merchantUrl, amount, memo, userId, rail, merchantName, merchantCategoryCode }) => {\n    try {\n      const stored = getAgent(agentName);\n      if (!stored) {\n        return textResult(`No locally-stored agent named \\`${agentName}\\`.`, true);\n      }\n      const devKey = requireDevKey();\n      const client = new DelegationClient(arispayUrl, devKey);\n      const payment = await client.createPayment(stored.agentId, {\n        amount,\n        memo,\n        merchantUrl,\n        merchantName,\n        merchantCategoryCode,\n        userId,\n        rail,\n      });\n      const lines = [\n        `Payment ${payment.id}: ${payment.status}`,\n        `  rail:    ${payment.rail}`,\n        `  amount:  ${payment.amount}¢ ${payment.currency}`,\n      ];\n      if (payment.merchantName) lines.push(`  merchant: ${payment.merchantName}`);\n      if (payment.txHash) lines.push(`  tx hash:  ${payment.txHash}`);\n      if (payment.nextAction) {\n        lines.push(`  next action: ${payment.nextAction.type}`);\n        if (payment.nextAction.challengeUrl) {\n          lines.push(`  3DS challenge URL: ${payment.nextAction.challengeUrl}`);\n        }\n      }\n      if (payment.error) {\n        lines.push(`  error:   ${payment.error.code} — ${payment.error.message}`);\n      }\n      return textResult(lines.join('\\n'), payment.status === 'failed');\n    } catch (err) {\n      return textResult(\n        `pay_merchant failed: ${err instanceof Error ? err.message : String(err)}`,\n        true,\n      );\n    }\n  },\n);\n\n// --- bootstrap_agent -------------------------------------------------------\n//\n// Cold-start primitive: signs up a developer + provisions an agent in one\n// MCP tool call, no `payagent init` required first. Backed by\n// `POST /v1/bootstrap` on the API. Persists results to the same\n// ~/.payagent/config.json the CLI uses, so afterwards every other tool\n// (`pay_api`, `check_wallet`, `get_balance`, `fund_agent`) just works.\n\nserver.tool(\n  'bootstrap_agent',\n  {\n    email: z.string().describe('Email for the new ArisPay developer account.'),\n    name: z.string().optional().describe('Human name. Falls back to the email local-part.'),\n    orgName: z.string().optional().describe('Workspace / org name. Falls back to \"<name>\\'s Team\".'),\n    agentName: z.string().optional().describe('Local name for the provisioned agent. Default: \"default\".'),\n    perTx: z.number().int().positive().optional().describe('Per-tx cap in cents. Default: 50.'),\n    daily: z.number().int().positive().optional().describe('Daily cap in cents. Default: 1000.'),\n    monthly: z.number().int().positive().optional().describe('Monthly cap in cents. Default: 10000.'),\n    allowedDomains: z\n      .array(z.string())\n      .optional()\n      .describe('Domains the agent may pay. Empty = unrestricted.'),\n    fund: z\n      .number()\n      .positive()\n      .optional()\n      .describe('Optional preset USD amount; mints a Coinbase Onramp URL pre-set to this value.'),\n  },\n  async ({ email, name, orgName, agentName, perTx, daily, monthly, allowedDomains, fund }) => {\n    try {\n      const result = await bootstrapAgent({\n        email,\n        name,\n        orgName,\n        agentName,\n        limits: { perTx, daily, monthly },\n        allowedDomains,\n        fund,\n        arispayUrl: process.env.ARISPAY_URL,\n        clientId: 'payagent-mcp-bootstrap',\n      });\n      const lines = [\n        `✓ Account: ${result.email}  (org \\`${result.orgName}\\`)`,\n        `✓ Agent:   ${result.agentName}  (${result.agentId})`,\n        `  Wallet:  ${result.walletAddress}  (${result.network})`,\n        `  Limits:  ${result.limits.perTx}¢ / tx, ${result.limits.daily}¢ / day, ${result.limits.monthly}¢ / month`,\n        '',\n      ];\n      if (result.fundingUrl) {\n        lines.push('Fund this wallet via Coinbase Onramp:');\n        lines.push(`  ${result.fundingUrl}`);\n        if (result.fundingExpiresAt) lines.push(`  URL valid until: ${result.fundingExpiresAt}`);\n        lines.push(`  Or send USDC on ${result.network} directly to ${result.walletAddress}.`);\n      } else {\n        if (result.fundingUrlError) {\n          lines.push(`Onramp not available (${result.fundingUrlError}).`);\n        }\n        lines.push(`Fund the wallet by sending USDC on ${result.network} to ${result.walletAddress}.`);\n        lines.push(\n          `Or call \\`fund_agent\\` with name=\"${result.agentName}\", hosted=true to mint a Coinbase Onramp URL on demand.`,\n        );\n      }\n      return textResult(lines.join('\\n'));\n    } catch (err) {\n      if (err instanceof BootstrapError) {\n        return textResult(`bootstrap_agent failed (${err.code}): ${err.message}`, true);\n      }\n      return textResult(\n        `bootstrap_agent failed: ${err instanceof Error ? err.message : String(err)}`,\n        true,\n      );\n    }\n  },\n);\n\n// --- list_agents -----------------------------------------------------------\n\nserver.tool(\n  'list_agents',\n  {},\n  async () => {\n    const agents = listAgents();\n    if (!agents.length) {\n      return textResult('No agents stored locally. Create one with `create_agent`.');\n    }\n    const lines = agents.map((a) =>\n      [\n        a.name,\n        `  agent id:  ${a.agentId}`,\n        `  wallet:    ${a.walletAddress}`,\n        `  network:   ${a.network ?? 'base'}`,\n        `  limits:    ${a.limits.perTx}¢ / tx, ${a.limits.daily}¢ / day, ${a.limits.monthly}¢ / month`,\n        `  created:   ${a.createdAt}`,\n      ].join('\\n'),\n    );\n    return textResult(lines.join('\\n\\n'));\n  },\n);\n\n// ── Start ─────────────────────────────────────────────\n\nasync function main() {\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n}\n\nmain().catch((err) => {\n  console.error('Fatal:', err);\n  process.exit(1);\n});\n","/**\n * Helpers for the `pay_api` MCP tool.\n *\n * Extracted into their own module so the heuristic that triggers\n * automatic Onramp-URL surfacing is unit-testable. The trigger has to\n * be conservative — false positives turn legitimate errors (allowed-\n * domain blocks, suspended agents) into misleading \"fund your wallet\"\n * suggestions.\n */\n\n/**\n * Does this error message look like the agent's USDC ran out?\n *\n * The signal we trust is `PaymentRejectedError(402, \"Server returned 402\n * after payment was signed and sent. Seller response: ...\")` from\n * `payFetchDelegated`, where the seller's body contains a funds- or\n * balance-shaped token. We do not pre-flight balance on every call —\n * that would add a round-trip to the warm path. Post-hoc detection\n * only, and only when both the 402 status AND a balance keyword\n * appear in the same message.\n */\nexport function looksLikeInsufficientFunds(message: string): boolean {\n  if (!/402/.test(message)) return false;\n  return /insufficient|insufficient_funds|insufficient_balance|exceeds_balance|invalid_transfer/i.test(\n    message,\n  );\n}\n"],"mappings":";;;;AAuBA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACnBA,SAAS,2BAA2B,SAA0B;AACnE,MAAI,CAAC,MAAM,KAAK,OAAO,EAAG,QAAO;AACjC,SAAO,yFAAyF;AAAA,IAC9F;AAAA,EACF;AACF;;;ADmBA,IAAM,aAAa,cAAc,QAAQ,IAAI,WAAW;AAExD,IAAM,iBAAiB,QAAQ,IAAI;AACnC,IAAM,sBAAsB,QAAQ,IAAI;AAExC,SAAS,aAAa,MAAwC;AAC5D,MAAI,KAAM,QAAO,SAAS,IAAI;AAC9B,QAAM,SAAS,WAAW;AAC1B,SAAO,OAAO,CAAC;AACjB;AAMA,SAAS,gBAAgB,MAA4D;AACnF,MAAI,MAAM;AACR,UAAM,SAAS,SAAS,IAAI;AAC5B,QAAI,OAAQ,QAAO,EAAE,KAAK,OAAO,QAAQ,QAAQ,WAAW,IAAI,KAAK;AACrE,WAAO;AAAA,EACT;AACA,MAAI,eAAgB,QAAO,EAAE,KAAK,gBAAgB,QAAQ,oBAAoB;AAC9E,QAAM,QAAQ,WAAW,EAAE,CAAC;AAC5B,MAAI,MAAO,QAAO,EAAE,KAAK,MAAM,QAAQ,QAAQ,WAAW,MAAM,IAAI,KAAK;AACzE,SAAO;AACT;AAEA,SAAS,gBAAwB;AAC/B,QAAM,MAAM,UAAU;AACtB,MAAI,CAAC,KAAK;AACR,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,MAAc,UAAU,OAAO;AACjD,SAAO;AAAA,IACL,SAAS,CAAC,EAAE,MAAM,QAAiB,KAAK,CAAC;AAAA,IACzC,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B;AACF;AAIA,IAAM,SAAS,IAAI,UAAU;AAAA,EAC3B,MAAM;AAAA,EACN,SAAS;AACX,CAAC;AAID,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,KAAK,EAAE,OAAO,EAAE,SAAS,0CAA0C;AAAA,IACnE,QAAQ,EACL,KAAK,CAAC,OAAO,QAAQ,OAAO,UAAU,OAAO,CAAC,EAC9C,QAAQ,KAAK,EACb,SAAS,aAAa;AAAA,IACzB,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,yBAAyB;AAAA,IACvF,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,mCAAmC;AAAA,IACxE,OAAO,EACJ,OAAO,EACP,SAAS,EACT,SAAS,gHAAgH;AAAA,EAC9H;AAAA,EACA,OAAO,EAAE,KAAK,QAAQ,SAAS,MAAM,MAAM,MAAM;AAC/C,UAAM,WAAW,gBAAgB,KAAK;AACtC,QAAI,CAAC,UAAU;AACb,aAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,EAAE,KAAK,IAAI;AAAA,QACX;AAAA,MACF;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,kBAAkB,EAAE,YAAY,QAAQ,SAAS,IAAI,CAAC;AACvE,YAAM,WAAW,MAAM,SAAS,KAAK,EAAE,QAAQ,SAAS,KAAK,CAAC;AAC9D,YAAM,eAAe,MAAM,SAAS,KAAK;AACzC,aAAO;AAAA,QACL,CAAC,QAAQ,SAAS,MAAM,cAAc,SAAS,MAAM,KAAK,IAAI,YAAY,EAAE,KAAK,IAAI;AAAA,MACvF;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAO/D,UAAI,2BAA2B,OAAO,GAAG;AACvC,cAAM,aAAa,MAAM,iBAAiB,KAAK;AAC/C,eAAO;AAAA,UACL;AAAA,YACE,UAAU,OAAO;AAAA,YACjB;AAAA,YACA;AAAA,YACA,GAAI,cAAc;AAAA,cAChB;AAAA,cACA;AAAA,YACF;AAAA,UACF,EAAE,KAAK,IAAI;AAAA,UACX;AAAA,QACF;AAAA,MACF;AACA,aAAO,WAAW,UAAU,OAAO,IAAI,IAAI;AAAA,IAC7C;AAAA,EACF;AACF;AAQA,eAAe,iBAAiB,WAAmD;AACjF,QAAM,SAAS,aAAa,SAAS;AACrC,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,UAAU;AACzB,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI;AACF,UAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,UAAM,OAAO,MAAM,OAAO,eAAe,OAAO,SAAS,CAAC,CAAC;AAC3D,WAAO;AAAA,MACL,uBAAuB,KAAK,UAAU;AAAA,MACtC,uBAAuB,KAAK,SAAS;AAAA,MACrC,qBAAqB,KAAK,OAAO,gBAAgB,KAAK,aAAa;AAAA,IACrE;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,8BAA+B,QAAO;AACzD,WAAO;AAAA,EACT;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,OAAO,EACJ,OAAO,EACP,SAAS,EACT,SAAS,mFAAmF;AAAA,EACjG;AAAA,EACA,OAAO,EAAE,MAAM,MAAM;AACnB,UAAM,WAAW,aAAa,KAAK;AACnC,UAAM,gBAAgB,UAAU,iBAAiB;AACjD,UAAM,UAAU,UAAU,OAAO,MAAM,EAAE,MAAM,iBAAiB,eAAe,MAAM,EAAE,IAAI;AAE3F,UAAM,QAAQ,CAAC,gBAAgB,UAAU,EAAE;AAC3C,QAAI,SAAU,OAAM,KAAK,gBAAgB,SAAS,IAAI,KAAK,SAAS,OAAO,GAAG;AAC9E,QAAI,QAAS,OAAM,KAAK,yBAAoB,OAAO,EAAE;AAErD,QAAI,eAAe;AACjB,YAAM,KAAK,gBAAgB,aAAa,EAAE;AAC1C,UAAI;AACF,cAAM,MAAM,MAAM,eAAe,eAAgB,UAAU,WAAsB,MAAM;AACvF,cAAM,KAAK,gBAAgB,WAAW,GAAG,CAAC,YAAY,UAAU,WAAW,MAAM,EAAE;AAAA,MACrF,SAAS,KAAK;AACZ,cAAM,KAAK,6BAA6B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG;AAAA,MAC7F;AAAA,IACF,OAAO;AACL,YAAM,KAAK,IAAI,6EAA6E;AAAA,IAC9F;AAEA,UAAM,KAAK,IAAI,6DAA6D;AAC5E,WAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,EACpC;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,MAAM,EAAE,OAAO,EAAE,SAAS,uDAAuD;AAAA,IACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,qCAAqC;AAAA,IACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,2BAA2B;AAAA,IACvE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,6BAA6B;AAAA,IAC3E,gBAAgB,EACb,MAAM,EAAE,OAAO,CAAC,EAChB,SAAS,EACT,SAAS,gEAAgE;AAAA,IAC5E,SAAS,EACN,KAAK,CAAC,QAAQ,gBAAgB,YAAY,SAAS,CAAC,EACpD,QAAQ,MAAM,EACd,SAAS,gCAAgC;AAAA,IAC5C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,0CAA0C;AAAA,EACtF;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,OAAO,SAAS,gBAAgB,SAAS,UAAU,MAAM;AAC7E,QAAI;AACF,oBAAc;AACd,YAAM,QAAQ,MAAM,YAAY;AAAA,QAC9B;AAAA,QACA,QAAQ,EAAE,OAAO,OAAO,QAAQ;AAAA,QAChC;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,YAAM,QAAQ;AAAA,QACZ,kBAAa,IAAI;AAAA,QACjB,gBAAgB,MAAM,OAAO;AAAA,QAC7B,gBAAgB,MAAM,aAAa;AAAA,QACnC,gBAAgB,MAAM,OAAO;AAAA,QAC7B,gBAAgB,KAAK,cAAW,KAAK,eAAY,OAAO;AAAA,QACxD;AAAA,QACA,kCAAkC,MAAM,OAAO,0CAA0C,IAAI;AAAA,MAC/F;AACA,aAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,IACpC,SAAS,KAAK;AACZ,aAAO,WAAW,wBAAwB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,IAAI,IAAI;AAAA,IACpG;AAAA,EACF;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,MAAM,EAAE,OAAO,EAAE,SAAS,iCAAiC;AAAA,IAC3D,QAAQ,EACL,QAAQ,EACR,SAAS,EACT;AAAA,MACC;AAAA,IACF;AAAA,IACF,QAAQ,EACL,OAAO,EACP,SAAS,EACT,SAAS,uEAAuE;AAAA,EACrF;AAAA,EACA,OAAO,EAAE,MAAM,QAAQ,OAAO,MAAM;AAClC,UAAM,SAAS,SAAS,IAAI;AAC5B,QAAI,CAAC,OAAQ,QAAO,WAAW,mCAAmC,IAAI,OAAO,IAAI;AAEjF,QAAI,QAAQ;AACV,YAAM,SAAS,UAAU;AACzB,UAAI,CAAC,QAAQ;AACX,eAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,YAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,UAAI;AACF,cAAM,OAAO,MAAM,OAAO,eAAe,OAAO,SAAS,EAAE,OAAO,CAAC;AACnE,cAAMA,SAAQ;AAAA,UACZ,YAAY,IAAI,UAAU,KAAK,QAAQ;AAAA,UACvC;AAAA,UACA,KAAK,KAAK,UAAU;AAAA,UACpB;AAAA,UACA,cAAc,KAAK,aAAa;AAAA,UAChC,cAAc,KAAK,OAAO;AAAA,UAC1B,sBAAsB,KAAK,SAAS;AAAA,UACpC;AAAA,UACA;AAAA,QACF;AACA,eAAO,WAAWA,OAAM,KAAK,IAAI,CAAC;AAAA,MACpC,SAAS,KAAK;AACZ,YAAI,eAAe,+BAA+B;AAChD,iBAAO;AAAA,YACL;AAAA,cACE;AAAA,cACA;AAAA,cACA;AAAA,cACA,kBAAkB,OAAO,WAAW,MAAM,OAAO,OAAO,aAAa;AAAA,cACrE;AAAA,cACA;AAAA,YACF,EAAE,KAAK,IAAI;AAAA,UACb;AAAA,QACF;AACA,eAAO;AAAA,UACL,+BAA+B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,UAC/E;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ,UAAU,IAAI,yBAAyB,OAAO,WAAW,MAAM;AAAA,MAC/D;AAAA,MACA,KAAK,OAAO,aAAa;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,EACpC;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,MAAM,EAAE,OAAO,EAAE,SAAS,iCAAiC;AAAA,EAC7D;AAAA,EACA,OAAO,EAAE,KAAK,MAAM;AAClB,UAAM,SAAS,SAAS,IAAI;AAC5B,QAAI,CAAC,OAAQ,QAAO,WAAW,mCAAmC,IAAI,OAAO,IAAI;AACjF,QAAI;AACF,YAAM,SAAS,cAAc;AAC7B,YAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,YAAM,UAAU,MAAM,OAAO,WAAW,OAAO,OAAO;AACtD,YAAM,QAAQ,WAAW,OAAO,QAAQ,eAAe,GAAG,CAAC;AAC3D,YAAM,QAAQ;AAAA,QACZ,GAAG,IAAI,KAAK,KAAK,YAAY,QAAQ,OAAO;AAAA,QAC5C,QAAQ,WACJ,sBAAsB,QAAQ,QAAQ,KACtC;AAAA,QACJ,aAAa,QAAQ,aAAa;AAAA,MACpC;AACA,aAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,IACpC,SAAS,KAAK;AACZ,aAAO,WAAW,uBAAuB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,IAAI,IAAI;AAAA,IACnG;AAAA,EACF;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,YAAY,EAAE,OAAO,EAAE,SAAS,yDAAyD;AAAA,IACzF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,2CAA2C;AAAA,IACjF,cAAc,EACX,QAAQ,EACR,SAAS,EACT,SAAS,gFAAgF;AAAA,EAC9F;AAAA,EACA,OAAO,EAAE,YAAY,OAAO,aAAa,MAAM;AAC7C,QAAI;AACF,YAAM,SAAS,cAAc;AAC7B,YAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,YAAM,OAAO,MAAM,OAAO,cAAc,EAAE,YAAY,OAAO,aAAa,CAAC;AAC3E,YAAM,QAAQ;AAAA,QACZ,qBAAgB,UAAU;AAAA,QAC1B,mBAAmB,KAAK,EAAE;AAAA,QAC1B,mBAAmB,KAAK,mBAAmB,QAAQ,IAAI;AAAA,QACvD,mBAAmB,KAAK,YAAY,QAAQ,IAAI;AAAA,MAClD;AACA,aAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,IACpC,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAC1E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,QAAQ,EAAE,OAAO,EAAE,SAAS,oDAAoD;AAAA,IAChF,WAAW,EACR,OAAO,EACP,SAAS,EACT,SAAS,wEAAwE;AAAA,EACtF;AAAA,EACA,OAAO,EAAE,QAAQ,UAAU,MAAM;AAC/B,QAAI;AACF,YAAM,SAAS,cAAc;AAC7B,YAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,YAAM,UAAU,YAAY,SAAS,SAAS,GAAG,UAAU;AAC3D,YAAM,UAAU,MAAM,OAAO,uBAAuB,EAAE,WAAW,QAAQ,QAAQ,CAAC;AAClF,YAAM,QAAQ;AAAA,QACZ,6BAA6B,MAAM;AAAA,QACnC;AAAA,QACA,KAAK,QAAQ,QAAQ;AAAA,QACrB;AAAA,QACA,iBAAiB,QAAQ,SAAS;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,IACpC,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAChF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,QAAQ,EAAE,OAAO,EAAE,SAAS,+BAA+B;AAAA,IAC3D,WAAW,EAAE,OAAO,EAAE,SAAS,4BAA4B;AAAA,IAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,+DAA+D;AAAA,IAC3G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,qBAAqB;AAAA,IACjE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,uBAAuB;AAAA,IACrE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,kCAAkC;AAAA,IACtF,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,eAAe;AAAA,EACrE;AAAA,EACA,OAAO,EAAE,QAAQ,WAAW,OAAO,OAAO,SAAS,YAAY,WAAW,MAAM;AAC9E,QAAI;AACF,YAAM,SAAS,SAAS,SAAS;AACjC,UAAI,CAAC,QAAQ;AACX,eAAO,WAAW,mCAAmC,SAAS,OAAO,IAAI;AAAA,MAC3E;AACA,YAAM,SAAS,cAAc;AAC7B,YAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,YAAM,QAAQ,MAAM,OAAO,cAAc,QAAQ;AAAA,QAC/C,SAAS,OAAO;AAAA,QAChB,mBAAmB,SAAS;AAAA,QAC5B,UAAU,SAAS;AAAA,QACnB,YAAY,WAAW;AAAA,QACvB,2BAA2B;AAAA,QAC3B,2BAA2B;AAAA,MAC7B,CAAC;AACD,aAAO;AAAA,QACL;AAAA,UACE,2BAAsB,MAAM,iBAAiB,SAAS;AAAA,UACtD,YAAY,MAAM,qBAAqB,SAAS,eAAY,MAAM,YAAY,SAAS,iBAAc,MAAM,cAAc,SAAS;AAAA,QACpI,EAAE,KAAK,IAAI;AAAA,MACb;AAAA,IACF,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,QAAQ,EAAE,OAAO,EAAE,SAAS,+BAA+B;AAAA,EAC7D;AAAA,EACA,OAAO,EAAE,OAAO,MAAM;AACpB,QAAI;AACF,YAAM,SAAS,cAAc;AAC7B,YAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,YAAM,OAAO,MAAM,OAAO,WAAW,MAAM;AAC3C,YAAM,QAAQ;AAAA,QACZ,GAAG,KAAK,UAAU,KAAK,KAAK,EAAE;AAAA,QAC9B,eAAe,KAAK,SAAS,QAAG;AAAA,QAChC,eAAe,KAAK,mBAAmB,GAAG,KAAK,aAAa,MAAM,UAAK,KAAK,aAAa,MAAM,KAAK,QAAG;AAAA,QACvG,eAAe,KAAK,iBAAiB,QAAG,GAAG,KAAK,cAAc,OAAO,KAAK,WAAW,KAAK,EAAE;AAAA,MAC9F;AACA,UAAI,KAAK,WAAW;AAClB,YAAI;AACF,gBAAM,IAAI,MAAM,OAAO,gBAAgB,MAAM;AAC7C,gBAAM,KAAK,gBAAgB,EAAE,WAAW,kBAAkB;AAC1D,gBAAM,KAAK,gBAAgB,EAAE,aAAa,KAAK,EAAE,sBAAsB,OAAO,cAAc,GAAG;AAC/F,gBAAM,KAAK,gBAAgB,EAAE,KAAK,EAAE;AAAA,QACtC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,IACpC,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,WAAW,EAAE,OAAO,EAAE,SAAS,sDAAsD;AAAA,IACrF,aAAa,EAAE,OAAO,EAAE,SAAS,wDAAwD;AAAA,IACzF,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,kBAAkB;AAAA,IAC/D,MAAM,EAAE,OAAO,EAAE,SAAS,8CAA8C;AAAA,IACxE,QAAQ,EACL,OAAO,EACP,SAAS,EACT,SAAS,4EAA4E;AAAA,IACxF,MAAM,EACH,KAAK,CAAC,QAAQ,UAAU,WAAW,KAAK,CAAC,EACzC,SAAS,EACT,SAAS,6EAA6E;AAAA,IACzF,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,wCAAwC;AAAA,IACrF,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,kCAAkC;AAAA,EACzF;AAAA,EACA,OAAO,EAAE,WAAW,aAAa,QAAQ,MAAM,QAAQ,MAAM,cAAc,qBAAqB,MAAM;AACpG,QAAI;AACF,YAAM,SAAS,SAAS,SAAS;AACjC,UAAI,CAAC,QAAQ;AACX,eAAO,WAAW,mCAAmC,SAAS,OAAO,IAAI;AAAA,MAC3E;AACA,YAAM,SAAS,cAAc;AAC7B,YAAM,SAAS,IAAI,iBAAiB,YAAY,MAAM;AACtD,YAAM,UAAU,MAAM,OAAO,cAAc,OAAO,SAAS;AAAA,QACzD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,YAAM,QAAQ;AAAA,QACZ,WAAW,QAAQ,EAAE,KAAK,QAAQ,MAAM;AAAA,QACxC,cAAc,QAAQ,IAAI;AAAA,QAC1B,cAAc,QAAQ,MAAM,QAAK,QAAQ,QAAQ;AAAA,MACnD;AACA,UAAI,QAAQ,aAAc,OAAM,KAAK,eAAe,QAAQ,YAAY,EAAE;AAC1E,UAAI,QAAQ,OAAQ,OAAM,KAAK,eAAe,QAAQ,MAAM,EAAE;AAC9D,UAAI,QAAQ,YAAY;AACtB,cAAM,KAAK,kBAAkB,QAAQ,WAAW,IAAI,EAAE;AACtD,YAAI,QAAQ,WAAW,cAAc;AACnC,gBAAM,KAAK,wBAAwB,QAAQ,WAAW,YAAY,EAAE;AAAA,QACtE;AAAA,MACF;AACA,UAAI,QAAQ,OAAO;AACjB,cAAM,KAAK,cAAc,QAAQ,MAAM,IAAI,WAAM,QAAQ,MAAM,OAAO,EAAE;AAAA,MAC1E;AACA,aAAO,WAAW,MAAM,KAAK,IAAI,GAAG,QAAQ,WAAW,QAAQ;AAAA,IACjE,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,wBAAwB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACxE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAUA,OAAO;AAAA,EACL;AAAA,EACA;AAAA,IACE,OAAO,EAAE,OAAO,EAAE,SAAS,8CAA8C;AAAA,IACzE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,iDAAiD;AAAA,IACtF,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,sDAAuD;AAAA,IAC/F,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,2DAA2D;AAAA,IACrG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,mCAAmC;AAAA,IAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,oCAAoC;AAAA,IAC3F,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,uCAAuC;AAAA,IAChG,gBAAgB,EACb,MAAM,EAAE,OAAO,CAAC,EAChB,SAAS,EACT,SAAS,kDAAkD;AAAA,IAC9D,MAAM,EACH,OAAO,EACP,SAAS,EACT,SAAS,EACT,SAAS,gFAAgF;AAAA,EAC9F;AAAA,EACA,OAAO,EAAE,OAAO,MAAM,SAAS,WAAW,OAAO,OAAO,SAAS,gBAAgB,KAAK,MAAM;AAC1F,QAAI;AACF,YAAM,SAAS,MAAM,eAAe;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,EAAE,OAAO,OAAO,QAAQ;AAAA,QAChC;AAAA,QACA;AAAA,QACA,YAAY,QAAQ,IAAI;AAAA,QACxB,UAAU;AAAA,MACZ,CAAC;AACD,YAAM,QAAQ;AAAA,QACZ,mBAAc,OAAO,KAAK,YAAY,OAAO,OAAO;AAAA,QACpD,mBAAc,OAAO,SAAS,MAAM,OAAO,OAAO;AAAA,QAClD,cAAc,OAAO,aAAa,MAAM,OAAO,OAAO;AAAA,QACtD,cAAc,OAAO,OAAO,KAAK,cAAW,OAAO,OAAO,KAAK,eAAY,OAAO,OAAO,OAAO;AAAA,QAChG;AAAA,MACF;AACA,UAAI,OAAO,YAAY;AACrB,cAAM,KAAK,uCAAuC;AAClD,cAAM,KAAK,KAAK,OAAO,UAAU,EAAE;AACnC,YAAI,OAAO,iBAAkB,OAAM,KAAK,sBAAsB,OAAO,gBAAgB,EAAE;AACvF,cAAM,KAAK,qBAAqB,OAAO,OAAO,gBAAgB,OAAO,aAAa,GAAG;AAAA,MACvF,OAAO;AACL,YAAI,OAAO,iBAAiB;AAC1B,gBAAM,KAAK,yBAAyB,OAAO,eAAe,IAAI;AAAA,QAChE;AACA,cAAM,KAAK,sCAAsC,OAAO,OAAO,OAAO,OAAO,aAAa,GAAG;AAC7F,cAAM;AAAA,UACJ,qCAAqC,OAAO,SAAS;AAAA,QACvD;AAAA,MACF;AACA,aAAO,WAAW,MAAM,KAAK,IAAI,CAAC;AAAA,IACpC,SAAS,KAAK;AACZ,UAAI,eAAe,gBAAgB;AACjC,eAAO,WAAW,2BAA2B,IAAI,IAAI,MAAM,IAAI,OAAO,IAAI,IAAI;AAAA,MAChF;AACA,aAAO;AAAA,QACL,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAIA,OAAO;AAAA,EACL;AAAA,EACA,CAAC;AAAA,EACD,YAAY;AACV,UAAM,SAAS,WAAW;AAC1B,QAAI,CAAC,OAAO,QAAQ;AAClB,aAAO,WAAW,2DAA2D;AAAA,IAC/E;AACA,UAAM,QAAQ,OAAO;AAAA,MAAI,CAAC,MACxB;AAAA,QACE,EAAE;AAAA,QACF,gBAAgB,EAAE,OAAO;AAAA,QACzB,gBAAgB,EAAE,aAAa;AAAA,QAC/B,gBAAgB,EAAE,WAAW,MAAM;AAAA,QACnC,gBAAgB,EAAE,OAAO,KAAK,cAAW,EAAE,OAAO,KAAK,eAAY,EAAE,OAAO,OAAO;AAAA,QACnF,gBAAgB,EAAE,SAAS;AAAA,MAC7B,EAAE,KAAK,IAAI;AAAA,IACb;AACA,WAAO,WAAW,MAAM,KAAK,MAAM,CAAC;AAAA,EACtC;AACF;AAIA,eAAe,OAAO;AACpB,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAChC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,MAAM,UAAU,GAAG;AAC3B,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["lines"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arispay/payagent-mcp",
-  "version": "2.0.2",
+  "version": "2.6.0",
   "description": "MCP server for ArisPay-delegated x402 USDC payments. Use with Claude Desktop, Cursor, or any MCP client — no private keys in your process.",
   "type": "module",
   "bin": {
@@ -12,9 +12,13 @@
     "README.md",
     "LICENSE"
   ],
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
+    "type-check": "tsc --noEmit",
     "prepublishOnly": "npm run build"
   },
   "keywords": [
@@ -46,7 +50,7 @@
   "homepage": "https://github.com/arispay-inc/payagent-mcp#readme",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "payagent": "^2.0.0",
+    "payagent": "workspace:^",
     "zod": "^3.25.0"
   },
   "devDependencies": {