@cmdoss/suipay-mcp 0.2.2-dev.0 → 0.2.2

package/dist/http.d.ts

@@ -1,8 +1,3 @@
-export { m as handleSuipayMcpHttpRequest } from './http-B4YTVw0k.js';
-import '@cmdoss/suipay-core/policy/grant-target';
-import '@cmdoss/suipay-sdk/mcp/access-context';
-import '@cmdoss/suipay-sdk/buyer/settlement-dto';
+export { q as handleSuipayMcpHttpRequest } from './http-BnIjiwcR.js';
 import '@modelcontextprotocol/sdk/server/index.js';
-import '@cmdoss/suipay-sdk/agent-sdk/reads';
-import '@cmdoss/suipay-sdk/delegated-signer/payer';
-import '@cmdoss/suipay-core/trace/types';
+import '@mysten/sui/keypairs/ed25519';

package/dist/http.js

@@ -1,6 +1,7 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-NVTYOOMY.js";
+} from "./chunk-26NKQ37M.js";
+import "./chunk-A3JIIDYT.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,18 +1,25 @@
-import { Wallet } from '@cmdoss/suipay-core/chain/types';
-import { M as McpConfig, a as McpAuthContext, b as McpTraceHooks } from './http-B4YTVw0k.js';
-export { A as AgentHeldResolver, c as AgentHeldSettlement, d as MCP_TARGET_PRESETS, e as McpEnvelope, f as McpEnvelopeEntry, g as McpServerOptions, h as McpTarget, i as McpTraceContext, j as McpTraceRuntime, P as PACKAGE_NAME, T as TOOLS, k as canonicalMcpRequestId, l as createServer, m as handleSuipayMcpHttpRequest, n as inspectMcpEnvelope, o as loadMcpConfig, p as parseMcpTargetFlag, r as resetAgentHeldProcessLedger, q as resolveAgentHeldSettlement, s as resolveMcpTarget, t as sameMcpGateway, u as traceMcpHttpRequest } from './http-B4YTVw0k.js';
-import { GrantSnapshot } from '@cmdoss/suipay-core/policy/grant-target';
-export { resolveGrantTarget } from '@cmdoss/suipay-core/policy/grant-target';
-import { PaidHttpRequest } from '@cmdoss/suipay-sdk/protocol/paid-http-request';
-import { TraceSink } from '@cmdoss/suipay-core/trace/types';
-import { Dialect } from '@cmdoss/suipay-sdk/protocol/types';
-import { GetObjectJson, createReader } from '@cmdoss/suipay-sdk/agent-sdk/reads';
-import { DelegatedKeySigner, DelegatedPayerSession, DelegatedPayerConfig, DelegatedPayerDeps, SpendIntent, DelegatedPayResult } from '@cmdoss/suipay-sdk/delegated-signer/payer';
-import { createPayer } from '@cmdoss/suipay-sdk/agent-sdk/delegate-agent';
-import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
-import '@cmdoss/suipay-sdk/mcp/access-context';
-import '@cmdoss/suipay-sdk/buyer/settlement-dto';
+import { D as Dialect, G as GrantSnapshot, M as McpConfig, T as TraceSink, a as DelegatedKeySigner, b as GetObjectJson, c as DelegatedPayerSession, d as DelegatedPayerConfig, e as DelegatedPayerDeps, S as SpendIntent, f as DelegatedPayResult } from './http-BnIjiwcR.js';
+export { A as AgentHeldResolver, g as AgentHeldSettlement, h as McpEnvelope, i as McpEnvelopeEntry, j as McpServerOptions, k as McpTraceContext, l as McpTraceHooks, m as McpTraceRuntime, P as PACKAGE_NAME, n as TOOLS, o as canonicalMcpRequestId, p as createServer, q as handleSuipayMcpHttpRequest, r as inspectMcpEnvelope, s as loadMcpConfig, t as resetAgentHeldProcessLedger, u as resolveAgentHeldSettlement, v as resolveGrantTarget, w as traceMcpHttpRequest } from './http-BnIjiwcR.js';
 import '@modelcontextprotocol/sdk/server/index.js';
+import '@mysten/sui/keypairs/ed25519';
+
+type PaidHttpMethod = 'GET' | 'POST';
+interface PaidHttpRequest {
+    url: string;
+    method: PaidHttpMethod;
+    /** Exact wire bytes. Empty for GET. */
+    body: Uint8Array;
+    /** Normalized media type, or null when no body is sent. */
+    contentType: string | null;
+    /** `hashRequestBody(body)` — the single canonical body hash. */
+    bodyHash: string;
+}
+
+/** Holds a key and signs transaction bytes. Never leaves the payer. */
+interface Wallet {
+    readonly address: string;
+    signTransaction(txBytes: string): Promise<string>;
+}
 
 interface SuiPayCredentials {
     /** 64-hex Ed25519 seed. NEVER logged. */
@@ -46,9 +53,14 @@ interface PaymentProfile {
 /**
  * Load a historical V1 allowance payment profile, if present.
  * ADR-0010: not for new settlement. Callers that pay must refuse this profile
- * and point operators at delegate OAuth / delegated-signer flows.
+ * and point operators at shared_pool OAuth / delegated-signer flows.
  */
 declare function loadPaymentProfile(): PaymentProfile | null;
+/**
+ * First authorization generates a local keypair and persists it at 0600.
+ * Re-authorization reuses the stored key so a second key cannot orphan the grant.
+ * Returns only the public identity.
+ */
 declare function ensureLocalSigningKey(opts?: {
     label?: string;
 }): Promise<LocalSigningKeyIdentity>;
@@ -73,8 +85,8 @@ declare function loadLocalSigner(): {
  *
  * The V1 allowance sponsored payer (ADR-0010) is retired; only the
  * rail-neutral request surface the SpendAccount payer depends on survives here:
- * the `PayResult` shape every payer returns. `paidRequestInit` is the SDK helper
- * that builds the one RequestInit replayed byte for byte on both calls.
+ * the `PayResult` shape every payer returns and `paidRequestInit`, which builds
+ * the one RequestInit replayed byte for byte on the unpaid and the paid call.
  */
 
 type PayResult = {
@@ -203,11 +215,11 @@ interface SpendAccountSigningRequest {
         moveCallTarget: string;
     };
     /**
-     * ISO-8601 timestamp when this prepared operation expires. After this time the
-     * unsigned bytes are no longer valid and the client must re-call pay() for a
-     * fresh prepare. Derived from the offer TTL.
+     * Non-secret wallet/console handoff for hosts that cannot run a local signer:
+     * the delegate key signs and submits out of band there. Parameterized only by
+     * public Connection-manifest fields — never any secret.
      */
-    expiresAt: string;
+    handoffUrl: string;
     /** Restated hard rule for the agent host. */
     note: string;
 }
@@ -247,17 +259,11 @@ declare function verifySpendAccountPayReconstructs(bytes: string, expected: {
     amount: string;
 }): void;
 /**
- * Prepare a delegate payment WITHOUT signing. Reads the 402 offer, binds it,
+ * Prepare a shared_pool payment WITHOUT signing. Reads the 402 offer, binds it,
  * gates on the immutable grant snapshot + a fresh authority check, builds the
  * unsigned transaction, and returns a signing request. The client holding the
  * delegate key signs locally and submits. This function never decrypts, signs,
  * sponsors, or submits.
- *
- * Uses `resolvePayment` from the SDK pay-operation module (SAIP-170) for the
- * shared offer-acquisition + authority-resolution pipeline (steps 1–5 + assertLive
- * + hash derivation + buildPayKind). This module wraps that with MCP-specific
- * concerns: trace events, dialect-mode ceiling check, and signing-request
- * construction.
  */
 declare function prepareSpendAccountPayment(args: {
     url: string;
@@ -286,12 +292,6 @@ declare function prepareSpendAccountPayment(args: {
 
 declare function settlePreparedMcpPayment(args: {
     signingRequest: SpendAccountSigningRequest;
-    /**
-     * The same paid request that minted the prepare hop. Reconstructing from
-     * url+method alone drops a POST body and the settlement hop then prices
-     * (or 400s) a different request than the one the tool was called with.
-     */
-    request: PaidHttpRequest;
     /**
      * What this payment is supposed to move, sourced from the caller's intent —
      * never re-read from the object being verified. Comparing a prepared kind
@@ -315,84 +315,10 @@ declare function settlePreparedMcpPayment(args: {
     intent?: SpendIntent;
 }): Promise<DelegatedPayResult>;
 
-interface StdioLoginOptions {
-    consoleUrl: string;
-    gatewayUrl: string;
-    identity: {
-        delegateAddress: string;
-        publicKeyHex: string;
-    };
-    label?: string;
-    timeoutMs?: number;
-    openBrowser?: boolean;
-    onUrl?: (connectUrl: string) => void;
-}
-interface StartedStdioLogin {
-    connectUrl: string;
-    port: number;
-    connectState: string;
-    done: Promise<void>;
-    close: () => void;
-}
-/**
- * Bind the loopback listener and return the console URL immediately.
- * The wallet callback is awaited on `done`, not on the MCP tool call.
- */
-declare function startStdioLogin(opts: StdioLoginOptions): Promise<StartedStdioLogin>;
-
-/**
- * MCP tool payloads. Settlement honesty matches the playground stamp:
- * money that moved is never reported as a tool error (that invites a second pay).
- */
-
-type ToolResult = CallToolResult;
-
-interface ToolDeps {
-    fetchImpl?: typeof fetch;
-    profileLoader?: () => PaymentProfile | null;
-    /** Remote HTTP auth (grant + scope + optional shared-pool pay session). */
-    auth?: McpAuthContext;
-    /**
-     * Proxy-resolved live trace for this MCP request. Observation only: it never
-     * changes which rail runs, what is paid, or whether a payment is allowed.
-     */
-    trace?: McpTraceHooks;
-    /**
-     * Agent-held delegate key. Present only in the process that stores the
-     * key — never on the gateway. When set after a server-side prepare, `pay`
-     * verifies the prepared kind and settles through `payDelegatedSpendAccount`.
-     */
-    agentHeld?: {
-        signer: DelegatedKeySigner;
-        getObjectJson: GetObjectJson;
-        payerDeps: DelegatedPayerDeps;
-    };
-    /** Override the prepare-time kind builder (tests / offline). */
-    buildPayKind?: SpendAccountPayDeps['buildPayKind'];
-    /**
-     * Stdio login surfaces the console URL (MCP progress notification). The URL
-     * carries the delegate address only — never the seed.
-     */
-    onUrl?: (url: string) => void;
-    createPayer?: typeof createPayer;
-    createReader?: typeof createReader;
-    startStdioLogin?: typeof startStdioLogin;
-}
-declare function pay(args: {
-    url: string;
-    method?: unknown;
-    json?: unknown;
-    recipient?: unknown;
-    maxAmount?: unknown;
-}, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
-declare function receipts(args: {
-    challengeId?: string;
-}, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
-
 declare function loadBootProfile(load?: typeof loadPaymentProfile): {
     profile: ReturnType<typeof loadPaymentProfile>;
     unreadable: boolean;
 };
 declare function main(): Promise<void>;
 
-export { McpAuthContext, McpConfig, McpTraceHooks, type PreparedPayment, type SpendAccountPrepareResult, type SpendAccountPrepareSession, type SpendAccountSigningRequest, buildSpendAccountPayKind, ensureLocalSigningKey, loadBootProfile, loadLocalSigner, main, pay, prepareSpendAccountPayment, receipts, settlePreparedMcpPayment, verifySpendAccountPayReconstructs };
+export { type PreparedPayment, type SpendAccountPrepareResult, type SpendAccountPrepareSession, type SpendAccountSigningRequest, buildSpendAccountPayKind, ensureLocalSigningKey, loadBootProfile, loadLocalSigner, main, prepareSpendAccountPayment, settlePreparedMcpPayment, verifySpendAccountPayReconstructs };

package/dist/index.js

@@ -1,9 +1,8 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-K6WM4Z7H.js";
+} from "./chunk-EM7PKWVL.js";
 import {
-  MCP_TARGET_PRESETS,
   PACKAGE_NAME,
   TOOLS,
   buildSpendAccountPayKind,
@@ -14,21 +13,16 @@ import {
   inspectMcpEnvelope,
   loadLocalSigner,
   loadMcpConfig,
-  parseMcpTargetFlag,
-  pay,
   prepareSpendAccountPayment,
-  receipts,
   resetAgentHeldProcessLedger,
   resolveAgentHeldSettlement,
   resolveGrantTarget,
-  resolveMcpTarget,
-  sameMcpGateway,
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-NVTYOOMY.js";
+} from "./chunk-26NKQ37M.js";
+import "./chunk-A3JIIDYT.js";
 export {
-  MCP_TARGET_PRESETS,
   PACKAGE_NAME,
   TOOLS,
   buildSpendAccountPayKind,
@@ -41,15 +35,10 @@ export {
   loadLocalSigner,
   loadMcpConfig,
   main,
-  parseMcpTargetFlag,
-  pay,
   prepareSpendAccountPayment,
-  receipts,
   resetAgentHeldProcessLedger,
   resolveAgentHeldSettlement,
   resolveGrantTarget,
-  resolveMcpTarget,
-  sameMcpGateway,
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs

package/dist/personal-message-5PF4KVLF.js

@@ -0,0 +1,284 @@
+import {
+  SPEND_ACCOUNT_DEBIT_FUNCTIONS
+} from "./chunk-A3JIIDYT.js";
+
+// ../../src/gateway/sponsor/personal-message.ts
+import { createHash, randomBytes } from "crypto";
+import { bcs } from "@mysten/sui/bcs";
+import {
+  isValidPersonalMessageSignature,
+  verifyPersonalMessageSignature
+} from "@mysten/sui/verify";
+import {
+  fromBase64,
+  normalizeSuiAddress,
+  toBase64
+} from "@mysten/sui/utils";
+import { Transaction } from "@mysten/sui/transactions";
+var SPONSOR_PERSONAL_MESSAGE_DOMAIN = "suipay:sponsor-personal-message:v1";
+var SPONSOR_PERSONAL_MESSAGE_DEFAULT_TTL_MS = 6e4;
+var SPONSOR_PERSONAL_MESSAGE_DEFAULT_GAS_BUDGET_MIST = 50000000n;
+function encodeSponsorPersonalMessagePayload(payload) {
+  if (payload.domain !== SPONSOR_PERSONAL_MESSAGE_DOMAIN) {
+    throw new Error(`domain must be ${SPONSOR_PERSONAL_MESSAGE_DOMAIN}`);
+  }
+  if (payload.txKindHash.length !== 32) {
+    throw new Error("txKindHash must be 32 bytes");
+  }
+  if (!payload.nonce.trim()) throw new Error("nonce is required");
+  if (!Number.isFinite(payload.expiryMs) || payload.expiryMs <= 0) {
+    throw new Error("expiryMs must be a positive finite number");
+  }
+  if (!payload.requestId.trim()) throw new Error("requestId is required");
+  if (!payload.network.trim()) throw new Error("network is required");
+  const parts = [];
+  const push = (u) => parts.push(u);
+  push(
+    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.domain, "utf8")]).toBytes()
+  );
+  push(
+    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.nonce, "utf8")]).toBytes()
+  );
+  push(bcs.u64().serialize(BigInt(payload.expiryMs)).toBytes());
+  push(bcs.Address.serialize(normalizeSuiAddress(payload.delegate)).toBytes());
+  push(bcs.Address.serialize(normalizeSuiAddress(payload.poolId)).toBytes());
+  push(bcs.Address.serialize(normalizeSuiAddress(payload.grantId)).toBytes());
+  push(
+    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.network, "utf8")]).toBytes()
+  );
+  push(bcs.Address.serialize(normalizeSuiAddress(payload.packageId)).toBytes());
+  push(
+    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.requestId, "utf8")]).toBytes()
+  );
+  push(bcs.vector(bcs.u8()).serialize([...payload.txKindHash]).toBytes());
+  return Buffer.concat(parts.map((p) => Buffer.from(p)));
+}
+function hashTransactionKindBytes(kindBytes) {
+  const raw = typeof kindBytes === "string" ? fromBase64(kindBytes) : kindBytes;
+  return createHash("sha256").update(raw).digest();
+}
+function txKindHashHex(kindBytes) {
+  return Buffer.from(hashTransactionKindBytes(kindBytes)).toString("hex");
+}
+function buildSponsorPersonalMessagePayload(input) {
+  return {
+    domain: SPONSOR_PERSONAL_MESSAGE_DOMAIN,
+    nonce: input.nonce,
+    expiryMs: input.expiryMs,
+    delegate: normalizeSuiAddress(input.delegate),
+    poolId: normalizeSuiAddress(input.poolId),
+    grantId: normalizeSuiAddress(input.grantId),
+    network: input.network,
+    packageId: normalizeSuiAddress(input.packageId),
+    requestId: input.requestId,
+    txKindHash: hashTransactionKindBytes(input.transactionKindBytes)
+  };
+}
+async function verifySponsorPersonalMessageSignature(input) {
+  try {
+    const expected = normalizeSuiAddress(input.expectedDelegate);
+    const encoded = encodeSponsorPersonalMessagePayload(input.payload);
+    const addressMatches = normalizeSuiAddress(input.payload.delegate) === expected;
+    if (!addressMatches) {
+      return { ok: false, reason: "payload_delegate_mismatch" };
+    }
+    try {
+      const publicKey = await verifyPersonalMessageSignature(
+        encoded,
+        input.signature,
+        { address: expected }
+      );
+      const derived = publicKey.toSuiAddress();
+      if (normalizeSuiAddress(derived) !== expected) {
+        return { ok: false, reason: "address_derivation_mismatch" };
+      }
+      return { ok: true, address: expected };
+    } catch {
+      const ok = await isValidPersonalMessageSignature(
+        encoded,
+        input.signature,
+        { address: expected }
+      );
+      if (!ok) return { ok: false, reason: "bad_signature" };
+      return { ok: true, address: expected };
+    }
+  } catch {
+    return { ok: false, reason: "bad_signature" };
+  }
+}
+function assertPersonalMessageKindIsPermittedPay(input) {
+  const allowed = new Set(
+    input.allowedFunctions ?? SPEND_ACCOUNT_DEBIT_FUNCTIONS
+  );
+  let data;
+  try {
+    data = Transaction.fromKind(
+      fromBase64(input.transactionKindBytes)
+    ).getData();
+  } catch {
+    return { ok: false, reason: "kind_invalid" };
+  }
+  if (JSON.stringify(data.commands).includes('"GasCoin"')) {
+    return { ok: false, reason: "kind_gas_coin" };
+  }
+  const commands = data.commands ?? [];
+  if (commands.length !== 1) {
+    return { ok: false, reason: "kind_extra_commands" };
+  }
+  const cmd = commands[0];
+  if (cmd.$kind !== "MoveCall") {
+    return { ok: false, reason: "kind_not_move_call" };
+  }
+  const move = cmd.MoveCall;
+  if (!move) return { ok: false, reason: "kind_missing_move_call" };
+  const pkg = normalizeSuiAddress(String(move.package));
+  const expectedPkg = normalizeSuiAddress(input.packageId);
+  if (pkg !== expectedPkg) {
+    return { ok: false, reason: "kind_package_mismatch" };
+  }
+  if (String(move.module) !== "spend_account") {
+    return { ok: false, reason: "kind_module_not_shared_pool" };
+  }
+  const fn = String(move.function);
+  if (!allowed.has(fn)) {
+    return { ok: false, reason: "kind_function_not_permitted" };
+  }
+  const args = move.arguments ?? [];
+  if (args.length < 2) {
+    return { ok: false, reason: "kind_args_incomplete" };
+  }
+  const poolObj = objectIdFromArg(args[0], data.inputs);
+  const grantObj = objectIdFromArg(args[1], data.inputs);
+  if (!poolObj || !grantObj) {
+    return { ok: false, reason: "kind_object_unresolved" };
+  }
+  if (normalizeSuiAddress(poolObj) !== normalizeSuiAddress(input.poolObjectId)) {
+    return { ok: false, reason: "kind_pool_mismatch" };
+  }
+  if (normalizeSuiAddress(grantObj) !== normalizeSuiAddress(input.grantObjectId)) {
+    return { ok: false, reason: "kind_grant_mismatch" };
+  }
+  return { ok: true, functionName: String(move.function) };
+}
+function assertPersonalMessageDeploymentBinding(input) {
+  const wantNet = input.expectedNetwork.trim().toLowerCase();
+  const gotNet = input.network.trim().toLowerCase();
+  if (!wantNet || gotNet !== wantNet) {
+    return { ok: false, reason: "network_mismatch" };
+  }
+  try {
+    if (normalizeSuiAddress(input.packageId) !== normalizeSuiAddress(input.expectedPackageId)) {
+      return { ok: false, reason: "package_mismatch" };
+    }
+  } catch {
+    return { ok: false, reason: "package_mismatch" };
+  }
+  return { ok: true };
+}
+function publicSponsorGrantDenyReason(reason) {
+  const r = reason.toLowerCase();
+  if (r.includes("expired")) return "grant_expired";
+  if (r.includes("revok")) return "grant_revoked";
+  if (r.includes("paus")) return "grant_paused";
+  if (r.includes("not active") || r.includes("not_active")) {
+    return "grant_not_active";
+  }
+  if (r.includes("no active") || r.includes("not found") || r.includes("missing")) {
+    return "grant_not_found";
+  }
+  return "grant_not_authorized";
+}
+function objectIdFromArg(arg, inputs) {
+  if (!arg || typeof arg !== "object") return null;
+  const a = arg;
+  if (a.$kind !== "Input" || !Number.isInteger(a.Input)) return null;
+  const input = inputs?.[Number(a.Input)];
+  if (!input || typeof input !== "object") return null;
+  const value = input;
+  if (value.$kind !== "Object" || !value.Object) return null;
+  const object = value.Object;
+  const id = object.$kind === "SharedObject" ? object.SharedObject?.objectId : object.$kind === "ImmOrOwnedObject" ? object.ImmOrOwnedObject?.objectId : object.$kind === "Receiving" ? object.Receiving?.objectId : void 0;
+  return typeof id === "string" ? id : null;
+}
+function createResolveSponsorGrant(store) {
+  return async (query) => {
+    const found = await store.findActiveGrantForPersonalMessage({
+      grantObjectId: query.grantObjectId,
+      poolObjectId: query.poolObjectId,
+      delegateAddress: query.delegateAddress
+    });
+    if (!found) {
+      return { ok: false, reason: "grant_not_found" };
+    }
+    const expiresAtMs = Number(found.grant.expiresAtMs);
+    if (Number.isFinite(expiresAtMs) && expiresAtMs > 0 && expiresAtMs <= query.nowMs) {
+      return { ok: false, reason: "grant_expired" };
+    }
+    if (found.grant.status === "revoked") {
+      return { ok: false, reason: "grant_revoked" };
+    }
+    if (found.grant.status !== "active") {
+      return { ok: false, reason: "grant_not_active" };
+    }
+    if (found.aggregateStatus === "paused" || found.aggregateStatus === "pausing") {
+      return { ok: false, reason: "grant_paused" };
+    }
+    if (found.aggregateStatus === "revoking" || found.aggregateStatus === "partially_revoked" || found.aggregateStatus === "revoked") {
+      return { ok: false, reason: "grant_revoked" };
+    }
+    if (!found.grant.grantObjectId) {
+      return { ok: false, reason: "grant_not_found" };
+    }
+    return {
+      ok: true,
+      grant: {
+        delegateAddress: normalizeSuiAddress(found.agentAddress),
+        poolObjectId: normalizeSuiAddress(found.grant.poolObjectId),
+        grantObjectId: normalizeSuiAddress(found.grant.grantObjectId),
+        expiresAtMs: Number.isFinite(expiresAtMs) ? expiresAtMs : 0,
+        status: "active"
+      }
+    };
+  };
+}
+function mintSponsorChallengeNonce() {
+  return randomBytes(24).toString("base64url");
+}
+function mintSponsorExecuteToken() {
+  return randomBytes(24).toString("base64url");
+}
+async function signSponsorPersonalMessagePayload(input) {
+  const encoded = encodeSponsorPersonalMessagePayload(input.payload);
+  return input.signPersonalMessage(encoded);
+}
+function bytesToHex(bytes) {
+  return Buffer.from(bytes).toString("hex");
+}
+function hexToBytes32(hex) {
+  const h = hex.replace(/^0x/i, "").toLowerCase();
+  if (!/^[0-9a-f]{64}$/.test(h)) {
+    throw new Error(`expected 32-byte hex, got ${hex}`);
+  }
+  return Buffer.from(h, "hex");
+}
+export {
+  SPONSOR_PERSONAL_MESSAGE_DEFAULT_GAS_BUDGET_MIST,
+  SPONSOR_PERSONAL_MESSAGE_DEFAULT_TTL_MS,
+  SPONSOR_PERSONAL_MESSAGE_DOMAIN,
+  assertPersonalMessageDeploymentBinding,
+  assertPersonalMessageKindIsPermittedPay,
+  buildSponsorPersonalMessagePayload,
+  bytesToHex,
+  createResolveSponsorGrant,
+  encodeSponsorPersonalMessagePayload,
+  fromBase64,
+  hashTransactionKindBytes,
+  hexToBytes32,
+  mintSponsorChallengeNonce,
+  mintSponsorExecuteToken,
+  publicSponsorGrantDenyReason,
+  signSponsorPersonalMessagePayload,
+  toBase64,
+  txKindHashHex,
+  verifySponsorPersonalMessageSignature
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.2.2-dev.0",
+  "version": "0.2.2",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",
@@ -19,7 +19,8 @@
     "README.md"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "engines": {
     "node": ">=20"
@@ -31,17 +32,14 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@mysten/sui": "catalog:pinned",
+    "@mysten/sui": "2.24.0",
     "@noble/ed25519": "^2.1.0",
     "@noble/hashes": "^2.3.0",
     "open": "^11.0.0"
   },
   "devDependencies": {
-    "@cmdoss/suipay-core": "workspace:*",
-    "@cmdoss/suipay-sdk": "workspace:*",
-    "@types/node": "catalog:",
-    "tsup": "catalog:",
-    "typescript": "catalog:",
-    "vitest": "catalog:"
+    "tsup": "^8.0.0",
+    "typescript": "^6.0.3",
+    "vitest": "^3.0.0"
   }
 }

package/dist/chunk-K6WM4Z7H.js

@@ -1,46 +0,0 @@
-import {
-  createServer,
-  loadLocalSigner,
-  loadLocalSigningKeyRecord,
-  loadMcpConfig,
-  loadPaymentProfile
-} from "./chunk-NVTYOOMY.js";
-
-// src/index.ts
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-function loadBootProfile(load = loadPaymentProfile) {
-  try {
-    return { profile: load(), unreadable: false };
-  } catch {
-    return { profile: null, unreadable: true };
-  }
-}
-async function main() {
-  const argv = process.argv.slice(2);
-  const cfg = loadMcpConfig(process.env, argv);
-  const target = cfg.target ?? "dev";
-  const server = createServer(cfg);
-  await server.connect(new StdioServerTransport());
-  try {
-    const boundGateway = loadLocalSigningKeyRecord()?.gatewayUrl ?? cfg.gatewayUrl;
-    const local = loadLocalSigner();
-    if (local) {
-      console.error(
-        `[suipay-mcp] ${target} ${boundGateway} \xB7 delegate ${local.address} \xB7 stdio ready`
-      );
-    } else {
-      console.error(
-        `[suipay-mcp] ${target} ${boundGateway} \xB7 not connected \xB7 run suipay_login \xB7 stdio ready`
-      );
-    }
-  } catch {
-    console.error(
-      `[suipay-mcp] ${target} ${cfg.gatewayUrl} \xB7 credentials unreadable: run suipay_login or suipay_logout force=true \xB7 stdio ready`
-    );
-  }
-}
-
-export {
-  loadBootProfile,
-  main
-};