@cmdoss/suipay-mcp 0.2.2-dev.17 → 0.2.2-dev.19

package/README.md

@@ -5,7 +5,7 @@ buyer-funded spend account. The buyer owns the account. The agent holds the
 delegate key and can spend only under the on-chain grant (recipient bind,
 per-payment cap, budget).
 
-Pin `@cmdoss/suipay-mcp@0.2.2-dev.17` in MCP config for the `latest` dist-tag.
+Pin `@cmdoss/suipay-mcp@0.2.2-dev.19` in MCP config for the `latest` dist-tag.
 `npx -y @cmdoss/suipay-mcp@dev` tracks the `dev` prerelease line.
 `1.0.1` remains on the registry as a historical release; do not install it
 for new agents.
@@ -13,7 +13,7 @@ for new agents.
 ## Install
 
 ```bash
-claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.2.2-dev.17
+claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.2.2-dev.19
 ```
 
 `@dev` installs the Railway-dev gateway/console defaults. A workspace
@@ -118,10 +118,10 @@ Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
 
 ```bash
 # Railway suipay-dev (default)
-npx @cmdoss/suipay-mcp@0.2.2-dev.17
+npx @cmdoss/suipay-mcp@0.2.2-dev.19
 
 # Laptop stack
-npx @cmdoss/suipay-mcp@0.2.2-dev.17 --local
+npx @cmdoss/suipay-mcp@0.2.2-dev.19 --local
 ```
 
 `SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit

package/dist/bin/suipay.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-6GJ7IGYM.js";
-import "../chunk-WRN7FRUI.js";
+} from "../chunk-IBRMIXCG.js";
+import "../chunk-6VFKI2BY.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-WRN7FRUI.js → chunk-6VFKI2BY.js}

@@ -1812,6 +1812,33 @@ function decodeSponsorGasPayment(encoded) {
     return { objectId: bits[0], version: bits[1], digest: bits[2] };
   });
 }
+var SPONSOR_GAS_ADDRESS_BALANCE = "address-balance";
+function decodeSponsorGasPin(encoded) {
+  if (encoded === SPONSOR_GAS_ADDRESS_BALANCE)
+    return [];
+  return decodeSponsorGasPayment(encoded);
+}
+var ADDRESS_BALANCE_VALIDITY_EPOCHS = 1n;
+function addressBalanceGasExpiration(input) {
+  const chain = input.chainIdentifier.trim();
+  if (!chain)
+    throw new Error("address-balance gas needs a chain identifier");
+  if (input.epoch < 0n)
+    throw new Error("address-balance gas needs a non-negative epoch");
+  if (!Number.isInteger(input.nonce) || input.nonce < 0 || input.nonce > 4294967295) {
+    throw new Error("address-balance gas nonce must be a u32");
+  }
+  return {
+    ValidDuring: {
+      minEpoch: String(input.epoch),
+      maxEpoch: String(input.epoch + ADDRESS_BALANCE_VALIDITY_EPOCHS),
+      minTimestamp: null,
+      maxTimestamp: null,
+      chain,
+      nonce: input.nonce
+    }
+  };
+}
 
 // ../sdk/dist/protocol/mpp.js
 function offerToBase64Url(offer) {
@@ -4125,7 +4152,7 @@ function readX402GasPin(offer) {
       owner,
       budget,
       price,
-      payment: decodeSponsorGasPayment(offer.sponsorGasPayment ?? "")
+      payment: decodeSponsorGasPin(offer.sponsorGasPayment ?? "")
     };
   } catch {
     return null;
@@ -4139,16 +4166,33 @@ async function buildSpendAccountX402PayTx(input) {
   tx.setGasBudget(input.gas.budget);
   tx.setGasPrice(input.gas.price);
   tx.setGasPayment(input.gas.payment);
-  tx.setExpiration({ Epoch: String(input.currentEpoch + X402_EXPIRATION_EPOCHS) });
+  if (input.gas.payment.length === 0) {
+    if (!input.chainIdentifier) {
+      throw new Error("address-balance sponsor gas needs a chain identifier");
+    }
+    tx.setExpiration(addressBalanceGasExpiration({
+      epoch: input.currentEpoch,
+      chainIdentifier: input.chainIdentifier,
+      nonce: input.nonce ?? randomU32()
+    }));
+  } else {
+    tx.setExpiration({ Epoch: String(input.currentEpoch + X402_EXPIRATION_EPOCHS) });
+  }
   const txBytes = toBase645(await tx.build());
   return { txBytes, kindBytes };
 }
+function randomU32() {
+  return globalThis.crypto.getRandomValues(new Uint32Array(1))[0];
+}
 function currentEpochReader(client) {
   return async () => {
     const { systemState } = await client.core.getCurrentSystemState();
     return BigInt(systemState.epoch);
   };
 }
+function chainIdentifierReader(client) {
+  return async () => (await client.core.getChainIdentifier()).chainIdentifier;
+}
 function assertPayTransaction(txBytes, expected) {
   let data;
   try {
@@ -4609,6 +4653,10 @@ async function payDelegatedSpendAccount(args) {
     return { status: "ok", paid: false, body: resolution.body };
   }
   if (resolution.status === "failed") {
+    logInternal(logError, "resolve payment failed", {
+      code: resolution.code,
+      detail: resolution.detail
+    });
     const mapped = mapPayOpErrorToDelegated(resolution.code, resolution.detail);
     return failed2(mapped.code, mapped.detail, {
       paymentId: resolution.paymentId
@@ -4733,7 +4781,8 @@ async function payDelegatedSpendAccount(args) {
       buildInput: {
         ...kindBuildInput,
         gas: x402Terms.gas,
-        currentEpoch: x402Terms.currentEpoch
+        currentEpoch: x402Terms.currentEpoch,
+        ...x402Terms.chainIdentifier !== void 0 ? { chainIdentifier: x402Terms.chainIdentifier } : {}
       },
       settlement: {
         status: "success",
@@ -5110,12 +5159,28 @@ async function x402Preflight(dialect, offer, deps, logError) {
     logInternal(logError, "x402 needs a current-epoch reader");
     return null;
   }
+  let currentEpoch;
   try {
-    return { gas, currentEpoch: BigInt(await deps.getCurrentEpoch()) };
+    currentEpoch = BigInt(await deps.getCurrentEpoch());
   } catch (err) {
     logInternal(logError, "read current epoch failed", err);
     return null;
   }
+  if (gas.payment.length > 0)
+    return { gas, currentEpoch };
+  if (typeof deps.getChainIdentifier !== "function") {
+    logInternal(logError, "address-balance x402 gas needs a chain-identifier reader");
+    return null;
+  }
+  try {
+    const chainIdentifier = await deps.getChainIdentifier();
+    if (!chainIdentifier.trim())
+      throw new Error("chain identifier is blank");
+    return { gas, currentEpoch, chainIdentifier };
+  } catch (err) {
+    logInternal(logError, "read chain identifier failed", err);
+    return null;
+  }
 }
 function emitX402Progress(ctx, event) {
   if (!ctx.onProgress)
@@ -7422,6 +7487,8 @@ async function createPayer(options) {
     // x402 bounds the transaction's expiration by the current epoch, read from
     // the same client as every other chain read here.
     getCurrentEpoch: currentEpochReader(chain.client),
+    // Address-balance gas (ADR-0055) binds the expiration to the chain.
+    getChainIdentifier: chainIdentifierReader(chain.client),
     ...options.offerSecret ? { offerSecret: options.offerSecret } : {},
     ...options.fetchImpl ? { fetchImpl: options.fetchImpl } : {},
     ...options.logError ? { logError: options.logError } : {}

package/dist/{chunk-6GJ7IGYM.js → chunk-IBRMIXCG.js}

@@ -4,7 +4,7 @@ import {
   loadLocalSigningKeyRecord,
   loadMcpConfig,
   loadPaymentProfile
-} from "./chunk-WRN7FRUI.js";
+} from "./chunk-6VFKI2BY.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-WRN7FRUI.js";
+} from "./chunk-6VFKI2BY.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-6GJ7IGYM.js";
+} from "./chunk-IBRMIXCG.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-WRN7FRUI.js";
+} from "./chunk-6VFKI2BY.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.2.2-dev.17",
+  "version": "0.2.2-dev.19",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",