@cmdoss/suipay-mcp 0.2.2-dev.3 → 0.2.2-dev.5

package/README.md

@@ -76,13 +76,14 @@ json: {"prompt":"a cat"}
 maxAmount: 50000
 ```
 
-`pay` uses SDK `createPayer` internally. A binary body is written once under
-`~/.suipay/deliveries/` and named first in the JSON as `savedTo` (absolute
-path) and `savedToUrl` (`file://`). Any MIME — image, audio, pdf,
-octet-stream. JSON stays compact (no base64 wall). An MCP `image` block is an
-extra display hint when the type is `image/*`; hosts such as Claude Code's
-TUI may not render it. Always quote `savedTo` to the user. Do not call `pay`
-again to "save" a delivery that already settled.
+`pay` uses SDK `createPayer` internally. When this process settles, a binary
+body is written once under `~/.suipay/deliveries/` and named first in the
+JSON as `savedTo` (absolute path) and `savedToUrl` (`file://`). Hosted `/mcp`
+is prepare-only and does not write a buyer file. Any MIME — image, audio,
+pdf, octet-stream. JSON stays compact (no base64 wall). An MCP `image` block
+is an extra display hint when the type is `image/*`; hosts such as Claude
+Code's TUI may not render it. Always quote `savedTo` when present. If
+`savedTo` is null, quote `saveError` and do not call `pay` again.
 
 ## Targets
 

package/dist/bin/suipay.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-C2IYSV43.js";
-import "../chunk-SRMAH6MK.js";
+} from "../chunk-P54ZYBPN.js";
+import "../chunk-THLDEMGS.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-C2IYSV43.js → chunk-P54ZYBPN.js}

@@ -4,7 +4,7 @@ import {
   loadLocalSigningKeyRecord,
   loadMcpConfig,
   loadPaymentProfile
-} from "./chunk-SRMAH6MK.js";
+} from "./chunk-THLDEMGS.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/{chunk-SRMAH6MK.js → chunk-THLDEMGS.js}

@@ -6909,12 +6909,19 @@ function saveDeliveredBody(input) {
   if (input.bytes.byteLength === 0) return void 0;
   const dir = mcpDeliveriesDir();
   mkdirSync2(dir, { recursive: true, mode: 448 });
+  try {
+    chmodSync2(dir, 448);
+  } catch {
+  }
   const path = join3(
     dir,
     `${fileStem(input.digest, input.challengeId)}${extensionFor(input.contentType)}`
   );
   writeFileSync(path, input.bytes, { mode: 384 });
-  chmodSync2(path, 384);
+  try {
+    chmodSync2(path, 384);
+  } catch {
+  }
   return path;
 }
 
@@ -6944,6 +6951,7 @@ function receiptChallengeId(receipt) {
   const id = receipt.challengeId;
   return typeof id === "string" && id.length > 0 ? id : void 0;
 }
+var MCP_SAVE_ERROR = "delivery file was not written; do not call pay again";
 function paidResult(result) {
   if (!isBinaryBody(result.body)) return text(result);
   const body = result.body;
@@ -6968,7 +6976,12 @@ function paidResult(result) {
     savedToUrl: pathToFileURL(savedTo).href,
     ...result,
     body: shape
-  } : { ...result, body: shape };
+  } : {
+    savedTo: null,
+    saveError: MCP_SAVE_ERROR,
+    ...result,
+    body: shape
+  };
   const content = [
     {
       type: "text",
@@ -7597,7 +7610,7 @@ var TOOLS = [
   },
   {
     name: "pay",
-    description: "Pay a HTTP resource via delegate. On hosted /mcp the gateway PREPARES an unsigned transaction and returns it (prepare-only \u2014 it never holds the delegate key and cannot settle). Only a process holding the delegate key the grant names can complete settlement (e.g. local stdio MCP, or any self-hosted process with the matching key). Pass recipient and/or maxAmount to state who you intend to pay and what you will spend; both are checked before anything is signed or handed back. Local V1 allowance pay is retired. A paid binary body is written under ~/.suipay/deliveries/ and named as savedTo (absolute path) and savedToUrl (file://) at the top of the JSON. Always quote savedTo to the user so they can open the file. Do not assume the host rendered an image block. Never call pay again to display or save a delivery that already settled.",
+    description: "Pay a HTTP resource via delegate. On hosted /mcp the gateway PREPARES an unsigned transaction and returns it (prepare-only \u2014 it never holds the delegate key and cannot settle). Only a process holding the delegate key the grant names can complete settlement (e.g. local stdio MCP, or any self-hosted process with the matching key). Pass recipient and/or maxAmount to state who you intend to pay and what you will spend; both are checked before anything is signed or handed back. Local V1 allowance pay is retired. When this process settles a paid binary body, it writes the bytes under ~/.suipay/deliveries/ and names savedTo (absolute path) and savedToUrl (file://) first in the JSON. Hosted /mcp is prepare-only and does not write a buyer file. Always quote savedTo when present. If savedTo is null, quote saveError and do not call pay again. Do not assume the host rendered an image block. Never call pay again to display or save a delivery that already settled.",
     inputSchema: {
       type: "object",
       properties: {

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-SRMAH6MK.js";
+} from "./chunk-THLDEMGS.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-C2IYSV43.js";
+} from "./chunk-P54ZYBPN.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-SRMAH6MK.js";
+} from "./chunk-THLDEMGS.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.2.2-dev.3",
+  "version": "0.2.2-dev.5",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",