@cmdoss/suipay-mcp 0.2.2-dev.4 → 0.2.2-dev.40

package/dist/index.d.ts

@@ -1,17 +1,19 @@
 import { Wallet } from '@cmdoss/suipay-core/chain/types';
-import { M as McpConfig, a as McpAuthContext, b as McpTraceHooks } from './http-C8xW9F1c.js';
-export { A as AgentHeldResolver, c as AgentHeldSettlement, d as McpEnvelope, e as McpEnvelopeEntry, f as McpServerOptions, g as McpTraceContext, h as McpTraceRuntime, P as PACKAGE_NAME, T as TOOLS, i as canonicalMcpRequestId, j as createServer, k as handleSuipayMcpHttpRequest, l as inspectMcpEnvelope, m as loadMcpConfig, r as resetAgentHeldProcessLedger, n as resolveAgentHeldSettlement, t as traceMcpHttpRequest } from './http-C8xW9F1c.js';
-import { GrantSnapshot } from '@cmdoss/suipay-core/policy/grant-target';
-export { resolveGrantTarget } from '@cmdoss/suipay-core/policy/grant-target';
-import { PaidHttpRequest } from '@cmdoss/suipay-sdk/protocol/paid-http-request';
-import { TraceSink } from '@cmdoss/suipay-core/trace/types';
-import { Dialect } from '@cmdoss/suipay-sdk/protocol/types';
-import { GetObjectJson } from '@cmdoss/suipay-sdk/agent-sdk/reads';
+import { S as SpendAccountSigningRequest, M as McpConfig, a as McpAuthContext, b as McpTraceHooks, c as SpendAccountPayDeps } from './http-DvnvTrb3.js';
+export { A as AgentHeldResolver, d as AgentHeldSettlement, e as MCP_TARGET_PRESETS, f as McpEnvelope, g as McpEnvelopeEntry, h as McpServerOptions, i as McpTarget, j as McpTraceContext, k as McpTraceRuntime, P as PACKAGE_NAME, l as PreparedPayment, m as SpendAccountPrepareResult, n as SpendAccountPrepareSession, T as TOOLS, o as buildSpendAccountPayKind, p as canonicalMcpRequestId, q as createServer, r as handleSuipayMcpHttpRequest, s as inspectMcpEnvelope, t as loadMcpConfig, u as parseMcpTargetFlag, v as prepareSpendAccountPayment, w as resetAgentHeldProcessLedger, x as resolveAgentHeldSettlement, y as resolveMcpTarget, z as sameMcpGateway, B as traceMcpHttpRequest, C as verifySpendAccountPayReconstructs } from './http-DvnvTrb3.js';
+import { GetObjectJson, createReader } from '@cmdoss/suipay-sdk/agent-sdk/reads';
 import { DelegatedKeySigner, DelegatedPayerSession, DelegatedPayerConfig, DelegatedPayerDeps, SpendIntent, DelegatedPayResult } from '@cmdoss/suipay-sdk/delegated-signer/payer';
+import { PaidHttpRequest } from '@cmdoss/suipay-sdk/protocol/paid-http-request';
+import { createPayer } from '@cmdoss/suipay-sdk/agent-sdk/delegate-agent';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+export { resolveGrantTarget } from '@cmdoss/suipay-core/policy/grant-target';
 import '@cmdoss/suipay-sdk/mcp/access-context';
 import '@cmdoss/suipay-sdk/buyer/settlement-dto';
 import '@modelcontextprotocol/sdk/server/index.js';
+import '@cmdoss/suipay-core/trace/types';
+import '@cmdoss/suipay-sdk/protocol/types';
+import '@cmdoss/suipay-sdk/pay-operation';
+import '@cmdoss/suipay-core/errors';
 
 interface SuiPayCredentials {
     /** 64-hex Ed25519 seed. NEVER logged. */
@@ -48,11 +50,6 @@ interface PaymentProfile {
  * and point operators at delegate OAuth / delegated-signer flows.
  */
 declare function loadPaymentProfile(): PaymentProfile | null;
-/**
- * First authorization generates a local keypair and persists it at 0600.
- * Re-authorization reuses the stored key so a second key cannot orphan the grant.
- * Returns only the public identity.
- */
 declare function ensureLocalSigningKey(opts?: {
     label?: string;
 }): Promise<LocalSigningKeyIdentity>;
@@ -72,208 +69,6 @@ declare function loadLocalSigner(): {
     signPersonalMessage: (message: Uint8Array) => Promise<string>;
 } | null;
 
-/**
- * Shared pay-request helpers.
- *
- * The V1 allowance sponsored payer (ADR-0010) is retired; only the
- * rail-neutral request surface the SpendAccount payer depends on survives here:
- * the `PayResult` shape every payer returns. `paidRequestInit` is the SDK helper
- * that builds the one RequestInit replayed byte for byte on both calls.
- */
-
-type PayResult = {
-    status: 'ok' | 'failed' | 'ambiguous';
-    /**
-     * `true` — settlement confirmed. `false` — money did not leave the
-     * account. `'unknown'` — execute/finality did not resolve; a retry can
-     * pay twice.
-     */
-    paid: boolean | 'unknown';
-    body?: unknown;
-    receipt?: unknown;
-    code?: string;
-    detail?: string;
-    txDigest?: string;
-};
-
-/**
- * SpendAccount PREPARE-only client (non-custodial MCP).
- *
- * The remote MCP `pay` tool runs inside the gateway, which holds NO key that can
- * spend. So this module does not sign or submit: it PREPARES a payment and hands
- * back an unsigned `spend_account::settle_policy_payment` transaction plus everything the client
- * needs. The client — which holds the delegate key — sponsors, signs locally,
- * and submits through the same personal-message challenge → local-sign → submit flow the
- * REST/SDK delegate path uses. Only signatures ever reach the gateway; the
- * private key is never placed in an HTTP body, a bearer, or any header.
- *
- * Flow: 402 Offer → request-binding → package/network SSOT →
- * resolveGrantTarget(snapshot, offer.targetHash) (pause/revoke gate) → cap/coin
- * checks → assertLive (fresh authority) → build unsigned kind bytes → return the
- * signing request. There is deliberately no sponsor call, no decrypt, no
- * signature, and no forwarded bearer here.
- *
- * See docs/design/mcp-non-custodial-signing.md and ADR-0013 §3.
- */
-
-/**
- * Read/prepare-only session for the non-custodial MCP pay tool. It carries the
- * immutable grant snapshot and an optional prepare-time live gate — and no key,
- * by construction. There is no `decryptDelegateSeed` and no `sponsorAuthorization`.
- */
-interface SpendAccountPrepareSession {
-    snapshot: GrantSnapshot;
-    /** SpendAccount package id (V2). */
-    packageId: string;
-    /**
-     * Re-assert the grant is still live (not paused/revoked/expired) against fresh
-     * canonical state, invoked immediately before a signing request is handed back.
-     * Throw to abort. Optional; when absent, only the request-time snapshot gates
-     * the prepare (on-chain `spend_account::settle_policy_payment` remains the final backstop for any
-     * spend the client later submits).
-     */
-    assertLive?: () => Promise<void>;
-}
-interface SpendAccountPayDeps {
-    fetchImpl?: typeof fetch;
-    /** Build only-transaction-kind bytes for spend_account::settle_policy_payment. */
-    buildPayKind?: (input: {
-        delegate: string;
-        coinType: string;
-        poolObjectId: string;
-        grantObjectId: string;
-        policyId: number | string;
-        targetHash: string;
-        amount: string;
-        paymentIdHash: Uint8Array;
-        termsHash: Uint8Array;
-        recipient?: string;
-        accessMode?: 'scoped' | 'open';
-    }) => Promise<{
-        kindBytes: string;
-    }>;
-    /**
-     * Live trace for this prepare. Purely observational: emission records what the
-     * canonical read decisions already returned — an event is written after a check
-     * passes and can never be the thing that lets the next step run.
-     */
-    trace?: SpendAccountPayTrace;
-}
-interface SpendAccountPayTrace {
-    sink: TraceSink;
-    traceId: string;
-    requestId: string | null;
-    buyerAccountId: string;
-    connectionId: string;
-    /** HMAC secret for signed cross-request context. Absent disables signing. */
-    secret?: string | null;
-    /** Injected clock, for tests. */
-    now?: () => number;
-}
-/** The unsigned payment the client signs locally and submits. */
-interface SpendAccountSigningRequest {
-    /**
-     * Unsigned `spend_account::settle_policy_payment` transaction-kind bytes (base64), sender set to
-     * `delegateAddress`. The client sponsors these for gas, signs with the delegate
-     * key, and submits — the gateway never receives the key.
-     */
-    unsignedKindBytes: string;
-    delegateAddress: string;
-    packageId: string;
-    poolObjectId: string;
-    grantObjectId: string;
-    /** On-chain policy id the pay is bound to. */
-    policyId: number | string;
-    coinType: string;
-    targetHash: string;
-    amount: string;
-    /** Hex (no 0x) of the payment-id hash bound into the transaction. */
-    paymentIdHashHex: string;
-    /** Hex (no 0x) of the terms hash bound into the transaction. */
-    termsHashHex: string;
-    challengeId: string;
-    /** The exact paid request to replay after the client submits. */
-    resource: {
-        url: string;
-        method: string;
-    };
-    dialect: Dialect;
-    /** Recipient the agent requested (offer.payTo). */
-    recipient: string;
-    /** Where the client (holding the key) sponsors and submits. */
-    submit: {
-        sponsorUrl: string;
-        executeUrl: string;
-        moveCallTarget: string;
-    };
-    /**
-     * ISO-8601 timestamp when this prepared operation expires. After this time the
-     * unsigned bytes are no longer valid and the client must re-call pay() for a
-     * fresh prepare. Derived from the offer TTL.
-     */
-    expiresAt: string;
-    /** Restated hard rule for the agent host. */
-    note: string;
-}
-interface PreparedPayment {
-    status: 'prepared';
-    paid: false;
-    signingRequest: SpendAccountSigningRequest;
-}
-/** Prepared signing request, or a canonical failure (never a spend). */
-type SpendAccountPrepareResult = PreparedPayment | PayResult;
-/** Default kind builder (no chain client — pure PTB). */
-declare function buildSpendAccountPayKind(input: {
-    packageId: string;
-    delegate: string;
-    coinType: string;
-    poolObjectId: string;
-    grantObjectId: string;
-    policyId: number | string;
-    targetHash: string;
-    amount: string;
-    paymentIdHash: Uint8Array;
-    termsHash: Uint8Array;
-}): Promise<{
-    kindBytes: string;
-}>;
-/**
- * Refuse blind signing: a client validating a sponsored transaction must be able
- * to prove the sponsored bytes reconstruct the intended spend_account::settle_policy_payment. Kept
- * here (and exported) so both the client signer and its tests share one check.
- */
-declare function verifySpendAccountPayReconstructs(bytes: string, expected: {
-    kindBytes: string;
-    packageId: string;
-    delegate: string;
-    poolObjectId: string;
-    grantObjectId: string;
-    amount: string;
-}): void;
-/**
- * Prepare a delegate payment WITHOUT signing. Reads the 402 offer, binds it,
- * gates on the immutable grant snapshot + a fresh authority check, builds the
- * unsigned transaction, and returns a signing request. The client holding the
- * delegate key signs locally and submits. This function never decrypts, signs,
- * sponsors, or submits.
- *
- * Uses `resolvePayment` from the SDK pay-operation module (SAIP-170) for the
- * shared offer-acquisition + authority-resolution pipeline (steps 1–5 + assertLive
- * + hash derivation + buildPayKind). This module wraps that with MCP-specific
- * concerns: trace events, dialect-mode ceiling check, and signing-request
- * construction.
- */
-declare function prepareSpendAccountPayment(args: {
-    url: string;
-    /** The one normalized paid request, replayed byte for byte after signing. */
-    request?: PaidHttpRequest;
-    session: SpendAccountPrepareSession;
-    cfg: McpConfig;
-    deps?: SpendAccountPayDeps;
-    /** Preferred dialect when the 402 advertises both (default mpp). */
-    preferredDialect?: Dialect;
-}): Promise<SpendAccountPrepareResult>;
-
 /**
  * Client-side completion of an MCP prepared payment.
  *
@@ -319,12 +114,40 @@ declare function settlePreparedMcpPayment(args: {
     intent?: SpendIntent;
 }): Promise<DelegatedPayResult>;
 
+interface StdioLoginOptions {
+    consoleUrl: string;
+    gatewayUrl: string;
+    identity: {
+        delegateAddress: string;
+        publicKeyHex: string;
+    };
+    label?: string;
+    timeoutMs?: number;
+    openBrowser?: boolean;
+    onUrl?: (connectUrl: string) => void;
+}
+interface StartedStdioLogin {
+    connectUrl: string;
+    port: number;
+    connectState: string;
+    done: Promise<void>;
+    close: () => void;
+}
+/**
+ * Bind the loopback listener and return the console URL immediately.
+ * The wallet callback is awaited on `done`, not on the MCP tool call.
+ */
+declare function startStdioLogin(opts: StdioLoginOptions): Promise<StartedStdioLogin>;
+
 type ToolResult = CallToolResult;
+
 interface ToolDeps {
     fetchImpl?: typeof fetch;
     profileLoader?: () => PaymentProfile | null;
     /** Remote HTTP auth (grant + scope + optional shared-pool pay session). */
     auth?: McpAuthContext;
+    /** Wire transport. Hosted HTTP never reads a buyer path. */
+    transport?: 'stdio' | 'http';
     /**
      * Proxy-resolved live trace for this MCP request. Observation only: it never
      * changes which rail runs, what is paid, or whether a payment is allowed.
@@ -342,22 +165,29 @@ interface ToolDeps {
     };
     /** Override the prepare-time kind builder (tests / offline). */
     buildPayKind?: SpendAccountPayDeps['buildPayKind'];
+    /** Override the exclusion-registry resolver (tests / offline). */
+    resolveExclusionRegistry?: SpendAccountPayDeps['resolveExclusionRegistry'];
     /**
      * Stdio login surfaces the console URL (MCP progress notification). The URL
      * carries the delegate address only — never the seed.
      */
     onUrl?: (url: string) => void;
+    createPayer?: typeof createPayer;
+    createReader?: typeof createReader;
+    startStdioLogin?: typeof startStdioLogin;
 }
 declare function pay(args: {
     url: string;
     method?: unknown;
     json?: unknown;
+    file?: unknown;
+    fileField?: unknown;
     recipient?: unknown;
     maxAmount?: unknown;
 }, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
 declare function receipts(args: {
     challengeId?: string;
-}, _cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
+}, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
 
 declare function loadBootProfile(load?: typeof loadPaymentProfile): {
     profile: ReturnType<typeof loadPaymentProfile>;
@@ -365,4 +195,4 @@ declare function loadBootProfile(load?: typeof loadPaymentProfile): {
 };
 declare function main(): Promise<void>;
 
-export { McpAuthContext, McpConfig, McpTraceHooks, type PreparedPayment, type SpendAccountPrepareResult, type SpendAccountPrepareSession, type SpendAccountSigningRequest, buildSpendAccountPayKind, ensureLocalSigningKey, loadBootProfile, loadLocalSigner, main, pay, prepareSpendAccountPayment, receipts, settlePreparedMcpPayment, verifySpendAccountPayReconstructs };
+export { McpAuthContext, McpConfig, McpTraceHooks, SpendAccountSigningRequest, ensureLocalSigningKey, loadBootProfile, loadLocalSigner, main, pay, receipts, settlePreparedMcpPayment };

package/dist/index.js

@@ -1,8 +1,9 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-XAM2YQC6.js";
+} from "./chunk-IH6HQD2V.js";
 import {
+  MCP_TARGET_PRESETS,
   PACKAGE_NAME,
   TOOLS,
   buildSpendAccountPayKind,
@@ -13,17 +14,21 @@ import {
   inspectMcpEnvelope,
   loadLocalSigner,
   loadMcpConfig,
+  parseMcpTargetFlag,
   pay,
   prepareSpendAccountPayment,
   receipts,
   resetAgentHeldProcessLedger,
   resolveAgentHeldSettlement,
   resolveGrantTarget,
+  resolveMcpTarget,
+  sameMcpGateway,
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-KDOGSB5I.js";
+} from "./chunk-YMOMYFKL.js";
 export {
+  MCP_TARGET_PRESETS,
   PACKAGE_NAME,
   TOOLS,
   buildSpendAccountPayKind,
@@ -36,12 +41,15 @@ export {
   loadLocalSigner,
   loadMcpConfig,
   main,
+  parseMcpTargetFlag,
   pay,
   prepareSpendAccountPayment,
   receipts,
   resetAgentHeldProcessLedger,
   resolveAgentHeldSettlement,
   resolveGrantTarget,
+  resolveMcpTarget,
+  sameMcpGateway,
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.2.2-dev.4",
+  "version": "0.2.2-dev.40",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",
@@ -19,16 +19,12 @@
     "README.md"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": false
   },
   "engines": {
     "node": ">=20"
   },
-  "scripts": {
-    "build": "tsup",
-    "test": "vitest run",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mysten/sui": "2.24.0",
@@ -37,11 +33,16 @@
     "open": "^11.0.0"
   },
   "devDependencies": {
-    "@cmdoss/suipay-core": "workspace:*",
-    "@cmdoss/suipay-sdk": "workspace:*",
-    "@types/node": "catalog:",
-    "tsup": "catalog:",
-    "typescript": "catalog:",
-    "vitest": "catalog:"
+    "@types/node": "^26",
+    "tsup": "^8.0.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.10",
+    "@cmdoss/suipay-core": "0.1.0",
+    "@cmdoss/suipay-sdk": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
   }
-}
+}