@cmdoss/suipay-mcp 0.2.2-dev.4 → 0.2.2-dev.6

package/README.md

@@ -15,7 +15,9 @@ claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.2.2
 ```
 
 No wallet secret belongs in this command or MCP config. There is no
-Sign-In With Sui (SIWS) step.
+Sign-In With Sui (SIWS) step. To reuse an existing delegate seed locally,
+set `SUIPAY_MCP_KEY` (64-hex or `suiprivkey1…`) in the MCP env — never in
+the browser.
 
 ## First connection
 
@@ -26,8 +28,11 @@ First connection is a spend-account grant plus an agent-held delegate key.
 2. Persist that delegate key locally at `~/.suipay/credentials.json`
    (mode `0600`). The process that holds this key is the only process
    that can settle.
-3. Point MCP at the gateway (`SUIPAY_GATEWAY_URL`) and the same network
-   the grant was created on.
+3. Point MCP at a gateway. Default is Railway **suipay-dev**. Pass
+   `suipay_login({ target: "local" })` or start the binary with `--local`
+   for the laptop stack. Env/CLI fill the process default until a
+   credential is bound; after login, stored `gatewayUrl` wins. Rebind
+   with `suipay_login({ target })`.
 4. Call `pay`. The tool prepares unsigned `spend_account` settlement
    bytes. If this process holds the grant's key it verifies and settles;
    otherwise it returns the signing request.
@@ -36,17 +41,20 @@ The agent generates or is handed the delegate key. The key never enters
 a browser URL, a SuiPay backend, logs, or a callback payload. Only the
 public address leaves the local process. `suipay_login` mints or reuses
 the local version-2 key at `~/.suipay/credentials.json` (mode `0600`) and
-opens `{SUIPAY_CONSOLE_URL}/connect/agent?delegateAddress=0x…`.
+returns `{SUIPAY_CONSOLE_URL}/connect/agent?port=&delegateAddress=&connectState=&gateway=`
+immediately. The owner signs in the browser; the loopback callback persists
+key + gateway URL. Subsequent sessions reuse the file unless the grant is
+missing, expired, or revoked.
 
 ## Tools
 
 | Tool | Purpose |
 | --- | --- |
-| `discover` | Search live managed-gateway resources |
-| `pay` | Fetch resource, prepare `spend_account` settlement, settle when this process holds the grant key |
+| `discover` | Search live gateway resources. After login: `name`, `path`, `url`, `targetHash`, catalog price, and `affordable` (can this session cover one call — not authorization). `pay({ url })` still settles |
+| `pay` | Fetch resource, prepare `spend_account` settlement, settle when this process holds the grant key. POST `json` is the paid body. Optional stdio `file` + `fileField` fill one JSON key from a local file as canonical base64 (Walrus `contentBase64`); requires `SUIPAY_MCP_FILE_ROOT`; hosted `/mcp` refuses `file` |
 | `receipts` | List settlement receipts, optionally by challenge ID |
 | `access_context` | Report current session / delegate / policy state (no secret material) |
-| `suipay_login` | Mint or reuse the local delegate key and open the console with the public address only |
+| `suipay_login` | Mint or reuse the local delegate key and return a clickable console URL (does not wait for the wallet). Default target is Railway suipay-dev; pass `target: "local"` for the laptop stack |
 | `suipay_logout` | Remove local credentials |
 
 All tools remain visible before a grant is bound. `pay` and `receipts`
@@ -68,16 +76,65 @@ json: {"prompt":"a cat"}
 maxAmount: 50000
 ```
 
-`pay` uses the buyer SDK internally. A delivered image is returned as an MCP
-image block, not as a base64 wall in the JSON summary.
+To store local bytes (Walrus), do not paste base64. Name the file and field.
+Set `SUIPAY_MCP_FILE_ROOT` to an absolute directory; `file` must resolve inside
+it (unset disables attach). Paths under `~/.suipay` are refused even if that
+directory falls inside the root.
+
+```
+Pay this SuiPay resource with the suipay MCP `pay` tool. Do not write SDK code.
+
+url: https://gateway.example/v1/walrus/store
+method: POST
+json: {"contentType":"text/plain"}
+file: /absolute/path/to/note.txt
+fileField: contentBase64
+maxAmount: 50000
+```
+
+`pay` uses SDK `createPayer` internally. When this process settles, a binary
+body is written once under `~/.suipay/deliveries/` and named first in the
+JSON as `savedTo` (absolute path) and `savedToUrl` (`file://`). Hosted `/mcp`
+is prepare-only and does not write a buyer file. Any MIME — image, audio,
+pdf, octet-stream. JSON stays compact (no base64 wall). An MCP `image` block
+is an extra display hint when the type is `image/*`; hosts such as Claude
+Code's TUI may not render it. Always quote `savedTo` when present. If
+`savedTo` is null, quote `saveError` and do not call `pay` again.
+
+## Targets
+
+Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
+
+| Target | Console | Gateway | How |
+| --- | --- | --- | --- |
+| `dev` (default) | `https://suipay-dev.up.railway.app` | `https://gateway-dev-ba84.up.railway.app` | no flag, or `--dev` |
+| `local` | `http://localhost:3000` | `http://127.0.0.1:4340` | `--local` / `-local`, or `suipay_login({ target: "local" })` |
+
+```bash
+# Railway suipay-dev (default)
+npx @cmdoss/suipay-mcp@0.2.2
+
+# Laptop stack
+npx @cmdoss/suipay-mcp@0.2.2 --local
+```
+
+`SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit
+`SUIPAY_GATEWAY_URL` / `SUIPAY_CONSOLE_URL` fill the process default when no
+credential is bound yet. After a successful login, `credentials.json`
+`gatewayUrl` is the bound gateway: `pay` / `discover` / `suipay_login` without
+`target` stay on that binding so a leftover env cannot silently retarget spend.
+Rebind with `suipay_login({ target: "dev" | "local" })` (same key, new consent
+if that stack has no live grant).
 
 ## Client environment
 
 ```bash
+# Optional. Unset = Railway suipay-dev. --local uses localhost:3000 / 127.0.0.1:4340.
 SUIPAY_GATEWAY_URL=https://gateway.example
 SUIPAY_CONSOLE_URL=https://console.example
 SUIPAY_RPC_URL=https://your-testnet-rpc.example
 SUIPAY_NETWORK=testnet
+SUIPAY_MCP_TARGET=dev
 ```
 
 Optional:

package/dist/bin/suipay.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-XAM2YQC6.js";
-import "../chunk-KDOGSB5I.js";
+} from "../chunk-AEV6Q6JC.js";
+import "../chunk-UTKVBAEZ.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/chunk-AEV6Q6JC.js

@@ -0,0 +1,46 @@
+import {
+  createServer,
+  loadLocalSigner,
+  loadLocalSigningKeyRecord,
+  loadMcpConfig,
+  loadPaymentProfile
+} from "./chunk-UTKVBAEZ.js";
+
+// src/index.ts
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+function loadBootProfile(load = loadPaymentProfile) {
+  try {
+    return { profile: load(), unreadable: false };
+  } catch {
+    return { profile: null, unreadable: true };
+  }
+}
+async function main() {
+  const argv = process.argv.slice(2);
+  const cfg = loadMcpConfig(process.env, argv);
+  const target = cfg.target ?? "dev";
+  const server = createServer(cfg, void 0, void 0, { transport: "stdio" });
+  await server.connect(new StdioServerTransport());
+  try {
+    const boundGateway = loadLocalSigningKeyRecord()?.gatewayUrl ?? cfg.gatewayUrl;
+    const local = loadLocalSigner();
+    if (local) {
+      console.error(
+        `[suipay-mcp] ${target} ${boundGateway} \xB7 delegate ${local.address} \xB7 stdio ready`
+      );
+    } else {
+      console.error(
+        `[suipay-mcp] ${target} ${boundGateway} \xB7 not connected \xB7 run suipay_login \xB7 stdio ready`
+      );
+    }
+  } catch {
+    console.error(
+      `[suipay-mcp] ${target} ${cfg.gatewayUrl} \xB7 credentials unreadable: run suipay_login or suipay_logout force=true \xB7 stdio ready`
+    );
+  }
+}
+
+export {
+  loadBootProfile,
+  main
+};