@cmdoss/suipay-mcp 0.2.2-dev.4 → 0.2.2-dev.6

package/dist/{http-C8xW9F1c.d.ts → http-DBP9qgVw.d.ts}

@@ -55,7 +55,19 @@ interface McpAuthContext {
     listReceipts?: (challengeId?: string) => Promise<SettlementDTO[]>;
 }
 
+type McpTarget = 'dev' | 'local';
+/**
+ * Public suipay-dev origins (Railway). `local` is the laptop stack from
+ * `pnpm demo:testnet`. Explicit `SUIPAY_GATEWAY_URL` / `SUIPAY_CONSOLE_URL`
+ * still win over the preset.
+ */
+declare const MCP_TARGET_PRESETS: Record<McpTarget, {
+    consoleUrl: string;
+    gatewayUrl: string;
+}>;
 interface McpConfig {
+    /** Preset used when console/gateway env is unset. Set by `loadMcpConfig`. */
+    target?: McpTarget;
     consoleUrl: string;
     gatewayUrl: string;
     rpcUrl: string;
@@ -68,7 +80,15 @@ interface McpConfig {
     minMaxPerPayment: bigint;
     label: string;
 }
-declare function loadMcpConfig(env?: NodeJS.ProcessEnv): McpConfig;
+/**
+ * CLI flags: `--local` / `-local`, `--dev` / `-dev`. Unknown args are ignored
+ * so an MCP host can pass extra argv without breaking stdio.
+ */
+declare function parseMcpTargetFlag(argv: readonly string[]): McpTarget | undefined;
+declare function resolveMcpTarget(env?: NodeJS.ProcessEnv, argv?: readonly string[]): McpTarget;
+/** Same public origin, or the same laptop loopback port (`localhost` ≡ `127.0.0.1`). */
+declare function sameMcpGateway(a: string, b: string): boolean;
+declare function loadMcpConfig(env?: NodeJS.ProcessEnv, argv?: readonly string[]): McpConfig;
 
 /**
  * Agent-held settlement wiring for the `pay` tool.
@@ -262,6 +282,14 @@ declare const TOOLS: readonly [{
                 readonly type: "object";
                 readonly description: "JSON request body for a POST. Sent as application/json and bound to the payment.";
             };
+            readonly file: {
+                readonly type: "string";
+                readonly description: "Absolute path under SUIPAY_MCP_FILE_ROOT (unset disables attach). Stdio POST only; requires fileField. Regular non-empty file whose decoded size fits the paid-body ceiling. Not a URL, FIFO, device, or path under ~/.suipay. Bytes fill json[fileField] as canonical base64.";
+            };
+            readonly fileField: {
+                readonly type: "string";
+                readonly description: "JSON key to set from file (e.g. contentBase64). Required with file. Pattern [A-Za-z][A-Za-z0-9_]{0,63}. Must not already be present on json.";
+            };
             readonly recipient: {
                 readonly type: "string";
                 readonly description: "Sui address you expect to be paid. The payment is refused, unsigned, if the prepared transaction pays anyone else.";
@@ -275,7 +303,7 @@ declare const TOOLS: readonly [{
     };
 }, {
     readonly name: "discover";
-    readonly description: "Search SuiPay gateway resources.";
+    readonly description: "Search SuiPay gateway resources. After login, each row includes name, path, url, catalog price, and whether the current session can cover one call at that price (descriptive only — pay still enforces the grant).";
     readonly inputSchema: {
         readonly type: "object";
         readonly properties: {
@@ -299,7 +327,7 @@ declare const TOOLS: readonly [{
     };
 }, {
     readonly name: "suipay_login";
-    readonly description: "Mint or reuse the local delegate key (version-2, mode 0600) and open the console with the public address only so the owner can bind a spend-account grant. Stdio only; hosted /mcp never holds a spendable key.";
+    readonly description: "Mint or reuse the local delegate key (version-2, mode 0600) and return a clickable console URL immediately so the owner can bind a spend-account grant. Does not wait for the wallet. Default target is Railway suipay-dev; pass target=\"local\" (or start the binary with --local) for the laptop stack. Stdio only; hosted /mcp never holds a spendable key.";
     readonly inputSchema: {
         readonly type: "object";
         readonly properties: {
@@ -307,6 +335,11 @@ declare const TOOLS: readonly [{
                 readonly type: "string";
                 readonly description: "Label shown in SuiPay console.";
             };
+            readonly target: {
+                readonly type: "string";
+                readonly enum: readonly ["dev", "local"];
+                readonly description: "Where to bind the grant. Default is Railway suipay-dev. Pass \"local\" for localhost:3000 / 127.0.0.1:4340.";
+            };
             readonly gatewayResourceUrl: {
                 readonly type: "string";
                 readonly description: "Gateway resource URL whose 402 defines recipient, asset, and package.";
@@ -345,6 +378,11 @@ interface McpServerOptions {
      * does not already authorize.
      */
     resolveAgentHeld?: AgentHeldResolver;
+    /**
+     * Wire that created this server. Hosted HTTP never forwards `file` into `pay`.
+     * Stdio is the default so existing tests stay local.
+     */
+    transport?: 'stdio' | 'http';
 }
 declare function createServer(cfg: McpConfig, auth?: McpAuthContext, trace?: McpTraceHooks, options?: McpServerOptions): Server;
 
@@ -364,4 +402,4 @@ declare function createServer(cfg: McpConfig, auth?: McpAuthContext, trace?: Mcp
  */
 declare function handleSuipayMcpHttpRequest(req: Request, cfg: McpConfig, auth?: McpAuthContext, trace?: McpTraceRuntime | null, options?: McpServerOptions): Promise<Response>;
 
-export { type AgentHeldResolver as A, type McpConfig as M, PACKAGE_NAME as P, TOOLS as T, type McpAuthContext as a, type McpTraceHooks as b, type AgentHeldSettlement as c, type McpEnvelope as d, type McpEnvelopeEntry as e, type McpServerOptions as f, type McpTraceContext as g, type McpTraceRuntime as h, canonicalMcpRequestId as i, createServer as j, handleSuipayMcpHttpRequest as k, inspectMcpEnvelope as l, loadMcpConfig as m, resolveAgentHeldSettlement as n, resetAgentHeldProcessLedger as r, traceMcpHttpRequest as t };
+export { type AgentHeldResolver as A, type McpConfig as M, PACKAGE_NAME as P, TOOLS as T, type McpAuthContext as a, type McpTraceHooks as b, type AgentHeldSettlement as c, MCP_TARGET_PRESETS as d, type McpEnvelope as e, type McpEnvelopeEntry as f, type McpServerOptions as g, type McpTarget as h, type McpTraceContext as i, type McpTraceRuntime as j, canonicalMcpRequestId as k, createServer as l, handleSuipayMcpHttpRequest as m, inspectMcpEnvelope as n, loadMcpConfig as o, parseMcpTargetFlag as p, resolveAgentHeldSettlement as q, resetAgentHeldProcessLedger as r, resolveMcpTarget as s, sameMcpGateway as t, traceMcpHttpRequest as u };

package/dist/http.d.ts

@@ -1,4 +1,4 @@
-export { k as handleSuipayMcpHttpRequest } from './http-C8xW9F1c.js';
+export { m as handleSuipayMcpHttpRequest } from './http-DBP9qgVw.js';
 import '@cmdoss/suipay-core/policy/grant-target';
 import '@cmdoss/suipay-sdk/mcp/access-context';
 import '@cmdoss/suipay-sdk/buyer/settlement-dto';

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-KDOGSB5I.js";
+} from "./chunk-UTKVBAEZ.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,13 +1,14 @@
 import { Wallet } from '@cmdoss/suipay-core/chain/types';
-import { M as McpConfig, a as McpAuthContext, b as McpTraceHooks } from './http-C8xW9F1c.js';
-export { A as AgentHeldResolver, c as AgentHeldSettlement, d as McpEnvelope, e as McpEnvelopeEntry, f as McpServerOptions, g as McpTraceContext, h as McpTraceRuntime, P as PACKAGE_NAME, T as TOOLS, i as canonicalMcpRequestId, j as createServer, k as handleSuipayMcpHttpRequest, l as inspectMcpEnvelope, m as loadMcpConfig, r as resetAgentHeldProcessLedger, n as resolveAgentHeldSettlement, t as traceMcpHttpRequest } from './http-C8xW9F1c.js';
+import { M as McpConfig, a as McpAuthContext, b as McpTraceHooks } from './http-DBP9qgVw.js';
+export { A as AgentHeldResolver, c as AgentHeldSettlement, d as MCP_TARGET_PRESETS, e as McpEnvelope, f as McpEnvelopeEntry, g as McpServerOptions, h as McpTarget, i as McpTraceContext, j as McpTraceRuntime, P as PACKAGE_NAME, T as TOOLS, k as canonicalMcpRequestId, l as createServer, m as handleSuipayMcpHttpRequest, n as inspectMcpEnvelope, o as loadMcpConfig, p as parseMcpTargetFlag, r as resetAgentHeldProcessLedger, q as resolveAgentHeldSettlement, s as resolveMcpTarget, t as sameMcpGateway, u as traceMcpHttpRequest } from './http-DBP9qgVw.js';
 import { GrantSnapshot } from '@cmdoss/suipay-core/policy/grant-target';
 export { resolveGrantTarget } from '@cmdoss/suipay-core/policy/grant-target';
 import { PaidHttpRequest } from '@cmdoss/suipay-sdk/protocol/paid-http-request';
 import { TraceSink } from '@cmdoss/suipay-core/trace/types';
 import { Dialect } from '@cmdoss/suipay-sdk/protocol/types';
-import { GetObjectJson } from '@cmdoss/suipay-sdk/agent-sdk/reads';
+import { GetObjectJson, createReader } from '@cmdoss/suipay-sdk/agent-sdk/reads';
 import { DelegatedKeySigner, DelegatedPayerSession, DelegatedPayerConfig, DelegatedPayerDeps, SpendIntent, DelegatedPayResult } from '@cmdoss/suipay-sdk/delegated-signer/payer';
+import { createPayer } from '@cmdoss/suipay-sdk/agent-sdk/delegate-agent';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 import '@cmdoss/suipay-sdk/mcp/access-context';
 import '@cmdoss/suipay-sdk/buyer/settlement-dto';
@@ -48,11 +49,6 @@ interface PaymentProfile {
  * and point operators at delegate OAuth / delegated-signer flows.
  */
 declare function loadPaymentProfile(): PaymentProfile | null;
-/**
- * First authorization generates a local keypair and persists it at 0600.
- * Re-authorization reuses the stored key so a second key cannot orphan the grant.
- * Returns only the public identity.
- */
 declare function ensureLocalSigningKey(opts?: {
     label?: string;
 }): Promise<LocalSigningKeyIdentity>;
@@ -319,12 +315,40 @@ declare function settlePreparedMcpPayment(args: {
     intent?: SpendIntent;
 }): Promise<DelegatedPayResult>;
 
+interface StdioLoginOptions {
+    consoleUrl: string;
+    gatewayUrl: string;
+    identity: {
+        delegateAddress: string;
+        publicKeyHex: string;
+    };
+    label?: string;
+    timeoutMs?: number;
+    openBrowser?: boolean;
+    onUrl?: (connectUrl: string) => void;
+}
+interface StartedStdioLogin {
+    connectUrl: string;
+    port: number;
+    connectState: string;
+    done: Promise<void>;
+    close: () => void;
+}
+/**
+ * Bind the loopback listener and return the console URL immediately.
+ * The wallet callback is awaited on `done`, not on the MCP tool call.
+ */
+declare function startStdioLogin(opts: StdioLoginOptions): Promise<StartedStdioLogin>;
+
 type ToolResult = CallToolResult;
+
 interface ToolDeps {
     fetchImpl?: typeof fetch;
     profileLoader?: () => PaymentProfile | null;
     /** Remote HTTP auth (grant + scope + optional shared-pool pay session). */
     auth?: McpAuthContext;
+    /** Wire transport. Hosted HTTP never reads a buyer path. */
+    transport?: 'stdio' | 'http';
     /**
      * Proxy-resolved live trace for this MCP request. Observation only: it never
      * changes which rail runs, what is paid, or whether a payment is allowed.
@@ -347,17 +371,22 @@ interface ToolDeps {
      * carries the delegate address only — never the seed.
      */
     onUrl?: (url: string) => void;
+    createPayer?: typeof createPayer;
+    createReader?: typeof createReader;
+    startStdioLogin?: typeof startStdioLogin;
 }
 declare function pay(args: {
     url: string;
     method?: unknown;
     json?: unknown;
+    file?: unknown;
+    fileField?: unknown;
     recipient?: unknown;
     maxAmount?: unknown;
 }, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
 declare function receipts(args: {
     challengeId?: string;
-}, _cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
+}, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
 
 declare function loadBootProfile(load?: typeof loadPaymentProfile): {
     profile: ReturnType<typeof loadPaymentProfile>;

package/dist/index.js

@@ -1,8 +1,9 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-XAM2YQC6.js";
+} from "./chunk-AEV6Q6JC.js";
 import {
+  MCP_TARGET_PRESETS,
   PACKAGE_NAME,
   TOOLS,
   buildSpendAccountPayKind,
@@ -13,17 +14,21 @@ import {
   inspectMcpEnvelope,
   loadLocalSigner,
   loadMcpConfig,
+  parseMcpTargetFlag,
   pay,
   prepareSpendAccountPayment,
   receipts,
   resetAgentHeldProcessLedger,
   resolveAgentHeldSettlement,
   resolveGrantTarget,
+  resolveMcpTarget,
+  sameMcpGateway,
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-KDOGSB5I.js";
+} from "./chunk-UTKVBAEZ.js";
 export {
+  MCP_TARGET_PRESETS,
   PACKAGE_NAME,
   TOOLS,
   buildSpendAccountPayKind,
@@ -36,12 +41,15 @@ export {
   loadLocalSigner,
   loadMcpConfig,
   main,
+  parseMcpTargetFlag,
   pay,
   prepareSpendAccountPayment,
   receipts,
   resetAgentHeldProcessLedger,
   resolveAgentHeldSettlement,
   resolveGrantTarget,
+  resolveMcpTarget,
+  sameMcpGateway,
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.2.2-dev.4",
+  "version": "0.2.2-dev.6",
   "type": "module",
-  "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
+  "description": "SuiPay MCP \u2014 pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {

package/dist/chunk-XAM2YQC6.js

@@ -1,39 +0,0 @@
-import {
-  createServer,
-  loadMcpConfig,
-  loadPaymentProfile
-} from "./chunk-KDOGSB5I.js";
-
-// src/index.ts
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-function loadBootProfile(load = loadPaymentProfile) {
-  try {
-    return { profile: load(), unreadable: false };
-  } catch {
-    return { profile: null, unreadable: true };
-  }
-}
-async function main() {
-  const cfg = loadMcpConfig();
-  const { profile: bootProfile, unreadable: bootProfileUnreadable } = loadBootProfile();
-  const server = createServer(cfg);
-  await server.connect(new StdioServerTransport());
-  if (bootProfileUnreadable) {
-    console.error(
-      "[suipay-mcp] credentials unreadable: run suipay_login or suipay_logout force=true \xB7 stdio ready"
-    );
-  } else if (bootProfile) {
-    console.error(
-      `[suipay-mcp] delegate ${bootProfile.creds.delegateAddress} (${bootProfile.source}) \xB7 stdio ready`
-    );
-  } else {
-    console.error(
-      "[suipay-mcp] not connected \xB7 run suipay_login \xB7 stdio ready"
-    );
-  }
-}
-
-export {
-  loadBootProfile,
-  main
-};