@cmdoss/suipay-mcp 0.2.2-dev.7 → 0.2.2-dev.8

package/dist/bin/suipay.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-KR6WRUDY.js";
-import "../chunk-6ZSOXII5.js";
+} from "../chunk-KW3ZECP6.js";
+import "../chunk-K4C64BXE.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-6ZSOXII5.js → chunk-K4C64BXE.js}

@@ -5675,6 +5675,35 @@ function loadMcpConfig(env = process.env, argv = []) {
     exclusionDirectoryObjectId: rawDir || null
   };
 }
+var OBJECT_ID = /^0x(?:[0-9a-fA-F]{1,64})$/;
+async function publishedExclusionDirectoryId(gatewayUrl, fetchImpl = fetch) {
+  let url;
+  try {
+    url = new URL("/v1/delegate/deployment", gatewayUrl).toString();
+  } catch {
+    return null;
+  }
+  let response;
+  try {
+    response = await fetchImpl(url, {
+      method: "GET",
+      redirect: "manual",
+      signal: AbortSignal.timeout(1500)
+    });
+  } catch {
+    return null;
+  }
+  if (response.status !== 200) return null;
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    return null;
+  }
+  const id = body && typeof body === "object" && "exclusionDirectoryObjectId" in body ? body.exclusionDirectoryObjectId : void 0;
+  if (typeof id !== "string" || !OBJECT_ID.test(id.trim())) return null;
+  return id.trim();
+}
 function rpcClient(cfg) {
   return new SuiGrpcClient2({ network: cfg.network, baseUrl: cfg.rpcUrl });
 }
@@ -6938,7 +6967,23 @@ async function fetchGatewayDeployment(options) {
       }
     };
   }
-  return { ok: true, value: { network: d.network, packageId: d.packageId } };
+  if (d.exclusionDirectoryObjectId !== void 0 && !isNonEmptyString2(d.exclusionDirectoryObjectId)) {
+    return {
+      ok: false,
+      error: {
+        code: MANIFEST_ERROR_CODES.MALFORMED_MANIFEST,
+        detail: "gateway deployment identity carries an unusable exclusionDirectoryObjectId"
+      }
+    };
+  }
+  return {
+    ok: true,
+    value: {
+      network: d.network,
+      packageId: d.packageId,
+      ...isNonEmptyString2(d.exclusionDirectoryObjectId) ? { exclusionDirectoryObjectId: d.exclusionDirectoryObjectId } : {}
+    }
+  };
 }
 function explainBlockedGrant(raw, error2) {
   if (error2.code !== MANIFEST_ERROR_CODES.MISSING_POLICY_BINDING)
@@ -7030,7 +7075,7 @@ async function resolvePayerSession(options) {
     ...options.select ? { select: options.select } : {}
   });
   if (whole.ok)
-    return whole;
+    return { ok: true, value: { ...whole.value, deployment } };
   const data = bootstrap.data;
   const rawGrants = Array.isArray(data.grants) ? data.grants : [];
   const usable = [];
@@ -7065,11 +7110,12 @@ async function resolvePayerSession(options) {
     const pick = scoped ?? blocked[0];
     return pick ? { ok: false, error: explainBlockedGrant(pick.raw, pick.error) } : whole;
   }
-  return manifestToSession({
+  const resolved = manifestToSession({
     manifest: { ...data, grants: usable },
     signer: options.signer,
     ...options.select ? { select: options.select } : {}
   });
+  return resolved.ok ? { ok: true, value: { ...resolved.value, deployment } } : resolved;
 }
 
 // ../sdk/dist/buyer/transport.js
@@ -7099,6 +7145,9 @@ function mergeObjectEnvelope(object) {
 var SECRET_KEY_SET = new Set(FORBIDDEN_SECRET_KEYS.map((k) => k.toLowerCase()));
 
 // ../sdk/dist/agent-sdk/delegate-agent.js
+function resolveExclusionDirectoryId(explicit, discovered) {
+  return explicit ?? discovered;
+}
 function createExclusionRegistryResolver(client, exclusionDirectoryObjectId) {
   if (!exclusionDirectoryObjectId || !exclusionDirectoryObjectId.trim())
     return void 0;
@@ -7169,6 +7218,7 @@ async function createPayer(options) {
     network: session.network,
     packageId: session.packageId
   };
+  const exclusionDirectoryObjectId = resolveExclusionDirectoryId(options.exclusionDirectoryObjectId, resolved.value.deployment.exclusionDirectoryObjectId);
   let network;
   try {
     network = toGrpcNetwork(deployment.network);
@@ -7227,7 +7277,7 @@ async function createPayer(options) {
     // directory id was configured, so such an offer fails closed (BUILD_FAILED)
     // rather than building an unguarded settle. Unguarded offers never call it.
     ...(() => {
-      const resolve = createExclusionRegistryResolver(chain.client, options.exclusionDirectoryObjectId);
+      const resolve = createExclusionRegistryResolver(chain.client, exclusionDirectoryObjectId);
       return resolve ? { resolveExclusionRegistry: resolve } : {};
     })(),
     // x402 bounds the transaction's expiration by the current epoch, read from
@@ -7591,6 +7641,22 @@ import { fromBase64 as fromBase6410, toBase64 as toBase646 } from "@mysten/sui/u
 
 // src/spend-account-pay.ts
 var SUI_CLOCK3 = "0x6";
+var sharedObjectReaderForTests = null;
+function chainSharedObjectReader(cfg, packageId) {
+  const chain = createSpendAccountChain({
+    packageId,
+    network: cfg.network,
+    url: cfg.rpcUrl
+  });
+  return async (objectId) => {
+    const { object } = await chain.client.core.getObject({
+      objectId,
+      include: { json: true }
+    });
+    if (!object?.owner) return null;
+    return { owner: object.owner };
+  };
+}
 function traceEmitter(trace) {
   if (!trace) return () => void 0;
   const now = trace.now ?? Date.now;
@@ -7650,12 +7716,12 @@ async function buildSpendAccountPayKind2(input) {
       }),
       tx.sharedObjectRef({
         objectId: input.poolObjectId,
-        initialSharedVersion: "1",
+        initialSharedVersion: input.poolInitialSharedVersion?.trim() || "1",
         mutable: true
       }),
       tx.sharedObjectRef({
         objectId: input.grantObjectId,
-        initialSharedVersion: "1",
+        initialSharedVersion: input.grantInitialSharedVersion?.trim() || "1",
         mutable: true
       }),
       tx.pure.u64(BigInt(input.policyId)),
@@ -7666,7 +7732,7 @@ async function buildSpendAccountPayKind2(input) {
       tx.pure.u64(BigInt(guarded.expiresAtMs)),
       tx.sharedObjectRef({
         objectId: SUI_CLOCK3,
-        initialSharedVersion: "1",
+        initialSharedVersion: input.clockInitialSharedVersion?.trim() || "1",
         mutable: false
       })
     ]
@@ -7754,6 +7820,12 @@ async function prepareSpendAccountPayment(args) {
         ...guardedFields
       });
     }
+    const readSharedObject = deps.readSharedObject ?? sharedObjectReaderForTests ?? chainSharedObjectReader(cfg, input.packageId);
+    const versions = await resolveSharedObjectVersionsFromGetObject(readSharedObject, {
+      poolObjectId: input.poolObjectId,
+      grantObjectId: input.grantObjectId,
+      clockObjectId: SUI_CLOCK3
+    });
     if (isOpen) {
       return buildSpendAccountSettleOpenRecipientKind({
         packageId: input.packageId,
@@ -7761,8 +7833,9 @@ async function prepareSpendAccountPayment(args) {
         coinType: input.coinType,
         poolObjectId: input.poolObjectId,
         grantObjectId: input.grantObjectId,
-        poolInitialSharedVersion: "1",
-        grantInitialSharedVersion: "1",
+        poolInitialSharedVersion: versions.poolInitialSharedVersion,
+        grantInitialSharedVersion: versions.grantInitialSharedVersion,
+        clockInitialSharedVersion: versions.clockInitialSharedVersion,
         recipient: input.recipient,
         targetHash: input.targetHash,
         amount: input.amount,
@@ -7782,6 +7855,9 @@ async function prepareSpendAccountPayment(args) {
       amount: input.amount,
       paymentIdHash: input.paymentIdHash,
       termsHash: input.termsHash,
+      poolInitialSharedVersion: versions.poolInitialSharedVersion,
+      grantInitialSharedVersion: versions.grantInitialSharedVersion,
+      clockInitialSharedVersion: versions.clockInitialSharedVersion,
       ...guardedFields
     });
   };
@@ -7802,7 +7878,8 @@ async function prepareSpendAccountPayment(args) {
     authority: session.snapshot,
     assertLive: session.assertLive
   };
-  const resolveExclusionRegistry2 = deps.resolveExclusionRegistry ?? (cfg.exclusionDirectoryObjectId ? (() => {
+  const directorySwitch = cfg.exclusionDirectoryObjectId ? cfg.exclusionDirectoryObjectId : deps.resolveExclusionRegistry ? null : await publishedExclusionDirectoryId(cfg.gatewayUrl);
+  const resolveExclusionRegistry2 = deps.resolveExclusionRegistry ?? (directorySwitch ? (() => {
     const reader = createGrpcExclusionRegistryReader(rpcClient(cfg));
     return async ({ directoryId, recipient }) => resolveExclusionRegistry({
       directoryObjectId: directoryId,
@@ -9035,13 +9112,13 @@ async function suipayLogin(args, cfg, deps = {}) {
     identity,
     label,
     timeoutMs: LOGIN_BG_TIMEOUT_MS,
-    openBrowser: false,
+    openBrowser: true,
     onUrl: deps.onUrl
   });
   const url = started.connectUrl;
   return text(
     [
-      `## ACTION REQUIRED: User must click this URL to sign in`,
+      `## ACTION REQUIRED: The sign-in page was opened in the browser`,
       ``,
       `**Target:** ${target ?? cfg.target ?? "custom"} \xB7 ${endpoints.gatewayUrl}`,
       ``,
@@ -9053,11 +9130,13 @@ async function suipayLogin(args, cfg, deps = {}) {
       ``,
       `[Click here to open SuiPay sign-in](${url})`,
       ``,
-      `**IMPORTANT for the assistant**: do NOT summarize or omit the URL above.`,
-      `The user CANNOT proceed without seeing the exact URL. Surface it verbatim.`,
+      `**IMPORTANT for the assistant**: the browser was already opened to this exact URL.`,
+      `Do NOT navigate to /connect/agent yourself. That path without these query`,
+      `parameters shows "Authorization link incomplete". If the page did not`,
+      `appear, surface the URL above verbatim and do not shorten it.`,
       ``,
-      `1. Open the URL in any browser`,
-      `2. Connect the owner wallet and approve the spend-account grant (Access keys / policies)`,
+      `1. Use the browser window that just opened, or open the URL above`,
+      `2. Connect the owner wallet, choose or create a key, then Authorize on the review step`,
       `3. Once Connected appears, retry the original request \u2014 credentials at \`~/.suipay/credentials.json\` are picked up on the next tool call`,
       ``,
       `_The login link stays valid for 5 minutes. If it expires, call \`suipay_login\` again._`,

package/dist/{chunk-KR6WRUDY.js → chunk-KW3ZECP6.js}

@@ -4,7 +4,7 @@ import {
   loadLocalSigningKeyRecord,
   loadMcpConfig,
   loadPaymentProfile
-} from "./chunk-6ZSOXII5.js";
+} from "./chunk-K4C64BXE.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/{http-DggnqM91.d.ts → http-RP-Xlg60.d.ts}

@@ -83,11 +83,10 @@ interface McpConfig {
     minMaxPerPayment: bigint;
     label: string;
     /**
-     * The canonical `ExclusionDirectory` object id (the same
-     * `SUIPAY_EXCLUSION_DIRECTORY_OBJECT_ID` the gateway reads). Present enables the
-     * non-custodial pay path to resolve the per-recipient `RecipientRegistry` and
-     * build a GUARDED delegate settle for a guarded offer. `null` when
-     * unset — a guarded offer then FAILS CLOSED (no unguarded settle).
+     * Optional override of the gateway's published `ExclusionDirectory` id.
+     * When null, pay reads `GET /v1/delegate/deployment` and turns the resolver
+     * on only if that response names one. The id here does not choose the
+     * directory a settle uses — the offer's `registryIdentity` does.
      */
     exclusionDirectoryObjectId: string | null;
 }
@@ -304,6 +303,9 @@ type PayResult = {
  * See docs/design/mcp-non-custodial-signing.md and ADR-0013 §3.
  */
 
+type SharedObjectReader = (objectId: string) => Promise<{
+    owner?: unknown;
+} | null | undefined>;
 /**
  * Read/prepare-only session for the non-custodial MCP pay tool. It carries the
  * immutable grant snapshot and an optional prepare-time live gate — and no key,
@@ -355,6 +357,11 @@ interface SpendAccountPayDeps {
      * configured `ExclusionDirectory` id when present, else fails closed.
      */
     resolveExclusionRegistry?: PayOperationDeps['resolveExclusionRegistry'];
+    /**
+     * Read a shared object's owner so prepare binds the real initial version.
+     * Missing owner fails the prepare; version 1 is not a substitute.
+     */
+    readSharedObject?: SharedObjectReader;
     /**
      * Live trace for this prepare. Purely observational: emission records what the
      * canonical read decisions already returned — an event is written after a check
@@ -437,6 +444,9 @@ declare function buildSpendAccountPayKind(input: {
     amount: string;
     paymentIdHash: Uint8Array;
     termsHash: Uint8Array;
+    poolInitialSharedVersion?: string;
+    grantInitialSharedVersion?: string;
+    clockInitialSharedVersion?: string;
 } & GuardedSettleFields): Promise<{
     kindBytes: string;
 }>;

package/dist/http.d.ts

@@ -1,4 +1,4 @@
-export { r as handleSuipayMcpHttpRequest } from './http-DggnqM91.js';
+export { r as handleSuipayMcpHttpRequest } from './http-RP-Xlg60.js';
 import '@cmdoss/suipay-core/policy/grant-target';
 import '@cmdoss/suipay-sdk/mcp/access-context';
 import '@cmdoss/suipay-sdk/buyer/settlement-dto';

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-6ZSOXII5.js";
+} from "./chunk-K4C64BXE.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { Wallet } from '@cmdoss/suipay-core/chain/types';
-import { S as SpendAccountSigningRequest, M as McpConfig, a as McpAuthContext, b as McpTraceHooks, c as SpendAccountPayDeps } from './http-DggnqM91.js';
-export { A as AgentHeldResolver, d as AgentHeldSettlement, e as MCP_TARGET_PRESETS, f as McpEnvelope, g as McpEnvelopeEntry, h as McpServerOptions, i as McpTarget, j as McpTraceContext, k as McpTraceRuntime, P as PACKAGE_NAME, l as PreparedPayment, m as SpendAccountPrepareResult, n as SpendAccountPrepareSession, T as TOOLS, o as buildSpendAccountPayKind, p as canonicalMcpRequestId, q as createServer, r as handleSuipayMcpHttpRequest, s as inspectMcpEnvelope, t as loadMcpConfig, u as parseMcpTargetFlag, v as prepareSpendAccountPayment, w as resetAgentHeldProcessLedger, x as resolveAgentHeldSettlement, y as resolveMcpTarget, z as sameMcpGateway, B as traceMcpHttpRequest, C as verifySpendAccountPayReconstructs } from './http-DggnqM91.js';
+import { S as SpendAccountSigningRequest, M as McpConfig, a as McpAuthContext, b as McpTraceHooks, c as SpendAccountPayDeps } from './http-RP-Xlg60.js';
+export { A as AgentHeldResolver, d as AgentHeldSettlement, e as MCP_TARGET_PRESETS, f as McpEnvelope, g as McpEnvelopeEntry, h as McpServerOptions, i as McpTarget, j as McpTraceContext, k as McpTraceRuntime, P as PACKAGE_NAME, l as PreparedPayment, m as SpendAccountPrepareResult, n as SpendAccountPrepareSession, T as TOOLS, o as buildSpendAccountPayKind, p as canonicalMcpRequestId, q as createServer, r as handleSuipayMcpHttpRequest, s as inspectMcpEnvelope, t as loadMcpConfig, u as parseMcpTargetFlag, v as prepareSpendAccountPayment, w as resetAgentHeldProcessLedger, x as resolveAgentHeldSettlement, y as resolveMcpTarget, z as sameMcpGateway, B as traceMcpHttpRequest, C as verifySpendAccountPayReconstructs } from './http-RP-Xlg60.js';
 import { GetObjectJson, createReader } from '@cmdoss/suipay-sdk/agent-sdk/reads';
 import { DelegatedKeySigner, DelegatedPayerSession, DelegatedPayerConfig, DelegatedPayerDeps, SpendIntent, DelegatedPayResult } from '@cmdoss/suipay-sdk/delegated-signer/payer';
 import { PaidHttpRequest } from '@cmdoss/suipay-sdk/protocol/paid-http-request';

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-KR6WRUDY.js";
+} from "./chunk-KW3ZECP6.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-6ZSOXII5.js";
+} from "./chunk-K4C64BXE.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.2.2-dev.7",
+  "version": "0.2.2-dev.8",
   "type": "module",
-  "description": "SuiPay MCP \u2014 pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
+  "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -25,11 +25,6 @@
   "engines": {
     "node": ">=20"
   },
-  "scripts": {
-    "build": "tsup",
-    "test": "vitest run",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mysten/sui": "2.24.0",
@@ -38,11 +33,14 @@
     "open": "^11.0.0"
   },
   "devDependencies": {
-    "@cmdoss/suipay-core": "workspace:*",
-    "@cmdoss/suipay-sdk": "workspace:*",
-    "@types/node": "catalog:",
-    "tsup": "catalog:",
-    "typescript": "catalog:",
-    "vitest": "catalog:"
+    "@types/node": "^26",
+    "tsup": "^8.0.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.10"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
   }
-}
+}