@cmdoss/suipay-mcp 0.2.2-dev.7 → 0.2.2-dev.9

package/README.md

@@ -5,13 +5,13 @@ buyer-funded spend account. The buyer owns the account. The agent holds the
 delegate key and can spend only under the on-chain grant (recipient bind,
 per-payment cap, budget).
 
-Pin `@cmdoss/suipay-mcp@0.2.2` in MCP config. `1.0.1` remains on the
+Pin `@cmdoss/suipay-mcp@0.2.2-dev.9` in MCP config. `1.0.1` remains on the
 registry as a historical release; do not install it for new agents.
 
 ## Install
 
 ```bash
-claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.2.2
+claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.2.2-dev.9
 ```
 
 No wallet secret belongs in this command or MCP config. There is no
@@ -112,10 +112,10 @@ Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
 
 ```bash
 # Railway suipay-dev (default)
-npx @cmdoss/suipay-mcp@0.2.2
+npx @cmdoss/suipay-mcp@0.2.2-dev.9
 
 # Laptop stack
-npx @cmdoss/suipay-mcp@0.2.2 --local
+npx @cmdoss/suipay-mcp@0.2.2-dev.9 --local
 ```
 
 `SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit

package/dist/bin/suipay.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-KR6WRUDY.js";
-import "../chunk-6ZSOXII5.js";
+} from "../chunk-LQOZBRH6.js";
+import "../chunk-NDJ7BFI4.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-KR6WRUDY.js → chunk-LQOZBRH6.js}

@@ -4,7 +4,7 @@ import {
   loadLocalSigningKeyRecord,
   loadMcpConfig,
   loadPaymentProfile
-} from "./chunk-6ZSOXII5.js";
+} from "./chunk-NDJ7BFI4.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/{chunk-6ZSOXII5.js → chunk-NDJ7BFI4.js}

@@ -538,6 +538,32 @@ function createSpendAccountChain(options) {
       kindBytes: toBase64(await tx.build({ client, onlyTransactionKind: true }))
     };
   }
+  function appendCreatePolicyGrant(tx, input) {
+    if (!input.onChainPolicyIds.length) {
+      throw new Error("create_grant requires at least one on-chain policy id");
+    }
+    if (!input.maxPerPayment || BigInt(input.maxPerPayment) <= 0n) {
+      throw new Error("create_grant requires a non-zero max_per_payment");
+    }
+    if (!input.sessionCap || BigInt(input.sessionCap) <= 0n) {
+      throw new Error("create_grant requires a non-zero session_cap");
+    }
+    const expires = input.expiresAtMs === void 0 || input.expiresAtMs === null ? 0n : BigInt(input.expiresAtMs);
+    tx.moveCall({
+      target: target("create_policy_grant"),
+      typeArguments: [input.coinType],
+      arguments: [
+        tx.object(input.poolObjectId),
+        tx.pure.address(input.delegate),
+        // The unified Grant<T> takes Option<u64> caps. This builder rejects
+        // absent or zero caps above, so both are always Some here.
+        tx.pure.option("u64", BigInt(input.sessionCap)),
+        tx.pure.option("u64", BigInt(input.maxPerPayment)),
+        tx.pure.u64(expires),
+        tx.pure.vector("u64", input.onChainPolicyIds.map((id) => BigInt(id)))
+      ]
+    });
+  }
   async function fundingCoin(tx, owner, coinType, amount) {
     if (!isSuiCoinType(coinType)) {
       return coinWithBalance({ type: coinType, balance: amount });
@@ -737,32 +763,23 @@ function createSpendAccountChain(options) {
       return kindBytes(tx);
     },
     async buildCreateGrantKind(input) {
-      if (!input.onChainPolicyIds.length) {
-        throw new Error("create_grant requires at least one on-chain policy id");
-      }
-      if (!input.maxPerPayment || BigInt(input.maxPerPayment) <= 0n) {
-        throw new Error("create_grant requires a non-zero max_per_payment");
+      const tx = new Transaction2();
+      tx.setSender(input.owner);
+      appendCreatePolicyGrant(tx, input);
+      return kindBytes(tx);
+    },
+    async buildCreateGrantBatchKind(inputs) {
+      if (!inputs.length) {
+        throw new Error("create_grant batch requires at least one grant");
       }
-      if (!input.sessionCap || BigInt(input.sessionCap) <= 0n) {
-        throw new Error("create_grant requires a non-zero session_cap");
+      const owner = inputs[0].owner;
+      if (inputs.some((input) => input.owner !== owner)) {
+        throw new Error("create_grant batch requires one owner");
       }
       const tx = new Transaction2();
-      tx.setSender(input.owner);
-      const expires = input.expiresAtMs === void 0 || input.expiresAtMs === null ? 0n : BigInt(input.expiresAtMs);
-      tx.moveCall({
-        target: target("create_policy_grant"),
-        typeArguments: [input.coinType],
-        arguments: [
-          tx.object(input.poolObjectId),
-          tx.pure.address(input.delegate),
-          // The unified Grant<T> takes Option<u64> caps. This builder rejects
-          // absent or zero caps above, so both are always Some here.
-          tx.pure.option("u64", BigInt(input.sessionCap)),
-          tx.pure.option("u64", BigInt(input.maxPerPayment)),
-          tx.pure.u64(expires),
-          tx.pure.vector("u64", input.onChainPolicyIds.map((id) => BigInt(id)))
-        ]
-      });
+      tx.setSender(owner);
+      for (const input of inputs)
+        appendCreatePolicyGrant(tx, input);
       return kindBytes(tx);
     },
     async buildCreateSpendGrantKind(input) {
@@ -5563,7 +5580,7 @@ var MCP_TARGET_PRESETS = {
     gatewayUrl: "https://gateway-dev-ba84.up.railway.app"
   },
   local: {
-    consoleUrl: "http://localhost:3000",
+    consoleUrl: "https://suipay-dev.up.railway.app",
     gatewayUrl: "http://127.0.0.1:4340"
   }
 };
@@ -5675,6 +5692,35 @@ function loadMcpConfig(env = process.env, argv = []) {
     exclusionDirectoryObjectId: rawDir || null
   };
 }
+var OBJECT_ID = /^0x(?:[0-9a-fA-F]{1,64})$/;
+async function publishedExclusionDirectoryId(gatewayUrl, fetchImpl = fetch) {
+  let url;
+  try {
+    url = new URL("/v1/delegate/deployment", gatewayUrl).toString();
+  } catch {
+    return null;
+  }
+  let response;
+  try {
+    response = await fetchImpl(url, {
+      method: "GET",
+      redirect: "manual",
+      signal: AbortSignal.timeout(1500)
+    });
+  } catch {
+    return null;
+  }
+  if (response.status !== 200) return null;
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    return null;
+  }
+  const id = body && typeof body === "object" && "exclusionDirectoryObjectId" in body ? body.exclusionDirectoryObjectId : void 0;
+  if (typeof id !== "string" || !OBJECT_ID.test(id.trim())) return null;
+  return id.trim();
+}
 function rpcClient(cfg) {
   return new SuiGrpcClient2({ network: cfg.network, baseUrl: cfg.rpcUrl });
 }
@@ -5967,9 +6013,29 @@ function recordFromKeypair(kp, opts = {}, existing, operatorSecret) {
   };
 }
 var ENV_KEY_MISMATCH = "SUIPAY_MCP_KEY does not match the stored delegate key - refusing to overwrite";
+function signingMaterial(parsed) {
+  if (!parsed || typeof parsed !== "object") return null;
+  if (isLocalSigningKeyRecord(parsed)) return parsed;
+  const c = parsed;
+  if (typeof c.delegatePrivateKey !== "string" || !HEX64.test(c.delegatePrivateKey) || typeof c.delegatePublicKeyHex !== "string" || !HEX64.test(c.delegatePublicKeyHex) || typeof c.delegateAddress !== "string" || !ADDR.test(c.delegateAddress)) {
+    return null;
+  }
+  const label = typeof c.label === "string" ? c.label.trim() : "";
+  return {
+    version: 2,
+    delegatePrivateKey: c.delegatePrivateKey,
+    delegatePublicKeyHex: c.delegatePublicKeyHex,
+    delegateAddress: c.delegateAddress,
+    createdAt: typeof c.createdAt === "string" && c.createdAt ? c.createdAt : (/* @__PURE__ */ new Date(0)).toISOString(),
+    ...isHttpUrl(c.gatewayUrl) ? { gatewayUrl: c.gatewayUrl } : {},
+    ...label ? { label } : {}
+  };
+}
 function existingRecordForEnv(parsed) {
   if (parsed === null) return null;
-  if (isLocalSigningKeyRecord(parsed) || isValid(parsed)) return parsed;
+  if (isValid(parsed)) return parsed;
+  const material = signingMaterial(parsed);
+  if (material) return material;
   throw new Error(
     `credentials file at ${credsPath()} failed schema validation - refusing to continue`
   );
@@ -6007,16 +6073,25 @@ async function ensureLocalSigningKey(opts = {}) {
   }
   const parsed = readCredentialsJson();
   if (parsed !== null) {
-    if (isLocalSigningKeyRecord(parsed)) {
-      return identityFromStored(
-        parsed.delegatePrivateKey,
-        parsed.delegatePublicKeyHex,
-        parsed.delegateAddress
-      );
-    }
-    if (isValid(parsed)) {
+    if (isValid(parsed) && !isLocalSigningKeyRecord(parsed)) {
       return rewriteV1ToLocalSigningKey(parsed, opts);
     }
+    const material = signingMaterial(parsed);
+    if (material) {
+      const identity = identityFromStored(
+        material.delegatePrivateKey,
+        material.delegatePublicKeyHex,
+        material.delegateAddress
+      );
+      if (!isLocalSigningKeyRecord(parsed)) {
+        const label = opts.label?.trim() || material.label;
+        writeCredentialsFile({
+          ...material,
+          ...label ? { label } : {}
+        });
+      }
+      return identity;
+    }
     throw new Error(`credentials file at ${credsPath()} failed schema validation - refusing to continue`);
   }
   const kp = await generateKeypair();
@@ -6107,6 +6182,32 @@ function loadLocalKeypair() {
     Uint8Array.from(Buffer.from(parsed.delegatePrivateKey, "hex"))
   );
 }
+function replaceLocalSigningKey(input) {
+  identityFromStored(
+    input.delegatePrivateKey,
+    input.delegatePublicKeyHex,
+    input.delegateAddress
+  );
+  const parsed = readCredentialsJson();
+  let gatewayUrl;
+  let label;
+  if (parsed && typeof parsed === "object") {
+    const record = parsed;
+    if (isHttpUrl(record.gatewayUrl)) gatewayUrl = record.gatewayUrl;
+    if (typeof record.label === "string" && record.label.trim()) {
+      label = record.label.trim();
+    }
+  }
+  writeCredentialsFile({
+    version: 2,
+    delegatePrivateKey: input.delegatePrivateKey,
+    delegatePublicKeyHex: input.delegatePublicKeyHex,
+    delegateAddress: input.delegateAddress,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    ...gatewayUrl ? { gatewayUrl } : {},
+    ...label ? { label } : {}
+  });
+}
 function persistGatewayUrl(gatewayUrl) {
   if (!isHttpUrl(gatewayUrl)) {
     throw new Error("gatewayUrl must be an http(s) origin");
@@ -6938,7 +7039,23 @@ async function fetchGatewayDeployment(options) {
       }
     };
   }
-  return { ok: true, value: { network: d.network, packageId: d.packageId } };
+  if (d.exclusionDirectoryObjectId !== void 0 && !isNonEmptyString2(d.exclusionDirectoryObjectId)) {
+    return {
+      ok: false,
+      error: {
+        code: MANIFEST_ERROR_CODES.MALFORMED_MANIFEST,
+        detail: "gateway deployment identity carries an unusable exclusionDirectoryObjectId"
+      }
+    };
+  }
+  return {
+    ok: true,
+    value: {
+      network: d.network,
+      packageId: d.packageId,
+      ...isNonEmptyString2(d.exclusionDirectoryObjectId) ? { exclusionDirectoryObjectId: d.exclusionDirectoryObjectId } : {}
+    }
+  };
 }
 function explainBlockedGrant(raw, error2) {
   if (error2.code !== MANIFEST_ERROR_CODES.MISSING_POLICY_BINDING)
@@ -7030,7 +7147,7 @@ async function resolvePayerSession(options) {
     ...options.select ? { select: options.select } : {}
   });
   if (whole.ok)
-    return whole;
+    return { ok: true, value: { ...whole.value, deployment } };
   const data = bootstrap.data;
   const rawGrants = Array.isArray(data.grants) ? data.grants : [];
   const usable = [];
@@ -7065,11 +7182,12 @@ async function resolvePayerSession(options) {
     const pick = scoped ?? blocked[0];
     return pick ? { ok: false, error: explainBlockedGrant(pick.raw, pick.error) } : whole;
   }
-  return manifestToSession({
+  const resolved = manifestToSession({
     manifest: { ...data, grants: usable },
     signer: options.signer,
     ...options.select ? { select: options.select } : {}
   });
+  return resolved.ok ? { ok: true, value: { ...resolved.value, deployment } } : resolved;
 }
 
 // ../sdk/dist/buyer/transport.js
@@ -7099,6 +7217,9 @@ function mergeObjectEnvelope(object) {
 var SECRET_KEY_SET = new Set(FORBIDDEN_SECRET_KEYS.map((k) => k.toLowerCase()));
 
 // ../sdk/dist/agent-sdk/delegate-agent.js
+function resolveExclusionDirectoryId(explicit, discovered) {
+  return explicit?.trim() ? explicit : discovered;
+}
 function createExclusionRegistryResolver(client, exclusionDirectoryObjectId) {
   if (!exclusionDirectoryObjectId || !exclusionDirectoryObjectId.trim())
     return void 0;
@@ -7167,8 +7288,17 @@ async function createPayer(options) {
   const { session, binding } = resolved.value;
   const deployment = {
     network: session.network,
-    packageId: session.packageId
+    packageId: session.packageId,
+    // What the GATEWAY published, not what this payer settled on: a caller
+    // override belongs to the payer's configuration, not to the deployment it
+    // is describing. Dropping this left the field permanently undefined on the
+    // one instance a consumer can reach, so anything asking the payer whether
+    // guarded settles are available got "no" while it was doing them.
+    ...resolved.value.deployment.exclusionDirectoryObjectId ? {
+      exclusionDirectoryObjectId: resolved.value.deployment.exclusionDirectoryObjectId
+    } : {}
   };
+  const exclusionDirectoryObjectId = resolveExclusionDirectoryId(options.exclusionDirectoryObjectId, resolved.value.deployment.exclusionDirectoryObjectId);
   let network;
   try {
     network = toGrpcNetwork(deployment.network);
@@ -7227,7 +7357,7 @@ async function createPayer(options) {
     // directory id was configured, so such an offer fails closed (BUILD_FAILED)
     // rather than building an unguarded settle. Unguarded offers never call it.
     ...(() => {
-      const resolve = createExclusionRegistryResolver(chain.client, options.exclusionDirectoryObjectId);
+      const resolve = createExclusionRegistryResolver(chain.client, exclusionDirectoryObjectId);
       return resolve ? { resolveExclusionRegistry: resolve } : {};
     })(),
     // x402 bounds the transaction's expiration by the current epoch, read from
@@ -7286,6 +7416,7 @@ async function createPayer(options) {
 import { createServer } from "http";
 import { randomBytes as randomBytes3, timingSafeEqual as timingSafeEqual2 } from "crypto";
 import open from "open";
+import { Ed25519Keypair as Ed25519Keypair3 } from "@mysten/sui/keypairs/ed25519";
 var HEX642 = /^[0-9a-f]{64}$/;
 var PUBHEX = /^[0-9a-fA-F]{64}$/;
 function isPreflight(obj) {
@@ -7293,6 +7424,11 @@ function isPreflight(obj) {
   const o = obj;
   return typeof o.state === "string" && HEX642.test(o.state) && typeof o.publicKey === "string" && PUBHEX.test(o.publicKey) && typeof o.delegateAddress === "string" && /^0x[0-9a-fA-F]{64}$/.test(o.delegateAddress) && typeof o.gateway === "string" && o.gateway.length > 0;
 }
+function isAdoptKey(obj) {
+  if (!obj || typeof obj !== "object") return false;
+  const o = obj;
+  return typeof o.state === "string" && HEX642.test(o.state) && typeof o.delegatePrivateKey === "string" && HEX642.test(o.delegatePrivateKey) && typeof o.delegatePublicKeyHex === "string" && PUBHEX.test(o.delegatePublicKeyHex) && typeof o.delegateAddress === "string" && /^0x[0-9a-fA-F]{64}$/.test(o.delegateAddress);
+}
 function isCallback(obj) {
   if (!obj || typeof obj !== "object") return false;
   const o = obj;
@@ -7417,7 +7553,7 @@ async function startStdioLogin(opts) {
         res.writeHead(code, { "content-type": type, ...SECURITY_HEADERS, ...extra });
         res.end(body);
       };
-      const okPath = url.pathname === "/preflight" || url.pathname === "/callback";
+      const okPath = url.pathname === "/preflight" || url.pathname === "/callback" || url.pathname === "/key";
       if (req.method === "OPTIONS") {
         const extra = { ...cors };
         if (okHost && okOrigin && okPath && req.headers["access-control-request-private-network"] === "true") {
@@ -7488,6 +7624,55 @@ async function startStdioLogin(opts) {
           );
           return;
         }
+        if (url.pathname === "/key") {
+          if (!preflightVerified) {
+            res.writeHead(428, {
+              "content-type": "application/json",
+              ...cors,
+              ...SECURITY_HEADERS
+            });
+            res.end(JSON.stringify({ ok: false, error: "preflight required" }));
+            return;
+          }
+          if (!isAdoptKey(parsed) || !stateEquals(parsed.state, connectState)) {
+            res.writeHead(400, {
+              "content-type": "application/json",
+              ...cors,
+              ...SECURITY_HEADERS
+            });
+            res.end(JSON.stringify({ ok: false, error: "invalid key payload" }));
+            return;
+          }
+          try {
+            const kp = Ed25519Keypair3.fromSecretKey(
+              Uint8Array.from(Buffer.from(parsed.delegatePrivateKey, "hex"))
+            );
+            const derived = kp.getPublicKey().toSuiAddress();
+            if (derived.toLowerCase() !== parsed.delegateAddress.toLowerCase()) {
+              throw new Error("address mismatch");
+            }
+            replaceLocalSigningKey({
+              delegatePrivateKey: parsed.delegatePrivateKey,
+              delegatePublicKeyHex: parsed.delegatePublicKeyHex,
+              delegateAddress: derived
+            });
+          } catch {
+            res.writeHead(400, {
+              "content-type": "application/json",
+              ...cors,
+              ...SECURITY_HEADERS
+            });
+            res.end(JSON.stringify({ ok: false, error: "key rejected" }));
+            return;
+          }
+          res.writeHead(200, {
+            "content-type": "application/json",
+            ...cors,
+            ...SECURITY_HEADERS
+          });
+          res.end(JSON.stringify({ ok: true }));
+          return;
+        }
         if (!preflightVerified) {
           res.writeHead(428, {
             "content-type": "text/html",
@@ -7591,6 +7776,22 @@ import { fromBase64 as fromBase6410, toBase64 as toBase646 } from "@mysten/sui/u
 
 // src/spend-account-pay.ts
 var SUI_CLOCK3 = "0x6";
+var sharedObjectReaderForTests = null;
+function chainSharedObjectReader(cfg, packageId) {
+  const chain = createSpendAccountChain({
+    packageId,
+    network: cfg.network,
+    url: cfg.rpcUrl
+  });
+  return async (objectId) => {
+    const { object } = await chain.client.core.getObject({
+      objectId,
+      include: { json: true }
+    });
+    if (!object?.owner) return null;
+    return { owner: object.owner };
+  };
+}
 function traceEmitter(trace) {
   if (!trace) return () => void 0;
   const now = trace.now ?? Date.now;
@@ -7650,12 +7851,12 @@ async function buildSpendAccountPayKind2(input) {
       }),
       tx.sharedObjectRef({
         objectId: input.poolObjectId,
-        initialSharedVersion: "1",
+        initialSharedVersion: input.poolInitialSharedVersion?.trim() || "1",
         mutable: true
       }),
       tx.sharedObjectRef({
         objectId: input.grantObjectId,
-        initialSharedVersion: "1",
+        initialSharedVersion: input.grantInitialSharedVersion?.trim() || "1",
         mutable: true
       }),
       tx.pure.u64(BigInt(input.policyId)),
@@ -7666,7 +7867,7 @@ async function buildSpendAccountPayKind2(input) {
       tx.pure.u64(BigInt(guarded.expiresAtMs)),
       tx.sharedObjectRef({
         objectId: SUI_CLOCK3,
-        initialSharedVersion: "1",
+        initialSharedVersion: input.clockInitialSharedVersion?.trim() || "1",
         mutable: false
       })
     ]
@@ -7754,6 +7955,12 @@ async function prepareSpendAccountPayment(args) {
         ...guardedFields
       });
     }
+    const readSharedObject = deps.readSharedObject ?? sharedObjectReaderForTests ?? chainSharedObjectReader(cfg, input.packageId);
+    const versions = await resolveSharedObjectVersionsFromGetObject(readSharedObject, {
+      poolObjectId: input.poolObjectId,
+      grantObjectId: input.grantObjectId,
+      clockObjectId: SUI_CLOCK3
+    });
     if (isOpen) {
       return buildSpendAccountSettleOpenRecipientKind({
         packageId: input.packageId,
@@ -7761,8 +7968,9 @@ async function prepareSpendAccountPayment(args) {
         coinType: input.coinType,
         poolObjectId: input.poolObjectId,
         grantObjectId: input.grantObjectId,
-        poolInitialSharedVersion: "1",
-        grantInitialSharedVersion: "1",
+        poolInitialSharedVersion: versions.poolInitialSharedVersion,
+        grantInitialSharedVersion: versions.grantInitialSharedVersion,
+        clockInitialSharedVersion: versions.clockInitialSharedVersion,
         recipient: input.recipient,
         targetHash: input.targetHash,
         amount: input.amount,
@@ -7782,6 +7990,9 @@ async function prepareSpendAccountPayment(args) {
       amount: input.amount,
       paymentIdHash: input.paymentIdHash,
       termsHash: input.termsHash,
+      poolInitialSharedVersion: versions.poolInitialSharedVersion,
+      grantInitialSharedVersion: versions.grantInitialSharedVersion,
+      clockInitialSharedVersion: versions.clockInitialSharedVersion,
       ...guardedFields
     });
   };
@@ -7802,7 +8013,8 @@ async function prepareSpendAccountPayment(args) {
     authority: session.snapshot,
     assertLive: session.assertLive
   };
-  const resolveExclusionRegistry2 = deps.resolveExclusionRegistry ?? (cfg.exclusionDirectoryObjectId ? (() => {
+  const directorySwitch = cfg.exclusionDirectoryObjectId ? cfg.exclusionDirectoryObjectId : deps.resolveExclusionRegistry ? null : await publishedExclusionDirectoryId(cfg.gatewayUrl);
+  const resolveExclusionRegistry2 = deps.resolveExclusionRegistry ?? (directorySwitch ? (() => {
     const reader = createGrpcExclusionRegistryReader(rpcClient(cfg));
     return async ({ directoryId, recipient }) => resolveExclusionRegistry({
       directoryObjectId: directoryId,
@@ -9022,10 +9234,15 @@ async function suipayLogin(args, cfg, deps = {}) {
       });
     }
     if (live.kind === "unknown") {
-      return error({
-        status: "failed",
+      return text({
+        status: "ok",
+        reused: true,
+        grantStatus: "unknown",
         code: "GRANT_STATUS_UNKNOWN",
-        detail: "Could not verify the existing grant. Credentials were not modified. Retry later; do not start a new consent (that would mint a second grant)."
+        target: target ?? cfg.target,
+        delegateAddress: identity.delegateAddress,
+        gatewayUrl: endpoints.gatewayUrl,
+        message: "Credentials are already saved for this agent. The existing grant could not be checked just now, so no new sign-in was started and the key file was left unchanged. Retry suipay_login in a moment."
       });
     }
   }
@@ -9035,13 +9252,13 @@ async function suipayLogin(args, cfg, deps = {}) {
     identity,
     label,
     timeoutMs: LOGIN_BG_TIMEOUT_MS,
-    openBrowser: false,
+    openBrowser: true,
     onUrl: deps.onUrl
   });
   const url = started.connectUrl;
   return text(
     [
-      `## ACTION REQUIRED: User must click this URL to sign in`,
+      `## ACTION REQUIRED: The sign-in page was opened in the browser`,
       ``,
       `**Target:** ${target ?? cfg.target ?? "custom"} \xB7 ${endpoints.gatewayUrl}`,
       ``,
@@ -9053,11 +9270,13 @@ async function suipayLogin(args, cfg, deps = {}) {
       ``,
       `[Click here to open SuiPay sign-in](${url})`,
       ``,
-      `**IMPORTANT for the assistant**: do NOT summarize or omit the URL above.`,
-      `The user CANNOT proceed without seeing the exact URL. Surface it verbatim.`,
+      `**IMPORTANT for the assistant**: the browser was already opened to this exact URL.`,
+      `Do NOT navigate to /connect/agent yourself. That path without these query`,
+      `parameters shows "Authorization link incomplete". If the page did not`,
+      `appear, surface the URL above verbatim and do not shorten it.`,
       ``,
-      `1. Open the URL in any browser`,
-      `2. Connect the owner wallet and approve the spend-account grant (Access keys / policies)`,
+      `1. Use the browser window that just opened, or open the URL above`,
+      `2. Connect the owner wallet, choose or create a key, then Authorize on the review step`,
       `3. Once Connected appears, retry the original request \u2014 credentials at \`~/.suipay/credentials.json\` are picked up on the next tool call`,
       ``,
       `_The login link stays valid for 5 minutes. If it expires, call \`suipay_login\` again._`,

package/dist/{http-DggnqM91.d.ts → http-RP-Xlg60.d.ts}

@@ -83,11 +83,10 @@ interface McpConfig {
     minMaxPerPayment: bigint;
     label: string;
     /**
-     * The canonical `ExclusionDirectory` object id (the same
-     * `SUIPAY_EXCLUSION_DIRECTORY_OBJECT_ID` the gateway reads). Present enables the
-     * non-custodial pay path to resolve the per-recipient `RecipientRegistry` and
-     * build a GUARDED delegate settle for a guarded offer. `null` when
-     * unset — a guarded offer then FAILS CLOSED (no unguarded settle).
+     * Optional override of the gateway's published `ExclusionDirectory` id.
+     * When null, pay reads `GET /v1/delegate/deployment` and turns the resolver
+     * on only if that response names one. The id here does not choose the
+     * directory a settle uses — the offer's `registryIdentity` does.
      */
     exclusionDirectoryObjectId: string | null;
 }
@@ -304,6 +303,9 @@ type PayResult = {
  * See docs/design/mcp-non-custodial-signing.md and ADR-0013 §3.
  */
 
+type SharedObjectReader = (objectId: string) => Promise<{
+    owner?: unknown;
+} | null | undefined>;
 /**
  * Read/prepare-only session for the non-custodial MCP pay tool. It carries the
  * immutable grant snapshot and an optional prepare-time live gate — and no key,
@@ -355,6 +357,11 @@ interface SpendAccountPayDeps {
      * configured `ExclusionDirectory` id when present, else fails closed.
      */
     resolveExclusionRegistry?: PayOperationDeps['resolveExclusionRegistry'];
+    /**
+     * Read a shared object's owner so prepare binds the real initial version.
+     * Missing owner fails the prepare; version 1 is not a substitute.
+     */
+    readSharedObject?: SharedObjectReader;
     /**
      * Live trace for this prepare. Purely observational: emission records what the
      * canonical read decisions already returned — an event is written after a check
@@ -437,6 +444,9 @@ declare function buildSpendAccountPayKind(input: {
     amount: string;
     paymentIdHash: Uint8Array;
     termsHash: Uint8Array;
+    poolInitialSharedVersion?: string;
+    grantInitialSharedVersion?: string;
+    clockInitialSharedVersion?: string;
 } & GuardedSettleFields): Promise<{
     kindBytes: string;
 }>;

package/dist/http.d.ts

@@ -1,4 +1,4 @@
-export { r as handleSuipayMcpHttpRequest } from './http-DggnqM91.js';
+export { r as handleSuipayMcpHttpRequest } from './http-RP-Xlg60.js';
 import '@cmdoss/suipay-core/policy/grant-target';
 import '@cmdoss/suipay-sdk/mcp/access-context';
 import '@cmdoss/suipay-sdk/buyer/settlement-dto';

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-6ZSOXII5.js";
+} from "./chunk-NDJ7BFI4.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { Wallet } from '@cmdoss/suipay-core/chain/types';
-import { S as SpendAccountSigningRequest, M as McpConfig, a as McpAuthContext, b as McpTraceHooks, c as SpendAccountPayDeps } from './http-DggnqM91.js';
-export { A as AgentHeldResolver, d as AgentHeldSettlement, e as MCP_TARGET_PRESETS, f as McpEnvelope, g as McpEnvelopeEntry, h as McpServerOptions, i as McpTarget, j as McpTraceContext, k as McpTraceRuntime, P as PACKAGE_NAME, l as PreparedPayment, m as SpendAccountPrepareResult, n as SpendAccountPrepareSession, T as TOOLS, o as buildSpendAccountPayKind, p as canonicalMcpRequestId, q as createServer, r as handleSuipayMcpHttpRequest, s as inspectMcpEnvelope, t as loadMcpConfig, u as parseMcpTargetFlag, v as prepareSpendAccountPayment, w as resetAgentHeldProcessLedger, x as resolveAgentHeldSettlement, y as resolveMcpTarget, z as sameMcpGateway, B as traceMcpHttpRequest, C as verifySpendAccountPayReconstructs } from './http-DggnqM91.js';
+import { S as SpendAccountSigningRequest, M as McpConfig, a as McpAuthContext, b as McpTraceHooks, c as SpendAccountPayDeps } from './http-RP-Xlg60.js';
+export { A as AgentHeldResolver, d as AgentHeldSettlement, e as MCP_TARGET_PRESETS, f as McpEnvelope, g as McpEnvelopeEntry, h as McpServerOptions, i as McpTarget, j as McpTraceContext, k as McpTraceRuntime, P as PACKAGE_NAME, l as PreparedPayment, m as SpendAccountPrepareResult, n as SpendAccountPrepareSession, T as TOOLS, o as buildSpendAccountPayKind, p as canonicalMcpRequestId, q as createServer, r as handleSuipayMcpHttpRequest, s as inspectMcpEnvelope, t as loadMcpConfig, u as parseMcpTargetFlag, v as prepareSpendAccountPayment, w as resetAgentHeldProcessLedger, x as resolveAgentHeldSettlement, y as resolveMcpTarget, z as sameMcpGateway, B as traceMcpHttpRequest, C as verifySpendAccountPayReconstructs } from './http-RP-Xlg60.js';
 import { GetObjectJson, createReader } from '@cmdoss/suipay-sdk/agent-sdk/reads';
 import { DelegatedKeySigner, DelegatedPayerSession, DelegatedPayerConfig, DelegatedPayerDeps, SpendIntent, DelegatedPayResult } from '@cmdoss/suipay-sdk/delegated-signer/payer';
 import { PaidHttpRequest } from '@cmdoss/suipay-sdk/protocol/paid-http-request';

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-KR6WRUDY.js";
+} from "./chunk-LQOZBRH6.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-6ZSOXII5.js";
+} from "./chunk-NDJ7BFI4.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.2.2-dev.7",
+  "version": "0.2.2-dev.9",
   "type": "module",
-  "description": "SuiPay MCP \u2014 pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
+  "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -20,16 +20,11 @@
   ],
   "publishConfig": {
     "access": "public",
-    "provenance": true
+    "provenance": false
   },
   "engines": {
     "node": ">=20"
   },
-  "scripts": {
-    "build": "tsup",
-    "test": "vitest run",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mysten/sui": "2.24.0",
@@ -38,11 +33,16 @@
     "open": "^11.0.0"
   },
   "devDependencies": {
-    "@cmdoss/suipay-core": "workspace:*",
-    "@cmdoss/suipay-sdk": "workspace:*",
-    "@types/node": "catalog:",
-    "tsup": "catalog:",
-    "typescript": "catalog:",
-    "vitest": "catalog:"
+    "@types/node": "^26",
+    "tsup": "^8.0.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.10",
+    "@cmdoss/suipay-core": "0.1.0",
+    "@cmdoss/suipay-sdk": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
   }
-}
+}