@cmdoss/suipay-mcp 0.2.2-dev.9 → 0.3.0-dev.0

package/README.md

@@ -5,15 +5,21 @@ buyer-funded spend account. The buyer owns the account. The agent holds the
 delegate key and can spend only under the on-chain grant (recipient bind,
 per-payment cap, budget).
 
-Pin `@cmdoss/suipay-mcp@0.2.2-dev.9` in MCP config. `1.0.1` remains on the
-registry as a historical release; do not install it for new agents.
+Pin `@cmdoss/suipay-mcp@0.3.0-dev.0` in MCP config for the `latest` dist-tag.
+`npx -y @cmdoss/suipay-mcp@dev` tracks the `dev` prerelease line.
+`1.0.1` remains on the registry as a historical release; do not install it
+for new agents.
 
 ## Install
 
 ```bash
-claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.2.2-dev.9
+claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.3.0-dev.0
 ```
 
+`@dev` installs the Railway-dev gateway/console defaults. A workspace
+checkout still defaults to localhost. `SUIPAY_GATEWAY_URL` and
+`SUIPAY_CONSOLE_URL` always override.
+
 No wallet secret belongs in this command or MCP config. There is no
 Sign-In With Sui (SIWS) step. To reuse an existing delegate seed locally,
 set `SUIPAY_MCP_KEY` (64-hex or `suiprivkey1…`) in the MCP env — never in
@@ -101,6 +107,41 @@ is an extra display hint when the type is `image/*`; hosts such as Claude
 Code's TUI may not render it. Always quote `savedTo` when present. If
 `savedTo` is null, quote `saveError` and do not call `pay` again.
 
+## Tool errors — branch on `code`
+
+A tool result whose `status` is `failed` or `ambiguous` sets `isError: true`
+and puts the error model in `structuredContent`:
+
+| Field | Meaning |
+| --- | --- |
+| `status`, `paid` | As before. `paid` is `true`, `false` or `'unknown'`. |
+| `code` | Registered error code, e.g. `request.file_outside_root`. **Branch on this**, never on the text. |
+| `paymentState` | `charged`, `unknown` or `not_charged`; always agrees with `paid`. |
+| `retryable` | `true` only when a retry cannot charge twice. |
+| `nextAction` | `retry`, `retry_later`, `fix_request`, `sign_in`, `approve_access`, `add_funds`, `reconcile`, `contact_support` or `none`. |
+| `detail` | Developer text that states the fix. |
+| `txDigest`, `paymentId` | When known. |
+
+The text block holds the same object as JSON. When money moved or may have
+moved it **starts** with a line for the model:
+
+```
+You were charged. Do not pay again for this request.
+{ "status": "ambiguous", "paid": true, "code": "delivery.seller_unreachable", "paymentState": "charged", ... }
+```
+
+(`This payment may have gone through. Do not pay again until it is resolved.`
+when `paymentState` is `unknown`.) A result whose `status` is `ok` or
+`prepared` is never an error, including a free response that needed no
+payment.
+
+Common local codes: `auth.login_required` (run `suipay_login`),
+`request.file_outside_root` / `request.file_root_unset` (set
+`SUIPAY_MCP_FILE_ROOT`), `client.local_credentials_invalid` (log in again),
+`client.gateway_unreachable` (retry later). An unknown tool name is a JSON-RPC
+error, not a tool result; an invalid argument such as a relative `url` is a
+tool error with a `request.*` code and `nextAction: "fix_request"`.
+
 ## Targets
 
 Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
@@ -112,10 +153,10 @@ Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
 
 ```bash
 # Railway suipay-dev (default)
-npx @cmdoss/suipay-mcp@0.2.2-dev.9
+npx @cmdoss/suipay-mcp@0.3.0-dev.0
 
 # Laptop stack
-npx @cmdoss/suipay-mcp@0.2.2-dev.9 --local
+npx @cmdoss/suipay-mcp@0.3.0-dev.0 --local
 ```
 
 `SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit
@@ -175,4 +216,8 @@ node packages/mcp/dist/bin/suipay.js
 Binary writes status banner to stderr only. Stdout stays reserved for
 MCP protocol.
 
-Do not publish `@cmdoss/suipay-mcp` from this change.
+Publishing is the `release-npm` workflow: merge to `dev` publishes
+`@cmdoss/suipay-mcp@<version>-dev.N` with dist-tag `dev` (OIDC, pack gate,
+provenance). `latest` is a gated dispatch from `main` (`dry_run` default
+true). Do not `npm publish` from a laptop. See
+[`docs/guide/npm-release.md`](../../docs/guide/npm-release.md).

package/dist/bin/suipay.js

@@ -1,11 +1,13 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-LQOZBRH6.js";
-import "../chunk-NDJ7BFI4.js";
+} from "../chunk-W4RIN664.js";
+import {
+  logError
+} from "../chunk-FKDC22O6.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {
-  console.error(err instanceof Error ? err.message : String(err));
+  logError({ scope: "suipay-mcp", code: "client.unexpected", withStack: true }, err);
   process.exit(1);
 });