@cmdoss/suipay-mcp 0.3.0-dev.3 → 0.3.0-dev.4

package/README.md

@@ -5,7 +5,7 @@ buyer-funded spend account. The buyer owns the account. The agent holds the
 delegate key and can spend only under the on-chain grant (recipient bind,
 per-payment cap, budget).
 
-Pin `@cmdoss/suipay-mcp@0.3.0-dev.3` in MCP config for the `latest` dist-tag.
+Pin `@cmdoss/suipay-mcp@0.3.0-dev.4` in MCP config for the `latest` dist-tag.
 `npx -y @cmdoss/suipay-mcp@dev` tracks the `dev` prerelease line.
 `1.0.1` remains on the registry as a historical release; do not install it
 for new agents.
@@ -13,7 +13,7 @@ for new agents.
 ## Install
 
 ```bash
-claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.3.0-dev.3
+claude mcp add --scope user suipay -- npx -y @cmdoss/suipay-mcp@0.3.0-dev.4
 ```
 
 `@dev` installs the Railway-dev gateway/console defaults. A workspace
@@ -153,10 +153,10 @@ Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
 
 ```bash
 # Railway suipay-dev (default)
-npx @cmdoss/suipay-mcp@0.3.0-dev.3
+npx @cmdoss/suipay-mcp@0.3.0-dev.4
 
 # Laptop stack
-npx @cmdoss/suipay-mcp@0.3.0-dev.3 --local
+npx @cmdoss/suipay-mcp@0.3.0-dev.4 --local
 ```
 
 `SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit

package/dist/bin/suipay.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-5HVUGWWW.js";
+} from "../chunk-JJOV775N.js";
 import {
   logError
-} from "../chunk-GXSMC2YQ.js";
+} from "../chunk-KRFK3IXQ.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-5HVUGWWW.js → chunk-JJOV775N.js}

@@ -5,7 +5,7 @@ import {
   loadMcpConfig,
   loadPaymentProfile,
   logError
-} from "./chunk-GXSMC2YQ.js";
+} from "./chunk-KRFK3IXQ.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/{chunk-GXSMC2YQ.js → chunk-KRFK3IXQ.js}

@@ -2127,8 +2127,8 @@ var AUTH_CODES = {
     retry: "never",
     nextAction: "contact_support",
     user: {
-      title: "Wallet cannot spend",
-      message: "Your wallet isn't allowed to spend yet. Ask an operator to allow it."
+      title: "Access is invite-only",
+      message: "Access is invite-only. Your wallet isn't invited to spend yet."
     }
   },
   "auth.token_invalid": {
@@ -7019,6 +7019,19 @@ function gatewayFailure(answer, local, extras) {
     txDigest: error.txDigest ?? extras.txDigest
   });
 }
+var SPEND_NOT_WHITELISTED = "auth.spend_not_whitelisted";
+async function spendWhitelistRefusal(response, paymentId) {
+  const parsed = parseErrorPayload(await readGatewayAnswer(response));
+  if (parsed?.source !== "problem" || parsed.code !== SPEND_NOT_WHITELISTED || parsed.paymentState !== "not_charged" || parsed.status !== 403) {
+    return null;
+  }
+  const detail = parsed.detail?.trim();
+  return receivedResultError(parsed.code, "not_charged", {
+    ...detail ? { detail } : {},
+    paymentId,
+    challengeId: paymentId
+  });
+}
 function logInternal(log, entry, error) {
   try {
     const port = log ?? defaultLog;
@@ -8099,6 +8112,11 @@ async function payDelegatedSpendAccount(args) {
         })
       });
       if (!createRes.ok) {
+        const refused = await spendWhitelistRefusal(createRes, paymentId);
+        if (refused) {
+          await releaseReservation(ledger, ownedPaymentId, log);
+          return refused;
+        }
         return abortBeforeSign("SPONSOR_UNAVAILABLE", PUBLIC_DETAIL.SPONSOR_UNAVAILABLE);
       }
       const sponsored = await createRes.json();
@@ -8180,6 +8198,11 @@ async function payDelegatedSpendAccount(args) {
         })
       });
       if (!execRes.ok) {
+        const refused = await spendWhitelistRefusal(execRes, paymentId);
+        if (refused) {
+          await releaseReservation(ledger, ownedPaymentId, log);
+          return refused;
+        }
         return completeAttempt(ledger, ownedPaymentId, ambiguous("EXECUTE_AMBIGUOUS", PUBLIC_DETAIL.EXECUTE_AMBIGUOUS, {
           paymentId,
           // The sponsor-minted digest is the only handle on a possible
@@ -11801,8 +11824,10 @@ function toolFailure(fields, options = {}) {
   };
   const json = JSON.stringify(structured, null, 2);
   const lead = fields.paymentState === "charged" ? CHARGED_LINE : fields.paymentState === "unknown" ? UNKNOWN_LINE : null;
+  const invite = fields.code === "auth.spend_not_whitelisted" && fields.detail?.trim() && isErrorCode(fields.code) ? definitionOf(fields.code).user?.message : void 0;
+  const head = [lead, invite].filter((line) => Boolean(line));
   return {
-    content: [{ type: "text", text: lead ? `${lead}
+    content: [{ type: "text", text: head.length > 0 ? `${head.join("\n")}
 ${json}` : json }],
     structuredContent: structured,
     isError: true

package/dist/{http-CXSCuxMx.d.ts → http-sIwCQq0D.d.ts}

@@ -3030,8 +3030,8 @@ declare const ERRORS: {
         readonly retry: "never";
         readonly nextAction: "contact_support";
         readonly user: {
-            readonly title: "Wallet cannot spend";
-            readonly message: "Your wallet isn't allowed to spend yet. Ask an operator to allow it.";
+            readonly title: "Access is invite-only";
+            readonly message: "Access is invite-only. Your wallet isn't invited to spend yet.";
         };
     };
     readonly 'auth.token_invalid': {

package/dist/http.d.ts

@@ -1,3 +1,3 @@
-export { H as handleSuipayMcpHttpRequest } from './http-CXSCuxMx.js';
+export { H as handleSuipayMcpHttpRequest } from './http-sIwCQq0D.js';
 import '@modelcontextprotocol/sdk/server/index.js';
 import '@mysten/sui/keypairs/ed25519';

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-GXSMC2YQ.js";
+} from "./chunk-KRFK3IXQ.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, O as Offer, M as McpConfig, k as McpAuthContext, l as McpTraceHooks, m as SpendAccountPayDeps, n as createReader } from './http-CXSCuxMx.js';
-export { A as AgentHeldResolver, o as AgentHeldSettlement, p as MCP_TARGET_PRESETS, q as McpEnvelope, r as McpEnvelopeEntry, s as McpServerOptions, t as McpTarget, u as McpTraceContext, v as McpTraceRuntime, w as PACKAGE_NAME, x as PreparedPayment, y as SpendAccountPrepareResult, z as SpendAccountPrepareSession, T as TOOLS, B as buildSpendAccountPayKind, E as canonicalMcpRequestId, F as createServer, H as handleSuipayMcpHttpRequest, I as inspectMcpEnvelope, J as loadMcpConfig, K as parseMcpTargetFlag, L as prepareSpendAccountPayment, Q as resetAgentHeldProcessLedger, R as resolveAgentHeldSettlement, U as resolveGrantTarget, V as resolveMcpTarget, W as sameMcpGateway, Y as traceMcpHttpRequest, Z as verifySpendAccountPayReconstructs } from './http-CXSCuxMx.js';
+import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, O as Offer, M as McpConfig, k as McpAuthContext, l as McpTraceHooks, m as SpendAccountPayDeps, n as createReader } from './http-sIwCQq0D.js';
+export { A as AgentHeldResolver, o as AgentHeldSettlement, p as MCP_TARGET_PRESETS, q as McpEnvelope, r as McpEnvelopeEntry, s as McpServerOptions, t as McpTarget, u as McpTraceContext, v as McpTraceRuntime, w as PACKAGE_NAME, x as PreparedPayment, y as SpendAccountPrepareResult, z as SpendAccountPrepareSession, T as TOOLS, B as buildSpendAccountPayKind, E as canonicalMcpRequestId, F as createServer, H as handleSuipayMcpHttpRequest, I as inspectMcpEnvelope, J as loadMcpConfig, K as parseMcpTargetFlag, L as prepareSpendAccountPayment, Q as resetAgentHeldProcessLedger, R as resolveAgentHeldSettlement, U as resolveGrantTarget, V as resolveMcpTarget, W as sameMcpGateway, Y as traceMcpHttpRequest, Z as verifySpendAccountPayReconstructs } from './http-sIwCQq0D.js';
 import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-5HVUGWWW.js";
+} from "./chunk-JJOV775N.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-GXSMC2YQ.js";
+} from "./chunk-KRFK3IXQ.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmdoss/suipay-mcp",
-  "version": "0.3.0-dev.3",
+  "version": "0.3.0-dev.4",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "main": "./dist/index.js",
@@ -37,8 +37,8 @@
     "tsup": "^8.0.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "@cmdoss/suipay-core": "0.1.0",
-    "@cmdoss/suipay-sdk": "0.1.0"
+    "@cmdoss/suipay-sdk": "0.1.0",
+    "@cmdoss/suipay-core": "0.1.0"
   },
   "scripts": {
     "build": "tsup",