@mysten-incubation/sui-agent-pass 0.1.0 → 0.1.2

package/README.md

@@ -50,11 +50,11 @@ replacements. See `move/protocols/README.md`.
 This repository is fully self-contained. There is no broker, authorization database,
 intent adapter, or transaction builder inside MCP.
 
-## Install (planned distribution)
+## Install
 
-Not published yet. Once the package is on npm and the immutable contracts are published on chain,
-a user needs no clone, no build, and no toolchain. The client ships the per-network deployment IDs
-(`deployments/<network>.json`) and resolves them with `--network`:
+The package is on npm as `@mysten-incubation/sui-agent-pass` (the incubation scope, for the
+dogfood; the launch release will follow). A user needs no clone, no build, and no toolchain. The
+client ships the per-network deployment IDs (`deployments/<network>.json`):
 
 ```sh
 npm install -g @mysten-incubation/sui-agent-pass
@@ -274,7 +274,8 @@ package and a live feed of every call into it, refreshing every four seconds.
 The pages use the Sui brand fonts, which are licensed and not in git: put the brand kit under
 `.local/brand/` and run `npm run brand` before building, or the pages fall back to system fonts.
 The build bundles `deployments/<network>.json`; `?network=testnet` picks one, otherwise the
-first of testnet, devnet, localnet, mainnet that exists. To host it, serve `web-dist/` as static
+first of mainnet, testnet, devnet, localnet that exists. `#/` is the home page with the setup
+steps, `#/guide` the longer guide, `#/explorer` the search and the wallet's own passes. To host it, serve `web-dist/` as static
 files at a fixed origin and set `siteUrl` in the deployment file. To run it locally against any
 deployment:
 

package/deployments/README.md

@@ -15,7 +15,11 @@ process with small sums; the real launch will be a fresh publish and a new file
 `siteUrl` to it once the hosted site has its address, so the plugin sends owners there.
 `testnet.json` is the current package (Sui Agent Pass), published to testnet on 2026-10-20 with
 the version gate and the per-coin deployment shape (`coins`, `pools`, NAVI `reserves`, the demo
-faucet). Any Move change means a new publish and a new file here. `npm run devnet` publishes to devnet and writes its
+faucet). The shipped copy lists no pools and no reserves on purpose: the testnet markets are
+stand-ins with 2 SUI of depth, so dogfooders get transfers and staking there and trade on
+mainnet. The stand-in pools stay on chain, and the previous revision of this file in git keeps
+their ids; the tests publish their own stand-ins. Any Move change means a new publish and a new
+file here. `npm run devnet` publishes to devnet and writes its
 `deployment.json` for the plugin; `npm run deploy -- create --network <name>` publishes to
 testnet or devnet. At launch, commit the resulting `deployment.json` here as `<name>.json`.
 

package/deployments/testnet.json

@@ -17,20 +17,7 @@
 			"decimals": 6
 		}
 	],
-	"pools": [
-		{
-			"venue": "deepbook",
-			"poolId": "0xf95b10ec49e92a4afaa81ff679ebfd8b7e9371984d8c214b26783d9fdfc02a29",
-			"coinA": "0x0000000000000000000000000000000000000000000000000000000000000002::sui::SUI",
-			"coinB": "0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa::usdc::USDC"
-		},
-		{
-			"venue": "cetus",
-			"poolId": "0x3c779cab1582156a06aca223690bcd23f781ff3fbdda99747659ebddc2059e88",
-			"coinA": "0x0000000000000000000000000000000000000000000000000000000000000002::sui::SUI",
-			"coinB": "0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa::usdc::USDC"
-		}
-	],
+	"pools": [],
 	"demoFaucet": {
 		"packageId": "0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa",
 		"faucetId": "0x14d07fd3eff80c868c0bab116cbc2f65c8903c77fcb41721ad6db4ba0c6480cf",
@@ -54,16 +41,7 @@
 			"oracleId": "0xc962d8795540426c4dce1fea621d89f12f00766a6d4b0d00087fde6fefb2d343",
 			"incentiveV2Id": "0x679e3525405bb43ba27b0839dcaae2469d59225856cd6c2e8318a094efe593c5",
 			"incentiveV3Id": "0x9488d70edbfd67babcc72b8eb1f3fbf60dd47f080d830e2af27abcecdd6771c6",
-			"reserves": {
-				"0x0000000000000000000000000000000000000000000000000000000000000002::sui::SUI": {
-					"poolId": "0x3bdcd67ca6465324f0977d7912dbfb7a25cad759e03744aa760e0fa5baa31812",
-					"assetId": 0
-				},
-				"0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa::usdc::USDC": {
-					"poolId": "0x7f05ed3b912e6e1b573f8d3095cf3c437fb0fcf78d09669c504c66bceb3bf9a3",
-					"assetId": 1
-				}
-			}
+			"reserves": {}
 		}
 	}
 }

package/dist/cli.js

@@ -2,9 +2,11 @@
 // Copyright (c) Mysten Labs, Inc.
 // SPDX-License-Identifier: Apache-2.0
 import { spawn } from 'node:child_process';
+import { realpathSync } from 'node:fs';
 import { access, mkdir, readFile, writeFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { select } from '@inquirer/prompts';
 import { Command } from 'commander';
 import { clientFor, readStatus } from './chain.js';
@@ -237,7 +239,10 @@ program
     if (!http)
         console.log('\nDone. Open the agent and tell it what to do with your money; it proposes the pass, you review and sign in your wallet, and it acts within the rules. Restart the agent after upgrading this package so it loads the new server.');
 });
-if (process.argv[1] && /(?:^|\/)cli\.(?:ts|js)$/.test(process.argv[1])) {
+// Run only when this file is the entry: directly, through tsx in development, or through the
+// package's `agent-pass` bin, which is a symlink to it.
+const entry = process.argv[1] ? realpathSync(process.argv[1]) : '';
+if (entry === fileURLToPath(import.meta.url) || /(?:^|\/)cli\.(?:ts|js)$/.test(entry)) {
     program.parseAsync().catch((error) => {
         console.error(error.message);
         process.exitCode = 1;

package/dist/plugin.js

@@ -310,7 +310,9 @@ async function toSetup(client, d0, input) {
                 const pools = poolsFor(d, coinIn, coinOut).filter((p) => (!sw.venues || sw.venues.includes(p.venue)) &&
                     (!sw.pools || sw.pools.some((id) => normalizeSuiAddress(id) === p.poolId)));
                 if (!pools.length)
-                    throw new Error(`No pool trades ${sw.sell} for ${sw.buy}${sw.venues ? ` on ${sw.venues.join(', ')}` : ''}${sw.pools ? ` among ${sw.pools.join(', ')}` : ''}; name a DeepBook or Cetus pool id for this pair in pools`);
+                    throw new Error(d.pools.length
+                        ? `No pool trades ${sw.sell} for ${sw.buy}${sw.venues ? ` on ${sw.venues.join(', ')}` : ''}${sw.pools ? ` among ${sw.pools.join(', ')}` : ''}; name a DeepBook or Cetus pool id for this pair in pools`
+                        : `Swaps are not offered on ${d.network}: it lists no pools. Propose a pass on a network that does, or leave swaps out`);
                 return {
                     coinIn,
                     coinOut,
@@ -320,13 +322,20 @@ async function toSetup(client, d0, input) {
                     minPrice: priceUnits(d, coinIn, coinOut, sw.minPrice),
                 };
             }),
-            lending: input.lending.map((l) => ({
-                coin: coin(l.coin).type,
-                allowBorrow: l.allowBorrow,
-                perAction: inUnits(l.coin, l.perAction),
-                daily: inUnits(l.coin, l.daily),
-                minHealthFactor: l.minHealthFactor,
-            })),
+            lending: input.lending.map((l) => {
+                const type = coin(l.coin).type;
+                if (!d.protocols.navi.reserves[type])
+                    throw new Error(Object.keys(d.protocols.navi.reserves).length
+                        ? `NAVI has no reserve for ${l.coin} on ${d.network}`
+                        : `Lending is not offered on ${d.network}: it lists no NAVI reserves. Propose a pass on a network that does, or leave lending out`);
+                return {
+                    coin: type,
+                    allowBorrow: l.allowBorrow,
+                    perAction: inUnits(l.coin, l.perAction),
+                    daily: inUnits(l.coin, l.daily),
+                    minHealthFactor: l.minHealthFactor,
+                };
+            }),
             staking: input.staking && {
                 validators: input.staking.validators,
                 perStake: sui(input.staking.perStake),
@@ -415,6 +424,11 @@ export function createPluginMcp(registry) {
                 pair: `${coinInfo(d, p.coinA).symbol}/${coinInfo(d, p.coinB).symbol}`,
             })),
             lending: Object.keys(d.protocols.navi.reserves).map((c) => coinInfo(d, c).symbol),
+            ...(d.pools.length || Object.keys(d.protocols.navi.reserves).length
+                ? {}
+                : {
+                    note: 'Transfers and staking only: this network lists no pools and no NAVI reserves, so swap and lending rules are refused here.',
+                }),
         });
         const own = (await exists(path)) ? [await markets(await registry.deployment())] : [];
         const bundled = await Promise.all((await registry.bundledNetworks()).map(async (n) => markets(await registry.bundled(n))));

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@mysten-incubation/sui-agent-pass",
-	"version": "0.1.0",
+	"version": "0.1.2",
 	"type": "module",
 	"description": "AI builds transactions. A session signer signs. Your pass enforces the rules.",
 	"repository": {