@mysten-incubation/sui-agent-pass 0.1.1 → 0.1.3

package/README.md

@@ -274,7 +274,8 @@ package and a live feed of every call into it, refreshing every four seconds.
 The pages use the Sui brand fonts, which are licensed and not in git: put the brand kit under
 `.local/brand/` and run `npm run brand` before building, or the pages fall back to system fonts.
 The build bundles `deployments/<network>.json`; `?network=testnet` picks one, otherwise the
-first of testnet, devnet, localnet, mainnet that exists. To host it, serve `web-dist/` as static
+first of mainnet, testnet, devnet, localnet that exists. `#/` is the home page with the setup
+steps, `#/guide` the longer guide, `#/explorer` the search and the wallet's own passes. To host it, serve `web-dist/` as static
 files at a fixed origin and set `siteUrl` in the deployment file. To run it locally against any
 deployment:
 

package/deployments/README.md

@@ -15,7 +15,11 @@ process with small sums; the real launch will be a fresh publish and a new file
 `siteUrl` to it once the hosted site has its address, so the plugin sends owners there.
 `testnet.json` is the current package (Sui Agent Pass), published to testnet on 2026-10-20 with
 the version gate and the per-coin deployment shape (`coins`, `pools`, NAVI `reserves`, the demo
-faucet). Any Move change means a new publish and a new file here. `npm run devnet` publishes to devnet and writes its
+faucet). The shipped copy lists no pools and no reserves on purpose: the testnet markets are
+stand-ins with 2 SUI of depth, so dogfooders get transfers and staking there and trade on
+mainnet. The stand-in pools stay on chain, and the previous revision of this file in git keeps
+their ids; the tests publish their own stand-ins. Any Move change means a new publish and a new
+file here. `npm run devnet` publishes to devnet and writes its
 `deployment.json` for the plugin; `npm run deploy -- create --network <name>` publishes to
 testnet or devnet. At launch, commit the resulting `deployment.json` here as `<name>.json`.
 

package/deployments/testnet.json

@@ -17,20 +17,7 @@
 			"decimals": 6
 		}
 	],
-	"pools": [
-		{
-			"venue": "deepbook",
-			"poolId": "0xf95b10ec49e92a4afaa81ff679ebfd8b7e9371984d8c214b26783d9fdfc02a29",
-			"coinA": "0x0000000000000000000000000000000000000000000000000000000000000002::sui::SUI",
-			"coinB": "0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa::usdc::USDC"
-		},
-		{
-			"venue": "cetus",
-			"poolId": "0x3c779cab1582156a06aca223690bcd23f781ff3fbdda99747659ebddc2059e88",
-			"coinA": "0x0000000000000000000000000000000000000000000000000000000000000002::sui::SUI",
-			"coinB": "0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa::usdc::USDC"
-		}
-	],
+	"pools": [],
 	"demoFaucet": {
 		"packageId": "0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa",
 		"faucetId": "0x14d07fd3eff80c868c0bab116cbc2f65c8903c77fcb41721ad6db4ba0c6480cf",
@@ -54,16 +41,7 @@
 			"oracleId": "0xc962d8795540426c4dce1fea621d89f12f00766a6d4b0d00087fde6fefb2d343",
 			"incentiveV2Id": "0x679e3525405bb43ba27b0839dcaae2469d59225856cd6c2e8318a094efe593c5",
 			"incentiveV3Id": "0x9488d70edbfd67babcc72b8eb1f3fbf60dd47f080d830e2af27abcecdd6771c6",
-			"reserves": {
-				"0x0000000000000000000000000000000000000000000000000000000000000002::sui::SUI": {
-					"poolId": "0x3bdcd67ca6465324f0977d7912dbfb7a25cad759e03744aa760e0fa5baa31812",
-					"assetId": 0
-				},
-				"0x7ffc375a2bebedcec3753cfe4687f3bb104074eb55b014f8185ccc8ee8bf47fa::usdc::USDC": {
-					"poolId": "0x7f05ed3b912e6e1b573f8d3095cf3c437fb0fcf78d09669c504c66bceb3bf9a3",
-					"assetId": 1
-				}
-			}
+			"reserves": {}
 		}
 	}
 }

package/dist/plugin.js

@@ -20,7 +20,7 @@ import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/
 import { Transaction } from '@mysten/sui/transactions';
 import { fromBase64, normalizeSuiAddress } from '@mysten/sui/utils';
 import { z } from 'zod';
-import { clientFor, deepbookSizes, readStatus, withMarketFacts } from './chain.js';
+import { clientFor, deepbookSizes, quoteSwap, readStatus, withMarketFacts } from './chain.js';
 import { describePolicy, describeSetup, renderRows } from './describe.js';
 import { address, coinBySymbol, coinInfo, DAY_MS, defaultGasDaily, DeploymentSchema, display, poolsFor, priceUnits, recipientName, sameCoin, SetupSchema, showCoin, units, VenueSchema, } from './domain.js';
 import { passesByAgent } from './explorer.js';
@@ -236,7 +236,7 @@ const rulesInput = {
             .describe('pool object ids for a pair the deployment does not list (a DeepBook or Cetus pool holding exactly these two coins); verified on chain'),
         perTrade: decimal.describe('sold coin per trade'),
         daily: decimal.describe('sold coin per UTC day'),
-        minPrice: decimal.describe('lowest price accepted, in bought coin per one sold coin; required, above 0'),
+        minPrice: decimal.describe("lowest price accepted, in bought coin per one sold coin; required, above 0. When the owner names no floor, 1% under the pool's current price (list_passes shows it) and say so"),
     })
         .strict())
         .default([])
@@ -310,7 +310,9 @@ async function toSetup(client, d0, input) {
                 const pools = poolsFor(d, coinIn, coinOut).filter((p) => (!sw.venues || sw.venues.includes(p.venue)) &&
                     (!sw.pools || sw.pools.some((id) => normalizeSuiAddress(id) === p.poolId)));
                 if (!pools.length)
-                    throw new Error(`No pool trades ${sw.sell} for ${sw.buy}${sw.venues ? ` on ${sw.venues.join(', ')}` : ''}${sw.pools ? ` among ${sw.pools.join(', ')}` : ''}; name a DeepBook or Cetus pool id for this pair in pools`);
+                    throw new Error(d.pools.length
+                        ? `No pool trades ${sw.sell} for ${sw.buy}${sw.venues ? ` on ${sw.venues.join(', ')}` : ''}${sw.pools ? ` among ${sw.pools.join(', ')}` : ''}; name a DeepBook or Cetus pool id for this pair in pools`
+                        : `Swaps are not offered on ${d.network}: it lists no pools. Propose a pass on a network that does, or leave swaps out`);
                 return {
                     coinIn,
                     coinOut,
@@ -320,13 +322,20 @@ async function toSetup(client, d0, input) {
                     minPrice: priceUnits(d, coinIn, coinOut, sw.minPrice),
                 };
             }),
-            lending: input.lending.map((l) => ({
-                coin: coin(l.coin).type,
-                allowBorrow: l.allowBorrow,
-                perAction: inUnits(l.coin, l.perAction),
-                daily: inUnits(l.coin, l.daily),
-                minHealthFactor: l.minHealthFactor,
-            })),
+            lending: input.lending.map((l) => {
+                const type = coin(l.coin).type;
+                if (!d.protocols.navi.reserves[type])
+                    throw new Error(Object.keys(d.protocols.navi.reserves).length
+                        ? `NAVI has no reserve for ${l.coin} on ${d.network}`
+                        : `Lending is not offered on ${d.network}: it lists no NAVI reserves. Propose a pass on a network that does, or leave lending out`);
+                return {
+                    coin: type,
+                    allowBorrow: l.allowBorrow,
+                    perAction: inUnits(l.coin, l.perAction),
+                    daily: inUnits(l.coin, l.daily),
+                    minHealthFactor: l.minHealthFactor,
+                };
+            }),
             staking: input.staking && {
                 validators: input.staking.validators,
                 perStake: sui(input.staking.perStake),
@@ -407,14 +416,31 @@ export function createPluginMcp(registry) {
         annotations: { readOnlyHint: true },
     }, async () => {
         const path = registry.deploymentPath();
+        // The pool's own price for ten units of coinA, so a floor can be sized from the market
+        // before any pass exists; ten clears DeepBook's minimum order where one may not.
+        const price = async (d, p) => {
+            const a = coinInfo(d, p.coinA), b = coinInfo(d, p.coinB);
+            const amountIn = (10n * 10n ** BigInt(a.decimals)).toString();
+            const q = await quoteSwap(clientFor(d), d, p, p.coinA, amountIn).catch(() => null);
+            if (!q || q.amountOut === '0')
+                return {};
+            const perUnit = (BigInt(q.amountOut) * 10n ** BigInt(a.decimals)) / BigInt(q.amountIn);
+            return { price: `${display(perUnit.toString(), b.decimals)} ${b.symbol} per ${a.symbol}` };
+        };
         const markets = async (d) => ({
             network: d.network,
             coins: d.coins,
-            pools: d.pools.map((p) => ({
+            pools: await Promise.all(d.pools.map(async (p) => ({
                 venue: p.venue,
                 pair: `${coinInfo(d, p.coinA).symbol}/${coinInfo(d, p.coinB).symbol}`,
-            })),
+                ...(await price(d, p)),
+            }))),
             lending: Object.keys(d.protocols.navi.reserves).map((c) => coinInfo(d, c).symbol),
+            ...(d.pools.length || Object.keys(d.protocols.navi.reserves).length
+                ? {}
+                : {
+                    note: 'Transfers and staking only: this network lists no pools and no NAVI reserves, so swap and lending rules are refused here.',
+                }),
         });
         const own = (await exists(path)) ? [await markets(await registry.deployment())] : [];
         const bundled = await Promise.all((await registry.bundledNetworks()).map(async (n) => markets(await registry.bundled(n))));

package/docs/PLAYBOOK.md

@@ -34,8 +34,10 @@ its type so the owner can tell a look-alike from the real one. Lending stays wit
 network lists as NAVI reserves. About the sum of daily limits:
 the chain checks the lifetime cap before the daily meter, so a cap equal to one day's limits
 turns the owner's "daily limit" refusal into a "lifetime cap" one. Coins are named by symbol; `list_passes` shows
-each network's coins, pools (which pairs trade where) and lendable coins. One rule per coin,
-pair direction or lending coin; a coin without a rule cannot be touched.
+each network's coins, pools (which pairs trade where, with the pool's current price) and
+lendable coins. One rule per coin, pair direction or lending coin; a coin without a rule cannot
+be touched. A swap rule's `minPrice` is the owner's floor: when they name none, set it 1% under
+the pool's current price and say so; a wider margin is theirs to ask for, not yours to assume.
 
 | Rule set    | Fields (each entry one rule)                                                                                                                                       | What the chain enforces                                                                                                                                                                     |
 | ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@mysten-incubation/sui-agent-pass",
-	"version": "0.1.1",
+	"version": "0.1.3",
 	"type": "module",
 	"description": "AI builds transactions. A session signer signs. Your pass enforces the rules.",
 	"repository": {