@mysten-incubation/sui-agent-pass 0.1.4 → 0.1.5

package/README.md

@@ -334,11 +334,8 @@ brand` and `npx playwright install chromium`.
 - [Agent transaction guide](docs/AGENT.md): complete interface and agent-side examples.
 - [Architecture and boundaries](docs/ARCHITECTURE.md).
 - [Status: implemented and todo](docs/STATUS.md).
-- [Verification record](docs/VERIFICATION.md) and [generated chain evidence](docs/evidence/localnet.json),
-  including the explorer's [pass page](docs/evidence/explorer-pass.png) and
-  [booth view](docs/evidence/explorer-booth.png).
-- [Real Claude execution evidence](docs/evidence/claude.json): Claude Code with the plugin,
-  from prompt to signed pass to on-chain actions on a localnet.
+- [Verification record](docs/VERIFICATION.md): dated runs with their digests. The test scripts
+  write their reports and screenshots to `.local/evidence/`, which stays out of git.
 
 ## Checks
 

package/dist/plugin.js

@@ -20,7 +20,7 @@ import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/
 import { Transaction } from '@mysten/sui/transactions';
 import { fromBase64, normalizeSuiAddress } from '@mysten/sui/utils';
 import { z } from 'zod';
-import { clientFor, deepbookSizes, quoteSwap, readStatus, withMarketFacts } from './chain.js';
+import { clientFor, deepbookSizes, quoteSwap, readAllHoldings, readStatus, withMarketFacts, } from './chain.js';
 import { describePolicy, describeSetup, renderRows } from './describe.js';
 import { address, coinBySymbol, coinInfo, DAY_MS, defaultGasDaily, DeploymentSchema, display, isStable, limitUnits, poolsFor, recipientName, sameCoin, SetupSchema, showCoin, units, VenueSchema, } from './domain.js';
 import { passesByAgent } from './explorer.js';
@@ -411,10 +411,14 @@ export function createPluginMcp(registry) {
     });
     registerDocs(server);
     server.registerTool('list_passes', {
-        description: 'List the pass sessions on this machine (id, name, network, whether the owner has authorized it on chain) and the networks a new pass can live on, each with the coins and pools its rules may name.',
-        inputSchema: {},
+        description: 'List the pass sessions on this machine (id, name, network, whether the owner has authorized it on chain) and the networks a new pass can live on, each with its listed coins and pools and how to name others. With owner, also every coin that address holds on each network, so rules can be sized from real balances before any pass exists.',
+        inputSchema: {
+            owner: address
+                .optional()
+                .describe("the owner's address, when they gave it; adds ownerCoins per network"),
+        },
         annotations: { readOnlyHint: true },
-    }, async () => {
+    }, async ({ owner }) => {
         const path = registry.deploymentPath();
         // What the pool pays for ten units of its non-stable coin (coinA when neither or both are
         // stablecoins), quoted like a rule's price; ten clears DeepBook's minimum order.
@@ -438,10 +442,15 @@ export function createPluginMcp(registry) {
             }))),
             lending: Object.keys(d.protocols.navi.reserves).map((c) => coinInfo(d, c).symbol),
             ...(d.pools.length || Object.keys(d.protocols.navi.reserves).length
-                ? {}
+                ? {
+                    otherCoins: 'These are the coins and pools this package lists, not all it can use. Any other coin the owner holds goes in a transfer or swap rule by its full type; a swap of it also needs, in pools, the id of a DeepBook or Cetus pool holding exactly that pair. The server reads the coin and the pool from chain. Lending stays with the listed coins.',
+                }
                 : {
                     note: 'Transfers and staking only: this network lists no pools and no NAVI reserves, so swap and lending rules are refused here.',
                 }),
+            ...(owner
+                ? { ownerCoins: await readAllHoldings(clientFor(d), d, owner).catch(() => null) }
+                : {}),
         });
         const own = (await exists(path)) ? [await markets(await registry.deployment())] : [];
         const bundled = await Promise.all((await registry.bundledNetworks()).map(async (n) => markets(await registry.bundled(n))));

package/docs/PLAYBOOK.md

@@ -53,13 +53,15 @@ it; say so when the owner picks one.
 pool), so list Cetus as well when trades will be small. A network may list no pools or no NAVI
 reserves; `list_passes` says so, and swap or lending rules are refused there.
 
-**Coins and pools.** Name a coin by symbol when `list_passes` lists it for the network. Name any
-other coin the owner holds (`session_info.ownerCoins` for an existing pass, or a `listBalances`
-read of the owner's address) by its full type, and give the id of a
-DeepBook or Cetus pool holding exactly that pair in `pools`. The server and the review page read
-such a coin's symbol and decimals and such a pool's venue from chain, never from you, and the
-page shows an unlisted coin with its type so the owner can tell a look-alike from the real one.
-Lending is limited to the coins the network lists as NAVI reserves.
+**Coins and pools.** The coins and pools `list_passes` shows for a network are the ones this
+package lists, not the only ones it can use. Name a listed coin by symbol. Name any other coin
+the owner holds by its full type, and for a swap give the id of a DeepBook or Cetus pool holding
+exactly that pair in `pools`. To find the type and the balance, ask the owner for their address
+and call `list_passes` with `owner`: it adds every coin that address holds per network. For the
+pool, ask the owner or look the pair up on the venue's own site. The server and the review page
+read such a coin's symbol and decimals and such a pool's venue from chain, never from you, and
+the page shows an unlisted coin with its type so the owner can tell a look-alike from the real
+one. Lending is limited to the coins the network lists as NAVI reserves.
 
 **Lifetime caps.** `caps` gives, per coin, the total the key may ever withdraw, for exactly the
 coins the rules spend (staking spends SUI). A daily limit may not exceed its coin's cap. Size

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@mysten-incubation/sui-agent-pass",
-	"version": "0.1.4",
+	"version": "0.1.5",
 	"type": "module",
 	"description": "AI builds transactions. A session signer signs. Your pass enforces the rules.",
 	"repository": {