@mysten-incubation/suipay-mcp 0.3.0-dev.0 → 0.3.0-dev.10

package/README.md

@@ -5,7 +5,7 @@ buyer-funded spend account. The buyer owns the account. The agent holds the
 delegate key and can spend only under the on-chain grant (recipient bind,
 per-payment cap, budget).
 
-Pin `@mysten-incubation/suipay-mcp@0.3.0-dev.0` in MCP config for the `latest` dist-tag.
+Pin `@mysten-incubation/suipay-mcp@0.3.0-dev.10` in MCP config for the `latest` dist-tag.
 `npx -y @mysten-incubation/suipay-mcp@dev` tracks the `dev` prerelease line.
 `1.0.1` remains on the registry as a historical release; do not install it
 for new agents.
@@ -13,7 +13,7 @@ for new agents.
 ## Install
 
 ```bash
-claude mcp add --scope user suipay -- npx -y @mysten-incubation/suipay-mcp@0.3.0-dev.0
+claude mcp add --scope user suipay -- npx -y @mysten-incubation/suipay-mcp@0.3.0-dev.10
 ```
 
 `@dev` installs the Railway-dev gateway/console defaults. A workspace
@@ -155,10 +155,10 @@ Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
 
 ```bash
 # Railway suipay-dev (default)
-npx @mysten-incubation/suipay-mcp@0.3.0-dev.0
+npx @mysten-incubation/suipay-mcp@0.3.0-dev.10
 
 # Laptop stack
-npx @mysten-incubation/suipay-mcp@0.3.0-dev.0 --local
+npx @mysten-incubation/suipay-mcp@0.3.0-dev.10 --local
 ```
 
 `SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit
@@ -169,12 +169,32 @@ credential is bound yet. After a successful login, `credentials.json`
 Rebind with `suipay_login({ target: "dev" | "local" })` (same key, new consent
 if that stack has no live grant).
 
+### Isolate connection environments
+
+`SUIPAY_MCP_PROFILE` selects a separate agent-held key file at
+`~/.suipay/profiles/<sha256-of-trimmed-profile>/credentials.json`. Unset or
+blank keeps the existing `~/.suipay/credentials.json`. The profile is a local
+storage selector, not an authorization grant or gateway override: set
+`SUIPAY_GATEWAY_URL` and `SUIPAY_CONSOLE_URL` as well. Use the same stable profile
+for the same environment. Login, status, discovery, pay, and logout all use
+that profile; logout removes only its file. Files stay mode `0600` inside a
+`0700` profile directory. Existing files are never copied, rebound, or deleted
+when selecting a profile. A new profile requires fresh owner authorization.
+
+The console's Connect Agent prompt uses its public gateway URL as the profile.
+Install an MCP package that supports profiles before using this prompt, and
+verify the returned login gateway matches the configured environment before
+continuing. An older package may ignore the variable and reuse legacy
+credentials. Stop on a mismatch; do not pay or delete the existing key.
+
 ## Client environment
 
 ```bash
 # Optional. Unset = Railway suipay-dev. --local uses localhost:3000 / 127.0.0.1:4340.
 SUIPAY_GATEWAY_URL=https://gateway.example
 SUIPAY_CONSOLE_URL=https://console.example
+# Optional. Unset/blank retains the legacy credentials file.
+SUIPAY_MCP_PROFILE=https://gateway.example
 SUIPAY_RPC_URL=https://your-testnet-rpc.example
 SUIPAY_NETWORK=testnet
 SUIPAY_MCP_TARGET=dev

package/dist/bin/suipay.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-47YNZDCC.js";
+} from "../chunk-D6LFU4VE.js";
 import {
   logError
-} from "../chunk-CXM7PELK.js";
+} from "../chunk-RD34GGSA.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-47YNZDCC.js → chunk-D6LFU4VE.js}

@@ -5,7 +5,7 @@ import {
   loadMcpConfig,
   loadPaymentProfile,
   logError
-} from "./chunk-CXM7PELK.js";
+} from "./chunk-RD34GGSA.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/{chunk-CXM7PELK.js → chunk-RD34GGSA.js}

@@ -448,6 +448,14 @@ var SERVICE_STATE_TRANSITIONS = Object.freeze([
     to: "payout_change",
     actors: ["system"],
     requires: ["reason_code"]
+  },
+  {
+    id: "T25",
+    dimension: "suspension",
+    from: ["binding_changed"],
+    to: "none",
+    actors: ["system"],
+    requires: ["reason_code"]
   }
 ]);
 
@@ -949,6 +957,70 @@ function createSpendAccountChain(options) {
       });
       return kindBytes(tx);
     },
+    async buildCreatePolicyAndGrantKind(input) {
+      if (!input.policy.targets?.length) {
+        throw new Error("create_spend_policy requires at least one target");
+      }
+      if (!input.policy.totalCap || BigInt(input.policy.totalCap) <= 0n) {
+        throw new Error("create_spend_policy requires a non-zero total_cap");
+      }
+      if (!input.policy.maxPerPayment || BigInt(input.policy.maxPerPayment) <= 0n) {
+        throw new Error("create_spend_policy requires a non-zero max_per_payment");
+      }
+      if (!input.grant.sessionCap || BigInt(input.grant.sessionCap) <= 0n) {
+        throw new Error("create_grant requires a non-zero session_cap");
+      }
+      if (!input.grant.maxPerPayment || BigInt(input.grant.maxPerPayment) <= 0n) {
+        throw new Error("create_grant requires a non-zero max_per_payment");
+      }
+      const tx = new Transaction2();
+      tx.setSender(input.owner);
+      const targetResults = input.policy.targets.map((t) => {
+        const hash = targetHashBytes(t.targetHash);
+        return tx.moveCall({
+          target: target("new_policy_target"),
+          arguments: [
+            tx.pure.vector("u8", Array.from(hash)),
+            tx.pure.address(t.recipient),
+            tx.pure.u64(BigInt(t.maxPerPayment))
+          ]
+        });
+      });
+      const targetsVec = tx.makeMoveVec({
+        type: `${packageId}::${MODULE}::PolicyTarget`,
+        elements: targetResults
+      });
+      const policyExpires = input.policy.expiresAtMs === void 0 || input.policy.expiresAtMs === null ? 0n : BigInt(input.policy.expiresAtMs);
+      const policyIdResult = tx.moveCall({
+        target: target("create_spend_policy"),
+        typeArguments: [input.coinType],
+        arguments: [
+          tx.object(input.poolObjectId),
+          targetsVec,
+          tx.pure.u64(BigInt(input.policy.totalCap)),
+          tx.pure.u64(BigInt(input.policy.maxPerPayment)),
+          tx.pure.u64(policyExpires)
+        ]
+      });
+      const policyIdsVec = tx.makeMoveVec({
+        type: "u64",
+        elements: [policyIdResult]
+      });
+      const grantExpires = input.grant.expiresAtMs === void 0 || input.grant.expiresAtMs === null ? 0n : BigInt(input.grant.expiresAtMs);
+      tx.moveCall({
+        target: target("create_policy_grant"),
+        typeArguments: [input.coinType],
+        arguments: [
+          tx.object(input.poolObjectId),
+          tx.pure.address(input.delegate),
+          tx.pure.option("u64", BigInt(input.grant.sessionCap)),
+          tx.pure.option("u64", BigInt(input.grant.maxPerPayment)),
+          tx.pure.u64(grantExpires),
+          policyIdsVec
+        ]
+      });
+      return kindBytes(tx);
+    },
     async buildPausePolicyKind(input) {
       const tx = new Transaction2();
       tx.setSender(input.owner);
@@ -3846,6 +3918,17 @@ var INDEXER_CODES = {
     user: null,
     logOnly: true
   },
+  "indexer.native_settlement_deferred": {
+    surfaces: ["indexer"],
+    status: null,
+    title: "Native settlement is deferred; holding the checkpoint",
+    paymentState: "not_charged",
+    retry: "after_delay",
+    retryAfterSeconds: 5,
+    nextAction: "retry_later",
+    user: null,
+    logOnly: true
+  },
   "indexer.config_invalid": {
     surfaces: ["indexer"],
     status: null,
@@ -4460,6 +4543,55 @@ var REQUEST_CODES = {
     nextAction: "fix_request",
     user: { title: "Address not found", message: "That web address doesn't exist. Check the spelling and try again." }
   },
+  "request.recipient_changed": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Pay-to address changed while its registry was being checked",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Retry this publish",
+      message: "The payout address changed while its payment registry was being checked. Retry so the current address is checked."
+    }
+  },
+  "request.recipient_registry_invalid": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Payment registry does not verify for this deployment",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Registry does not match",
+      message: "The payout address's payment registry does not match this deployment. Fix it, then publish again."
+    }
+  },
+  "request.recipient_registry_missing": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Pay-to address has no payment registry",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Create a payment registry",
+      message: "This payout address has no payment registry on this network yet. Create it in the seller console, then publish again."
+    }
+  },
+  "request.recipient_registry_unreadable": {
+    surfaces: ["gateway"],
+    status: 503,
+    title: "Payment registry could not be read",
+    paymentState: "not_charged",
+    retry: "after_delay",
+    retryAfterSeconds: 5,
+    nextAction: "retry_later",
+    user: {
+      title: "Registry unread",
+      message: "The payment registry could not be read just now. Wait a moment and try again."
+    }
+  },
   "request.redirect_refused": {
     surfaces: ["console_server", "sdk"],
     status: 422,
@@ -4915,7 +5047,7 @@ var SERVICE_CODES = {
   },
   // Boot or configuration fell back to a degraded mode instead of failing.
   "service.config_degraded": {
-    surfaces: ["gateway"],
+    surfaces: ["gateway", "console_server"],
     status: null,
     title: "Service started with degraded configuration",
     paymentState: "not_charged",
@@ -4924,6 +5056,19 @@ var SERVICE_CODES = {
     user: null,
     logOnly: true
   },
+  // A readiness gauge moved while the process is still serving. Not a degraded
+  // boot: `service.config_degraded` is reserved for that, and for the sample
+  // that actually fails closed.
+  "service.readiness": {
+    surfaces: ["gateway"],
+    status: null,
+    title: "Readiness gauge updated",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
   // A best-effort write (a trace event, a receipt, a delivery record) failed.
   // The request it belongs to keeps its answer.
   "service.bookkeeping_failed": {
@@ -4935,6 +5080,39 @@ var SERVICE_CODES = {
     nextAction: "none",
     user: null,
     logOnly: true
+  },
+  // What a process started with: network, posture, rails, gas pool. Healthy.
+  "service.boot": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Service started",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
+  // A background worker started, stopped, swept or retried on schedule. Healthy.
+  "service.lifecycle": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Background work progressed",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
+  // Detail about healthy traffic an operator may want when reading a trace.
+  "service.diagnostic": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Diagnostic detail",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
   }
 };
 
@@ -5635,6 +5813,238 @@ function newTraceId(randomBytes3 = cryptoRandomBytes) {
   return /^0+$/.test(hex) ? newTraceId(randomBytes3) : hex;
 }
 
+// ../core/dist/errors/context-allowlist.js
+var CONTEXT_ALLOWLIST = /* @__PURE__ */ new Set([
+  // Settlement and request identifiers.
+  "txDigest",
+  "digest",
+  "challengeId",
+  "paymentId",
+  "paymentHash",
+  "paymentKey",
+  "paymentState",
+  "requestId",
+  "traceId",
+  "clientId",
+  "serviceId",
+  "configId",
+  "seedId",
+  "grantId",
+  "grantObjectId",
+  "sameGrantObjectId",
+  "verifiedGrant",
+  "poolObjectId",
+  "packageId",
+  "activePackageId",
+  "expectedPackageId",
+  "actualPackageId",
+  "mandateId",
+  "session",
+  "coinId",
+  "coinIds",
+  "id",
+  "dedupeKey",
+  "hook",
+  // Addresses (public on chain).
+  "owner",
+  "payTo",
+  "recipient",
+  "delegateAddress",
+  // Codes, kinds and states.
+  "code",
+  "innerCode",
+  "requestedCode",
+  "failureCode",
+  "oauthError",
+  "errorKind",
+  "kind",
+  "mode",
+  "effectiveMode",
+  "state",
+  "outcome",
+  "status",
+  "httpStatus",
+  "reason",
+  "action",
+  "stage",
+  "paid",
+  "delivery",
+  "sellerStatus",
+  "sellerCode",
+  "bindingCode",
+  "errorName",
+  "gasStationStatus",
+  "readFailure",
+  "refusal",
+  "refusedAs",
+  "registryCode",
+  "sessionDecision",
+  "settleCode",
+  "signedRequest",
+  "signerCode",
+  "consentCode",
+  "publicReason",
+  "details",
+  "event",
+  "eventType",
+  "surface",
+  "scope",
+  "field",
+  "header",
+  "dependency",
+  "network",
+  "rails",
+  "shard",
+  "metric",
+  // Gateway readiness gauge. Fixed marks only: 0 or 1, and up, down, skipped, unknown.
+  "ready",
+  "grpc",
+  "enoki",
+  "postgres",
+  "alarm",
+  "alert",
+  "from",
+  "to",
+  "expected",
+  "required",
+  "violated",
+  "diverged",
+  "replaced",
+  "suppressed",
+  "unknown",
+  "verified",
+  "verification",
+  "simulation",
+  "isNew",
+  "needsTopup",
+  "operatorCapSet",
+  "wantAgent",
+  "wantGrant",
+  "wantPool",
+  "limitedBy",
+  "peer",
+  // Counts, amounts and timings.
+  "amount",
+  "scanned",
+  "deleted",
+  "intents",
+  "policies",
+  "connections",
+  "events",
+  "maxQueueSize",
+  "bytes",
+  "sha256",
+  "ts",
+  "count",
+  "countRaw",
+  "matchingCount",
+  "registry_field_count",
+  "applied",
+  "attempt",
+  "attempts",
+  "cap",
+  "max",
+  "maxChallenges",
+  "MAX_GAS_COIN_PAGES",
+  "pagesScanned",
+  "size",
+  "free",
+  "used",
+  "fill",
+  "limits",
+  "refills",
+  "refilled",
+  "split",
+  "unconfirmed",
+  "spent",
+  "reserveAfter",
+  "claimedUntilMs",
+  "repaired",
+  "splits",
+  "spend",
+  "reserve",
+  "reserveBalance",
+  "ownerDailyMist",
+  "ownerHourlyMist",
+  "ownerIdentityDailyMist",
+  "delegateDailyMist",
+  "delegateHourlyMist",
+  "delegateIdentityDailyMist",
+  "consecutiveFailures",
+  "failuresInARow",
+  "epochReadFailures",
+  "daysRemaining",
+  "deadline",
+  "delay",
+  "delayMs",
+  "ageMs",
+  "timeoutMs",
+  "nowMs",
+  "switchedAtMs",
+  "observeUntil",
+  "window",
+  "checkpointSeq",
+  "eventSeq",
+  "sampleSubjects",
+  // Operator-facing error text. Redacted and length-capped like every string.
+  "error",
+  "errors",
+  "err",
+  "lastError",
+  "outcomeError",
+  "detail",
+  "raw",
+  "value"
+]);
+var MAX_CONTEXT_STRING = 512;
+var MAX_CONTEXT_ARRAY = 32;
+var MAX_CONTEXT_DEPTH = 4;
+function filterContext(context) {
+  let dropped = 0;
+  const filterValue = (value2, depth) => {
+    if (typeof value2 === "bigint")
+      return value2.toString();
+    if (value2 === null || typeof value2 !== "object")
+      return value2;
+    if (depth >= MAX_CONTEXT_DEPTH) {
+      dropped += 1;
+      return void 0;
+    }
+    if (Array.isArray(value2)) {
+      return value2.slice(0, MAX_CONTEXT_ARRAY).map((item) => filterValue(item, depth + 1));
+    }
+    if (value2 instanceof Date)
+      return value2.toISOString();
+    return filterObject(value2, depth + 1);
+  };
+  const filterObject = (object, depth) => {
+    const out = {};
+    for (const [key, value2] of Object.entries(object)) {
+      if (!CONTEXT_ALLOWLIST.has(key)) {
+        dropped += 1;
+        continue;
+      }
+      const kept = filterValue(value2, depth);
+      if (kept !== void 0)
+        out[key] = kept;
+    }
+    return out;
+  };
+  const value = filterObject(context, 0);
+  return { value, dropped };
+}
+function capContextStrings(value) {
+  if (typeof value === "string") {
+    return value.length > MAX_CONTEXT_STRING ? `${value.slice(0, MAX_CONTEXT_STRING)}\u2026` : value;
+  }
+  if (Array.isArray(value))
+    return value.map(capContextStrings);
+  if (value !== null && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, capContextStrings(v)]));
+  }
+  return value;
+}
+
 // ../core/dist/errors/log.js
 var MAX_CAUSE_DEPTH = 5;
 function causeChain(error) {
@@ -5685,6 +6095,7 @@ function safeStringify(value) {
 function errorLogLine(context, error, now = /* @__PURE__ */ new Date()) {
   const wantStack = context.withStack ?? (context.httpStatus !== void 0 && context.httpStatus >= 500);
   const stack = wantStack && error instanceof Error && error.stack ? redactSecrets(error.stack) : void 0;
+  const filtered = context.context ? filterContext(context.context) : void 0;
   return {
     level: context.level ?? "error",
     time: now.toISOString(),
@@ -5696,10 +6107,12 @@ function errorLogLine(context, error, now = /* @__PURE__ */ new Date()) {
     trace_id: context.traceId || newTraceId(),
     cause: error === void 0 ? [] : causeChain(error),
     ...stack ? { stack } : {},
-    ...context.context ? { context: redactValue(context.context) } : {}
+    ...filtered ? { context: capContextStrings(redactValue(filtered.value)) } : {},
+    ...filtered && filtered.dropped > 0 ? { context_dropped: filtered.dropped } : {}
   };
 }
 var stderrWriter = (line) => console.error(line);
+var lineShipper = null;
 function logError(context, error, write = stderrWriter) {
   let line;
   let traceId = "";
@@ -5720,6 +6133,12 @@ function logError(context, error, write = stderrWriter) {
     write(line);
   } catch {
   }
+  if (write === stderrWriter && lineShipper) {
+    try {
+      lineShipper.enqueue(line, context.level ?? "error");
+    } catch {
+    }
+  }
 }
 
 // ../core/dist/errors/suipay-error.js
@@ -9580,6 +9999,7 @@ import { bytesToHex as bytesToHex4 } from "@noble/hashes/utils.js";
 
 // src/config.ts
 import { homedir } from "os";
+import { createHash as createHash4 } from "crypto";
 import { join as join2 } from "path";
 import { SuiGrpcClient as SuiGrpcClient2 } from "@mysten/sui/grpc";
 import { normalizeSuiAddress as normalizeSuiAddress7 } from "@mysten/sui/utils";
@@ -9646,6 +10066,11 @@ function configError(detail) {
 }
 function mcpCredentialsPath() {
   const home = process.env.HOME ?? process.env.USERPROFILE ?? homedir();
+  const profile2 = process.env.SUIPAY_MCP_PROFILE?.trim();
+  if (profile2) {
+    const id = createHash4("sha256").update(profile2).digest("hex");
+    return join2(home, ".suipay", "profiles", id, "credentials.json");
+  }
   return join2(home, ".suipay", "credentials.json");
 }
 var MCP_TARGET_PRESETS = {
@@ -12774,6 +13199,13 @@ function receiptChallengeId(receipt) {
   return typeof id === "string" && id.length > 0 ? id : void 0;
 }
 var MCP_SAVE_ERROR = "delivery file was not written; do not call pay again";
+var MCP_EMPTY_DELIVERY = "the seller returned an empty delivery body; no file was written; do not call pay again";
+function deliverySaveError(cause, result) {
+  const code = cause?.code;
+  const reason = typeof code === "string" && /^E[A-Z0-9_]+$/.test(code) ? code : "file-system operation failed";
+  const recovery = result.paid === true && result.txDigest ? `the body was not saved locally and cannot be re-fetched here; transaction digest ${result.txDigest} identifies the settlement for support` : "no confirmed transaction digest is available";
+  return `${MCP_SAVE_ERROR}; cause: ${reason}; ${recovery}`;
+}
 function paidResult(result) {
   if (!isBinaryBody(result.body)) return text(result);
   const body = result.body;
@@ -12783,6 +13215,7 @@ function paidResult(result) {
     byteLength: body.byteLength
   };
   let savedTo;
+  let saveError = MCP_EMPTY_DELIVERY;
   try {
     savedTo = saveDeliveredBody({
       bytes: body.bytes,
@@ -12790,8 +13223,8 @@ function paidResult(result) {
       digest: result.txDigest,
       challengeId: receiptChallengeId(result.receipt)
     });
-  } catch {
-    savedTo = void 0;
+  } catch (cause) {
+    saveError = deliverySaveError(cause, result);
   }
   const payload = savedTo ? {
     savedTo,
@@ -12800,7 +13233,7 @@ function paidResult(result) {
     body: shape
   } : {
     savedTo: null,
-    saveError: MCP_SAVE_ERROR,
+    saveError,
     saveErrorCode: "client.delivery_file_not_saved",
     ...result,
     body: shape
@@ -13550,7 +13983,7 @@ function grantObjectIdFromBootstrap(grants, nowMs) {
   }
   if (live.length === 1) return { kind: "live", grantObjectId: live[0] };
   if (live.length > 1) return { kind: "ambiguous" };
-  if (named > 0) return { kind: "absent" };
+  if (named > 0) return { kind: "expired" };
   if (grants.length > 0) return { kind: "unknown", detail: "delegate grants list was not usable" };
   return { kind: "absent" };
 }
@@ -13997,7 +14430,8 @@ async function suipayLogin(args, cfg, deps = {}) {
         target: target ?? cfg.target,
         delegateAddress: identity.delegateAddress,
         gatewayUrl: endpoints.gatewayUrl,
-        message: "Credentials are already saved for this agent. The existing grant could not be checked just now, so no new sign-in was started and the key file was left unchanged. Retry suipay_login in a moment."
+        nextAction: "poll suipay_login_status to verify authorization before retrying payment",
+        message: "Credentials are already saved for this agent. The existing grant could not be checked just now, so no new sign-in was started and the key file was left unchanged. Poll suipay_login_status in a moment."
       });
     }
   }
@@ -14032,7 +14466,7 @@ async function suipayLogin(args, cfg, deps = {}) {
       ``,
       `1. Use the browser window that just opened, or open the URL above`,
       `2. Connect the owner wallet, create a key, then Authorize on the review step`,
-      `3. Once Connected appears, retry the original request \u2014 credentials at \`~/.suipay/credentials.json\` are picked up on the next tool call`,
+      `3. Poll \`suipay_login_status\` to confirm authorization \u2014 credentials at \`~/.suipay/credentials.json\` are active once approved`,
       ``,
       `_The login link stays valid for 5 minutes. If it expires, call \`suipay_login\` again._`,
       ``,
@@ -14042,11 +14476,113 @@ async function suipayLogin(args, cfg, deps = {}) {
         delegateAddress: identity.delegateAddress,
         connectUrl: url,
         consoleUrl: endpoints.consoleUrl,
-        gatewayUrl: endpoints.gatewayUrl
+        gatewayUrl: endpoints.gatewayUrl,
+        nextAction: "poll suipay_login_status to verify authorization before retrying payment"
       })
     ].join("\n")
   );
 }
+function defaultKeyName(delegateAddress) {
+  const clean = delegateAddress.trim().toLowerCase();
+  const hex = clean.startsWith("0x") ? clean.slice(2) : clean;
+  const prefix = hex.slice(0, 8).padEnd(8, "0");
+  return `agent-${prefix}`;
+}
+function safeRetryDetail(rawDetail) {
+  if (!rawDetail) {
+    return "Grant status could not be verified on chain. Retry shortly.";
+  }
+  let stripped = rawDetail.replace(/https?:\/\/[^\s"'<>]+/gi, "[redacted]");
+  if (stripped.includes("ECONNREFUSED") || stripped.includes("ETIMEDOUT") || stripped.includes("fetch failed")) {
+    return "Network connection to gateway or chain node failed. Retry shortly.";
+  }
+  return stripped;
+}
+var loginStatusCache = /* @__PURE__ */ new Map();
+var DEFAULT_LOGIN_STATUS_RETRY_AFTER_MS = 2e3;
+var DEFAULT_LOGIN_STATUS_CACHE_TTL_MS = 1500;
+async function suipayLoginStatus(_args = {}, cfg, deps = {}) {
+  if (deps.auth) {
+    return mcpFailure(
+      "request.local_only",
+      "suipay_login_status is for local stdio only; hosted /mcp never holds a spendable key"
+    );
+  }
+  const loadKeypair = deps.loadLocalKeypair ?? loadLocalKeypair;
+  const keypair = loadKeypair();
+  if (!keypair) {
+    return text({
+      status: "not_started",
+      nextAction: "run suipay_login"
+    });
+  }
+  const delegateAddress = keypair.toSuiAddress();
+  const stored = loadLocalSigningKeyRecord();
+  const gatewayUrl = stored?.gatewayUrl ?? cfg.gatewayUrl;
+  const cacheKey = `${gatewayUrl}:${delegateAddress}`;
+  const now = Date.now();
+  const cacheTtlMs = deps.cacheTtlMs ?? DEFAULT_LOGIN_STATUS_CACHE_TTL_MS;
+  if (!deps.bypassCache) {
+    const cached = loginStatusCache.get(cacheKey);
+    if (cached && now - cached.timestamp < cacheTtlMs) {
+      return cached.result;
+    }
+  }
+  const checkFn = deps.checkLiveDelegateGrant ?? checkLiveDelegateGrant;
+  let live;
+  try {
+    live = await checkFn({
+      gatewayUrl,
+      delegateAddress,
+      signPersonalMessage: async (bytes) => {
+        const { signature } = await keypair.signPersonalMessage(bytes);
+        return signature;
+      },
+      ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}
+    });
+  } catch (err) {
+    const rawMessage = err instanceof Error ? err.message : String(err);
+    live = {
+      kind: "unknown",
+      detail: rawMessage
+    };
+  }
+  let result;
+  if (live.kind === "live") {
+    result = text({
+      status: "connected",
+      grantObjectId: live.grantObjectId,
+      delegateAddress
+    });
+  } else if (live.kind === "expired") {
+    result = text({
+      status: "expired",
+      delegateAddress,
+      detail: "Grant has expired. Run suipay_login to reconnect.",
+      nextAction: "run suipay_login"
+    });
+  } else if (live.kind === "absent") {
+    result = text({
+      status: "pending",
+      delegateAddress,
+      defaultKeyName: defaultKeyName(delegateAddress)
+    });
+  } else if (live.kind === "ambiguous") {
+    result = text({
+      status: "ambiguous",
+      delegateAddress,
+      detail: "Multiple live grants found for this delegate key. Revoke the duplicate grants and reconnect."
+    });
+  } else {
+    result = text({
+      status: "retry",
+      retryAfterMs: DEFAULT_LOGIN_STATUS_RETRY_AFTER_MS,
+      detail: safeRetryDetail(live.detail)
+    });
+  }
+  loginStatusCache.set(cacheKey, { timestamp: Date.now(), result });
+  return result;
+}
 async function logout(args, _cfg, deps = {}) {
   if (args.force) {
     clearCreds();
@@ -14150,6 +14686,14 @@ var TOOLS = [
       }
     }
   },
+  {
+    name: "suipay_login_status",
+    description: `Check whether the local delegate key has an approved, active spend-account grant, read from the gateway's delegate-grant state. Read-only and pollable (does not mint keys, write credentials, or sign transactions). Returns one of five states: (1) "not_started" if no local key exists yet (call suipay_login first); (2) "connected" if a live grant exists for this local delegate key (note: "connected" means a live grant exists for this delegate key, which may be pre-existing from a prior session); (3) "pending" if the key exists but no grant has been approved yet (includes delegateAddress and a defaultKeyName of format "agent-<first-8-hex-chars-of-address-without-0x>"; note that if the owner already has a live key with this normalized name, creating it may yield 409 CONFLICT); (4) "ambiguous" (terminal) if several live grants exist for this delegate key \u2014 stop polling and revoke the duplicates; (5) "retry" if the status could not be verified (includes retryAfterMs floor and safe detail). Stdio only; hosted /mcp never holds a spendable key.`,
+    inputSchema: {
+      type: "object",
+      properties: {}
+    }
+  },
   {
     name: "suipay_logout",
     description: "Remove the local delegate-key credentials file. Missing file is success. Force clears a corrupt file without printing the seed.",
@@ -14297,6 +14841,14 @@ function createServer2(cfg, auth, trace, options = {}) {
             }
           );
         }
+        case "suipay_login_status":
+          if (auth) {
+            return mcpFailure(
+              "request.local_only",
+              "suipay_login_status is for local stdio only; hosted /mcp never holds a spendable key"
+            );
+          }
+          return await suipayLoginStatus(args, cfg, { auth });
         case "suipay_logout":
           if (auth) {
             return mcpFailure(

package/dist/{http-15g02zyM.d.ts → http-ZG_iISm1.d.ts}

@@ -865,6 +865,17 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'indexer.native_settlement_deferred': {
+        readonly surfaces: readonly ["indexer"];
+        readonly status: null;
+        readonly title: "Native settlement is deferred; holding the checkpoint";
+        readonly paymentState: "not_charged";
+        readonly retry: "after_delay";
+        readonly retryAfterSeconds: 5;
+        readonly nextAction: "retry_later";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'indexer.config_invalid': {
         readonly surfaces: readonly ["indexer"];
         readonly status: null;
@@ -1258,7 +1269,7 @@ declare const ERRORS: {
         readonly logOnly: true;
     };
     readonly 'service.config_degraded': {
-        readonly surfaces: readonly ["gateway"];
+        readonly surfaces: readonly ["gateway", "console_server"];
         readonly status: null;
         readonly title: "Service started with degraded configuration";
         readonly paymentState: "not_charged";
@@ -1267,6 +1278,16 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'service.readiness': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: null;
+        readonly title: "Readiness gauge updated";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'service.bookkeeping_failed': {
         readonly surfaces: readonly ["gateway"];
         readonly status: null;
@@ -1277,6 +1298,36 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'service.boot': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Service started";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
+    readonly 'service.lifecycle': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Background work progressed";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
+    readonly 'service.diagnostic': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Diagnostic detail";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'limit.concurrency_exceeded': {
         readonly surfaces: readonly ["gateway"];
         readonly status: 429;
@@ -3474,6 +3525,55 @@ declare const ERRORS: {
             readonly message: "That web address doesn't exist. Check the spelling and try again.";
         };
     };
+    readonly 'request.recipient_changed': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Pay-to address changed while its registry was being checked";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Retry this publish";
+            readonly message: "The payout address changed while its payment registry was being checked. Retry so the current address is checked.";
+        };
+    };
+    readonly 'request.recipient_registry_invalid': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Payment registry does not verify for this deployment";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Registry does not match";
+            readonly message: "The payout address's payment registry does not match this deployment. Fix it, then publish again.";
+        };
+    };
+    readonly 'request.recipient_registry_missing': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Pay-to address has no payment registry";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Create a payment registry";
+            readonly message: "This payout address has no payment registry on this network yet. Create it in the seller console, then publish again.";
+        };
+    };
+    readonly 'request.recipient_registry_unreadable': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 503;
+        readonly title: "Payment registry could not be read";
+        readonly paymentState: "not_charged";
+        readonly retry: "after_delay";
+        readonly retryAfterSeconds: 5;
+        readonly nextAction: "retry_later";
+        readonly user: {
+            readonly title: "Registry unread";
+            readonly message: "The payment registry could not be read just now. Wait a moment and try again.";
+        };
+    };
     readonly 'request.redirect_refused': {
         readonly surfaces: readonly ["console_server", "sdk"];
         readonly status: 422;
@@ -4882,6 +4982,13 @@ declare const TOOLS: readonly [{
             };
         };
     };
+}, {
+    readonly name: "suipay_login_status";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {};
+    };
 }, {
     readonly name: "suipay_logout";
     readonly description: "Remove the local delegate-key credentials file. Missing file is success. Force clears a corrupt file without printing the seed.";

package/dist/http.d.ts

@@ -1,4 +1,4 @@
-export { I as handleSuipayMcpHttpRequest } from './http-15g02zyM.js';
+export { I as handleSuipayMcpHttpRequest } from './http-ZG_iISm1.js';
 import '@modelcontextprotocol/sdk/server/index.js';
 import '@mysten/sui/keypairs/ed25519';
 import 'node:crypto';

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-CXM7PELK.js";
+} from "./chunk-RD34GGSA.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, O as OfferPublicKeySource, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, k as Offer, M as McpConfig, l as McpAuthContext, m as McpTraceHooks, n as SpendAccountPayDeps, o as createReader } from './http-15g02zyM.js';
-export { A as AgentHeldResolver, p as AgentHeldSettlement, q as MCP_TARGET_PRESETS, r as McpEnvelope, s as McpEnvelopeEntry, t as McpServerOptions, u as McpTarget, v as McpTraceContext, w as McpTraceRuntime, x as PACKAGE_NAME, y as PreparedPayment, z as SpendAccountPrepareResult, B as SpendAccountPrepareSession, T as TOOLS, E as buildSpendAccountPayKind, F as canonicalMcpRequestId, H as createServer, I as handleSuipayMcpHttpRequest, J as inspectMcpEnvelope, K as loadMcpConfig, L as parseMcpTargetFlag, Q as prepareSpendAccountPayment, R as resetAgentHeldProcessLedger, U as resolveAgentHeldSettlement, V as resolveGrantTarget, W as resolveMcpTarget, Y as sameMcpGateway, Z as traceMcpHttpRequest, _ as verifySpendAccountPayReconstructs } from './http-15g02zyM.js';
-import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
+import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, O as OfferPublicKeySource, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, k as Offer, M as McpConfig, l as McpAuthContext, m as McpTraceHooks, n as SpendAccountPayDeps, o as createReader } from './http-ZG_iISm1.js';
+export { A as AgentHeldResolver, p as AgentHeldSettlement, q as MCP_TARGET_PRESETS, r as McpEnvelope, s as McpEnvelopeEntry, t as McpServerOptions, u as McpTarget, v as McpTraceContext, w as McpTraceRuntime, x as PACKAGE_NAME, y as PreparedPayment, z as SpendAccountPrepareResult, B as SpendAccountPrepareSession, T as TOOLS, E as buildSpendAccountPayKind, F as canonicalMcpRequestId, H as createServer, I as handleSuipayMcpHttpRequest, J as inspectMcpEnvelope, K as loadMcpConfig, L as parseMcpTargetFlag, Q as prepareSpendAccountPayment, R as resetAgentHeldProcessLedger, U as resolveAgentHeldSettlement, V as resolveGrantTarget, W as resolveMcpTarget, Y as sameMcpGateway, Z as traceMcpHttpRequest, _ as verifySpendAccountPayReconstructs } from './http-ZG_iISm1.js';
+import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 import '@modelcontextprotocol/sdk/server/index.js';
 import 'node:crypto';
@@ -65,6 +65,8 @@ declare function loadLocalSigner(): {
     signTransaction: (txBytes: string) => Promise<string>;
     signPersonalMessage: (message: Uint8Array) => Promise<string>;
 } | null;
+/** Ed25519 keypair from the persisted seed. Null when this process holds no key. */
+declare function loadLocalKeypair(): Ed25519Keypair | null;
 
 /**
  * Client-side completion of an MCP prepared payment.
@@ -581,6 +583,10 @@ interface ToolDeps {
     createPayer?: typeof createPayer;
     createReader?: typeof createReader;
     startStdioLogin?: typeof startStdioLogin;
+    loadLocalKeypair?: typeof loadLocalKeypair;
+    checkLiveDelegateGrant?: typeof checkLiveDelegateGrant;
+    bypassCache?: boolean;
+    cacheTtlMs?: number;
 }
 declare function pay(args: {
     url: string;
@@ -591,6 +597,25 @@ declare function pay(args: {
     recipient?: unknown;
     maxAmount?: unknown;
 }, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
+type LiveGrantCheck = {
+    kind: 'live';
+    grantObjectId: string;
+} | {
+    kind: 'ambiguous';
+} | {
+    kind: 'absent';
+} | {
+    kind: 'expired';
+} | {
+    kind: 'unknown';
+    detail: string;
+};
+declare function checkLiveDelegateGrant(args: {
+    gatewayUrl: string;
+    delegateAddress: string;
+    signPersonalMessage: (message: Uint8Array) => Promise<string>;
+    fetchImpl?: typeof fetch;
+}): Promise<LiveGrantCheck>;
 declare function receipts(args: {
     challengeId?: string;
 }, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-47YNZDCC.js";
+} from "./chunk-D6LFU4VE.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-CXM7PELK.js";
+} from "./chunk-RD34GGSA.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mysten-incubation/suipay-mcp",
-  "version": "0.3.0-dev.0",
+  "version": "0.3.0-dev.10",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "repository": {