@mysten-incubation/suipay-mcp 0.3.0-dev.0 → 0.3.0-dev.2

package/README.md

@@ -5,7 +5,7 @@ buyer-funded spend account. The buyer owns the account. The agent holds the
 delegate key and can spend only under the on-chain grant (recipient bind,
 per-payment cap, budget).
 
-Pin `@mysten-incubation/suipay-mcp@0.3.0-dev.0` in MCP config for the `latest` dist-tag.
+Pin `@mysten-incubation/suipay-mcp@0.3.0-dev.2` in MCP config for the `latest` dist-tag.
 `npx -y @mysten-incubation/suipay-mcp@dev` tracks the `dev` prerelease line.
 `1.0.1` remains on the registry as a historical release; do not install it
 for new agents.
@@ -13,7 +13,7 @@ for new agents.
 ## Install
 
 ```bash
-claude mcp add --scope user suipay -- npx -y @mysten-incubation/suipay-mcp@0.3.0-dev.0
+claude mcp add --scope user suipay -- npx -y @mysten-incubation/suipay-mcp@0.3.0-dev.2
 ```
 
 `@dev` installs the Railway-dev gateway/console defaults. A workspace
@@ -155,10 +155,10 @@ Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
 
 ```bash
 # Railway suipay-dev (default)
-npx @mysten-incubation/suipay-mcp@0.3.0-dev.0
+npx @mysten-incubation/suipay-mcp@0.3.0-dev.2
 
 # Laptop stack
-npx @mysten-incubation/suipay-mcp@0.3.0-dev.0 --local
+npx @mysten-incubation/suipay-mcp@0.3.0-dev.2 --local
 ```
 
 `SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit

package/dist/bin/suipay.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-47YNZDCC.js";
+} from "../chunk-OAHWW4H7.js";
 import {
   logError
-} from "../chunk-CXM7PELK.js";
+} from "../chunk-HIBLRYTW.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-CXM7PELK.js → chunk-HIBLRYTW.js}

@@ -4915,7 +4915,7 @@ var SERVICE_CODES = {
   },
   // Boot or configuration fell back to a degraded mode instead of failing.
   "service.config_degraded": {
-    surfaces: ["gateway"],
+    surfaces: ["gateway", "console_server"],
     status: null,
     title: "Service started with degraded configuration",
     paymentState: "not_charged",
@@ -4924,6 +4924,19 @@ var SERVICE_CODES = {
     user: null,
     logOnly: true
   },
+  // A readiness gauge moved while the process is still serving. Not a degraded
+  // boot: `service.config_degraded` is reserved for that, and for the sample
+  // that actually fails closed.
+  "service.readiness": {
+    surfaces: ["gateway"],
+    status: null,
+    title: "Readiness gauge updated",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
   // A best-effort write (a trace event, a receipt, a delivery record) failed.
   // The request it belongs to keeps its answer.
   "service.bookkeeping_failed": {
@@ -4935,6 +4948,39 @@ var SERVICE_CODES = {
     nextAction: "none",
     user: null,
     logOnly: true
+  },
+  // What a process started with: network, posture, rails, gas pool. Healthy.
+  "service.boot": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Service started",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
+  // A background worker started, stopped, swept or retried on schedule. Healthy.
+  "service.lifecycle": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Background work progressed",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
+  // Detail about healthy traffic an operator may want when reading a trace.
+  "service.diagnostic": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Diagnostic detail",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
   }
 };
 
@@ -5635,6 +5681,233 @@ function newTraceId(randomBytes3 = cryptoRandomBytes) {
   return /^0+$/.test(hex) ? newTraceId(randomBytes3) : hex;
 }
 
+// ../core/dist/errors/context-allowlist.js
+var CONTEXT_ALLOWLIST = /* @__PURE__ */ new Set([
+  // Settlement and request identifiers.
+  "txDigest",
+  "digest",
+  "challengeId",
+  "paymentId",
+  "paymentHash",
+  "paymentKey",
+  "paymentState",
+  "requestId",
+  "traceId",
+  "clientId",
+  "serviceId",
+  "configId",
+  "seedId",
+  "grantId",
+  "grantObjectId",
+  "sameGrantObjectId",
+  "verifiedGrant",
+  "poolObjectId",
+  "packageId",
+  "activePackageId",
+  "expectedPackageId",
+  "actualPackageId",
+  "mandateId",
+  "session",
+  "coinId",
+  "coinIds",
+  "id",
+  "dedupeKey",
+  "hook",
+  // Addresses (public on chain).
+  "owner",
+  "payTo",
+  "recipient",
+  "delegateAddress",
+  // Codes, kinds and states.
+  "code",
+  "innerCode",
+  "requestedCode",
+  "failureCode",
+  "oauthError",
+  "errorKind",
+  "kind",
+  "mode",
+  "effectiveMode",
+  "state",
+  "outcome",
+  "status",
+  "httpStatus",
+  "reason",
+  "action",
+  "stage",
+  "paid",
+  "delivery",
+  "sellerStatus",
+  "sellerCode",
+  "bindingCode",
+  "errorName",
+  "gasStationStatus",
+  "readFailure",
+  "refusal",
+  "refusedAs",
+  "registryCode",
+  "sessionDecision",
+  "settleCode",
+  "signedRequest",
+  "signerCode",
+  "consentCode",
+  "publicReason",
+  "details",
+  "event",
+  "eventType",
+  "surface",
+  "scope",
+  "field",
+  "header",
+  "dependency",
+  "network",
+  "rails",
+  "shard",
+  "metric",
+  "alarm",
+  "alert",
+  "from",
+  "to",
+  "expected",
+  "required",
+  "violated",
+  "diverged",
+  "replaced",
+  "suppressed",
+  "unknown",
+  "verified",
+  "verification",
+  "simulation",
+  "isNew",
+  "needsTopup",
+  "operatorCapSet",
+  "wantAgent",
+  "wantGrant",
+  "wantPool",
+  "limitedBy",
+  "peer",
+  // Counts, amounts and timings.
+  "amount",
+  "scanned",
+  "deleted",
+  "intents",
+  "policies",
+  "connections",
+  "events",
+  "maxQueueSize",
+  "bytes",
+  "sha256",
+  "ts",
+  "count",
+  "countRaw",
+  "matchingCount",
+  "registry_field_count",
+  "applied",
+  "attempt",
+  "attempts",
+  "cap",
+  "max",
+  "maxChallenges",
+  "MAX_GAS_COIN_PAGES",
+  "pagesScanned",
+  "size",
+  "free",
+  "used",
+  "fill",
+  "limits",
+  "refills",
+  "refilled",
+  "split",
+  "unconfirmed",
+  "spent",
+  "reserveAfter",
+  "claimedUntilMs",
+  "repaired",
+  "splits",
+  "spend",
+  "reserve",
+  "reserveBalance",
+  "ownerDailyMist",
+  "ownerHourlyMist",
+  "ownerIdentityDailyMist",
+  "delegateDailyMist",
+  "delegateHourlyMist",
+  "delegateIdentityDailyMist",
+  "consecutiveFailures",
+  "failuresInARow",
+  "epochReadFailures",
+  "daysRemaining",
+  "deadline",
+  "delay",
+  "delayMs",
+  "ageMs",
+  "timeoutMs",
+  "nowMs",
+  "switchedAtMs",
+  "observeUntil",
+  "window",
+  "checkpointSeq",
+  "eventSeq",
+  "sampleSubjects",
+  // Operator-facing error text. Redacted and length-capped like every string.
+  "error",
+  "errors",
+  "err",
+  "lastError",
+  "outcomeError",
+  "detail",
+  "raw",
+  "value"
+]);
+var MAX_CONTEXT_STRING = 512;
+var MAX_CONTEXT_ARRAY = 32;
+var MAX_CONTEXT_DEPTH = 4;
+function filterContext(context) {
+  let dropped = 0;
+  const filterValue = (value2, depth) => {
+    if (typeof value2 === "bigint")
+      return value2.toString();
+    if (value2 === null || typeof value2 !== "object")
+      return value2;
+    if (depth >= MAX_CONTEXT_DEPTH) {
+      dropped += 1;
+      return void 0;
+    }
+    if (Array.isArray(value2)) {
+      return value2.slice(0, MAX_CONTEXT_ARRAY).map((item) => filterValue(item, depth + 1));
+    }
+    if (value2 instanceof Date)
+      return value2.toISOString();
+    return filterObject(value2, depth + 1);
+  };
+  const filterObject = (object, depth) => {
+    const out = {};
+    for (const [key, value2] of Object.entries(object)) {
+      if (!CONTEXT_ALLOWLIST.has(key)) {
+        dropped += 1;
+        continue;
+      }
+      const kept = filterValue(value2, depth);
+      if (kept !== void 0)
+        out[key] = kept;
+    }
+    return out;
+  };
+  const value = filterObject(context, 0);
+  return { value, dropped };
+}
+function capContextStrings(value) {
+  if (typeof value === "string") {
+    return value.length > MAX_CONTEXT_STRING ? `${value.slice(0, MAX_CONTEXT_STRING)}\u2026` : value;
+  }
+  if (Array.isArray(value))
+    return value.map(capContextStrings);
+  if (value !== null && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, capContextStrings(v)]));
+  }
+  return value;
+}
+
 // ../core/dist/errors/log.js
 var MAX_CAUSE_DEPTH = 5;
 function causeChain(error) {
@@ -5685,6 +5958,7 @@ function safeStringify(value) {
 function errorLogLine(context, error, now = /* @__PURE__ */ new Date()) {
   const wantStack = context.withStack ?? (context.httpStatus !== void 0 && context.httpStatus >= 500);
   const stack = wantStack && error instanceof Error && error.stack ? redactSecrets(error.stack) : void 0;
+  const filtered = context.context ? filterContext(context.context) : void 0;
   return {
     level: context.level ?? "error",
     time: now.toISOString(),
@@ -5696,10 +5970,12 @@ function errorLogLine(context, error, now = /* @__PURE__ */ new Date()) {
     trace_id: context.traceId || newTraceId(),
     cause: error === void 0 ? [] : causeChain(error),
     ...stack ? { stack } : {},
-    ...context.context ? { context: redactValue(context.context) } : {}
+    ...filtered ? { context: capContextStrings(redactValue(filtered.value)) } : {},
+    ...filtered && filtered.dropped > 0 ? { context_dropped: filtered.dropped } : {}
   };
 }
 var stderrWriter = (line) => console.error(line);
+var lineShipper = null;
 function logError(context, error, write = stderrWriter) {
   let line;
   let traceId = "";
@@ -5720,6 +5996,12 @@ function logError(context, error, write = stderrWriter) {
     write(line);
   } catch {
   }
+  if (write === stderrWriter && lineShipper) {
+    try {
+      lineShipper.enqueue(line, context.level ?? "error");
+    } catch {
+    }
+  }
 }
 
 // ../core/dist/errors/suipay-error.js

package/dist/{chunk-47YNZDCC.js → chunk-OAHWW4H7.js}

@@ -5,7 +5,7 @@ import {
   loadMcpConfig,
   loadPaymentProfile,
   logError
-} from "./chunk-CXM7PELK.js";
+} from "./chunk-HIBLRYTW.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/{http-15g02zyM.d.ts → http-BUaEV9I3.d.ts}

@@ -1258,7 +1258,7 @@ declare const ERRORS: {
         readonly logOnly: true;
     };
     readonly 'service.config_degraded': {
-        readonly surfaces: readonly ["gateway"];
+        readonly surfaces: readonly ["gateway", "console_server"];
         readonly status: null;
         readonly title: "Service started with degraded configuration";
         readonly paymentState: "not_charged";
@@ -1267,6 +1267,16 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'service.readiness': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: null;
+        readonly title: "Readiness gauge updated";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'service.bookkeeping_failed': {
         readonly surfaces: readonly ["gateway"];
         readonly status: null;
@@ -1277,6 +1287,36 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'service.boot': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Service started";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
+    readonly 'service.lifecycle': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Background work progressed";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
+    readonly 'service.diagnostic': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Diagnostic detail";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'limit.concurrency_exceeded': {
         readonly surfaces: readonly ["gateway"];
         readonly status: 429;

package/dist/http.d.ts

@@ -1,4 +1,4 @@
-export { I as handleSuipayMcpHttpRequest } from './http-15g02zyM.js';
+export { I as handleSuipayMcpHttpRequest } from './http-BUaEV9I3.js';
 import '@modelcontextprotocol/sdk/server/index.js';
 import '@mysten/sui/keypairs/ed25519';
 import 'node:crypto';

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-CXM7PELK.js";
+} from "./chunk-HIBLRYTW.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, O as OfferPublicKeySource, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, k as Offer, M as McpConfig, l as McpAuthContext, m as McpTraceHooks, n as SpendAccountPayDeps, o as createReader } from './http-15g02zyM.js';
-export { A as AgentHeldResolver, p as AgentHeldSettlement, q as MCP_TARGET_PRESETS, r as McpEnvelope, s as McpEnvelopeEntry, t as McpServerOptions, u as McpTarget, v as McpTraceContext, w as McpTraceRuntime, x as PACKAGE_NAME, y as PreparedPayment, z as SpendAccountPrepareResult, B as SpendAccountPrepareSession, T as TOOLS, E as buildSpendAccountPayKind, F as canonicalMcpRequestId, H as createServer, I as handleSuipayMcpHttpRequest, J as inspectMcpEnvelope, K as loadMcpConfig, L as parseMcpTargetFlag, Q as prepareSpendAccountPayment, R as resetAgentHeldProcessLedger, U as resolveAgentHeldSettlement, V as resolveGrantTarget, W as resolveMcpTarget, Y as sameMcpGateway, Z as traceMcpHttpRequest, _ as verifySpendAccountPayReconstructs } from './http-15g02zyM.js';
+import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, O as OfferPublicKeySource, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, k as Offer, M as McpConfig, l as McpAuthContext, m as McpTraceHooks, n as SpendAccountPayDeps, o as createReader } from './http-BUaEV9I3.js';
+export { A as AgentHeldResolver, p as AgentHeldSettlement, q as MCP_TARGET_PRESETS, r as McpEnvelope, s as McpEnvelopeEntry, t as McpServerOptions, u as McpTarget, v as McpTraceContext, w as McpTraceRuntime, x as PACKAGE_NAME, y as PreparedPayment, z as SpendAccountPrepareResult, B as SpendAccountPrepareSession, T as TOOLS, E as buildSpendAccountPayKind, F as canonicalMcpRequestId, H as createServer, I as handleSuipayMcpHttpRequest, J as inspectMcpEnvelope, K as loadMcpConfig, L as parseMcpTargetFlag, Q as prepareSpendAccountPayment, R as resetAgentHeldProcessLedger, U as resolveAgentHeldSettlement, V as resolveGrantTarget, W as resolveMcpTarget, Y as sameMcpGateway, Z as traceMcpHttpRequest, _ as verifySpendAccountPayReconstructs } from './http-BUaEV9I3.js';
 import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-47YNZDCC.js";
+} from "./chunk-OAHWW4H7.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-CXM7PELK.js";
+} from "./chunk-HIBLRYTW.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mysten-incubation/suipay-mcp",
-  "version": "0.3.0-dev.0",
+  "version": "0.3.0-dev.2",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "repository": {