@mysten-incubation/suipay-mcp 0.3.0-dev.1 → 0.3.0-dev.10

package/README.md

@@ -5,7 +5,7 @@ buyer-funded spend account. The buyer owns the account. The agent holds the
 delegate key and can spend only under the on-chain grant (recipient bind,
 per-payment cap, budget).
 
-Pin `@mysten-incubation/suipay-mcp@0.3.0-dev.1` in MCP config for the `latest` dist-tag.
+Pin `@mysten-incubation/suipay-mcp@0.3.0-dev.10` in MCP config for the `latest` dist-tag.
 `npx -y @mysten-incubation/suipay-mcp@dev` tracks the `dev` prerelease line.
 `1.0.1` remains on the registry as a historical release; do not install it
 for new agents.
@@ -13,7 +13,7 @@ for new agents.
 ## Install
 
 ```bash
-claude mcp add --scope user suipay -- npx -y @mysten-incubation/suipay-mcp@0.3.0-dev.1
+claude mcp add --scope user suipay -- npx -y @mysten-incubation/suipay-mcp@0.3.0-dev.10
 ```
 
 `@dev` installs the Railway-dev gateway/console defaults. A workspace
@@ -155,10 +155,10 @@ Default is Railway **suipay-dev**. `--local` / `target: "local"` is laptop-only.
 
 ```bash
 # Railway suipay-dev (default)
-npx @mysten-incubation/suipay-mcp@0.3.0-dev.1
+npx @mysten-incubation/suipay-mcp@0.3.0-dev.10
 
 # Laptop stack
-npx @mysten-incubation/suipay-mcp@0.3.0-dev.1 --local
+npx @mysten-incubation/suipay-mcp@0.3.0-dev.10 --local
 ```
 
 `SUIPAY_MCP_TARGET=local|dev` selects the same preset. Explicit
@@ -169,12 +169,32 @@ credential is bound yet. After a successful login, `credentials.json`
 Rebind with `suipay_login({ target: "dev" | "local" })` (same key, new consent
 if that stack has no live grant).
 
+### Isolate connection environments
+
+`SUIPAY_MCP_PROFILE` selects a separate agent-held key file at
+`~/.suipay/profiles/<sha256-of-trimmed-profile>/credentials.json`. Unset or
+blank keeps the existing `~/.suipay/credentials.json`. The profile is a local
+storage selector, not an authorization grant or gateway override: set
+`SUIPAY_GATEWAY_URL` and `SUIPAY_CONSOLE_URL` as well. Use the same stable profile
+for the same environment. Login, status, discovery, pay, and logout all use
+that profile; logout removes only its file. Files stay mode `0600` inside a
+`0700` profile directory. Existing files are never copied, rebound, or deleted
+when selecting a profile. A new profile requires fresh owner authorization.
+
+The console's Connect Agent prompt uses its public gateway URL as the profile.
+Install an MCP package that supports profiles before using this prompt, and
+verify the returned login gateway matches the configured environment before
+continuing. An older package may ignore the variable and reuse legacy
+credentials. Stop on a mismatch; do not pay or delete the existing key.
+
 ## Client environment
 
 ```bash
 # Optional. Unset = Railway suipay-dev. --local uses localhost:3000 / 127.0.0.1:4340.
 SUIPAY_GATEWAY_URL=https://gateway.example
 SUIPAY_CONSOLE_URL=https://console.example
+# Optional. Unset/blank retains the legacy credentials file.
+SUIPAY_MCP_PROFILE=https://gateway.example
 SUIPAY_RPC_URL=https://your-testnet-rpc.example
 SUIPAY_NETWORK=testnet
 SUIPAY_MCP_TARGET=dev

package/dist/bin/suipay.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   main
-} from "../chunk-L7OTT6U5.js";
+} from "../chunk-D6LFU4VE.js";
 import {
   logError
-} from "../chunk-WPRFEMBU.js";
+} from "../chunk-RD34GGSA.js";
 
 // src/bin/suipay.ts
 main().catch((err) => {

package/dist/{chunk-L7OTT6U5.js → chunk-D6LFU4VE.js}

@@ -5,7 +5,7 @@ import {
   loadMcpConfig,
   loadPaymentProfile,
   logError
-} from "./chunk-WPRFEMBU.js";
+} from "./chunk-RD34GGSA.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/{chunk-WPRFEMBU.js → chunk-RD34GGSA.js}

@@ -448,6 +448,14 @@ var SERVICE_STATE_TRANSITIONS = Object.freeze([
     to: "payout_change",
     actors: ["system"],
     requires: ["reason_code"]
+  },
+  {
+    id: "T25",
+    dimension: "suspension",
+    from: ["binding_changed"],
+    to: "none",
+    actors: ["system"],
+    requires: ["reason_code"]
   }
 ]);
 
@@ -949,6 +957,70 @@ function createSpendAccountChain(options) {
       });
       return kindBytes(tx);
     },
+    async buildCreatePolicyAndGrantKind(input) {
+      if (!input.policy.targets?.length) {
+        throw new Error("create_spend_policy requires at least one target");
+      }
+      if (!input.policy.totalCap || BigInt(input.policy.totalCap) <= 0n) {
+        throw new Error("create_spend_policy requires a non-zero total_cap");
+      }
+      if (!input.policy.maxPerPayment || BigInt(input.policy.maxPerPayment) <= 0n) {
+        throw new Error("create_spend_policy requires a non-zero max_per_payment");
+      }
+      if (!input.grant.sessionCap || BigInt(input.grant.sessionCap) <= 0n) {
+        throw new Error("create_grant requires a non-zero session_cap");
+      }
+      if (!input.grant.maxPerPayment || BigInt(input.grant.maxPerPayment) <= 0n) {
+        throw new Error("create_grant requires a non-zero max_per_payment");
+      }
+      const tx = new Transaction2();
+      tx.setSender(input.owner);
+      const targetResults = input.policy.targets.map((t) => {
+        const hash = targetHashBytes(t.targetHash);
+        return tx.moveCall({
+          target: target("new_policy_target"),
+          arguments: [
+            tx.pure.vector("u8", Array.from(hash)),
+            tx.pure.address(t.recipient),
+            tx.pure.u64(BigInt(t.maxPerPayment))
+          ]
+        });
+      });
+      const targetsVec = tx.makeMoveVec({
+        type: `${packageId}::${MODULE}::PolicyTarget`,
+        elements: targetResults
+      });
+      const policyExpires = input.policy.expiresAtMs === void 0 || input.policy.expiresAtMs === null ? 0n : BigInt(input.policy.expiresAtMs);
+      const policyIdResult = tx.moveCall({
+        target: target("create_spend_policy"),
+        typeArguments: [input.coinType],
+        arguments: [
+          tx.object(input.poolObjectId),
+          targetsVec,
+          tx.pure.u64(BigInt(input.policy.totalCap)),
+          tx.pure.u64(BigInt(input.policy.maxPerPayment)),
+          tx.pure.u64(policyExpires)
+        ]
+      });
+      const policyIdsVec = tx.makeMoveVec({
+        type: "u64",
+        elements: [policyIdResult]
+      });
+      const grantExpires = input.grant.expiresAtMs === void 0 || input.grant.expiresAtMs === null ? 0n : BigInt(input.grant.expiresAtMs);
+      tx.moveCall({
+        target: target("create_policy_grant"),
+        typeArguments: [input.coinType],
+        arguments: [
+          tx.object(input.poolObjectId),
+          tx.pure.address(input.delegate),
+          tx.pure.option("u64", BigInt(input.grant.sessionCap)),
+          tx.pure.option("u64", BigInt(input.grant.maxPerPayment)),
+          tx.pure.u64(grantExpires),
+          policyIdsVec
+        ]
+      });
+      return kindBytes(tx);
+    },
     async buildPausePolicyKind(input) {
       const tx = new Transaction2();
       tx.setSender(input.owner);
@@ -3846,6 +3918,17 @@ var INDEXER_CODES = {
     user: null,
     logOnly: true
   },
+  "indexer.native_settlement_deferred": {
+    surfaces: ["indexer"],
+    status: null,
+    title: "Native settlement is deferred; holding the checkpoint",
+    paymentState: "not_charged",
+    retry: "after_delay",
+    retryAfterSeconds: 5,
+    nextAction: "retry_later",
+    user: null,
+    logOnly: true
+  },
   "indexer.config_invalid": {
     surfaces: ["indexer"],
     status: null,
@@ -4460,6 +4543,55 @@ var REQUEST_CODES = {
     nextAction: "fix_request",
     user: { title: "Address not found", message: "That web address doesn't exist. Check the spelling and try again." }
   },
+  "request.recipient_changed": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Pay-to address changed while its registry was being checked",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Retry this publish",
+      message: "The payout address changed while its payment registry was being checked. Retry so the current address is checked."
+    }
+  },
+  "request.recipient_registry_invalid": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Payment registry does not verify for this deployment",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Registry does not match",
+      message: "The payout address's payment registry does not match this deployment. Fix it, then publish again."
+    }
+  },
+  "request.recipient_registry_missing": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Pay-to address has no payment registry",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Create a payment registry",
+      message: "This payout address has no payment registry on this network yet. Create it in the seller console, then publish again."
+    }
+  },
+  "request.recipient_registry_unreadable": {
+    surfaces: ["gateway"],
+    status: 503,
+    title: "Payment registry could not be read",
+    paymentState: "not_charged",
+    retry: "after_delay",
+    retryAfterSeconds: 5,
+    nextAction: "retry_later",
+    user: {
+      title: "Registry unread",
+      message: "The payment registry could not be read just now. Wait a moment and try again."
+    }
+  },
   "request.redirect_refused": {
     surfaces: ["console_server", "sdk"],
     status: 422,
@@ -4924,6 +5056,19 @@ var SERVICE_CODES = {
     user: null,
     logOnly: true
   },
+  // A readiness gauge moved while the process is still serving. Not a degraded
+  // boot: `service.config_degraded` is reserved for that, and for the sample
+  // that actually fails closed.
+  "service.readiness": {
+    surfaces: ["gateway"],
+    status: null,
+    title: "Readiness gauge updated",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
   // A best-effort write (a trace event, a receipt, a delivery record) failed.
   // The request it belongs to keeps its answer.
   "service.bookkeeping_failed": {
@@ -5751,6 +5896,11 @@ var CONTEXT_ALLOWLIST = /* @__PURE__ */ new Set([
   "rails",
   "shard",
   "metric",
+  // Gateway readiness gauge. Fixed marks only: 0 or 1, and up, down, skipped, unknown.
+  "ready",
+  "grpc",
+  "enoki",
+  "postgres",
   "alarm",
   "alert",
   "from",
@@ -9849,6 +9999,7 @@ import { bytesToHex as bytesToHex4 } from "@noble/hashes/utils.js";
 
 // src/config.ts
 import { homedir } from "os";
+import { createHash as createHash4 } from "crypto";
 import { join as join2 } from "path";
 import { SuiGrpcClient as SuiGrpcClient2 } from "@mysten/sui/grpc";
 import { normalizeSuiAddress as normalizeSuiAddress7 } from "@mysten/sui/utils";
@@ -9915,6 +10066,11 @@ function configError(detail) {
 }
 function mcpCredentialsPath() {
   const home = process.env.HOME ?? process.env.USERPROFILE ?? homedir();
+  const profile2 = process.env.SUIPAY_MCP_PROFILE?.trim();
+  if (profile2) {
+    const id = createHash4("sha256").update(profile2).digest("hex");
+    return join2(home, ".suipay", "profiles", id, "credentials.json");
+  }
   return join2(home, ".suipay", "credentials.json");
 }
 var MCP_TARGET_PRESETS = {
@@ -13043,6 +13199,13 @@ function receiptChallengeId(receipt) {
   return typeof id === "string" && id.length > 0 ? id : void 0;
 }
 var MCP_SAVE_ERROR = "delivery file was not written; do not call pay again";
+var MCP_EMPTY_DELIVERY = "the seller returned an empty delivery body; no file was written; do not call pay again";
+function deliverySaveError(cause, result) {
+  const code = cause?.code;
+  const reason = typeof code === "string" && /^E[A-Z0-9_]+$/.test(code) ? code : "file-system operation failed";
+  const recovery = result.paid === true && result.txDigest ? `the body was not saved locally and cannot be re-fetched here; transaction digest ${result.txDigest} identifies the settlement for support` : "no confirmed transaction digest is available";
+  return `${MCP_SAVE_ERROR}; cause: ${reason}; ${recovery}`;
+}
 function paidResult(result) {
   if (!isBinaryBody(result.body)) return text(result);
   const body = result.body;
@@ -13052,6 +13215,7 @@ function paidResult(result) {
     byteLength: body.byteLength
   };
   let savedTo;
+  let saveError = MCP_EMPTY_DELIVERY;
   try {
     savedTo = saveDeliveredBody({
       bytes: body.bytes,
@@ -13059,8 +13223,8 @@ function paidResult(result) {
       digest: result.txDigest,
       challengeId: receiptChallengeId(result.receipt)
     });
-  } catch {
-    savedTo = void 0;
+  } catch (cause) {
+    saveError = deliverySaveError(cause, result);
   }
   const payload = savedTo ? {
     savedTo,
@@ -13069,7 +13233,7 @@ function paidResult(result) {
     body: shape
   } : {
     savedTo: null,
-    saveError: MCP_SAVE_ERROR,
+    saveError,
     saveErrorCode: "client.delivery_file_not_saved",
     ...result,
     body: shape
@@ -13819,7 +13983,7 @@ function grantObjectIdFromBootstrap(grants, nowMs) {
   }
   if (live.length === 1) return { kind: "live", grantObjectId: live[0] };
   if (live.length > 1) return { kind: "ambiguous" };
-  if (named > 0) return { kind: "absent" };
+  if (named > 0) return { kind: "expired" };
   if (grants.length > 0) return { kind: "unknown", detail: "delegate grants list was not usable" };
   return { kind: "absent" };
 }
@@ -14266,7 +14430,8 @@ async function suipayLogin(args, cfg, deps = {}) {
         target: target ?? cfg.target,
         delegateAddress: identity.delegateAddress,
         gatewayUrl: endpoints.gatewayUrl,
-        message: "Credentials are already saved for this agent. The existing grant could not be checked just now, so no new sign-in was started and the key file was left unchanged. Retry suipay_login in a moment."
+        nextAction: "poll suipay_login_status to verify authorization before retrying payment",
+        message: "Credentials are already saved for this agent. The existing grant could not be checked just now, so no new sign-in was started and the key file was left unchanged. Poll suipay_login_status in a moment."
       });
     }
   }
@@ -14301,7 +14466,7 @@ async function suipayLogin(args, cfg, deps = {}) {
       ``,
       `1. Use the browser window that just opened, or open the URL above`,
       `2. Connect the owner wallet, create a key, then Authorize on the review step`,
-      `3. Once Connected appears, retry the original request \u2014 credentials at \`~/.suipay/credentials.json\` are picked up on the next tool call`,
+      `3. Poll \`suipay_login_status\` to confirm authorization \u2014 credentials at \`~/.suipay/credentials.json\` are active once approved`,
       ``,
       `_The login link stays valid for 5 minutes. If it expires, call \`suipay_login\` again._`,
       ``,
@@ -14311,11 +14476,113 @@ async function suipayLogin(args, cfg, deps = {}) {
         delegateAddress: identity.delegateAddress,
         connectUrl: url,
         consoleUrl: endpoints.consoleUrl,
-        gatewayUrl: endpoints.gatewayUrl
+        gatewayUrl: endpoints.gatewayUrl,
+        nextAction: "poll suipay_login_status to verify authorization before retrying payment"
       })
     ].join("\n")
   );
 }
+function defaultKeyName(delegateAddress) {
+  const clean = delegateAddress.trim().toLowerCase();
+  const hex = clean.startsWith("0x") ? clean.slice(2) : clean;
+  const prefix = hex.slice(0, 8).padEnd(8, "0");
+  return `agent-${prefix}`;
+}
+function safeRetryDetail(rawDetail) {
+  if (!rawDetail) {
+    return "Grant status could not be verified on chain. Retry shortly.";
+  }
+  let stripped = rawDetail.replace(/https?:\/\/[^\s"'<>]+/gi, "[redacted]");
+  if (stripped.includes("ECONNREFUSED") || stripped.includes("ETIMEDOUT") || stripped.includes("fetch failed")) {
+    return "Network connection to gateway or chain node failed. Retry shortly.";
+  }
+  return stripped;
+}
+var loginStatusCache = /* @__PURE__ */ new Map();
+var DEFAULT_LOGIN_STATUS_RETRY_AFTER_MS = 2e3;
+var DEFAULT_LOGIN_STATUS_CACHE_TTL_MS = 1500;
+async function suipayLoginStatus(_args = {}, cfg, deps = {}) {
+  if (deps.auth) {
+    return mcpFailure(
+      "request.local_only",
+      "suipay_login_status is for local stdio only; hosted /mcp never holds a spendable key"
+    );
+  }
+  const loadKeypair = deps.loadLocalKeypair ?? loadLocalKeypair;
+  const keypair = loadKeypair();
+  if (!keypair) {
+    return text({
+      status: "not_started",
+      nextAction: "run suipay_login"
+    });
+  }
+  const delegateAddress = keypair.toSuiAddress();
+  const stored = loadLocalSigningKeyRecord();
+  const gatewayUrl = stored?.gatewayUrl ?? cfg.gatewayUrl;
+  const cacheKey = `${gatewayUrl}:${delegateAddress}`;
+  const now = Date.now();
+  const cacheTtlMs = deps.cacheTtlMs ?? DEFAULT_LOGIN_STATUS_CACHE_TTL_MS;
+  if (!deps.bypassCache) {
+    const cached = loginStatusCache.get(cacheKey);
+    if (cached && now - cached.timestamp < cacheTtlMs) {
+      return cached.result;
+    }
+  }
+  const checkFn = deps.checkLiveDelegateGrant ?? checkLiveDelegateGrant;
+  let live;
+  try {
+    live = await checkFn({
+      gatewayUrl,
+      delegateAddress,
+      signPersonalMessage: async (bytes) => {
+        const { signature } = await keypair.signPersonalMessage(bytes);
+        return signature;
+      },
+      ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}
+    });
+  } catch (err) {
+    const rawMessage = err instanceof Error ? err.message : String(err);
+    live = {
+      kind: "unknown",
+      detail: rawMessage
+    };
+  }
+  let result;
+  if (live.kind === "live") {
+    result = text({
+      status: "connected",
+      grantObjectId: live.grantObjectId,
+      delegateAddress
+    });
+  } else if (live.kind === "expired") {
+    result = text({
+      status: "expired",
+      delegateAddress,
+      detail: "Grant has expired. Run suipay_login to reconnect.",
+      nextAction: "run suipay_login"
+    });
+  } else if (live.kind === "absent") {
+    result = text({
+      status: "pending",
+      delegateAddress,
+      defaultKeyName: defaultKeyName(delegateAddress)
+    });
+  } else if (live.kind === "ambiguous") {
+    result = text({
+      status: "ambiguous",
+      delegateAddress,
+      detail: "Multiple live grants found for this delegate key. Revoke the duplicate grants and reconnect."
+    });
+  } else {
+    result = text({
+      status: "retry",
+      retryAfterMs: DEFAULT_LOGIN_STATUS_RETRY_AFTER_MS,
+      detail: safeRetryDetail(live.detail)
+    });
+  }
+  loginStatusCache.set(cacheKey, { timestamp: Date.now(), result });
+  return result;
+}
 async function logout(args, _cfg, deps = {}) {
   if (args.force) {
     clearCreds();
@@ -14419,6 +14686,14 @@ var TOOLS = [
       }
     }
   },
+  {
+    name: "suipay_login_status",
+    description: `Check whether the local delegate key has an approved, active spend-account grant, read from the gateway's delegate-grant state. Read-only and pollable (does not mint keys, write credentials, or sign transactions). Returns one of five states: (1) "not_started" if no local key exists yet (call suipay_login first); (2) "connected" if a live grant exists for this local delegate key (note: "connected" means a live grant exists for this delegate key, which may be pre-existing from a prior session); (3) "pending" if the key exists but no grant has been approved yet (includes delegateAddress and a defaultKeyName of format "agent-<first-8-hex-chars-of-address-without-0x>"; note that if the owner already has a live key with this normalized name, creating it may yield 409 CONFLICT); (4) "ambiguous" (terminal) if several live grants exist for this delegate key \u2014 stop polling and revoke the duplicates; (5) "retry" if the status could not be verified (includes retryAfterMs floor and safe detail). Stdio only; hosted /mcp never holds a spendable key.`,
+    inputSchema: {
+      type: "object",
+      properties: {}
+    }
+  },
   {
     name: "suipay_logout",
     description: "Remove the local delegate-key credentials file. Missing file is success. Force clears a corrupt file without printing the seed.",
@@ -14566,6 +14841,14 @@ function createServer2(cfg, auth, trace, options = {}) {
             }
           );
         }
+        case "suipay_login_status":
+          if (auth) {
+            return mcpFailure(
+              "request.local_only",
+              "suipay_login_status is for local stdio only; hosted /mcp never holds a spendable key"
+            );
+          }
+          return await suipayLoginStatus(args, cfg, { auth });
         case "suipay_logout":
           if (auth) {
             return mcpFailure(

package/dist/{http-BFEAurkF.d.ts → http-ZG_iISm1.d.ts}

@@ -865,6 +865,17 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'indexer.native_settlement_deferred': {
+        readonly surfaces: readonly ["indexer"];
+        readonly status: null;
+        readonly title: "Native settlement is deferred; holding the checkpoint";
+        readonly paymentState: "not_charged";
+        readonly retry: "after_delay";
+        readonly retryAfterSeconds: 5;
+        readonly nextAction: "retry_later";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'indexer.config_invalid': {
         readonly surfaces: readonly ["indexer"];
         readonly status: null;
@@ -1267,6 +1278,16 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'service.readiness': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: null;
+        readonly title: "Readiness gauge updated";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'service.bookkeeping_failed': {
         readonly surfaces: readonly ["gateway"];
         readonly status: null;
@@ -3504,6 +3525,55 @@ declare const ERRORS: {
             readonly message: "That web address doesn't exist. Check the spelling and try again.";
         };
     };
+    readonly 'request.recipient_changed': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Pay-to address changed while its registry was being checked";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Retry this publish";
+            readonly message: "The payout address changed while its payment registry was being checked. Retry so the current address is checked.";
+        };
+    };
+    readonly 'request.recipient_registry_invalid': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Payment registry does not verify for this deployment";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Registry does not match";
+            readonly message: "The payout address's payment registry does not match this deployment. Fix it, then publish again.";
+        };
+    };
+    readonly 'request.recipient_registry_missing': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Pay-to address has no payment registry";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Create a payment registry";
+            readonly message: "This payout address has no payment registry on this network yet. Create it in the seller console, then publish again.";
+        };
+    };
+    readonly 'request.recipient_registry_unreadable': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 503;
+        readonly title: "Payment registry could not be read";
+        readonly paymentState: "not_charged";
+        readonly retry: "after_delay";
+        readonly retryAfterSeconds: 5;
+        readonly nextAction: "retry_later";
+        readonly user: {
+            readonly title: "Registry unread";
+            readonly message: "The payment registry could not be read just now. Wait a moment and try again.";
+        };
+    };
     readonly 'request.redirect_refused': {
         readonly surfaces: readonly ["console_server", "sdk"];
         readonly status: 422;
@@ -4912,6 +4982,13 @@ declare const TOOLS: readonly [{
             };
         };
     };
+}, {
+    readonly name: "suipay_login_status";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {};
+    };
 }, {
     readonly name: "suipay_logout";
     readonly description: "Remove the local delegate-key credentials file. Missing file is success. Force clears a corrupt file without printing the seed.";

package/dist/http.d.ts

@@ -1,4 +1,4 @@
-export { I as handleSuipayMcpHttpRequest } from './http-BFEAurkF.js';
+export { I as handleSuipayMcpHttpRequest } from './http-ZG_iISm1.js';
 import '@modelcontextprotocol/sdk/server/index.js';
 import '@mysten/sui/keypairs/ed25519';
 import 'node:crypto';

package/dist/http.js

@@ -1,6 +1,6 @@
 import {
   handleSuipayMcpHttpRequest
-} from "./chunk-WPRFEMBU.js";
+} from "./chunk-RD34GGSA.js";
 export {
   handleSuipayMcpHttpRequest
 };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, O as OfferPublicKeySource, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, k as Offer, M as McpConfig, l as McpAuthContext, m as McpTraceHooks, n as SpendAccountPayDeps, o as createReader } from './http-BFEAurkF.js';
-export { A as AgentHeldResolver, p as AgentHeldSettlement, q as MCP_TARGET_PRESETS, r as McpEnvelope, s as McpEnvelopeEntry, t as McpServerOptions, u as McpTarget, v as McpTraceContext, w as McpTraceRuntime, x as PACKAGE_NAME, y as PreparedPayment, z as SpendAccountPrepareResult, B as SpendAccountPrepareSession, T as TOOLS, E as buildSpendAccountPayKind, F as canonicalMcpRequestId, H as createServer, I as handleSuipayMcpHttpRequest, J as inspectMcpEnvelope, K as loadMcpConfig, L as parseMcpTargetFlag, Q as prepareSpendAccountPayment, R as resetAgentHeldProcessLedger, U as resolveAgentHeldSettlement, V as resolveGrantTarget, W as resolveMcpTarget, Y as sameMcpGateway, Z as traceMcpHttpRequest, _ as verifySpendAccountPayReconstructs } from './http-BFEAurkF.js';
-import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
+import { S as SpendAccountSigningRequest, P as PaidHttpRequest, D as DelegatedKeySigner, G as GetObjectJson, a as DelegatedPayerSession, b as DelegatedPayerConfig, c as DelegatedPayerDeps, d as SpendIntent, e as DelegatedPayResult, f as DelegationScope, C as CodeFor, N as NextAction, g as GrantPolicyBinding, h as PaymentAttemptLedger, O as OfferPublicKeySource, i as DelegatedPayerLog, j as PreparedSettlementTerms, X as X402PayProgress, k as Offer, M as McpConfig, l as McpAuthContext, m as McpTraceHooks, n as SpendAccountPayDeps, o as createReader } from './http-ZG_iISm1.js';
+export { A as AgentHeldResolver, p as AgentHeldSettlement, q as MCP_TARGET_PRESETS, r as McpEnvelope, s as McpEnvelopeEntry, t as McpServerOptions, u as McpTarget, v as McpTraceContext, w as McpTraceRuntime, x as PACKAGE_NAME, y as PreparedPayment, z as SpendAccountPrepareResult, B as SpendAccountPrepareSession, T as TOOLS, E as buildSpendAccountPayKind, F as canonicalMcpRequestId, H as createServer, I as handleSuipayMcpHttpRequest, J as inspectMcpEnvelope, K as loadMcpConfig, L as parseMcpTargetFlag, Q as prepareSpendAccountPayment, R as resetAgentHeldProcessLedger, U as resolveAgentHeldSettlement, V as resolveGrantTarget, W as resolveMcpTarget, Y as sameMcpGateway, Z as traceMcpHttpRequest, _ as verifySpendAccountPayReconstructs } from './http-ZG_iISm1.js';
+import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 import '@modelcontextprotocol/sdk/server/index.js';
 import 'node:crypto';
@@ -65,6 +65,8 @@ declare function loadLocalSigner(): {
     signTransaction: (txBytes: string) => Promise<string>;
     signPersonalMessage: (message: Uint8Array) => Promise<string>;
 } | null;
+/** Ed25519 keypair from the persisted seed. Null when this process holds no key. */
+declare function loadLocalKeypair(): Ed25519Keypair | null;
 
 /**
  * Client-side completion of an MCP prepared payment.
@@ -581,6 +583,10 @@ interface ToolDeps {
     createPayer?: typeof createPayer;
     createReader?: typeof createReader;
     startStdioLogin?: typeof startStdioLogin;
+    loadLocalKeypair?: typeof loadLocalKeypair;
+    checkLiveDelegateGrant?: typeof checkLiveDelegateGrant;
+    bypassCache?: boolean;
+    cacheTtlMs?: number;
 }
 declare function pay(args: {
     url: string;
@@ -591,6 +597,25 @@ declare function pay(args: {
     recipient?: unknown;
     maxAmount?: unknown;
 }, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;
+type LiveGrantCheck = {
+    kind: 'live';
+    grantObjectId: string;
+} | {
+    kind: 'ambiguous';
+} | {
+    kind: 'absent';
+} | {
+    kind: 'expired';
+} | {
+    kind: 'unknown';
+    detail: string;
+};
+declare function checkLiveDelegateGrant(args: {
+    gatewayUrl: string;
+    delegateAddress: string;
+    signPersonalMessage: (message: Uint8Array) => Promise<string>;
+    fetchImpl?: typeof fetch;
+}): Promise<LiveGrantCheck>;
 declare function receipts(args: {
     challengeId?: string;
 }, cfg: McpConfig, deps?: ToolDeps): Promise<ToolResult>;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   loadBootProfile,
   main
-} from "./chunk-L7OTT6U5.js";
+} from "./chunk-D6LFU4VE.js";
 import {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,
@@ -26,7 +26,7 @@ import {
   settlePreparedMcpPayment,
   traceMcpHttpRequest,
   verifySpendAccountPayReconstructs
-} from "./chunk-WPRFEMBU.js";
+} from "./chunk-RD34GGSA.js";
 export {
   MCP_TARGET_PRESETS,
   PACKAGE_NAME,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mysten-incubation/suipay-mcp",
-  "version": "0.3.0-dev.1",
+  "version": "0.3.0-dev.10",
   "type": "module",
   "description": "SuiPay MCP — pay MPP-gated APIs from a spend-account grant with an agent-held delegate key.",
   "repository": {