@nonagon-link/mcp 0.3.3 → 0.3.4

package/README.md

@@ -129,7 +129,7 @@ Add to your MCP client config (e.g. `.claude/settings.json` or `claude_desktop_c
   "mcpServers": {
     "nonagon-link": {
       "command": "npx",
-      "args": ["-y", "--ignore-scripts", "@nonagon-link/mcp@0.3.3"],
+      "args": ["-y", "--ignore-scripts", "@nonagon-link/mcp@0.3.4"],
       "env": {
         "NONAGON_PRIVATE_KEY": "<Base58 Solana secret key>",
         "NONAGON_LINK_BASE_URL": "https://api.nnglink.ai",
@@ -140,7 +140,7 @@ Add to your MCP client config (e.g. `.claude/settings.json` or `claude_desktop_c
 }
 ```
 
-> **Always pin an exact version** (`@nonagon-link/mcp@0.3.3`). Never use an unversioned `@nonagon-link/mcp` — your private key is passed to the process environment, so an unpinned install would expose it to whatever the latest published version is. `--ignore-scripts` additionally prevents dependency install scripts from running with your environment.
+> **Always pin an exact version** (`@nonagon-link/mcp@0.3.4`). Never use an unversioned `@nonagon-link/mcp` — your private key is passed to the process environment, so an unpinned install would expose it to whatever the latest published version is. `--ignore-scripts` additionally prevents dependency install scripts from running with your environment.
 >
 > **Set `NONAGON_PAY_TO`** to the NONAGON LINK Solana platform wallet (see [NONAGON LINK payees](#nonagon-link-payees)) — do not copy `payTo` from an untrusted 402. Unset = every **Solana USDC** payment is refused. EVM payments (JPYC, EVM USDC) are allowed separately by `NONAGON_EVM_PAY_TO`; unset, every EVM payment is refused.
 
@@ -158,7 +158,7 @@ The current values are also listed at https://nnglink.ai/docs/mcp.
 For stricter isolation, install once and reference the binary directly:
 
 ```bash
-npm install -g @nonagon-link/mcp@0.3.3
+npm install -g @nonagon-link/mcp@0.3.4
 ```
 
 ```json

package/dist/server.js

@@ -1577,16 +1577,27 @@ async function pinnedFetch(input, options) {
     },
     maxRedirections: 0
   });
+  return fetchWithPinnedAgent(input, fetchOptions, agent, redirectMode);
+}
+async function fetchWithPinnedAgent(input, fetchOptions, agent, redirectMode) {
+  const release = () => {
+    agent.close().catch(() => {
+    });
+  };
+  let response;
   try {
-    return await fetch(input, {
+    response = await fetch(input, {
       ...fetchOptions,
       // @ts-expect-error undici dispatcher — Node.js の fetch は undici ベースで dispatcher をサポート
       dispatcher: agent,
       redirect: redirectMode
     });
-  } finally {
-    await agent.close();
+  } catch (error) {
+    release();
+    throw error;
   }
+  release();
+  return response;
 }
 
 // ../../apps/nonagon_link/src/mcp/lib/pinnedFetchAdapter.ts
@@ -1629,12 +1640,41 @@ async function buildPinnedFetchArgs(input, init) {
   }
   return { url: String(input), init };
 }
+var MAX_402_BODY_BYTES = 65536;
+async function bound402Body(response) {
+  const reader = response.body?.getReader();
+  if (!reader) return response;
+  const chunks = [];
+  let total = 0;
+  try {
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      total += value.length;
+      if (total > MAX_402_BODY_BYTES) throw new Error("UPSTREAM_402_BODY_TOO_LARGE");
+      chunks.push(value);
+    }
+  } catch (err) {
+    await reader.cancel().catch(() => {
+    });
+    throw err;
+  }
+  const headers = new Headers(response.headers);
+  headers.delete("content-length");
+  headers.delete("content-encoding");
+  return new Response(Buffer.concat(chunks), {
+    status: response.status,
+    statusText: response.statusText,
+    headers
+  });
+}
 var pinnedFetchAdapter = async (input, init) => {
   const resolved = await buildPinnedFetchArgs(input, init);
-  return pinnedFetch(resolved.url, {
+  const response = await pinnedFetch(resolved.url, {
     ...resolved.init,
     dnsResolver: resolved.init?.dnsResolver ?? resolverWithGetaddrinfoFallback
   });
+  return response.status === 402 ? bound402Body(response) : response;
 };
 
 // ../../apps/nonagon_link/src/mcp/lib/logger.ts
@@ -1752,6 +1792,13 @@ import Ajv2 from "ajv";
 import addFormats2 from "ajv-formats";
 import { decodePaymentRequiredHeader } from "@x402/core/http";
 
+// ../../apps/nonagon_link/src/lib/facilitator/paymentOutcome.ts
+var registry = globalThis;
+var { evidence, bodies } = registry.__nonagonPaymentOutcome ??= {
+  evidence: /* @__PURE__ */ new WeakMap(),
+  bodies: /* @__PURE__ */ new WeakMap()
+};
+
 // ../../apps/nonagon_link/src/lib/discovery/bazaar.ts
 import Ajv from "ajv";
 import addFormats from "ajv-formats";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nonagon-link/mcp",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "NONAGON LINK MCP server — let AI agents discover and pay for APIs with USDC (x402)",
   "license": "Apache-2.0",
   "type": "module",