@nullpay/mcp 1.0.4 → 1.0.6

package/dist/aleo.js

@@ -24,7 +24,8 @@ const crypto_1 = __importDefault(require("crypto"));
 const esm_1 = require("./esm");
 const env_1 = require("./env");
 exports.PROGRAM_ID = 'zk_pay_proofs_privacy_v22.aleo';
-const FREEZELIST_PROGRAM_ID = 'test_usdcx_freezelist.aleo';
+const USDCX_FREEZELIST_PROGRAM_ID = 'test_usdcx_freezelist.aleo';
+const USAD_FREEZELIST_PROGRAM_ID = 'test_usad_freezelist.aleo';
 const EXPLORER_BASE = 'https://api.explorer.provable.com/v1';
 const MAPPING_BASE = 'https://api.provable.com/v2/testnet/program';
 const SCANNER_BASE = 'https://api.provable.com/scanner/testnet';
@@ -548,43 +549,54 @@ async function findSpendableRecord(session, programFilter, recordName, amountReq
     }
     return null;
 }
-async function getFreezeListIndex(index) {
+function getFreezeListProgramId(tokenProgram) {
+    if (tokenProgram === 'test_usdcx_stablecoin.aleo') {
+        return USDCX_FREEZELIST_PROGRAM_ID;
+    }
+    if (tokenProgram === 'test_usad_stablecoin.aleo') {
+        return USAD_FREEZELIST_PROGRAM_ID;
+    }
+    return null;
+}
+async function getFreezeListIndex(programId, index) {
     const { AleoNetworkClient } = await (0, esm_1.dynamicImport)('@provablehq/sdk');
     const client = new AleoNetworkClient(EXPLORER_BASE);
-    const value = await client.getProgramMappingValue(FREEZELIST_PROGRAM_ID, 'freeze_list_index', `${index}u32`);
+    const value = await client.getProgramMappingValue(programId, 'freeze_list_index', `${index}u32`);
     return value ? value.replace(/"/g, '') : null;
 }
-async function generateFreezeListProof(targetIndex = 1, occupiedLeafValue) {
-    const { Plaintext } = await (0, esm_1.dynamicImport)('@provablehq/sdk');
-    const { Poseidon4 } = await (0, esm_1.dynamicImport)('@provablehq/wasm');
-    const hasher = new Poseidon4();
-    const emptyHashes = [];
-    let currentEmpty = '0field';
-    const hashFields = (values) => {
-        const plaintext = Plaintext.fromString(`[${values.join(', ')}]`);
-        return hasher.hash(plaintext.toFields()).toString();
-    };
-    for (let level = 0; level < 16; level += 1) {
-        emptyHashes.push(currentEmpty);
-        currentEmpty = hashFields([currentEmpty, currentEmpty]);
-    }
-    let currentHash = '0field';
-    let currentIndex = targetIndex;
-    const proofSiblings = [];
-    for (let level = 0; level < 16; level += 1) {
-        const isLeft = currentIndex % 2 === 0;
-        const siblingIndex = isLeft ? currentIndex + 1 : currentIndex - 1;
-        let siblingHash = emptyHashes[level];
-        if (level === 0 && siblingIndex === 0 && occupiedLeafValue) {
-            siblingHash = occupiedLeafValue;
+async function getFreezeListCount(programId) {
+    const response = await fetch(`${MAPPING_BASE}/${programId}/mapping/freeze_list_last_index/true`);
+    if (!response.ok) {
+        return 0;
+    }
+    const value = await response.json();
+    if (!value) {
+        return 0;
+    }
+    const parsed = Number.parseInt(String(value).replace(/u32|["']/g, ''), 10);
+    return Number.isFinite(parsed) ? parsed + 1 : 0;
+}
+async function generateFreezeListProof(ownerAddress, tokenProgram) {
+    const freezeListProgramId = getFreezeListProgramId(tokenProgram);
+    if (!freezeListProgramId) {
+        throw new Error(`Unsupported freeze list program for ${tokenProgram}`);
+    }
+    const { SealanceMerkleTree } = await (0, esm_1.dynamicImport)('@provablehq/sdk');
+    const count = Math.max(1, await getFreezeListCount(freezeListProgramId));
+    const addresses = [];
+    for (let index = 0; index < count; index += 1) {
+        const address = await getFreezeListIndex(freezeListProgramId, index);
+        if (address) {
+            addresses.push(address);
         }
-        proofSiblings.push(siblingHash);
-        currentHash = isLeft
-            ? hashFields([currentHash, siblingHash])
-            : hashFields([siblingHash, currentHash]);
-        currentIndex = Math.floor(currentIndex / 2);
     }
-    return `{ siblings: [${proofSiblings.join(', ')}], leaf_index: ${targetIndex}u32 }`;
+    const sealance = new SealanceMerkleTree();
+    const leaves = sealance.generateLeaves(addresses, 16);
+    const tree = sealance.buildTree(leaves);
+    const [leftIdx, rightIdx] = sealance.getLeafIndices(tree, ownerAddress);
+    const proofLeft = sealance.getSiblingPath(tree, leftIdx, 16);
+    const proofRight = sealance.getSiblingPath(tree, rightIdx, 16);
+    return sealance.formatMerkleProof([proofLeft, proofRight]);
 }
 async function createSponsoredPaymentAuthorization(args) {
     const session = await getScannerSession(args.walletPrivateKey);
@@ -602,14 +614,12 @@ async function createSponsoredPaymentAuthorization(args) {
     }
     let proofsInput;
     if (paymentMode.tokenProgram !== 'credits.aleo') {
-        const firstIndex = await getFreezeListIndex(0);
-        let index0Field;
-        if (firstIndex) {
-            const { Address } = await (0, esm_1.dynamicImport)('@provablehq/wasm');
-            index0Field = Address.from_string(firstIndex).toGroup().toXCoordinate().toString();
+        const ownerMatch = record.match(/owner\s*:\s*([a-z0-9]+)/i);
+        const ownerAddress = ownerMatch?.[1];
+        if (!ownerAddress || !ownerAddress.startsWith('aleo')) {
+            throw new Error(`Failed to read token record owner for ${paymentMode.tokenProgram}.`);
         }
-        const proof = await generateFreezeListProof(1, index0Field);
-        proofsInput = `[${proof}, ${proof}]`;
+        proofsInput = await generateFreezeListProof(ownerAddress, paymentMode.tokenProgram);
     }
     const { AleoKeyProvider, AleoNetworkClient, NetworkRecordProvider, ProgramManager } = await (0, esm_1.dynamicImport)('@provablehq/sdk');
     const keyProvider = new AleoKeyProvider();

package/dist/setup.js

@@ -33,7 +33,7 @@ function buildServerEntry(answers) {
     const env = {
         NULLPAY_MAIN_ADDRESS: answers.address,
         NULLPAY_MAIN_PRIVATE_KEY: answers.privateKey,
-        NULLPAY_MAIN_PASSWORD: answers.password,
+        ...(answers.password ? { NULLPAY_MAIN_PASSWORD: answers.password } : {}),
     };
     if (process.platform === 'win32') {
         return {
@@ -79,7 +79,7 @@ function writeMcpConfig(configPath, serverName, entry) {
 }
 async function askChoice(rl) {
     process_1.stdout.write('Where do you want to install NullPay MCP?\n');
-    process_1.stdout.write('1. Claude Code\n');
+    process_1.stdout.write('1. Claude Code (beta version)\n');
     process_1.stdout.write('2. Claude Desktop\n');
     process_1.stdout.write('3. Cancel\n');
     while (true) {
@@ -102,11 +102,14 @@ async function askRequired(rl, label) {
         process_1.stdout.write(`${label} is required.\n`);
     }
 }
+async function askOptional(rl, label) {
+    return (await rl.question(`${label}: `)).trim();
+}
 async function collectAnswers(rl) {
     process_1.stdout.write('\nNullPay will configure Claude automatically. You only need to provide your wallet credentials here.\n\n');
     const address = await askRequired(rl, 'Main wallet address');
     const privateKey = await askRequired(rl, 'Main wallet private key');
-    const password = await askRequired(rl, 'NullPay password');
+    const password = await askOptional(rl, 'NullPay password (optional if you have it backed up in your records)');
     return {
         address,
         privateKey,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@nullpay/mcp",
-    "version": "1.0.4",
+    "version": "1.0.6",
     "description": "NullPay MCP server and Claude setup wizard for conversational payment flows",
     "type": "commonjs",
     "main": "dist/server.js",