@quackai/q402-mcp 0.3.6 → 0.3.8

package/README.md

@@ -5,9 +5,9 @@
 [![npm](https://img.shields.io/npm/v/@quackai/q402-mcp.svg)](https://www.npmjs.com/package/@quackai/q402-mcp)
 [![license](https://img.shields.io/npm/l/@quackai/q402-mcp.svg)](./LICENSE)
 
-> **🎟️ Free trial available (2026-05-13 → 2026-05-20)** — 2,000 gasless transactions on BNB Chain (USDC + USDT), 30-day window, no card. One wallet signature: <https://q402.quackai.ai>.
+> **🎟️ Free trial available (2026-05-19 → 2026-06-30)** — 2,000 gasless transactions on BNB Chain (USDC + USDT), 30-day window, no card. One wallet signature: <https://q402.quackai.ai>.
 >
-> **BNB-focus sprint window:** while the sprint is on, `q402_pay` accepts `chain: "bnb"` with `token: "USDC"` or `"USDT"` only; the other 6 chains and RLUSD return after the sprint. `q402_quote` is narrowed to BNB Chain accordingly. Source-of-truth flag: [`feature-flags.ts`](https://github.com/bitgett/Q402-Institutional/blob/feat/bnb-focus-sprint/app/lib/feature-flags.ts).
+> **Trial-scope policy:** API keys minted under the free-trial program (`plan: "trial"`) are restricted to BNB Chain with USDC/USDT — server-side enforcement, returns `403 TRIAL_BNB_ONLY` otherwise. **Paid API keys see the full 7-chain matrix at all times.**
 
 Claude can now reason about stablecoin payments end to end — quote a transfer across 7 chains, pick the cheapest route, and (optionally) settle the transaction over [Q402](https://q402.quackai.ai)'s EIP-7702 relayer infrastructure. The recipient receives the full amount; the sender pays $0 in gas.
 

package/dist/index.js

@@ -298,12 +298,6 @@ var TRANSFER_AUTH_TYPES = {
     { name: "deadline", type: "uint256" }
   ]
 };
-var AUTHORIZATION_TYPES = {
-  Authorization: [
-    { name: "address", type: "address" },
-    { name: "nonce", type: "uint256" }
-  ]
-};
 function toRawAmount(amount, decimals) {
   if (typeof amount !== "string" || amount.trim() === "") {
     throw new Error('amount must be a non-empty decimal string (e.g. "5.00")');
@@ -325,16 +319,19 @@ function toRawAmount(amount, decimals) {
   return raw.toString();
 }
 async function signAuthorization(wallet, args) {
-  const domain = { name: "EIP7702Authorization", version: "1", chainId: args.chainId };
-  const sig = await wallet.signTypedData(domain, AUTHORIZATION_TYPES, {
+  const auth = await wallet.authorize({
+    chainId: args.chainId,
     address: args.address,
     nonce: args.nonce
   });
-  const r = sig.slice(0, 66);
-  const s = "0x" + sig.slice(66, 130);
-  const v = parseInt(sig.slice(130, 132), 16);
-  const yParity = v === 27 ? 0 : 1;
-  return { chainId: args.chainId, address: args.address, nonce: args.nonce, yParity, r, s };
+  return {
+    chainId: Number(auth.chainId),
+    address: auth.address,
+    nonce: Number(auth.nonce),
+    yParity: auth.signature.yParity,
+    r: auth.signature.r,
+    s: auth.signature.s
+  };
 }
 var Q402NodeClient = class _Q402NodeClient {
   opts;
@@ -776,7 +773,7 @@ var RECEIPT_TOOL = {
 
 // src/index.ts
 var PACKAGE_NAME = "@quackai/q402-mcp";
-var PACKAGE_VERSION = "0.3.6";
+var PACKAGE_VERSION = "0.3.8";
 function jsonText(value) {
   return { type: "text", text: JSON.stringify(value, null, 2) };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.3.6",
+  "version": "0.3.8",
   "description": "MCP server for Q402 — gasless USDC, USDT, and RLUSD payments across 7 EVM chains, callable directly from Claude Desktop and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [