@quackai/q402-mcp 0.8.12 → 0.8.14

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 
 // src/version.ts
 var PACKAGE_NAME = "@quackai/q402-mcp";
-var PACKAGE_VERSION = "0.8.12";
+var PACKAGE_VERSION = "0.8.14";
 
 // src/tools/quote.ts
 import { z } from "zod";
@@ -873,7 +873,7 @@ When MORE THAN ONE wallet is configured in the user's environment, you MUST ask
     `Server-managed Agent Wallet only (walletMode="agentic-server"). Lowercased Agent Wallet address selecting which of the user's wallets to spend from when they hold more than one (max 10 per owner). Omit to use the user's default wallet. Ignored for walletMode="eoa" and "agentic-local" since those modes carry their own signing key.`
   ),
   confirm: z2.literal(true).describe(
-    "MUST be true. Prove the user explicitly approved this exact recipient and amount in the conversation right before this tool was called. Setting this to true on behalf of the user without confirmation is a violation of the tool contract."
+    "MUST be true. Prove the user explicitly approved this exact payment in the conversation right before this tool was called. When hookParams is set you MUST confirm what it actually does to the money: the split RECIPIENTS and their shares (funds go to those addresses, not `to`), and any oracle condition gating the settlement \u2014 not just the top-level recipient and amount. Setting this to true on behalf of the user without that confirmation is a violation of the tool contract."
   ),
   hookParams: z2.object({
     recipientAgentId: z2.string().optional().describe("ReputationGate: the recipient's ERC-8004 agent id."),
@@ -1002,6 +1002,11 @@ async function runPay(input) {
   maxAmountGuard(input.amount, CONFIG.maxAmountPerCallUsd);
   guardsApplied.push(`max_amount<=${CONFIG.maxAmountPerCallUsd}`);
   recipientGuard(input.to, CONFIG.allowedRecipients);
+  if (input.hookParams?.splits) {
+    for (const leg of input.hookParams.splits) {
+      recipientGuard(leg.recipient, CONFIG.allowedRecipients);
+    }
+  }
   if (CONFIG.allowedRecipients.length > 0) {
     guardsApplied.push(`recipient_allowlist[${CONFIG.allowedRecipients.length}]`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.12",
+  "version": "0.8.14",
   "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [