@quackai/q402-mcp 0.8.15 → 0.8.17

package/dist/index.js

@@ -209,9 +209,86 @@ function isLiveModeFor(resolved) {
 }
 var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 
+// package.json
+var package_default = {
+  name: "@quackai/q402-mcp",
+  version: "0.8.17",
+  description: "MCP server for Q402 \u2014 gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
+  mcpName: "io.github.bitgett/q402-mcp",
+  keywords: [
+    "mcp",
+    "model-context-protocol",
+    "claude",
+    "claude-desktop",
+    "claude-code",
+    "codex",
+    "openai-codex",
+    "cline",
+    "q402",
+    "x402",
+    "stablecoin",
+    "usdc",
+    "usdt",
+    "rlusd",
+    "ripple",
+    "gasless",
+    "eip-7702",
+    "payments",
+    "ai-agents"
+  ],
+  type: "module",
+  main: "dist/index.js",
+  bin: {
+    "q402-mcp": "dist/index.js"
+  },
+  files: [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  engines: {
+    node: ">=18.18"
+  },
+  scripts: {
+    build: "tsup",
+    dev: "tsup --watch",
+    lint: "tsc --noEmit",
+    prepublishOnly: "npm run lint && npm run build",
+    start: "node dist/index.js"
+  },
+  dependencies: {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    ethers: "^6.16.0",
+    zod: "^3.23.8"
+  },
+  devDependencies: {
+    "@types/node": "^20.11.0",
+    tsup: "^8.3.0",
+    typescript: "^5.5.0"
+  },
+  repository: {
+    type: "git",
+    url: "git+https://github.com/bitgett/q402-mcp.git"
+  },
+  homepage: "https://q402.quackai.ai/claude",
+  bugs: {
+    url: "https://github.com/bitgett/q402-mcp/issues"
+  },
+  license: "Apache-2.0",
+  author: "David Lee <davidlee@quackai.ai>",
+  publishConfig: {
+    access: "public"
+  },
+  overrides: {
+    ws: "^8.20.1",
+    qs: "^6.15.2",
+    hono: "^4.12.21"
+  }
+};
+
 // src/version.ts
-var PACKAGE_NAME = "@quackai/q402-mcp";
-var PACKAGE_VERSION = "0.8.15";
+var PACKAGE_NAME = package_default.name;
+var PACKAGE_VERSION = package_default.version;
 
 // src/tools/quote.ts
 import { z } from "zod";
@@ -1092,6 +1169,53 @@ async function runPay(input) {
     }
     const data = await resp.json().catch(() => ({}));
     const txHash = data.txHash ?? "";
+    const isSplit = data.split === true || Array.isArray(data.legs);
+    if (isSplit) {
+      const legs = Array.isArray(data.legs) ? data.legs : [];
+      const status = data.status;
+      const replayed = data.replayed === true;
+      const settledCount = typeof data.settled === "number" ? data.settled : legs.filter((l) => typeof l.txHash === "string" && l.txHash.length > 0).length;
+      const failedCount = typeof data.failed === "number" ? data.failed : legs.filter((l) => !l.txHash).length;
+      const isComplete = status === "complete" && failedCount === 0;
+      const isPartial = status === "partial" || resp.status === 207;
+      const success2 = isComplete;
+      const message2 = "message" in data ? data.message : "error" in data ? data.error : void 0;
+      return {
+        result: {
+          success: success2,
+          sandbox: false,
+          // Top-level txHash mirrors the server's (first settled leg). Per-leg
+          // hashes in `legs` remain authoritative.
+          txHash,
+          tokenAmount: input.amount,
+          token: input.token,
+          chain: chain.key,
+          method: "eip7702",
+          split: true,
+          legs,
+          settledLegs: settledCount,
+          failedLegs: failedCount,
+          ...isPartial && !isComplete ? { partial: true } : {},
+          ...replayed ? { replayed: true } : {},
+          explorerUrl: txHash ? void 0 : null
+        },
+        guardsApplied: [
+          ...guardsApplied,
+          "wallet=agentic-server",
+          "mode=live",
+          "settlement=split",
+          `split_settled=${settledCount}`,
+          `split_failed=${failedCount}`,
+          `split_status=${status ?? "unknown"}`,
+          ...replayed ? ["replayed=true"] : [],
+          ...message2 ? [`server_message=${message2}`] : []
+        ],
+        senderWallet,
+        ...isPartial && !isComplete ? {
+          setupHint: `Split PARTIALLY settled: ${settledCount} leg(s) landed on-chain, ${failedCount} did NOT. The settled legs already moved funds \u2014 do NOT blindly retry the whole payment (a retry replays only the unsettled intent, it will not double-pay the settled legs). Inspect legs[] for which recipients received funds and which still need handling.`
+        } : {}
+      };
+    }
     const isPending = resp.status === 202 || data.pending === true || data.status === "processing";
     if (isPending) {
       const retryAfter = typeof data.retryAfterSec === "number" ? data.retryAfterSec : 5;
@@ -2950,7 +3074,10 @@ var BridgeSendInputSchema = z11.object({
   walletId: z11.string().optional().describe("Agentic Wallet ID (from q402_agentic_info). Optional \u2014 defaults to the owner's default Agent Wallet."),
   feeToken: z11.enum(["LINK", "native"]).optional().describe("Fee token. Defaults to LINK (~10% cheaper than native)."),
   sandbox: z11.boolean().optional().describe("Sandbox mode (default true). Set to false for a live on-chain bridge."),
-  maxFeeRaw: z11.string().regex(/^\d+$/).optional().describe("Optional client-side fee cap in raw 18-dec wei. Server still clamps to its 10% slippage ceiling; clients may LOWER but not RAISE.")
+  maxFeeRaw: z11.string().regex(/^\d+$/).optional().describe("Optional client-side fee cap in raw 18-dec wei. Server still clamps to its 10% slippage ceiling; clients may LOWER but not RAISE."),
+  confirm: z11.boolean().optional().describe(
+    "MUST be true to fire a LIVE bridge (ignored in sandbox). Set this only after the user has explicitly approved this exact bridge (src, dst, amount, feeToken) in the conversation. When omitted or false on a live call the tool previews the action and does NOT move any funds. Never set confirm:true on the user's behalf without approval."
+  )
 }).refine((d) => d.src !== d.dst, {
   // Local Zod rejection saves a network round-trip + a Q402 backend log
   // entry. The bridge route also rejects same-chain bridges but the
@@ -2960,7 +3087,7 @@ var BridgeSendInputSchema = z11.object({
 });
 var BRIDGE_SEND_TOOL = {
   name: "q402_bridge_send",
-  description: "Execute a Chainlink CCIP USDC bridge across the 3-chain triangle (eth/avax/arbitrum) on behalf of the user's server-managed Agentic Wallet (Mode C). Sandbox-by-default \u2014 returns a synthetic messageId unless `sandbox: false` is passed AND Q402_ENABLE_REAL_PAYMENTS=1 AND a live Multichain API key is configured. The server signs ccipSend with the Agent Wallet's encrypted PK, auto-funds source-chain gas from the user's Gas Tank, and debits both the auto- fund cost and the CCIP fee per the bridge's settled receipt. Recommended flow: q402_bridge_quote first \u2192 confirm cost with the user \u2192 q402_bridge_send with sandbox: false. Live mode needs a Multichain subscription; trial keys are rejected. If the bridge returns AGENT_WALLET_DELEGATED, run q402_clear_delegation on the source chain first.",
+  description: "Execute a Chainlink CCIP USDC bridge across the 3-chain triangle (eth/avax/arbitrum) on behalf of the user's server-managed Agentic Wallet (Mode C). Sandbox-by-default \u2014 returns a synthetic messageId unless `sandbox: false` is passed AND Q402_ENABLE_REAL_PAYMENTS=1 AND a live Multichain API key is configured. The server signs ccipSend with the Agent Wallet's encrypted PK, auto-funds source-chain gas from the user's Gas Tank, and debits both the auto- fund cost and the CCIP fee per the bridge's settled receipt. REQUIRES CONFIRMATION \u2014 like q402_pay and q402_yield_deposit, a LIVE bridge (sandbox: false) refuses to execute unless confirm: true is set. Call it first WITHOUT confirm to get a one-line preview (src, dst, amount, fee token); show that to the user, get explicit approval, THEN re-call with sandbox: false AND confirm: true. Never set confirm: true on the user's behalf. Recommended flow: q402_bridge_quote first \u2192 preview + confirm cost with the user \u2192 q402_bridge_send with sandbox: false, confirm: true. Live mode needs a Multichain subscription; trial keys are rejected. If the bridge returns AGENT_WALLET_DELEGATED, run q402_clear_delegation on the source chain first.",
   inputSchema: {
     type: "object",
     properties: {
@@ -2996,6 +3123,10 @@ var BRIDGE_SEND_TOOL = {
         type: "string",
         pattern: "^[0-9]+$",
         description: "Optional client-side fee cap in raw 18-dec wei."
+      },
+      confirm: {
+        type: "boolean",
+        description: "MUST be true to fire a LIVE bridge (ignored in sandbox) \u2014 set only after the user explicitly approved this exact bridge in chat. Omit (or false) on a live call to preview without moving funds."
       }
     },
     required: ["src", "dst", "amount"]
@@ -3025,6 +3156,16 @@ async function runBridgeSend(input) {
       }]
     };
   }
+  if (input.confirm !== true) {
+    const walletDesc = typeof input.walletId === "string" && input.walletId.length > 0 ? `wallet ${input.walletId.toLowerCase()}` : "your default Agent Wallet";
+    const fee = input.feeToken === "native" ? "native" : "LINK";
+    return {
+      content: [{
+        type: "text",
+        text: `Will bridge ${input.amount} raw USDC units from ${input.src} \u2192 ${input.dst} via Chainlink CCIP from ${walletDesc} (fee paid in ${fee}). This MOVES FUNDS on-chain. Re-call with confirm:true to execute.`
+      }]
+    };
+  }
   const resolved = resolveApiKey(input.src, "multichain");
   if (!resolved.apiKey) {
     return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.15",
+  "version": "0.8.17",
   "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [