@quackai/q402-mcp 0.8.33 → 0.8.34

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 // package.json
 var package_default = {
   name: "@quackai/q402-mcp",
-  version: "0.8.33",
+  version: "0.8.34",
   description: "MCP server for Q402 \u2014 gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   mcpName: "io.github.bitgett/q402-mcp",
   keywords: [
@@ -1424,6 +1424,10 @@ var PAY_TOOL = {
         const: true,
         description: "MUST be true and only set after the user has confirmed this exact payment in chat. When hookParams is set, confirm what it does to the money too: the split RECIPIENTS and shares (funds go there, not `to`) and any oracle condition gating settlement \u2014 not just the top-level recipient + amount."
       },
+      consentToken: {
+        type: "string",
+        description: "Two-phase consent. Omit on the FIRST call to get a needs_confirmation preview plus a consentToken (no funds move); re-call with the SAME args plus this token to execute. Re-derived from the payment params, so a previewed payment cannot be swapped for a different one. confirm:true alone does NOT send."
+      },
       hookParams: {
         type: "object",
         description: "Q402 Hook params (server-managed Agent Wallet only). recipientAgentId (ReputationGate), condition (ConditionalOracle price/time gate), or splits (MultiPayeeSplit fan-out, bps sum 10000).",
@@ -1960,6 +1964,10 @@ TWO-PHASE CONSENT: confirm:true alone does NOT send. Call this tool first WITHOU
         type: "boolean",
         const: true,
         description: "MUST be true and only set after the user has confirmed the entire batch in chat."
+      },
+      consentToken: {
+        type: "string",
+        description: "Two-phase consent. Omit on the FIRST call to get a needs_confirmation preview of every recipient + amount plus a consentToken (no funds move); re-call with the SAME args plus this token to execute. Re-derived from the batch, so the previewed batch cannot be swapped. confirm:true alone does NOT send."
       }
     },
     required: ["chain", "token", "recipients", "confirm"],
@@ -4984,10 +4992,16 @@ async function runRequestPay(input) {
     to: req.recipient.toLowerCase(),
     amount: req.amount,
     token: req.token,
-    chain: req.chain
+    chain: req.chain,
+    // Bind the funding source too — the user is consenting to pay from THIS
+    // wallet, so swapping walletId after the preview must void consent. Mirrors
+    // q402_pay's consentIntent. Empty string = the server-default Agent Wallet
+    // (resolved at settle time); pinning a specific wallet re-triggers consent.
+    wid: (input.walletId ?? "").toLowerCase()
   };
   const consent = checkConsent(consentIntent, input.consentToken);
   if (!consent.ok) {
+    const fromNote = input.walletId ? ` from wallet ${input.walletId}` : "";
     return {
       ok: false,
       status: "needs_consent",
@@ -4998,7 +5012,7 @@ async function runRequestPay(input) {
       message: "Relay this preview to the user and get an explicit yes, then re-call with the same requestId plus consentToken. No funds moved.",
       needsConsent: {
         status: "needs_confirmation",
-        preview: `Pay ${req.amount} ${req.token} to ${req.recipient} on ${req.chain} (request ${req.id}).`,
+        preview: `Pay ${req.amount} ${req.token} to ${req.recipient} on ${req.chain}${fromNote} (request ${req.id}).`,
         consentToken: consent.expected
       }
     };
@@ -5069,6 +5083,10 @@ var REQUEST_PAY_TOOL = {
       walletId: {
         type: "string",
         description: "Optional. Agent Wallet address to pay from. Defaults to the configured / server-default wallet."
+      },
+      consentToken: {
+        type: "string",
+        description: "Two-phase consent. Omit on the FIRST call to get a needs_confirmation preview plus a consentToken (no funds move); re-call with the SAME requestId plus this token to execute. Re-derived from the request terms + funding wallet, so a previewed payment cannot be swapped for a different one."
       }
     },
     required: ["requestId", "confirm"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.33",
+  "version": "0.8.34",
   "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [