@quackai/q402-mcp 0.8.38 → 0.8.40

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 // package.json
 var package_default = {
   name: "@quackai/q402-mcp",
-  version: "0.8.38",
+  version: "0.8.40",
   description: "MCP server for Q402 \u2014 gasless USDC/USDT/RLUSD payments on 11 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   mcpName: "io.github.bitgett/q402-mcp",
   keywords: [
@@ -974,6 +974,9 @@ function checkConsent(intent, provided) {
 // src/tools/pay.ts
 var PayInputSchema = z2.object({
   chain: z2.enum(["avax", "bnb", "eth", "xlayer", "stable", "mantle", "injective", "monad", "scroll", "arbitrum", "base"]),
+  rail: z2.enum(["q402", "x402"]).optional().describe(
+    'Settlement rail. Base only \u2014 leave unset everywhere else. "q402" (default) = Q402 gasless EIP-7702 (USDC + USDT). "x402" = the Coinbase x402 standard (EIP-3009 USDC transferWithAuthorization), settled gaslessly by the Q402 facilitator \u2014 Base USDC only, no Hooks. walletMode="agentic-server" only.'
+  ),
   to: z2.string().refine(isAddress2, "to must be a valid 0x-prefixed EVM address").describe("Recipient EVM address (0x + 40 hex)."),
   amount: z2.string().regex(/^\d+(\.\d+)?$/, "amount must be a positive decimal string").describe('Human-readable decimal amount, e.g. "5.00".'),
   token: z2.enum(["USDC", "USDT", "RLUSD"]).describe(
@@ -1139,6 +1142,12 @@ async function runPay(input) {
     to: input.to.toLowerCase(),
     amount: input.amount,
     token: input.token,
+    // Bind the settlement RAIL. On Base the same (to, amount, token) settles
+    // very differently under q402 (EIP-7702) vs x402 (EIP-3009) — different
+    // signature scheme, gas path, and wallet-state constraints. Consenting to a
+    // Q402-rail preview must NOT authorise an x402 execution on the same token,
+    // so a rail change invalidates the consent and forces a fresh preview.
+    rail: input.rail ?? "q402",
     // Bind the funding source too — the user is consenting to spend from THIS
     // wallet, so a different walletMode/walletId needs a fresh preview.
     wm: effectiveMode,
@@ -1154,13 +1163,14 @@ async function runPay(input) {
   if (!consent.ok) {
     const splitNote = input.hookParams?.splits ? ` \u2014 split ${input.hookParams.splits.length} ways; funds go to the split recipients, not ${input.to}` : "";
     const fromNote = senderWallet ? ` from ${senderWallet.addressShort}` : "";
+    const railNote = input.rail === "x402" ? " via the x402 (EIP-3009) rail" : "";
     return {
       result: failureResult("consent"),
       guardsApplied: [...guardsApplied, "two_phase_consent"],
       senderWallet,
       needsConsent: {
         status: "needs_confirmation",
-        preview: `Send ${input.amount} ${input.token} to ${input.to} on ${chain.key}${fromNote}${splitNote}. Confirm with the user, then re-call q402_pay with the same args plus consentToken="${consent.expected}".`,
+        preview: `Send ${input.amount} ${input.token} to ${input.to} on ${chain.key}${railNote}${fromNote}${splitNote}. Confirm with the user, then re-call q402_pay with the same args plus consentToken="${consent.expected}".`,
         consentToken: consent.expected
       }
     };
@@ -1227,7 +1237,8 @@ async function runPay(input) {
           // the per-wallet hook dispatch, so forwarding here is the only
           // place hookParams take effect. The landing route ignores them
           // for owner-sig calls (trust boundary), so this is safe.
-          ...input.hookParams ? { hookParams: input.hookParams } : {}
+          ...input.hookParams ? { hookParams: input.hookParams } : {},
+          ...input.rail ? { rail: input.rail } : {}
         }),
         signal: AbortSignal.timeout(6e4)
       });
@@ -1413,6 +1424,11 @@ var PAY_TOOL = {
         enum: CHAIN_KEYS,
         description: "Target chain."
       },
+      rail: {
+        type: "string",
+        enum: ["q402", "x402"],
+        description: 'Settlement rail (Base only). "q402" (default) = gasless EIP-7702 (USDC+USDT). "x402" = Coinbase x402 standard (EIP-3009), Base USDC only, agentic-server only. Leave unset elsewhere.'
+      },
       to: {
         type: "string",
         description: "Recipient EVM address (0x + 40 hex)."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.38",
+  "version": "0.8.40",
   "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 11 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [