@quackai/q402-mcp 0.8.39 → 0.8.41

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 // package.json
 var package_default = {
   name: "@quackai/q402-mcp",
-  version: "0.8.39",
+  version: "0.8.41",
   description: "MCP server for Q402 \u2014 gasless USDC/USDT/RLUSD payments on 11 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   mcpName: "io.github.bitgett/q402-mcp",
   keywords: [
@@ -1142,6 +1142,12 @@ async function runPay(input) {
     to: input.to.toLowerCase(),
     amount: input.amount,
     token: input.token,
+    // Bind the settlement RAIL. On Base the same (to, amount, token) settles
+    // very differently under q402 (EIP-7702) vs x402 (EIP-3009) — different
+    // signature scheme, gas path, and wallet-state constraints. Consenting to a
+    // Q402-rail preview must NOT authorise an x402 execution on the same token,
+    // so a rail change invalidates the consent and forces a fresh preview.
+    rail: input.rail ?? "q402",
     // Bind the funding source too — the user is consenting to spend from THIS
     // wallet, so a different walletMode/walletId needs a fresh preview.
     wm: effectiveMode,
@@ -1157,13 +1163,14 @@ async function runPay(input) {
   if (!consent.ok) {
     const splitNote = input.hookParams?.splits ? ` \u2014 split ${input.hookParams.splits.length} ways; funds go to the split recipients, not ${input.to}` : "";
     const fromNote = senderWallet ? ` from ${senderWallet.addressShort}` : "";
+    const railNote = input.rail === "x402" ? " via the x402 (EIP-3009) rail" : "";
     return {
       result: failureResult("consent"),
       guardsApplied: [...guardsApplied, "two_phase_consent"],
       senderWallet,
       needsConsent: {
         status: "needs_confirmation",
-        preview: `Send ${input.amount} ${input.token} to ${input.to} on ${chain.key}${fromNote}${splitNote}. Confirm with the user, then re-call q402_pay with the same args plus consentToken="${consent.expected}".`,
+        preview: `Send ${input.amount} ${input.token} to ${input.to} on ${chain.key}${railNote}${fromNote}${splitNote}. Confirm with the user, then re-call q402_pay with the same args plus consentToken="${consent.expected}".`,
         consentToken: consent.expected
       }
     };
@@ -3505,7 +3512,7 @@ async function runBridgeGasTank(_input) {
 // src/tools/yield-reserves.ts
 import { z as z14 } from "zod";
 var YieldReservesInputSchema = z14.object({
-  chain: z14.enum(["bnb"]).optional().describe("Optional chain filter. Q402 Yield is BNB-only today \u2014 only 'bnb' is accepted. Omit to list all supported chains.")
+  chain: z14.enum(["bnb", "base"]).optional().describe("Optional chain filter. Aave markets on 'bnb', Morpho (MetaMorpho) markets on 'base'. Omit to list all supported chains.")
 });
 var YIELD_RESERVES_TOOL = {
   name: "q402_yield_reserves",
@@ -3515,8 +3522,8 @@ var YIELD_RESERVES_TOOL = {
     properties: {
       chain: {
         type: "string",
-        enum: ["bnb"],
-        description: "Optional chain filter. Q402 Yield is BNB-only today \u2014 only 'bnb' is accepted. Omit for all supported chains."
+        enum: ["bnb", "base"],
+        description: "Optional chain filter. Aave markets on 'bnb', Morpho markets on 'base'. Omit for all supported chains."
       }
     },
     additionalProperties: false
@@ -3577,7 +3584,7 @@ var YieldPositionsInputSchema = z15.object({
   walletId: z15.string().optional().describe(
     "Optional Agent Wallet address whose positions to read (max 10 per owner). Omit and the server defaults to the owner's default wallet (resolved from the API key); Q402_AGENT_WALLET_ADDRESS env fills it in when set."
   ),
-  chain: z15.enum(["bnb"]).optional().describe("Optional chain filter. Q402 Yield is BNB-only today \u2014 only 'bnb' is accepted. Omit for all supported chains.")
+  chain: z15.enum(["bnb", "base"]).optional().describe("Optional chain filter. Aave positions on 'bnb', Morpho positions on 'base'. Omit for all supported chains.")
 });
 var YIELD_POSITIONS_TOOL = {
   name: "q402_yield_positions",
@@ -3591,8 +3598,8 @@ var YIELD_POSITIONS_TOOL = {
       },
       chain: {
         type: "string",
-        enum: ["bnb"],
-        description: "Optional chain filter. Q402 Yield is BNB-only today \u2014 only 'bnb' is accepted. Omit for all supported chains."
+        enum: ["bnb", "base"],
+        description: "Optional chain filter. Aave positions on 'bnb', Morpho positions on 'base'. Omit for all supported chains."
       }
     },
     additionalProperties: false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.39",
+  "version": "0.8.41",
   "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 11 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [