@quackai/q402-mcp 0.8.4 → 0.8.6

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 
 // src/version.ts
 var PACKAGE_NAME = "@quackai/q402-mcp";
-var PACKAGE_VERSION = "0.8.4";
+var PACKAGE_VERSION = "0.8.6";
 
 // src/tools/quote.ts
 import { z } from "zod";
@@ -2806,6 +2806,12 @@ var BridgeQuoteInputSchema = z10.object({
   dst: z10.enum(["eth", "avax", "arbitrum"]).describe("Destination chain"),
   amount: z10.string().regex(/^\d+$/).describe("USDC amount in raw 6-decimal units (e.g. '1000000' = 1 USDC)"),
   destReceiver: z10.string().regex(/^0x[0-9a-fA-F]{40}$/).describe("Destination receiver address (Agentic Wallet on destination)")
+}).refine((d) => d.src !== d.dst, {
+  // Mirror the rejection in BridgeSendInputSchema so an agent that
+  // accidentally quotes a same-chain "bridge" fails locally instead of
+  // burning a round-trip through /api/ccip/quote.
+  message: "src must differ from dst",
+  path: ["dst"]
 });
 var BRIDGE_QUOTE_TOOL = {
   name: "q402_bridge_quote",
@@ -2872,6 +2878,12 @@ var BridgeSendInputSchema = z11.object({
   walletId: z11.string().describe("Agentic Wallet ID (from q402_agentic_info)"),
   feeToken: z11.enum(["LINK", "native", "auto"]).optional().describe("Fee token. 'auto' picks cheaper of the two; defaults to LINK."),
   sandbox: z11.boolean().optional().describe("Sandbox mode (default true). Set to false for live bridge.")
+}).refine((d) => d.src !== d.dst, {
+  // Local Zod rejection saves a network round-trip + a Q402 backend log
+  // entry. The /api/ccip/send route also rejects same-chain bridges but
+  // the agent only finds out after burning a request.
+  message: "src must differ from dst",
+  path: ["dst"]
 });
 var BRIDGE_SEND_TOOL = {
   name: "q402_bridge_send",
@@ -2945,7 +2957,7 @@ var BridgeHistoryInputSchema = z12.object({
 });
 var BRIDGE_HISTORY_TOOL = {
   name: "q402_bridge_history",
-  description: "List the user's recent Chainlink CCIP bridges (most-recent first, up to 50 records). Each record includes messageId, source/destination chains, USDC amount, fee paid, and CCIP Explorer link. Returns dashboard URL guidance until owner-sig wiring lands in a follow-up.",
+  description: "READ-ONLY GUIDANCE TOOL \u2014 bridge history via MCP is not yet wired in this release. It requires owner-sig auth which is dashboard-bound until session-binding lands (same follow-up as live q402_bridge_send). This tool returns a pointer to the dashboard and intentionally surfaces as an error so an LLM does not interpret the prose as an empty result. Future shape (already finalized): most-recent-first list of up to 50 CCIP bridges with messageId, source/destination chains, USDC amount, fee paid, and CCIP Explorer link. Until then, point the user at https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge History.",
   inputSchema: {
     type: "object",
     properties: {
@@ -2961,9 +2973,13 @@ async function runBridgeHistory(_input) {
   return {
     content: [{
       type: "text",
-      text: "Bridge history via MCP requires owner-sig auth, which is dashboard-managed at the current release. View at https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge History."
-    }],
-    isError: true
+      text: JSON.stringify({
+        implemented: false,
+        reason: "Bridge history via MCP requires owner-sig auth, which is dashboard-bound until session-binding lands in a follow-up release.",
+        dashboardUrl: "https://q402.quackai.ai/dashboard",
+        dashboardPath: "Agent tab \u2192 Bridge History"
+      }, null, 2)
+    }]
   };
 }
 
@@ -2986,6 +3002,7 @@ var BRIDGE_GAS_TANK_TOOL = {
     }
   }
 };
+var GASTANK_ADDRESS = "0x10fb078594b70ee8024b2ded3d67fc3aa9ea747a";
 async function runBridgeGasTank(_input) {
   return {
     content: [{
@@ -2997,9 +3014,9 @@ async function runBridgeGasTank(_input) {
         "  \u2022 LINK (default, ~10% cheaper)",
         "  \u2022 native (ETH / AVAX / ETH respectively)",
         "",
-        "Top up by sending LINK or native to the Q402 facilitator address on the source chain. The next deposit-scan cron tick (~5 min) credits your Gas Tank.",
+        `Top up by sending LINK or native to the Q402 Gas Tank address ${GASTANK_ADDRESS} on the source chain. The deposit-scan cron (every ~5 min) credits your Gas Tank automatically; the dashboard's "Verify" button is the immediate self-serve path.`,
         "",
-        "Live balance + deposit addresses: https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge Gas Tank"
+        "Live balance + per-chain deposit detail: https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge Gas Tank"
       ].join("\n")
     }]
   };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.4",
-  "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments + Chainlink CCIP bridge across 10 EVM chains, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
+  "version": "0.8.6",
+  "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [
     "mcp",