@quackai/q402-mcp 0.8.5 → 0.8.6

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 
 // src/version.ts
 var PACKAGE_NAME = "@quackai/q402-mcp";
-var PACKAGE_VERSION = "0.8.5";
+var PACKAGE_VERSION = "0.8.6";
 
 // src/tools/quote.ts
 import { z } from "zod";
@@ -2806,6 +2806,12 @@ var BridgeQuoteInputSchema = z10.object({
   dst: z10.enum(["eth", "avax", "arbitrum"]).describe("Destination chain"),
   amount: z10.string().regex(/^\d+$/).describe("USDC amount in raw 6-decimal units (e.g. '1000000' = 1 USDC)"),
   destReceiver: z10.string().regex(/^0x[0-9a-fA-F]{40}$/).describe("Destination receiver address (Agentic Wallet on destination)")
+}).refine((d) => d.src !== d.dst, {
+  // Mirror the rejection in BridgeSendInputSchema so an agent that
+  // accidentally quotes a same-chain "bridge" fails locally instead of
+  // burning a round-trip through /api/ccip/quote.
+  message: "src must differ from dst",
+  path: ["dst"]
 });
 var BRIDGE_QUOTE_TOOL = {
   name: "q402_bridge_quote",
@@ -2872,6 +2878,12 @@ var BridgeSendInputSchema = z11.object({
   walletId: z11.string().describe("Agentic Wallet ID (from q402_agentic_info)"),
   feeToken: z11.enum(["LINK", "native", "auto"]).optional().describe("Fee token. 'auto' picks cheaper of the two; defaults to LINK."),
   sandbox: z11.boolean().optional().describe("Sandbox mode (default true). Set to false for live bridge.")
+}).refine((d) => d.src !== d.dst, {
+  // Local Zod rejection saves a network round-trip + a Q402 backend log
+  // entry. The /api/ccip/send route also rejects same-chain bridges but
+  // the agent only finds out after burning a request.
+  message: "src must differ from dst",
+  path: ["dst"]
 });
 var BRIDGE_SEND_TOOL = {
   name: "q402_bridge_send",
@@ -2961,9 +2973,13 @@ async function runBridgeHistory(_input) {
   return {
     content: [{
       type: "text",
-      text: "Bridge history via MCP requires owner-sig auth, which is dashboard-managed at the current release. View at https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge History."
-    }],
-    isError: true
+      text: JSON.stringify({
+        implemented: false,
+        reason: "Bridge history via MCP requires owner-sig auth, which is dashboard-bound until session-binding lands in a follow-up release.",
+        dashboardUrl: "https://q402.quackai.ai/dashboard",
+        dashboardPath: "Agent tab \u2192 Bridge History"
+      }, null, 2)
+    }]
   };
 }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.5",
-  "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments + Chainlink CCIP bridge across 10 EVM chains, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
+  "version": "0.8.6",
+  "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [
     "mcp",