@quackai/q402-mcp 0.8.5 → 0.8.7

package/README.md

@@ -174,9 +174,9 @@ Then export the values in `~/.zshrc` / `~/.bashrc`. See the [Codex config refere
 | `q402_recurring_skip_next` | api key | Skip only the next scheduled fire. |
 | `q402_recurring_cancel` | api key | Permanently stop a rule. |
 | `q402_bridge_quote` | none | Quote a Chainlink CCIP USDC bridge across eth/avax/arbitrum. Returns LINK + native fee. |
-| `q402_bridge_send` | live mode | Execute the bridge. Sandbox-only today; live execution lands once session-binding ships. |
-| `q402_bridge_history` | api key | Recent CCIP bridges (50 most recent). |
-| `q402_bridge_gas_tank` | api key | Per-chain LINK + native Gas Tank balance for bridge fees. |
+| `q402_bridge_send` | sandbox only | Plan-and-quote a bridge end-to-end. `sandbox: false` returns `isError:true` with a dashboard pointer until session-binding lands. |
+| `q402_bridge_history` | not yet wired | Pointer to the dashboard. Returns `{ implemented: false, dashboardUrl, dashboardPath }` — read-only guidance until owner-sig auth lands in MCP. |
+| `q402_bridge_gas_tank` | not yet wired | Static guidance + dashboard pointer for the Bridge Gas Tank top-up flow. Live balance lookup needs owner-sig auth (dashboard for now). |
 
 `q402_pay` + `q402_batch_pay` + `q402_bridge_send` require explicit in-chat confirmation. Batch confirmation = full batch, not per-row.
 

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 
 // src/version.ts
 var PACKAGE_NAME = "@quackai/q402-mcp";
-var PACKAGE_VERSION = "0.8.5";
+var PACKAGE_VERSION = "0.8.7";
 
 // src/tools/quote.ts
 import { z } from "zod";
@@ -2255,7 +2255,7 @@ Q402_MAX_AMOUNT_PER_CALL=200
 # Comma-separated lowercase recipient allowlist (unset = any address OK)
 # Q402_ALLOWED_RECIPIENTS=0xabc...,0xdef...
 `;
-var SECURITY_NOTICE = "Q402 never asks you to paste your private key into chat. The MCP server signs payments LOCALLY on your machine \u2014 your key never leaves your device, never goes to a remote server. If a key was already pasted in chat by mistake, treat the wallet as exposed: move funds to a fresh wallet and use that new key in ~/.q402/mcp.env going forward.";
+var SECURITY_NOTICE = "Q402 never asks you to paste your private key into chat. Custody depends on which wallet mode you picked: Mode A (Q402_PRIVATE_KEY) and Mode B (Q402_AGENTIC_PRIVATE_KEY) sign LOCALLY on your machine \u2014 those keys never leave your device. Mode C (Q402_MULTICHAIN_API_KEY only, no private-key env) is server-managed: Q402 holds the Agent Wallet's encrypted private key (AES-256-GCM) and signs on your behalf \u2014 your MetaMask key is never involved on this side either. If a key was already pasted in chat by mistake, treat that wallet as exposed: move funds to a fresh wallet and use that new key in ~/.q402/mcp.env going forward.";
 var FIRST_INSTALL_ADVISORY = [
   `Tip: a separate MetaMask account dedicated to Q402 keeps your existing balances and history tidy \u2014 it's a quick "+ Add account" in MetaMask. Q402 works with any EOA you control, though.`,
   "After your first payment, that wallet will show 'Smart account' in MetaMask / OKX. That's EIP-7702 delegation (Q402's gasless settlement mechanism), reversible anytime via q402_clear_delegation.",
@@ -2804,8 +2804,16 @@ import { z as z10 } from "zod";
 var BridgeQuoteInputSchema = z10.object({
   src: z10.enum(["eth", "avax", "arbitrum"]).describe("Source chain"),
   dst: z10.enum(["eth", "avax", "arbitrum"]).describe("Destination chain"),
-  amount: z10.string().regex(/^\d+$/).describe("USDC amount in raw 6-decimal units (e.g. '1000000' = 1 USDC)"),
+  // Same `> 0` requirement as bridge-send so the quote doesn't
+  // return a meaningless "fee for 0 USDC" envelope.
+  amount: z10.string().regex(/^\d*[1-9]\d*$/).describe("USDC amount in raw 6-decimal units, > 0 (e.g. '1000000' = 1 USDC)"),
   destReceiver: z10.string().regex(/^0x[0-9a-fA-F]{40}$/).describe("Destination receiver address (Agentic Wallet on destination)")
+}).refine((d) => d.src !== d.dst, {
+  // Mirror the rejection in BridgeSendInputSchema so an agent that
+  // accidentally quotes a same-chain "bridge" fails locally instead of
+  // burning a round-trip through /api/ccip/quote.
+  message: "src must differ from dst",
+  path: ["dst"]
 });
 var BRIDGE_QUOTE_TOOL = {
   name: "q402_bridge_quote",
@@ -2868,14 +2876,24 @@ import { z as z11 } from "zod";
 var BridgeSendInputSchema = z11.object({
   src: z11.enum(["eth", "avax", "arbitrum"]).describe("Source chain"),
   dst: z11.enum(["eth", "avax", "arbitrum"]).describe("Destination chain"),
-  amount: z11.string().regex(/^\d+$/).describe("USDC amount in raw 6-decimal units"),
+  // `^\d+$` accepts "0" which is a no-op bridge. Require at least one
+  // non-zero digit (^\d*[1-9]\d*$ also accepts e.g. "10", "100") so an
+  // accidental amount=0 fails locally instead of returning a synthetic
+  // "success" envelope in sandbox.
+  amount: z11.string().regex(/^\d*[1-9]\d*$/).describe("USDC amount in raw 6-decimal units, > 0"),
   walletId: z11.string().describe("Agentic Wallet ID (from q402_agentic_info)"),
   feeToken: z11.enum(["LINK", "native", "auto"]).optional().describe("Fee token. 'auto' picks cheaper of the two; defaults to LINK."),
   sandbox: z11.boolean().optional().describe("Sandbox mode (default true). Set to false for live bridge.")
+}).refine((d) => d.src !== d.dst, {
+  // Local Zod rejection saves a network round-trip + a Q402 backend log
+  // entry. The /api/ccip/send route also rejects same-chain bridges but
+  // the agent only finds out after burning a request.
+  message: "src must differ from dst",
+  path: ["dst"]
 });
 var BRIDGE_SEND_TOOL = {
   name: "q402_bridge_send",
-  description: "Execute a Chainlink CCIP USDC bridge between two of the 3 supported chains (eth/avax/arbitrum). The Q402 server signs ccipSend on behalf of the user's Agentic Wallet. Fee is debited from the user's Gas Tank (LINK slot or native, per the feeToken arg). SANDBOX BY DEFAULT: returns a synthetic messageId unless `sandbox: false` is passed AND the server env has Q402_ENABLE_REAL_PAYMENTS=1. ALWAYS confirm the bridge details with the user before setting sandbox: false. Recommended flow: q402_bridge_quote first \u2192 show user the cost \u2192 get user confirmation \u2192 call q402_bridge_send with sandbox: false.",
+  description: "PLAN-AND-QUOTE TOOL (sandbox-only at this release). Execute a Chainlink CCIP USDC bridge plan between two of the 3 supported chains (eth/avax/arbitrum). Returns a synthetic messageId so the agent can preview the bridge end-to-end without moving funds. LIVE EXECUTION via MCP is NOT yet wired \u2014 it requires an owner-EIP-712 signature on the `ccip.bridge` intent which the MCP CLI cannot produce (the dashboard or a future session-binding flow is the live path). Calling with `sandbox: false` returns isError:true regardless of Q402_ENABLE_REAL_PAYMENTS. Recommended flow: q402_bridge_quote \u2192 show user the cost \u2192 if they want to bridge live, point them at https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge.",
   inputSchema: {
     type: "object",
     properties: {
@@ -2905,7 +2923,7 @@ var BRIDGE_SEND_TOOL = {
       },
       sandbox: {
         type: "boolean",
-        description: "Sandbox-only at the current release (live bridging requires dashboard session-binding). Default true."
+        description: "Sandbox-only at the current release. Passing false returns isError:true with a pointer to the dashboard's Bridge UI \u2014 live MCP execution lands once session-binding is plumbed."
       }
     },
     required: ["src", "dst", "amount", "walletId"]
@@ -2961,9 +2979,13 @@ async function runBridgeHistory(_input) {
   return {
     content: [{
       type: "text",
-      text: "Bridge history via MCP requires owner-sig auth, which is dashboard-managed at the current release. View at https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge History."
-    }],
-    isError: true
+      text: JSON.stringify({
+        implemented: false,
+        reason: "Bridge history via MCP requires owner-sig auth, which is dashboard-bound until session-binding lands in a follow-up release.",
+        dashboardUrl: "https://q402.quackai.ai/dashboard",
+        dashboardPath: "Agent tab \u2192 Bridge History"
+      }, null, 2)
+    }]
   };
 }
 
@@ -2974,7 +2996,7 @@ var BridgeGasTankInputSchema = z13.object({
 });
 var BRIDGE_GAS_TANK_TOOL = {
   name: "q402_bridge_gas_tank",
-  description: "Report the user's Bridge Gas Tank state \u2014 LINK + native balance per CCIP chain (eth/avax/arbitrum). Q402 charges no markup on bridges; users pay only the actual Chainlink CCIP fee, debited from this Gas Tank. LINK fees are ~10% cheaper than native. Tool returns guidance + dashboard URL until owner-sig wiring lands.",
+  description: "READ-ONLY GUIDANCE TOOL \u2014 Bridge Gas Tank live balance via MCP is not yet wired (requires owner-sig auth which is dashboard-bound until session-binding lands, same follow-up as q402_bridge_history). Tool returns static guidance: the LINK/native fee model, the 3-chain CCIP triangle (eth/avax/arbitrum), the canonical Gas Tank deposit address, and a dashboard pointer for the live balance and per-chain deposit detail. Use this to route a user to the right top-up flow; don't expect numbers in the response.",
   inputSchema: {
     type: "object",
     properties: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.5",
-  "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments + Chainlink CCIP bridge across 10 EVM chains, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
+  "version": "0.8.7",
+  "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [
     "mcp",
@@ -69,6 +69,7 @@
   },
   "overrides": {
     "ws": "^8.20.1",
-    "qs": "^6.15.2"
+    "qs": "^6.15.2",
+    "hono": "^4.12.21"
   }
 }