@quackai/q402-mcp 0.8.9 → 0.8.11

package/README.md

@@ -177,7 +177,7 @@ Then export the values in `~/.zshrc` / `~/.bashrc`. See the [Codex config refere
 | `q402_recurring_skip_next` | api key | Skip only the next scheduled fire. |
 | `q402_recurring_cancel` | api key | Permanently stop a rule. |
 | `q402_bridge_quote` | none | Quote a Chainlink CCIP USDC bridge across eth/avax/arbitrum. Returns LINK + native fee. |
-| `q402_bridge_send` | sandbox only | Plan-and-quote a bridge end-to-end. `sandbox: false` returns `isError:true` with a dashboard pointer until session-binding lands. |
+| `q402_bridge_send` | live mode | Execute a CCIP bridge from the user's Agent Wallet. Mode C only (server-managed). Sandbox-by-default; `sandbox: false` + live Multichain key + `Q402_ENABLE_REAL_PAYMENTS=1` fires a real on-chain bridge. |
 | `q402_bridge_history` | not yet wired | Pointer to the dashboard. Returns `{ implemented: false, dashboardUrl, dashboardPath }` — read-only guidance until owner-sig auth lands in MCP. |
 | `q402_bridge_gas_tank` | not yet wired | Static guidance + dashboard pointer for the Bridge Gas Tank top-up flow. Live balance lookup needs owner-sig auth (dashboard for now). |
 

package/dist/index.js

@@ -211,7 +211,7 @@ var isValidPrivateKey = (s) => typeof s === "string" && PRIVATE_KEY_RE.test(s);
 
 // src/version.ts
 var PACKAGE_NAME = "@quackai/q402-mcp";
-var PACKAGE_VERSION = "0.8.9";
+var PACKAGE_VERSION = "0.8.11";
 
 // src/tools/quote.ts
 import { z } from "zod";
@@ -2897,23 +2897,23 @@ var BridgeSendInputSchema = z11.object({
   src: z11.enum(["eth", "avax", "arbitrum"]).describe("Source chain"),
   dst: z11.enum(["eth", "avax", "arbitrum"]).describe("Destination chain"),
   // `^\d+$` accepts "0" which is a no-op bridge. Require at least one
-  // non-zero digit (^\d*[1-9]\d*$ also accepts e.g. "10", "100") so an
-  // accidental amount=0 fails locally instead of returning a synthetic
-  // "success" envelope in sandbox.
+  // non-zero digit so an accidental amount=0 fails locally instead of
+  // returning a synthetic "success" envelope in sandbox.
   amount: z11.string().regex(/^\d*[1-9]\d*$/).describe("USDC amount in raw 6-decimal units, > 0"),
-  walletId: z11.string().describe("Agentic Wallet ID (from q402_agentic_info)"),
-  feeToken: z11.enum(["LINK", "native", "auto"]).optional().describe("Fee token. 'auto' picks cheaper of the two; defaults to LINK."),
-  sandbox: z11.boolean().optional().describe("Sandbox mode (default true). Set to false for live bridge.")
+  walletId: z11.string().optional().describe("Agentic Wallet ID (from q402_agentic_info). Optional \u2014 defaults to the owner's default Agent Wallet."),
+  feeToken: z11.enum(["LINK", "native"]).optional().describe("Fee token. Defaults to LINK (~10% cheaper than native)."),
+  sandbox: z11.boolean().optional().describe("Sandbox mode (default true). Set to false for a live on-chain bridge."),
+  maxFeeRaw: z11.string().regex(/^\d+$/).optional().describe("Optional client-side fee cap in raw 18-dec wei. Server still clamps to its 10% slippage ceiling; clients may LOWER but not RAISE.")
 }).refine((d) => d.src !== d.dst, {
   // Local Zod rejection saves a network round-trip + a Q402 backend log
-  // entry. The /api/ccip/send route also rejects same-chain bridges but
-  // the agent only finds out after burning a request.
+  // entry. The bridge route also rejects same-chain bridges but the
+  // agent only finds out after burning a request.
   message: "src must differ from dst",
   path: ["dst"]
 });
 var BRIDGE_SEND_TOOL = {
   name: "q402_bridge_send",
-  description: "PLAN-AND-QUOTE TOOL (sandbox-only at this release). Execute a Chainlink CCIP USDC bridge plan between two of the 3 supported chains (eth/avax/arbitrum). Returns a synthetic messageId so the agent can preview the bridge end-to-end without moving funds. LIVE EXECUTION via MCP is NOT yet wired \u2014 it requires an owner-EIP-712 signature on the `ccip.bridge` intent which the MCP CLI cannot produce (the dashboard or a future session-binding flow is the live path). Calling with `sandbox: false` returns isError:true regardless of Q402_ENABLE_REAL_PAYMENTS. Recommended flow: q402_bridge_quote \u2192 show user the cost \u2192 if they want to bridge live, point them at https://q402.quackai.ai/dashboard \u2192 Agent tab \u2192 Bridge.",
+  description: "Execute a Chainlink CCIP USDC bridge across the 3-chain triangle (eth/avax/arbitrum) on behalf of the user's server-managed Agentic Wallet (Mode C). Sandbox-by-default \u2014 returns a synthetic messageId unless `sandbox: false` is passed AND Q402_ENABLE_REAL_PAYMENTS=1 AND a live Multichain API key is configured. The server signs ccipSend with the Agent Wallet's encrypted PK, auto-funds source-chain gas from the user's Gas Tank, and debits both the auto- fund cost and the CCIP fee per the bridge's settled receipt. Recommended flow: q402_bridge_quote first \u2192 confirm cost with the user \u2192 q402_bridge_send with sandbox: false. Live mode needs a Multichain subscription; trial keys are rejected. If the bridge returns AGENT_WALLET_DELEGATED, run q402_clear_delegation on the source chain first.",
   inputSchema: {
     type: "object",
     properties: {
@@ -2929,50 +2929,149 @@ var BRIDGE_SEND_TOOL = {
       },
       amount: {
         type: "string",
-        pattern: "^[0-9]+$",
-        description: "USDC amount in raw 6-decimal units (e.g. '1000000' = 1 USDC). Integer string only."
+        pattern: "^\\d*[1-9]\\d*$",
+        description: "USDC amount in raw 6-decimal units (e.g. '1000000' = 1 USDC). Integer string, > 0."
       },
       walletId: {
         type: "string",
-        description: "Agentic Wallet ID (from q402_agentic_info)."
+        description: "Agentic Wallet ID (from q402_agentic_info). Optional \u2014 defaults to the owner's default Agent Wallet when omitted."
       },
       feeToken: {
         type: "string",
-        enum: ["LINK", "native", "auto"],
-        description: "Fee token. Default: LINK (~10% cheaper). 'auto' picks cheaper at quote time."
+        enum: ["LINK", "native"],
+        description: "Fee token. Default: LINK (~10% cheaper)."
       },
       sandbox: {
         type: "boolean",
-        description: "Sandbox-only at the current release. Passing false returns isError:true with a pointer to the dashboard's Bridge UI \u2014 live MCP execution lands once session-binding is plumbed."
+        description: "Sandbox mode (default true). Set to false for a real on-chain bridge."
+      },
+      maxFeeRaw: {
+        type: "string",
+        pattern: "^[0-9]+$",
+        description: "Optional client-side fee cap in raw 18-dec wei."
       }
     },
-    required: ["src", "dst", "amount", "walletId"]
+    required: ["src", "dst", "amount"]
   }
 };
+function sandbox(input, note) {
+  return {
+    sandbox: true,
+    messageId: "0x" + "00".repeat(32),
+    txHash: "0x" + "00".repeat(32),
+    note,
+    src: input.src,
+    dst: input.dst,
+    amount: input.amount
+  };
+}
 async function runBridgeSend(input) {
-  const sandbox = input.sandbox !== false;
-  if (sandbox) {
+  if (input.sandbox !== false) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify(
+          sandbox(input, "Sandbox response. Pass `sandbox: false` AND set Q402_ENABLE_REAL_PAYMENTS=1 (with a live Q402_MULTICHAIN_API_KEY) to fire a real bridge."),
+          null,
+          2
+        )
+      }]
+    };
+  }
+  const resolved = resolveApiKey(input.src, "multichain");
+  if (!resolved.apiKey) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify(
+          sandbox(input, resolved.sandboxReason ?? "No live Multichain API key configured. Set Q402_MULTICHAIN_API_KEY to a q402_live_\u2026 key from https://q402.quackai.ai/payment."),
+          null,
+          2
+        )
+      }]
+    };
+  }
+  if (!resolved.apiKey.startsWith("q402_live_")) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify(
+          sandbox(input, "Resolved API key is not a live key. Set Q402_MULTICHAIN_API_KEY to a q402_live_\u2026 key."),
+          null,
+          2
+        )
+      }]
+    };
+  }
+  if (!CONFIG.realPaymentsRequested) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify(
+          sandbox(input, "Q402_ENABLE_REAL_PAYMENTS is not set to 1. Set the env var to fire a real bridge."),
+          null,
+          2
+        )
+      }]
+    };
+  }
+  const walletId = typeof input.walletId === "string" && input.walletId.length > 0 ? input.walletId.toLowerCase() : CONFIG.walletId ?? void 0;
+  const feeToken = input.feeToken === "native" ? "native" : "LINK";
+  let resp;
+  try {
+    resp = await fetch(`${CONFIG.relayBaseUrl}/wallet/agentic/bridge`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        apiKey: resolved.apiKey,
+        ...walletId ? { walletId } : {},
+        src: input.src,
+        dst: input.dst,
+        amount: input.amount,
+        feeToken,
+        ...input.maxFeeRaw ? { maxFeeRaw: input.maxFeeRaw } : {}
+      }),
+      signal: AbortSignal.timeout(9e4)
+    });
+  } catch (e) {
+    return {
+      content: [{
+        type: "text",
+        text: `Bridge fetch failed: ${e instanceof Error ? e.message : String(e)}. Retry; if the relay 60s budget timed out, the bridge may still be in flight \u2014 check the dashboard's Bridge History or CCIP Explorer before re-firing.`
+      }],
+      isError: true
+    };
+  }
+  const data = await resp.json().catch(() => ({}));
+  if (!resp.ok || !data.success) {
     return {
       content: [{
         type: "text",
         text: JSON.stringify({
-          sandbox: true,
-          messageId: "0x" + "00".repeat(32),
-          txHash: "0x" + "00".repeat(32),
-          note: "Sandbox response. To execute a real bridge, pass `sandbox: false` AND ensure the server has Q402_ENABLE_REAL_PAYMENTS=1.",
-          src: input.src,
-          dst: input.dst,
-          amount: input.amount
+          sandbox: false,
+          httpStatus: resp.status,
+          ...data
         }, null, 2)
-      }]
+      }],
+      isError: true
     };
   }
   return {
     content: [{
       type: "text",
-      text: "Live CCIP bridge via MCP is not yet wired \u2014 agents can quote and plan via q402_bridge_quote and q402_bridge_send (sandbox), but actual execution must happen via https://q402.quackai.ai/dashboard for now. Live MCP execution lands in a follow-up release."
-    }],
-    isError: true
+      text: JSON.stringify({
+        sandbox: false,
+        success: true,
+        messageId: data.messageId,
+        txHash: data.txHash,
+        feeWhole: data.feeWhole,
+        feeToken: data.feeToken,
+        ccipExplorer: data.ccipExplorer,
+        srcExplorer: data.srcExplorer,
+        ...data.agentFundTxHash ? { agentFundTxHash: data.agentFundTxHash, agentFundEth: data.agentFundEth } : {},
+        note: "Bridge submitted on source chain. CCIP delivery to destination chain typically takes 8-25 minutes. Track via the ccipExplorer URL above."
+      }, null, 2)
+    }]
   };
 }
 
@@ -3801,8 +3900,11 @@ async function main() {
       RECURRING_CANCEL_TOOL,
       CLEAR_DELEGATION_TOOL,
       // CCIP bridge surface — USDC routing on the eth/avax/arbitrum
-      // triangle. Bridge_send is sandbox-only; live execution happens
-      // through the dashboard until session-binding ships.
+      // triangle. Bridge_send goes LIVE on Mode C since 0.8.10 (Mode A/B
+      // still fall through to sandbox since the route's API-key auth
+      // path only exists for the server-managed Agent Wallet). History
+      // + Gas Tank tools remain dashboard-pointer until session-binding
+      // exposes owner-sig auth from MCP.
       BRIDGE_QUOTE_TOOL,
       BRIDGE_SEND_TOOL,
       BRIDGE_HISTORY_TOOL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quackai/q402-mcp",
-  "version": "0.8.9",
+  "version": "0.8.11",
   "description": "MCP server for Q402 — gasless USDC/USDT/RLUSD payments on 10 EVM chains + Chainlink CCIP USDC bridge on the eth/avax/arbitrum triangle, callable from Claude (Desktop / Code), OpenAI Codex CLI, and any other Model Context Protocol client.",
   "mcpName": "io.github.bitgett/q402-mcp",
   "keywords": [