@vapi-network/mcp 0.2.1 → 0.2.3

package/README.md

@@ -29,6 +29,7 @@ vapi pay <listing-ref> --max 0.02
 vapi balance
 vapi accounts                   # balances plus network-specific deposit guidance
 vapi receipts                  # one line per paid call: quote, settlement, latency
+vapi export-key                # print the private key for this wallet, on stdout only
 ```
 
 `vapi search` tags each listing with its group — `[vapi]`, `[added]`,
@@ -117,6 +118,21 @@ faucet URL or instructions to that network's `config.json` entry:
 Account lookup dispatches by CAIP namespace: the EVM and Solana adapters use their corresponding
 local address and guarded RPC balance calls without coupling one wallet family to the other.
 
+## Exporting the key
+
+The wallet is yours, so the key can leave on demand:
+
+```bash
+vapi export-key                       # EVM key (eip155:8453) as 0x-prefixed hex
+vapi export-key --network solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d
+vapi export-key --json                # { "network", "address", "privateKey" }
+```
+
+The command asks for the keystore passphrase, prints a one-line warning on
+stderr, and writes the key alone on stdout so it can be piped into a password
+manager. Anyone holding that key can spend the wallet: never paste it into a
+website or a chat. Nothing else in vAPI ever logs it.
+
 ## Reporting a bug
 
 ```bash
@@ -179,8 +195,11 @@ provenance:
   `https://api.vapinetwork.ai/api/call/discovery` for discovery and
   `https://api.vapinetwork.ai/api/call/services` for service details. If the
   primary returns HTTP 404 or cannot be resolved, the client logs one notice
-  and tries the configured fallback at `https://console.vapinetwork.ai`, using
-  the same canonical paths. The registry's historical `/api/marketplace/discovery`
+  and tries the fallbacks in `registryFallbacks`, using the same canonical
+  paths; the default distribution no longer ships a distinct fallback host,
+  because the `console.vapinetwork.ai` and `console-staging.vapinetwork.ai`
+  hosts are retired. A `config.json` that still names them is repaired in
+  memory on load and rewritten on disk by `vapi init`. The registry's historical `/api/marketplace/discovery`
   and `/api/network/services` paths still answer for one release and reply with
   `Deprecation: true` plus a `Link` header naming the successor; a base URL
   supplied on either of them is normalized to the canonical pair.

package/dist/index.js

@@ -43085,8 +43085,8 @@ var DEFAULT_DISCOVERY_URL = `${DEFAULT_REGISTRY_URL}/api/call/services`;
 var DEFAULT_MARKETPLACE_DISCOVERY_URL = `${DEFAULT_REGISTRY_URL}/api/call/discovery`;
 var DEFAULT_REGISTRY_FALLBACKS = [
   {
-    discoveryUrl: "https://console.vapinetwork.ai/api/call/services",
-    marketplaceDiscoveryUrl: "https://console.vapinetwork.ai/api/call/discovery"
+    discoveryUrl: DEFAULT_DISCOVERY_URL,
+    marketplaceDiscoveryUrl: DEFAULT_MARKETPLACE_DISCOVERY_URL
   }
 ];
 var DEFAULT_SPEND_CAPS = {
@@ -43191,6 +43191,70 @@ async function migrateLegacyVapiHome(options = {}) {
   }
   return copied;
 }
+var LEGACY_REGISTRY_HOSTS = /* @__PURE__ */ new Map([
+  ["console.vapinetwork.ai", "api.vapinetwork.ai"],
+  ["console-staging.vapinetwork.ai", "api-staging.vapinetwork.ai"]
+]);
+var LEGACY_REGISTRY_PATHS = /* @__PURE__ */ new Map([
+  ["/api/network/services", "/api/call/services"],
+  ["/api/marketplace/discovery", "/api/call/discovery"]
+]);
+var REGISTRY_DOMAIN = "vapinetwork.ai";
+function rewriteLegacyRegistryUrl(value) {
+  let url2;
+  try {
+    url2 = new URL(value);
+  } catch {
+    return value;
+  }
+  let rewritten = false;
+  const host = LEGACY_REGISTRY_HOSTS.get(url2.hostname.toLowerCase());
+  if (host) {
+    url2.hostname = host;
+    rewritten = true;
+  }
+  const hostname3 = url2.hostname.toLowerCase();
+  if (hostname3 === REGISTRY_DOMAIN || hostname3.endsWith(`.${REGISTRY_DOMAIN}`)) {
+    const path = LEGACY_REGISTRY_PATHS.get(url2.pathname.replace(/\/+$/, ""));
+    if (path) {
+      url2.pathname = path;
+      rewritten = true;
+    }
+  }
+  return rewritten ? url2.href : value;
+}
+function rewriteLegacyRegistryUrls(config2) {
+  const changes = [];
+  const rewrite = (field, from15) => {
+    const to = rewriteLegacyRegistryUrl(from15);
+    if (to !== from15) changes.push({ field, from: from15, to });
+    return to;
+  };
+  const next = {
+    ...config2,
+    discoveryUrl: rewrite("discoveryUrl", config2.discoveryUrl),
+    marketplaceDiscoveryUrl: rewrite("marketplaceDiscoveryUrl", config2.marketplaceDiscoveryUrl),
+    ...config2.registryFallbacks ? {
+      registryFallbacks: config2.registryFallbacks.map((fallback, index2) => ({
+        discoveryUrl: rewrite(
+          `registryFallbacks[${index2}].discoveryUrl`,
+          fallback.discoveryUrl
+        ),
+        marketplaceDiscoveryUrl: rewrite(
+          `registryFallbacks[${index2}].marketplaceDiscoveryUrl`,
+          fallback.marketplaceDiscoveryUrl
+        )
+      }))
+    } : {}
+  };
+  return changes.length === 0 ? { config: config2, changes } : { config: next, changes };
+}
+function formatLegacyRegistryRewrites(changes) {
+  return [
+    "Rewrote retired vAPI registry URLs in the local config:",
+    ...changes.map((change) => `  ${change.field}: ${change.from} -> ${change.to}`)
+  ].join("\n");
+}
 function getDefaultConfig(source = process.env, options = {}) {
   const registry2 = registryEndpoints(source.VAPI_REGISTRY_URL?.trim() || DEFAULT_REGISTRY_URL);
   const requested = new Set(options.networks ?? ["base"]);
@@ -43229,7 +43293,7 @@ function getDefaultConfig(source = process.env, options = {}) {
     spendCaps: { ...DEFAULT_SPEND_CAPS }
   };
 }
-async function loadConfig(path = getVapiPaths().config, source = process.env) {
+async function loadConfig(path = getVapiPaths().config, source = process.env, options = {}) {
   if (!process.env.VAPI_HOME?.trim() && path === getVapiPaths(join(homedir(), ".vapi")).config) {
     await migrateLegacyVapiHome({ targetDirectory: join(homedir(), ".vapi") });
   }
@@ -43240,8 +43304,16 @@ async function loadConfig(path = getVapiPaths().config, source = process.env) {
     if (isMissingFile(error61)) return getDefaultConfig(source);
     throw error61;
   }
-  const config2 = configSchema.parse(JSON.parse(raw));
-  config2.registryFallbacks ??= DEFAULT_REGISTRY_FALLBACKS.map((fallback) => ({ ...fallback }));
+  const parsed = configSchema.parse(JSON.parse(raw));
+  parsed.registryFallbacks ??= DEFAULT_REGISTRY_FALLBACKS.map((fallback) => ({ ...fallback }));
+  const migrated = rewriteLegacyRegistryUrls(parsed);
+  const config2 = migrated.config;
+  if (migrated.changes.length > 0 && options.notice) {
+    options.notice(
+      `${formatLegacyRegistryRewrites(migrated.changes)}
+Run vapi init to write the new URLs to ${path}.`
+    );
+  }
   const baseRpcUrl = source.BASE_RPC_URL?.trim();
   const arcRpcUrl = source.ARC_TESTNET_RPC_URL?.trim();
   const solanaRpcUrl = source.SOLANA_RPC_URL?.trim();
@@ -43822,7 +43894,7 @@ function serviceHost(resourceUrl) {
 import { mkdir as mkdir5, writeFile as writeFile3 } from "node:fs/promises";
 import { arch, platform, release } from "node:os";
 import { join as join2 } from "node:path";
-var VAPI_CLIENT_VERSION = "0.2.1";
+var VAPI_CLIENT_VERSION = "0.2.3";
 async function createSupportReport(options) {
   const message = options.message.trim();
   if (!message) throw new Error("Support report message must not be empty.");