@vapi-network/mcp 0.3.0 → 0.7.0

package/dist/wallet-session.d.ts

@@ -1,9 +1,9 @@
 import { type SecretStore, type SpendCaps, type VapiPaymentAccount, type WalletName, type WalletStore } from "@vapi-network/core";
 import type { WalletAddresses } from "./tools/wallet.js";
-/** The wallet one tool call acts on. `path` is absent on a single-wallet home. */
+/** The account one tool call acts on. `path` is absent on a single-account home. */
 export type SessionWallet = {
     name: WalletName;
-    /** The keystore file, when this machine has a wallet store. */
+    /** The legacy keystore path, when this machine has an account store. */
     path?: string;
 };
 /** One row of `wallet.list`, before balances are read. */
@@ -13,24 +13,22 @@ export type SessionWalletInfo = {
     solanaAddress?: string;
     label?: string;
     isDefault: boolean;
-    /** Whether this is the wallet the session currently pays from. */
+    /** Whether this is the account the session currently pays from. */
     isActive: boolean;
     spendCaps?: SpendCaps;
 };
 export type WalletSessionOptions = {
-    /** The wallet unlocked before stdio was connected, for a store-less home. */
+    /** The account opened before stdio was connected, for a store-less home. */
     account: VapiPaymentAccount;
-    /** The wallets on this machine. Without it the session has exactly one. */
+    /** The accounts on this machine. Without it the session has exactly one. */
     store?: WalletStore | undefined;
     /** The name the session starts on, before `VAPI_WALLET` and the default. */
     wallet?: string | undefined;
     env?: NodeJS.ProcessEnv | undefined;
     /**
-     * The passphrase a payment unlocks with when neither
-     * `VAPI_KEYSTORE_PASSWORD` nor the OS secret store has one. The CLI hands
-     * over what it read at startup — from the person who ran `vapi mcp` in a
-     * terminal — so switching wallets never needs a prompt on a stdout that
-     * belongs to MCP frames.
+     * The passphrase for a legacy 0.5 keystore that has not been migrated yet,
+     * used when neither `VAPI_KEYSTORE_PASSWORD` nor the OS secret store has one.
+     * The CLI hands over what it read at startup, so MCP stdout is never prompted.
      */
     passphrase?: (() => string | Promise<string>) | undefined;
     /** The OS secret store to read `vapi unlock` entries from. */
@@ -38,49 +36,47 @@ export type WalletSessionOptions = {
     now?: (() => Date) | undefined;
 };
 /**
- * Which wallet an MCP session pays from, for the lifetime of the process.
+ * Which account an MCP session pays from, for the lifetime of the process.
  *
- * The session is the only mutable wallet state the server has, and it is
- * deliberately memory-only: `wallet.use` moves it, and nothing in this package
- * ever writes `wallets.json`, creates, removes, renames, backs up or exports a
- * wallet. Reads — addresses, balances, accounts, funding links — need no
- * passphrase at all, because the wallet store can read a keystore's addresses
- * without opening it. Only a payment unlocks a key, once, for that one call.
+ * `wallet.use` is memory-only. The account tools may derive an account or lower
+ * its caps in `wallets.json`, but this package never renames, removes, backs up
+ * or exports one. Reads — addresses, balances, network accounts, funding links
+ * — need no passphrase or opened vault. Only signing operations open a signer.
  */
 export declare class WalletSession {
     #private;
     private readonly options;
     constructor(options: WalletSessionOptions);
-    /** The wallet the next tool call uses when it names none. */
+    /** The account the next tool call uses when it names none. */
     get activeName(): WalletName | undefined;
     get store(): WalletStore | undefined;
     /** The home the audit log lives in, honouring `VAPI_HOME`. */
     get home(): string;
     /**
-     * An explicit name first, then the session's active wallet — which already
+     * An explicit name first, then the session's active account — which already
      * absorbed `VAPI_WALLET` and the registry default when the session started.
      */
     resolve(name?: string): SessionWallet;
-    /** The addresses of a wallet, read straight out of its keystore header. */
+    /** The addresses of an account, read from the vault or a legacy keystore header. */
     addressesFor(name?: string): Promise<{
         wallet: SessionWallet;
     } & WalletAddresses>;
     /**
-     * The unlocked key for one payment, plus the caps of that wallet. Nothing
+     * The signer for one payment, plus the caps of that account. Nothing
      * here is cached: the account is created for this call and dropped with it,
-     * so switching wallets mid-session pays from the wallet that was asked for.
+     * so switching accounts mid-session pays from the account that was asked for.
      */
     payment(name?: string): Promise<{
         wallet: SessionWallet;
         account: VapiPaymentAccount;
         spendCaps?: SpendCaps;
     }>;
-    /** Every wallet this machine knows, with the session's own marker on one. */
+    /** Every account this machine knows, with the session's own marker on one. */
     list(): Promise<SessionWalletInfo[]>;
     /**
-     * Points the session at another wallet. Memory only: the human's default in
+     * Points the session at another account. Memory only: the human's default in
      * `wallets.json` is not touched, so the next `vapi` command in their terminal
-     * still uses the wallet they chose. The switch is audited, because the wallet
+     * still uses the account they chose. The switch is audited, because the account
      * an agent pays from changed.
      */
     use(name: string): Promise<{

package/dist/x402.d.ts

@@ -13,7 +13,9 @@ export declare function buildX402Payment(args: {
     nowSeconds?: number;
     nonce?: Hex;
     fetchImpl?: typeof fetch;
+    paymentId?: string;
 }): Promise<{
     payload: X402PaymentPayload;
     headers: X402PaymentHeaders;
+    paymentId?: string;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vapi-network/mcp",
-  "version": "0.3.0",
+  "version": "0.7.0",
   "description": "Local, non-custodial MCP server for discovering and paying x402 APIs",
   "license": "Apache-2.0",
   "repository": {