@zktx.io/sui-mcp 0.5.0 → 0.6.1

package/README.md

@@ -16,8 +16,8 @@ cause another signing or submission request. Request failures and unknown
 outcomes are separate from independently observed chain success/failure.
 
 Account, Receipt and Chart cards provide read-only evidence independently of
-signing. Connect and Review also run inside the MCP host. Settings currently
-uses a local token page. Human-readable review is not a guarantee of safety or
+signing. Connect, Review and Settings also run inside the MCP host. Settings
+provides local data controls and explicit connection-service recovery. Human-readable review is not a guarantee of safety or
 of complete interpretation of every transaction detail; the raw PTB structure
 and addresses remain inspectable.
 
@@ -27,13 +27,13 @@ Users can ask ordinary questions:
 - "How much are my USD-denominated assets together?"
 - "What is the shortfall?"
 
-This document describes `@zktx.io/sui-mcp@0.5.0`. Confirm that version is
+This document describes `@zktx.io/sui-mcp@0.6.1`. Confirm that version is
 published before using npm installation commands. For a local build, follow
 [Developer Checkout Setup](docs/MCP_SETUP.md#developer-checkout-setup).
 
 ## Product Scope in Two Layers
 
-- **Implemented:** Sui mainnet read evidence, non-signable external proposal review, and account-bound DeepBook swap review using protocol-agnostic adapters. Five internal cards use the same SQLite state and permission model. The backend verifies stored material, ownership, quote/policy provenance, human-readable facts, simulation and PTB evidence before an explicit user request. WalletConnect carries bytes only between the backend and wallet; ordinary MCP responses expose facts, request status and observed execution results. Settings remains a local token page; an internal Settings card is not implemented.
+- **Implemented:** Sui mainnet read evidence, non-signable external proposal review, and account-bound DeepBook swap review using protocol-agnostic adapters. Six internal cards use the same SQLite state and permission model. The backend verifies stored material, ownership, quote/policy provenance, human-readable facts, simulation and PTB evidence before an explicit user request. WalletConnect carries bytes only between the backend and wallet; ordinary MCP responses expose facts, request status and observed execution results. Settings owns endpoint and read-address controls, local backup/import/reset, and explicit connection-service recovery. Settings operations require scoped user confirmation; ordinary MCP calls only create the card or read settings.
 - **Never (permanently unsupported at every layer):** no private-key custody, no MCP or AI autonomous execution, no forwarding of opaque external transaction bytes to a wallet, no silent settlement-token or route choice, no fiat cash-out, no P&L, no peg guarantee.
 
 DeepBook provides the current scoped Sui conversion, price, and orderbook
@@ -191,20 +191,17 @@ install through your client's registry support or run `npx -y @zktx.io/sui-mcp`.
 For per-client configuration (Claude Code, Claude Desktop, Codex, Cursor) and
 running from a local checkout, see [docs/MCP_SETUP.md](docs/MCP_SETUP.md).
 
-### Package and repository transition
+### Package identity and local data
 
-The package for this release is `@zktx.io/sui-mcp@0.5.0`, and its repository is
-`zktx-mcp/sui-mcp`. The previous package is `@zktx.io/say-ur-intent` (through
-0.4.4). The older `@stelis/say-ur-intent@0.4.0` is also a separate package.
-Existing installations and MCP client registrations do not change names
-automatically. Before switching, confirm the new package with
-`npm view @zktx.io/sui-mcp@0.5.0 version`; renaming the repository does not publish
-an npm package or MCP Registry entry.
+The npm package is `@zktx.io/sui-mcp`, and its repository is
+`zktx-mcp/sui-mcp`. Confirm the requested version is available before changing
+your client registration.
 
 Use the full scoped package name: the unscoped `sui-mcp` package is a different
-project. Keep the MCP registration name `sui-mcp`, without a suffix. This release
-starts with a new local data directory and does not import or
-convert data from the previous package. See the
+project. Keep the MCP registration name `sui-mcp`, without a suffix. Compatible
+updates preserve the current data directory. Incompatible databases and backups
+are rejected without conversion, and files are left in place. Data from a
+different package is not discovered or imported. See the
 [setup guide](docs/MCP_SETUP.md#switching-the-installed-package) for installation
 and shared-server restart instructions.
 
@@ -253,16 +250,19 @@ AI client answer behavior must be mirrored in runtime-facing instructions, resou
 - `docs/WALLET_CONNECTION.md`: Wallet connection reference: active read context, private SDK ownership and user-approved transaction requests.
 - `protocols/deepbook-v3.md`: Protocol reference only; use MCP tool responses and read.list_supported_protocols for current support.
 - `protocols/deepbook-margin.md`: Protocol reference only; no margin MCP read tools or signable actions are exposed in this release.
-- `docs/golden-scenarios/INTENT_EVIDENCE_MATRIX.md`: current-release question, tool-path, and standard-answer matrix for AI client release review.
-- `docs/golden-scenarios/BEHAVIOR_MATRIX.md`: broader behavior scenario matrix for supported and unsupported user prompts.
 - `docs/TRANSACTION_ACTIVITY_LOG.md`: transaction activity evidence, storage, scan, and summary boundaries.
 - `docs/UTILITY_INDEX.md`: manual maintainer and developer utilities. Utility rows are not MCP tools unless they explicitly name an MCP tool, and source-checkout scripts are not packaged product commands.
 - `docs/LOCAL_DB_ARCHITECTURE.md`: local SQLite storage boundaries for maintainers.
 - `docs/SDK_API.md`: pinned SDK API notes and source-verification boundaries.
-- `docs/FRONTEND_POLICY.md`: review-app frontend implementation policy for coding agents.
 - `docs/SIGNABLE_ADAPTER_CONTRACT.md`: wallet-review adapter and PTB visualization contract. It defines the pre-signing review evidence and commitment boundary; wallet signing requires a user card action and approval in the wallet; the backend alone handles bytes.
-- `AGENTS.md`: root repository development contract and non-negotiable product boundaries for coding agents working on this codebase.
-- `docs/AGENT_DEVELOPMENT_POLICY.md`: detailed binding development, review, documentation, source-of-truth, and completion policies for coding agents.
+
+Contributor references live in the source repository and are not installed MCP
+resources or product commands:
+
+- [AGENTS.md](https://github.com/zktx-mcp/sui-mcp/blob/main/AGENTS.md): root repository development contract and non-negotiable product boundaries.
+- [docs/AGENT_DEVELOPMENT_POLICY.md](https://github.com/zktx-mcp/sui-mcp/blob/main/docs/AGENT_DEVELOPMENT_POLICY.md): contributor development and review policy.
+- [docs/FRONTEND_POLICY.md](https://github.com/zktx-mcp/sui-mcp/blob/main/docs/FRONTEND_POLICY.md): card frontend implementation policy.
+- [docs/golden-scenarios/INTENT_EVIDENCE_MATRIX.md](https://github.com/zktx-mcp/sui-mcp/blob/main/docs/golden-scenarios/INTENT_EVIDENCE_MATRIX.md) and [docs/golden-scenarios/BEHAVIOR_MATRIX.md](https://github.com/zktx-mcp/sui-mcp/blob/main/docs/golden-scenarios/BEHAVIOR_MATRIX.md): release-review scenarios; current tool responses define supported evidence.
 
 ## Contract Name Registry
 
@@ -272,7 +272,7 @@ safety, trust, route-quality, or signing-readiness signal, and only registered
 addresses are relabeled.
 
 Two pinned, context-aware registries in
-[`src/core/action/contractNameRegistry.ts`](src/core/action/contractNameRegistry.ts)
+[`src/core/action/contractNameRegistry.ts`](https://github.com/zktx-mcp/sui-mcp/blob/main/src/core/action/contractNameRegistry.ts)
 drive this:
 
 - packages, relabeled only in `<address>::` path position — the DeepBook swap

package/dist/adapters/adapterPromptSurfaces.js

@@ -1,18 +1,5 @@
 import { z } from "zod";
 import { DEEPBOOK_SWAP_ACTION_KIND, DEEPBOOK_SWAP_ADAPTER_ID } from "./deepbook/deepbookSwapIntent.js";
-/**
- * One slash-prompt surface contributed by a review adapter.
- *
- * Prompt names follow action-first naming: `<action>-<protocolSlug>`
- * (for example `swap-deep`). Users reach for the verb before the venue, so
- * action-first keeps autocomplete grouped by what the user wants to do. When
- * an action has exactly one registered protocol, the bare action name (for
- * example `swap`) is also registered as a shorthand.
- *
- * The surface carries only protocol-specific copy. Boundary language (no
- * signing data, no transaction bytes, local-review-only signing) is owned by
- * the platform and appended at registration time; adapters cannot weaken it.
- */
 export const adapterPromptSurfaceSchema = z
     .object({
     adapterId: z.string().min(1),
@@ -32,13 +19,6 @@ export const adapterPromptSurfaceSchema = z
 export function promptNameFor(surface) {
     return `${surface.action}-${surface.protocolSlug}`;
 }
-/**
- * Bare action prompts (`swap`) are always registered. With a single
- * registered protocol they go straight to that protocol; with several they
- * carry an optional `protocol` argument (completion suggests the slugs) and
- * instruct the model to ask the user which protocol to use - never to pick a
- * venue silently.
- */
 export function actionGroups(surfaces) {
     const byAction = new Map();
     for (const surface of surfaces) {

package/dist/adapters/deepbook/deepbookQuotePolicy.js

@@ -1,9 +1,5 @@
 import { parseDeepbookRawU64 } from "../../core/read/deepbookReadHelpers.js";
 export const DEEPBOOK_REVIEW_QUOTE_STALE_AFTER_MS = 30_000;
-// Same-machine pipelines capture `now` before the network quote fetch, so the
-// fetch timestamp can land a few hundred milliseconds "in the future". Treat
-// skew within this tolerance as a fresh quote (age 0) and record the skew;
-// anything beyond it is a real clock-integrity violation and refuses.
 export const DEEPBOOK_QUOTE_FUTURE_SKEW_TOLERANCE_MS = 5_000;
 export const DEEPBOOK_MAX_SLIPPAGE_BPS = 1000;
 export const DEEPBOOK_MIN_SLIPPAGE_BPS = 1;

package/dist/adapters/deepbook/deepbookReviewEvidence.js

@@ -116,8 +116,6 @@ export async function computeDeepbookSwapReviewEvidence(input) {
                 asset: quotePolicyAmount(quote.rawQuote.directionalOutput).asset
             },
             protocolFee: quotePolicyAmount(quote.rawQuote.deepRequired),
-            // The pipeline anchor `now` is captured before the network quote fetch,
-            // so anchor derivedAt at the quote timestamp when the fetch lands later.
             derivedAt: new Date(Math.max(now.getTime(), Date.parse(quotePolicy.fetchedAt)))
         });
     }
@@ -132,10 +130,6 @@ export async function computeDeepbookSwapReviewEvidence(input) {
         transactionMaterialDigest: digestStage.evidence,
         swapQuotePolicy
     };
-    // Render the PTB visualization as soon as material and digest exist, so the
-    // review page can draw the transaction even when a later stage stops the
-    // review. The artifact is commitment-bound at production and carries no
-    // digest or bytes.
     let ptbVisualization;
     if (input.ptbVisualizationProducer) {
         const rendered = await input.ptbVisualizationProducer({
@@ -227,9 +221,6 @@ export async function computeDeepbookSwapReviewEvidence(input) {
     });
     if (!simulationStage.ok) {
         return {
-            // Keep the public projection paired with the stored private evidence:
-            // the human-readable review stays visible while simulation asks for a
-            // refresh, and the store's projection binding stays satisfied.
             result: withPtb({
                 ...simulationStage.result,
                 humanReadableReview: publicHumanReadableReviewFromEvidence(humanReviewStage.evidence)

package/dist/adapters/deepbook/deepbookTransactionMaterialProducer.js

@@ -112,14 +112,7 @@ export function createDeepbookSwapTransactionMaterialProducer(options) {
             });
             const transaction = new Transaction();
             transaction.setSender(input.account);
-            // The DeepBook SDK reserves a 0.25 SUI gas budget by default, which
-            // blocks small wallets whose balance is close to the swap amount. A
-            // mainnet DeepBook swap costs well under this explicit 0.05 SUI budget.
             transaction.setGasBudget(DEEPBOOK_SWAP_GAS_BUDGET_MIST);
-            // input_coin fee mode swaps with an explicit zero DEEP coin; the Move
-            // entry point then charges the taker fee in the source coin at the
-            // protocol penalty. The explicit zero coin avoids SDK coin selection,
-            // which cannot resolve a zero balance for accounts holding no DEEP.
             const inputFeeMode = input.quotePolicy.feeMode === "input_coin";
             const zeroDeepCoin = inputFeeMode
                 ? transaction.moveCall({
@@ -245,8 +238,6 @@ function quotePolicyExpiresAt(policy) {
     return new Date(Date.parse(policy.fetchedAt) + policy.staleAfterMs);
 }
 function buildFailureMessage(error) {
-    // The pinned SDK discards some gRPC error kinds when building a transaction.
-    // Its error text cannot establish an account-balance or gas shortfall.
     if (error instanceof SimulationError && error.executionError) {
         return "DeepBook transaction was rejected during build-time simulation. Refresh the review or inspect its selected constraints. Nothing was signed or submitted.";
     }

package/dist/adapters/intentPlanFactories.js

@@ -1,11 +1,5 @@
 import { z } from "zod";
 import { createDeepbookSwapActionPlan, DEEPBOOK_SWAP_ACTION_KIND, DEEPBOOK_SWAP_ADAPTER_ID, DEEPBOOK_SWAP_PROTOCOL } from "./deepbook/deepbookSwapIntent.js";
-/**
- * Protocol-neutral swap intent. The optional `protocol` field carries the
- * protocol slug (same slug vocabulary as the adapter prompt surfaces). When
- * several protocols support the same action kind, the caller must name one -
- * the entry point never picks a venue silently.
- */
 export const swapIntentInputSchema = z.object({
     type: z.literal("swap"),
     from: z.object({

package/dist/core/action/contractNameRegistry.js

@@ -1,7 +1,6 @@
 import { mainnetPackageIds } from "@mysten/deepbook-v3";
 import { MOVE_STDLIB_ADDRESS, normalizeSuiAddress, SUI_CLOCK_OBJECT_ID, SUI_COIN_REGISTRY_OBJECT_ID, SUI_DENY_LIST_OBJECT_ID, SUI_FRAMEWORK_ADDRESS, SUI_RANDOM_OBJECT_ID, SUI_SYSTEM_ADDRESS, SUI_SYSTEM_STATE_OBJECT_ID } from "@mysten/sui/utils";
 import { DEEPBOOK_SOURCE_FIELD_VALUES } from "../read/deepbookSourceOwners.js";
-/** Packages, relabeled only where they appear as a `<address>::...` path. */
 export const PACKAGE_NAME_REGISTRY = [
     {
         address: mainnetPackageIds.DEEPBOOK_PACKAGE_ID,
@@ -24,7 +23,6 @@ export const PACKAGE_NAME_REGISTRY = [
         source: "sui_sdk_system_address"
     }
 ];
-/** Well-known shared system objects, relabeled only as a bare object id. */
 export const OBJECT_NAME_REGISTRY = [
     {
         address: SUI_SYSTEM_STATE_OBJECT_ID,
@@ -52,20 +50,11 @@ export const OBJECT_NAME_REGISTRY = [
         source: "sui_sdk_coin_registry_object_id"
     },
     {
-        // Address-based balances (coin reservation / fast path) reference the
-        // accumulator root object. @mysten/sui defines this id only internally as
-        // normalizeSuiAddress("0xacc") (not an exported constant), so mirror it here.
         address: normalizeSuiAddress("0xacc"),
         name: "AccumulatorRoot",
         source: "sui_accumulator_root_object_id_0xacc"
     }
 ];
-/**
- * Normalize a Sui address or package id to `0x` + 64 lowercase hex, or return
- * undefined when the input is not a well-formed Sui address. Short forms are
- * left-padded with zeros so different-width forms of the same address compare
- * equal.
- */
 function normalizeContractAddress(value) {
     const lower = value.trim().toLowerCase();
     const body = lower.startsWith("0x") ? lower.slice(2) : lower;
@@ -82,63 +71,21 @@ function buildNameMap(entries) {
 }
 const PACKAGE_NAME_BY_ADDRESS = buildNameMap(PACKAGE_NAME_REGISTRY);
 const OBJECT_NAME_BY_ADDRESS = buildNameMap(OBJECT_NAME_REGISTRY);
-/**
- * Replace registered addresses in PTB Mermaid label text with their display
- * names. Mermaid node ids are synthetic (`command0`, `input0`, ...), so an
- * address only appears inside quoted label text, and matching is context-aware:
- *
- *  - A package is relabeled only where it is a path prefix (`<address>::`), the
- *    form a MoveCall target or type path takes — never a bare object id.
- *  - A well-known object is relabeled only where it is a bare id (not followed by
- *    `::`), the form an object input takes — never a package path.
- *
- * Unknown addresses (no registered name) are shortened for the display graph
- * (leading zeros collapsed, long ids middle-elided); the full address stays in
- * the artifact's raw `text` stream for audit and copy. Matching uses the full
- * `0x` + 64-hex address form the PTB renderer (`@zktx.io/ptb-model`) emits; the
- * registry keys are normalized to that same form.
- *
- * Registered package names may be Move Registry names like `@deepbook/core`;
- * Mermaid v11 reads a literal `@` as node/edge metadata syntax even inside a
- * quoted label and crashes the renderer, so an inserted `@` is written as the
- * decimal entity `#64;`, which renders as `@` without a literal `@`. The copyable
- * Mermaid source keeps raw addresses (it is built from the unmodified text), so
- * this only affects the rendered graph.
- */
 export function applyContractNamesToMermaid(mermaidText) {
     let text = mermaidText;
-    // Packages: only in path position (`<address>::...`).
     for (const [address, name] of PACKAGE_NAME_BY_ADDRESS) {
         text = text.split(`${address}::`).join(`${mermaidSafeName(name)}::`);
     }
-    // Objects: only as a bare id (anything but a `::` path prefix).
     for (const [address, name] of OBJECT_NAME_BY_ADDRESS) {
         const safe = mermaidSafeName(name);
         text = text.replace(new RegExp(`${address}(?!::)`, "g"), () => safe);
     }
-    // Any address still present (no registered name) is shortened for the display
-    // graph; its `::module::name` suffix, if any, is left intact. The full address
-    // is untouched in the raw `text` stream the artifact keeps for audit and copy.
     text = text.replace(/0x[0-9a-f]{40,64}(?![0-9a-f])/gi, (address) => shortenAddressForDisplay(address));
     return text;
 }
-/**
- * Escape characters that break Mermaid label parsing. A literal `@` triggers
- * Mermaid v11 node/edge metadata syntax (even inside quotes) and throws, so it
- * is written as the `#64;` decimal entity, which renders as `@`. The other
- * registered label characters (letters, `/`, `-`, `_`, `.`, `:`) are valid in
- * Mermaid label text.
- */
 function mermaidSafeName(name) {
     return name.replace(/@/g, "#64;");
 }
-/**
- * Shorten an unregistered full-length address for the display graph: collapse
- * leading zeros so low ids read compactly (`0x...0002` -> `0x2`), and middle-elide
- * a genuinely long id (`0x123456...cdef`). Display only — the raw `text` stream
- * keeps the full address for audit and copy. Uses ASCII `...` (a Mermaid-valid
- * label character) rather than a unicode ellipsis.
- */
 function shortenAddressForDisplay(address) {
     const body = address.slice(2).replace(/^0+/, "");
     if (body.length === 0) {

package/dist/core/action/forbiddenFields.js

@@ -27,10 +27,6 @@ export function findForbiddenMcpFields(value, path = "$") {
     return Object.entries(value).flatMap(([key, nested]) => {
         const normalized = key.toLowerCase();
         const currentPath = `${path}.${key}`;
-        // Deliberately conservative: MCP tool output and stored evidence should not
-        // carry raw byte, signing, token, signature, seed, or key material under
-        // direct prefix/suffix key names. Generic domain keys such as tokenSymbol
-        // and bytesPerSecond remain valid.
         const current = isForbiddenFieldKey(normalized) ? [currentPath] : [];
         return current.concat(findForbiddenMcpFields(nested, currentPath));
     });

package/dist/core/action/ptbVisualizationProducer.js

@@ -45,9 +45,6 @@ export async function producePtbVisualizationArtifact(input) {
         },
         mermaid: {
             diagramType: "flowchart",
-            // text keeps raw package addresses (truth/audit and copyable source);
-            // namedText relabels registered packages with their Move Registry name for
-            // the default graph, with a review-page toggle back to raw addresses.
             text: mermaidText,
             namedText: applyContractNamesToMermaid(mermaidText)
         },

package/dist/core/action/receiptPtbGraph.js

@@ -1,25 +1,8 @@
 import { rawTransactionToIR, transactionIRToMermaid } from "@zktx.io/ptb-model";
 import { applyContractNamesToMermaid } from "./contractNameRegistry.js";
-// Produce a left-to-right PTB Mermaid graph for a PUBLIC receipt straight from the
-// already-fetched on-chain transaction's inputs and commands. Unlike the
-// signing-flow `producePtbVisualizationArtifact`, this needs no stored material and
-// no digest commitment — the transaction is the chain's own record, read by digest.
-// It uses the same `@zktx.io/ptb-model` pipeline (LR, matching the review page), so
-// the receipt graph and the review graph render identically.
-//
-// The same contract name registry the review graph uses is applied here, so
-// registered packages/objects show their display name (@deepbook/core, Clock, …)
-// and every other long address is shortened for the graph; the full ids stay in
-// the receipt's Inputs / Move calls / Object changes sections and Markdown.
-//
-// Returns undefined when the model cannot render the transaction (e.g. a
-// non-programmable system transaction); the page then shows a placeholder card in
-// the same slot rather than collapsing the layout.
 export function receiptPtbMermaid(transactionData) {
     try {
         const ir = rawTransactionToIR({ inputs: transactionData.inputs, commands: transactionData.commands });
-        // Emit both the raw-address graph and the registry-named graph so the receipt and
-        // the review render the same toggleable graph through the shared component.
         const text = transactionIRToMermaid(ir, { direction: "LR" });
         return text.trim().length > 0 ? { text, namedText: applyContractNamesToMermaid(text) } : undefined;
     }

package/dist/core/action/reviewTimeSimulationEvidence.js

@@ -207,8 +207,6 @@ export function createReviewTimeSimulationProducer(options) {
             const result = await options.client.transactionExecutionService.simulateTransaction({
                 transaction: { bcs: { value: material.transactionBytes } },
                 checks: GrpcTypes.SimulateTransactionRequest_TransactionChecks.ENABLED,
-                // With false, the node may inject mock gas for empty payments. A fully
-                // specified BCS transaction stays immutable: verify returned bytes below.
                 doGasSelection: true,
                 readMask: { paths: ["transaction.transaction.bcs", "transaction.effects", "transaction.balance_changes",
                         "transaction.objects.objects.object_id", "transaction.objects.objects.object_type"] }
@@ -354,8 +352,6 @@ function createReviewTimeSimulationEvidenceFromTransaction(input) {
         transaction: summarizeSimulatedTransaction(Transaction.from(returnedBytes).getData(), input.transactionMaterial.account, input.chainIdentifier)
     });
 }
-// Preserve the established simulation labels while reading the SDK's public
-// protobuf enums. Missing state is malformed evidence, not a guessed state.
 function simulationEnum(values, value) {
     if (value === undefined || values[value] === undefined)
         throw new Error("simulation object state is missing");

package/dist/core/action/signableAdapterContract.js

@@ -4,7 +4,6 @@ import { SUI_TYPE_ARG } from "@mysten/sui/utils";
 import { makeCanonicalRawU64StringSchema } from "../numeric/rawU64.js";
 import { suiAddressStringSchema, suiTransactionDigestSchema } from "../suiAddress.js";
 export const REVIEW_TIME_SIMULATION_PROVIDER = "client.transactionExecutionService.simulateTransaction";
-// Stored public history may retain the previous provider; new review evidence uses the provider above.
 export const reviewSimulationProviderSchema = z.enum(["client.core.simulateTransaction", REVIEW_TIME_SIMULATION_PROVIDER]);
 export const TRANSACTION_REVIEW_SCHEMA_VERSION = 1;
 export const PTB_VISUALIZATION_CONTRACT_VERSION = "ptb-visualization-contract-alpha-2026-05-25";
@@ -44,7 +43,6 @@ export const PTB_VISUALIZATION_REQUIRED_UNSUPPORTED_USES = [
     "payment_execution_readiness",
     "route_recommendation"
 ];
-// The generic review contract must not load a protocol registry to name Sui gas.
 export const SUI_GAS_COIN_TYPE = SUI_TYPE_ARG;
 export const SUI_GAS_RAW_UNIT = "MIST";
 const EXPIRY_TIMESTAMP_SOURCE_FIELDS = ["checkedAt", "expiresAt"];
@@ -955,9 +953,6 @@ export const transactionReviewDataSchema = z.object({
         requireEqual(ctx, value.simulation.failureReason, simulationClaim.failureReason, ["simulation", "failureReason"], "simulation.failureReason");
     }
 }).superRefine((value, ctx) => {
-    // Contract invariant: human review, review-time simulation, and transaction
-    // material commitment must all reference the same Sui transaction digest.
-    // Reuse requireEqual so commitment checks match the evidence-claim bindings.
     const handoffDigest = value.reviewedTransactionDigest;
     requireEqual(ctx, value.humanReadableReview.transactionDigest, handoffDigest, ["humanReadableReview", "transactionDigest"], "humanReadableReview.transactionDigest");
     requireEqual(ctx, value.simulation.transactionDigest, handoffDigest, ["simulation", "transactionDigest"], "simulation.transactionDigest");

package/dist/core/action/suiChainReceiptMapping.js

@@ -1,10 +1,4 @@
 import { parseSuiAddress } from "../suiAddress.js";
-// Shared, pure mappers from the SDK getTransaction result to chain-receipt facts.
-// Both the session-bound verifier (suiChainReceiptVerifier.ts) and the public
-// receipt reader (suiChainReceiptReader.ts) use these so the effects-status,
-// Move-call, and object-type shapes are mapped in one place. Balance changes are
-// not here because the verifier filters them to the reviewed account while the
-// public reader keeps them all, so each owns its own balance mapper.
 export function effectsStatusFromSdk(status) {
     if (status.success) {
         return { success: true };
@@ -52,12 +46,6 @@ export function objectTypesFromSdk(objectTypes) {
         return [normalizedObjectId, objectType];
     }));
 }
-// Fail-closed address parsing for receipt facts. Both the verifier and the
-// public reader turn a raw chain address into a receipt address ONLY through
-// this helper, so neither path can silently drop or null out a balance-change
-// address or sender when the SDK payload is not the expected shape. A malformed
-// address throws; callers map the throw to a fail-closed receipt outcome rather
-// than returning partial facts.
 export function requireReceiptAddress(rawAddress, errorMessage) {
     const address = rawAddress === null || rawAddress === undefined ? undefined : parseSuiAddress(rawAddress);
     if (!address) {
@@ -65,9 +53,6 @@ export function requireReceiptAddress(rawAddress, errorMessage) {
     }
     return address;
 }
-// Shared error classification for the getTransaction read, used by both the
-// verifier and the public reader so a "transaction not found" is recognized one
-// way everywhere.
 export function isReceiptNotFoundError(error) {
     const code = typeof error === "object" && error !== null
         ? (error.code ?? error.status)
@@ -75,9 +60,6 @@ export function isReceiptNotFoundError(error) {
     if (code === "NOT_FOUND" || code === "NotFound" || code === "NOT_FOUND_ERROR" || code === 5) {
         return true;
     }
-    // Only genuine "this digest does not exist / is not indexed" signals map to
-    // not_found. Availability/outage phrasing (e.g. "service not available") is a
-    // provider failure and must stay an `unavailable` (502), not a 404.
     return /\b(not found|not indexed|could not find|unable to find|no transaction)\b/i.test(receiptErrorMessage(error, ""));
 }
 export function receiptErrorMessage(error, fallback) {

package/dist/core/action/suiChainReceiptReader.js

@@ -42,20 +42,10 @@ export async function readPublicChainReceipt(options, input) {
     if (!transactionData || !effects || !transaction.balanceChanges || !transaction.objectTypes) {
         return { status: "unavailable", message: "Sui mainnet receipt is missing required fields." };
     }
-    // Build receipt facts fail-closed: any malformed field (sender, Move calls,
-    // balance-change address, object id) throws inside this block and maps to an
-    // `unavailable` outcome, so the public receipt is never returned with silently
-    // dropped or nulled facts and the mappers can never crash the request. The PTB
-    // graph is best-effort and falls back to undefined (placeholder shown), so it is
-    // produced outside this block and never fails the receipt.
     let receipt;
     try {
         receipt = {
             txDigest: transaction.digest,
-            // A present-but-unparseable sender is a malformed payload and fails closed.
-            // An absent sender is legitimate for some system transactions, so it maps
-            // to undefined. The account-bound verifier instead requires a sender
-            // because it must match the reviewed account.
             sender: transactionData.sender === null || transactionData.sender === undefined
                 ? undefined
                 : requireReceiptAddress(transactionData.sender, "Sui mainnet receipt has an unparseable sender address."),
@@ -77,9 +67,6 @@ export async function readPublicChainReceipt(options, input) {
             message: receiptErrorMessage(error, "Sui mainnet receipt could not be read as expected facts.")
         };
     }
-    // Best-effort decimals enrichment: resolved outside the fail-closed block so a
-    // coin-metadata miss or outage leaves the balance change on its raw amount and
-    // never turns a readable receipt into an error.
     if (options.resolveCoinUnit && receipt.balanceChanges.length > 0) {
         receipt = { ...receipt, balanceChanges: await withCoinDecimals(receipt.balanceChanges, options.resolveCoinUnit) };
     }
@@ -92,7 +79,6 @@ async function withCoinDecimals(changes, resolveCoinUnit) {
             units.set(coinType, await resolveCoinUnit(coinType));
         }
         catch {
-            // Best-effort only: leave the coin without decimals.
         }
     }));
     return changes.map((change) => {
@@ -143,13 +129,10 @@ function firstPaymentObjectId(gasData) {
             if (!readCoinReservation(ref.digest))
                 return ref.objectId;
         }
-        catch { /* Invalid refs do not establish gas object facts. */ }
+        catch { }
     }
     return undefined;
 }
-// PTB inputs, simplified to a kind and (for object inputs) an object id. The exact
-// SDK enum shape is read defensively so a shape change degrades to `unknown`
-// rather than throwing.
 function inputsFromSdk(inputs) {
     return inputs.map((raw, index) => {
         const input = asRecord(raw);
@@ -195,9 +178,6 @@ function ptbGraphFromTransaction(transactionData) {
 function asRecord(value) {
     return typeof value === "object" && value !== null ? value : undefined;
 }
-// A pure input's bytes arrive base64-encoded; surface them as 0x-hex (the
-// convention used elsewhere in the UI). Returns undefined for an absent or
-// non-string value so the input simply carries no bytes.
 function pureBytesToHex(value) {
     if (typeof value !== "string" || value.length === 0) {
         return undefined;

package/dist/core/action/suiChainReceiptVerifier.js

@@ -4,14 +4,7 @@ import { normalizeCoinType } from "../read/coinMetadata.js";
 import { parseSuiAddress, suiTransactionDigestSchema } from "../suiAddress.js";
 import { effectsStatusFromSdk, isReceiptNotFoundError, objectTypesFromSdk, packageCallsFromTransaction, receiptErrorMessage, requireReceiptAddress } from "./suiChainReceiptMapping.js";
 export const SUI_CHAIN_RECEIPT_GET_TRANSACTION_INCLUDE = includeObjectFromFields(SUI_CHAIN_RECEIPT_REQUIRED_INCLUDE);
-// Bounded per-read wait for the known digest to become visible on this node.
-// This existing 12-second source-read window is independent of the backend's
-// 10-minute initial observation deadline. A missing receipt does not establish
-// whether a prior submit (including one with a lost reply) executed.
 export const SUI_CHAIN_RECEIPT_WAIT_TIMEOUT_MS = 12_000;
-// waitForTransaction aborts with a DOMException named "TimeoutError" when its wait window elapses.
-// Treat that exactly like not_found — the transaction is simply not readable here yet — so the
-// session stays pending for a retry rather than being marked a verification failure.
 function isWaitTimeoutError(error) {
     return typeof error === "object" && error !== null && error.name === "TimeoutError";
 }
@@ -36,9 +29,6 @@ export async function verifySuiChainReceipt(options, input) {
     }
     let result;
     try {
-        // The signed transaction was just submitted: it is on chain but may not yet be queryable on
-        // this server's fullnode (checkpoint-propagation lag). Wait for it instead of returning a
-        // premature not_found, so a single review-page poll resolves straight to the final receipt.
         result = await options.client.core.waitForTransaction({
             digest: parsedInput.txDigest,
             include: SUI_CHAIN_RECEIPT_GET_TRANSACTION_INCLUDE,

package/dist/core/action/transactionFunding.js

@@ -34,7 +34,6 @@ export const transactionFundingDescriptionSchema = z.object({
     expiration
 }).strict();
 const addressBalance = z.object({ owner: address, coinType,
-    // A holding can exceed the u64 limit of an individual transaction input.
     balanceRaw: z.string().regex(/^(0|[1-9][0-9]*)$/), requiredRaw: z.string().regex(/^(0|[1-9][0-9]*)$/)
 }).strict();
 export const transactionFundingEvidenceSchema = transactionFundingDescriptionSchema.extend({
@@ -54,11 +53,6 @@ export class TransactionFundingError extends Error {
         this.kind = kind;
     }
 }
-// Reservation-format portions are adapted from Mysten Labs (Apache-2.0).
-// Copyright (c) Mysten Labs, Inc. See LICENSES/@mysten-sui-2.17.0-Apache-2.0.txt.
-// Sui mainnet-v1.72.5 coin_reservation.rs and @mysten/sui 2.17.0
-// utils/coin-reservation.ts define this layout. The SDK helper is not exported.
-// Decode only: coin selection and reservation creation remain SDK/node work.
 export function readCoinReservation(digest) {
     const bytes = fromBase58(digest);
     if (bytes.length !== 32)
@@ -131,7 +125,6 @@ export function describeTransactionFunding(data, account, chainIdentifier) {
         }
         else if (value.Epoch !== undefined) {
             const epoch = value.Epoch;
-            // The pinned SDK's BCS Epoch decoder returns a number, unlike ValidDuring.
             if (typeof epoch === "number" && (!Number.isSafeInteger(epoch) || epoch < 0)) {
                 throw new Error("Transaction expiration epoch must be a non-negative safe integer");
             }

package/dist/core/action/types.js

@@ -25,7 +25,6 @@ export const REFRESH_REASONS = [
 export const REVIEW_PREPARATION_STATUSES = ["proposed", "awaiting_wallet", "wallet_connected", "ready_for_wallet_review", "refresh_required", "blocked", "expired"];
 export const REVIEW_MATERIAL_DERIVED_FIELDS = ["humanReadableReview", "simulation", "transactionReviewData",
     "ptbVisualization", "assetFlowActual", "beforeAfterBalance"];
-// Display wording for the three computed review states, not wallet authority.
 export const REVIEW_UI_LABELS = {
     ready_for_wallet_review: "Ready for your review",
     refresh_required: "Review needs updating",

package/dist/core/action/walletReviewContractAssembler.js

@@ -105,8 +105,6 @@ export function mapReviewTimeSimulationGasToContractDraft(evidenceInput, gasObje
     const gasAsset = { coinType: SUI_GAS_COIN_TYPE };
     const gasUsedSourceId = "review_time_simulation_gas_used_source";
     const gasUsedClaimId = "review_time_simulation_gas_used_claim";
-    // A storage rebate can make net gas negative. Keep the verified budget and
-    // simulation components; do not invent an unsigned zero or a spending claim.
     if (gasUsed >= 0n) {
         sourceReferences.push(adapterSourceOfTruthSchema.parse({
             id: gasUsedSourceId,