@zktx.io/sui-mcp 0.6.0 → 0.6.1

package/dist/mcp-ui/tools.js

@@ -21,8 +21,9 @@ export function supportsCards(server) {
     const capabilities = server.server.getClientCapabilities();
     const { extensions, ...standard } = capabilities ?? {};
     const current = capabilities === undefined ? undefined : { ...standard, ...(extensions === undefined ? {} : { extensions }) };
-    return getUiCapability(current)?.mimeTypes?.includes(RESOURCE_MIME_TYPE) === true ||
-        server.server.getClientVersion()?.name === "codex-mcp-client";
+    const ui = getUiCapability(current);
+    return ui !== null && typeof ui === "object" && !Array.isArray(ui) && Array.isArray(ui.mimeTypes) &&
+        ui.mimeTypes.every((mimeType) => typeof mimeType === "string") && ui.mimeTypes.includes(RESOURCE_MIME_TYPE);
 }
 export function cardToolResult(response, savedLink = false) {
     const snapshot = response.snapshot;
@@ -141,8 +142,6 @@ export function registerReadCards(server, deps) {
         try {
             if (!deps.cards)
                 throw new CardError("Card service is unavailable.");
-            // Measure the actual response shape, including its text fallback and UI
-            // metadata. Reserve maximum safe-integer digit widths for size fields.
             const base = okToolResult({ status: "read", fileId: input.fileId, offset: input.offset, rangeSize: Number.MAX_SAFE_INTEGER });
             const metadata = { ...(input.attemptId ? { attemptId: input.attemptId } : {}), cardId: input.cardId, operationId: input.operationId, fileId: input.fileId, offset: input.offset, totalSize: Number.MAX_SAFE_INTEGER,
                 sha256: "0".repeat(64), chunkBase64: "" };

package/dist/review-server/server.js

@@ -1,8 +1,6 @@
 import { validateHostOrigin } from "./middleware/hostOrigin.js";
 import { sendJson } from "../runtime/shared/http.js";
 import { ALLOWED_HOSTNAMES } from "./reviewServerPolicy.js";
-// The shared runtime serves authenticated private MCP/control routes itself.
-// There are no public browser pages, Settings APIs or static-asset fallbacks.
 export function createReviewRequestHandler(options) {
     return async (request, response) => {
         try {

package/dist/runtime/application.js

@@ -184,7 +184,7 @@ export async function createRuntimeApplication(bootConfig, logger, ownerId = ran
             try {
                 logger.error("Temporary settings file cleanup is incomplete", { stage: "settings_file_cleanup" });
             }
-            catch { /* Stored cleanup facts remain authoritative. */ }
+            catch { }
         });
         return {
             handleMcp: (request, response) => access.run(() => mcp.handle(request, response)),

package/dist/runtime/config.js

@@ -17,8 +17,6 @@ export function loadBootConfig(env = process.env) {
         activityDatabasePath: resolveActivityDatabasePath(env)
     };
 }
-// Existing shared-backend port: clients using the same data directory must
-// agree on this port and configuration. It is not browser-wallet authority.
 export const DEFAULT_REVIEW_PORT = 8765;
 function parseReviewPort(value) {
     if (value === undefined || value === "") {

package/dist/runtime/localSettingsService.js

@@ -57,8 +57,6 @@ export class RuntimeLocalSettingsService {
             suiGraphqlUrl: withBootEffectiveEndpoint(currentStoredGraphqlView, this.bootSuiGraphqlUrl)
         };
     }
-    // The same side-effect-free target resolution serves display and final
-    // verification. Default URLs belong to this service, never to the View.
     resolveEndpointChange(input) {
         const value = input.kind === "restore_endpoint"
             ? input.endpoint === "grpc" ? this.defaultSuiGrpcUrl : this.defaultSuiGraphqlUrl
@@ -66,7 +64,6 @@ export class RuntimeLocalSettingsService {
         return { key: input.endpoint === "grpc" ? "suiGrpcUrl" : "suiGraphqlUrl", value,
             status: input.kind === "restore_endpoint" ? "reset" : "saved" };
     }
-    // Verification does not store a value or change this parent's effective URL.
     async prepareEndpointChange(input) {
         const target = this.resolveEndpointChange(input);
         await this.verifyEndpointForTool(target.value, input.endpoint);

package/dist/runtime/logger.js

@@ -3,8 +3,6 @@ export function flushStderr() {
         const failed = (error) => { process.stderr.off("error", failed); reject(error); };
         process.stderr.once("error", failed);
         process.stderr.write("", (error) => {
-            // A failed stream write also emits error; keep its handler through that
-            // event instead of allowing EPIPE to replace the intended exit code.
             if (error) {
                 reject(error);
                 return;

package/dist/runtime/reviewServerAcquire.js

@@ -4,8 +4,6 @@ function errorCode(error) {
         ? error.code
         : undefined;
 }
-// Bind the port: returns the server on success, undefined when the port is already
-// in use, and rethrows any other (non-EADDRINUSE) startup error.
 async function tryStart(start, port) {
     try {
         return await start(port);
@@ -17,17 +15,6 @@ async function tryStart(start, port) {
         throw error;
     }
 }
-/**
- * Bind the review server to its fixed port, or defer to a healthy peer already
- * serving it.
- *
- * - Port free → bind and own the single review origin.
- * - Port held by a separate healthy instance of our review server → defer (run no
- *   local server; the peer serves the shared database for every client) and watch for
- *   the owner to exit, then take the origin over. No peer process is signalled.
- * - Port held by anything else (foreign, no identity answer, or our own pid) → clear
- *   error; the origin is never silently reassigned.
- */
 export async function startOrDeferReviewServer(start, port, deps) {
     const owned = await tryStart(start, port);
     if (owned) {
@@ -58,14 +45,12 @@ export async function startOrDeferReviewServer(start, port, deps) {
                 next = await tryStart(start, port);
             }
             catch (error) {
-                // An authenticated prior owner may have closed its port while its SDK
-                // still owns private storage. Reuse the existing takeover observation.
                 if (typeof error === "object" && error !== null && "code" in error && error.code === "DATA_DIRECTORY_OWNED")
                     continue;
                 throw error;
             }
             if (!next) {
-                continue; // a peer still owns the port; keep deferring
+                continue;
             }
             if (stopped) {
                 await next.close();
@@ -82,8 +67,6 @@ export async function startOrDeferReviewServer(start, port, deps) {
     return {
         deferred: true,
         close: async () => {
-            // Stop watching; the loop's stopped-check closes any bind that lands in-flight,
-            // so we never await the (possibly mid-delay) watch loop here.
             stopped = true;
             if (acquired) {
                 await acquired.close();

package/dist/runtime/runtimeTermination.js

@@ -1,5 +1,4 @@
 import { SuiEndpointError } from "../core/suiEndpoint.js";
-// Keep arbitrary SDK/server exception text, endpoint values and stacks private.
 export function runtimeFailureReason(error, stage) {
     if (error instanceof SuiEndpointError)
         return `Sui mainnet endpoint verification failed (${error.kind}). Check the configured endpoint.`;
@@ -16,8 +15,6 @@ export function runtimeFailureReason(error, stage) {
         return "The private runtime control identity could not be loaded. Check data directory ownership and permissions.";
     return "The local runtime could not complete this stage. Check local data permissions and runtime configuration.";
 }
-// Bootstrap alone decides exit intent. Cleanup-induced onclose notifications
-// join the same promise; they cannot replace a fatal or signal exit with EOF.
 export class RuntimeTermination {
     options;
     closing;
@@ -34,7 +31,7 @@ export class RuntimeTermination {
                 try {
                     this.options.logger.error(message, { stage, reason: runtimeFailureReason(error, stage) });
                 }
-                catch { /* Preserve failure intent even if stderr is unavailable. */ }
+                catch { }
             };
             if (cause.kind === "failure")
                 report("fatal runtime error", cause.stage, cause.error);

package/dist/runtime/shared/authenticatedFetch.js

@@ -4,8 +4,6 @@ import { randomBytes } from "node:crypto";
 import { Readable } from "node:stream";
 import { MAX_JSON_BODY_BYTES } from "./http.js";
 import { IDENTITY_CHALLENGE_HEADER, IDENTITY_PATH, IDENTITY_TIMEOUT_MS, INTERNAL_MCP_PATH, SERVER_INSTANCE_HEADER, verifyServerIdentity } from "./control.js";
-// Proof and authenticated request use the same TCP socket. A closed socket is never
-// transparently replaced: no credential or UI permission can reach a new listener.
 async function authenticatedChannel(port, control, signal) {
     signal?.throwIfAborted();
     const socket = connect({ host: "127.0.0.1", port });
@@ -86,10 +84,6 @@ export function createAuthenticatedFetch(port, control, expectedInstanceId) {
         headers.set("host", url.host);
         headers.set("authorization", `Bearer ${control.key}`);
         headers.set(SERVER_INSTANCE_HEADER, channel.identity.instanceId);
-        // An early rejection (for example the SDK's body-size guard) must reach
-        // the caller while the request is still being written. Server-side
-        // Connection: close can race that response with EPIPE. This channel is
-        // still destroyed after the response and never reused or replaced.
         headers.set("connection", "keep-alive");
         const body = init?.body;
         if (body !== undefined && body !== null && typeof body !== "string") {

package/dist/runtime/shared/control.js

@@ -3,12 +3,10 @@ import { link, lstat, mkdir, readFile, realpath, unlink, writeFile } from "node:
 import { basename, dirname, join } from "node:path";
 import { z } from "zod";
 import { SERVER_VERSION } from "../../mcp/serverInfo.js";
-// Peers use the one package release identity, with no separate API counter.
 export const IDENTITY_PATH = "/__runtime/identity";
 export const INTERNAL_MCP_PATH = "/__runtime/mcp";
 export const IDENTITY_CHALLENGE_HEADER = "x-sui-mcp-identity-challenge";
 export const SERVER_INSTANCE_HEADER = "x-sui-mcp-server-instance";
-// The existing review-server identity probe allows one second for a local response.
 export const IDENTITY_TIMEOUT_MS = 1000;
 const secretSchema = z.string().regex(/^[A-Za-z0-9_-]{43}$/);
 export const serverIdentitySchema = z.object({

package/dist/runtime/shared/dataAccess.js

@@ -1,6 +1,4 @@
 import { AsyncLocalStorage } from "node:async_hooks";
-// An asynchronous read may finish after import/reset. Its original generation
-// remains attached to the continuation and cannot read or write the replacement DB.
 export class RuntimeDataAccess {
     context = new AsyncLocalStorage();
     generation = 0;

package/dist/runtime/shared/mcpHttp.js

@@ -9,8 +9,6 @@ export function createInternalMcpHandler(createServer) {
     const connections = new Set();
     return {
         async handle(request, response) {
-            // This product has no unsolicited server requests. POST returns JSON, and
-            // clients do not create a reconnecting SSE channel or replay requests.
             if (request.method === "GET") {
                 response.setHeader("Allow", "POST, DELETE");
                 sendJson(response, 405, { error: "method_not_allowed" });
@@ -49,9 +47,6 @@ export function createInternalMcpHandler(createServer) {
                     close: () => transport.close()
                 };
                 transport.onmessage = (message, extra) => {
-                    // The SDK enforces its 4 MiB HTTP body limit before this callback.
-                    // Card calls additionally have a 64 KiB JSON-RPC envelope budget;
-                    // ordinary MCP calls do not inherit that smaller card limit.
                     if (isJSONRPCRequest(message) && message.method === "tools/call" &&
                         Object.values(CARD_TOOLS).some((name) => name === message.params?.name) &&
                         Buffer.byteLength(JSON.stringify(message)) > MAX_JSON_BODY_BYTES) {

package/dist/runtime/shared/ownerLease.js

@@ -4,8 +4,6 @@ import { dirname, join } from "node:path";
 export class DataDirectoryOwnedError extends Error {
     code = "DATA_DIRECTORY_OWNED";
 }
-/** An OS-released ownership lock, separate from the product database. No
- * business transaction is held while waiting for a wallet or network reply. */
 export function acquireDataDirectoryOwner(databasePath) {
     const directory = dirname(databasePath);
     mkdirSync(directory, { recursive: true, mode: 0o700 });
@@ -31,8 +29,6 @@ export function acquireDataDirectoryOwner(databasePath) {
         process.umask(mask);
     }
     try {
-        // A second owner is refused immediately, including one using another port.
-        // SQLite retains the EXCLUSIVE lock after commit until this handle closes.
         lock.pragma("locking_mode=EXCLUSIVE");
         lock.exec("BEGIN EXCLUSIVE");
         lock.exec("CREATE TABLE IF NOT EXISTS owner_lock (singleton INTEGER PRIMARY KEY CHECK (singleton=1))");

package/dist/runtime/shared/server.js

@@ -64,7 +64,6 @@ export async function startSharedServer(input) {
         server.listen(port, "127.0.0.1");
     });
     port = server.address().port;
-    // Only the process that owns the port opens SQLite or initializes services.
     application = Promise.resolve().then(() => input.createApplication(instanceId));
     const closeListener = async () => {
         if (!server.listening)

package/dist/runtime/shared/stdio.js

@@ -5,9 +5,6 @@ import { CallToolRequestSchema, CallToolResultSchema, CompleteRequestSchema, Get
 import { SERVER_INSTRUCTIONS, SERVER_NAME, SERVER_VERSION } from "../../mcp/serverInfo.js";
 import { createAuthenticatedFetch, probeAuthenticatedServer } from "./authenticatedFetch.js";
 import { INTERNAL_MCP_PATH } from "./control.js";
-// The SDK owns request IDs, initialization, cancellation and response parsing.
-// This proxy has no domain services or writable stores. A new request may open a
-// new MCP session after ownership changes; an already dispatched call is never replayed.
 export async function startSharedStdio(input) {
     const server = new Server({ name: SERVER_NAME, version: SERVER_VERSION }, {
         capabilities: { tools: {}, resources: {}, prompts: {}, completions: {} }, instructions: SERVER_INSTRUCTIONS
@@ -56,7 +53,7 @@ export async function startSharedStdio(input) {
                 close: async () => { try {
                     await http.terminateSession();
                 }
-                catch { /* The prior owner may already be gone. */ } await http.close(); }
+                catch { } await http.close(); }
             };
             http.onmessage = (message) => { if (http.sessionId !== undefined)
                 transport.sessionId = http.sessionId; transport.onmessage?.(message); };
@@ -105,7 +102,7 @@ export async function startSharedStdio(input) {
             try {
                 await connecting;
             }
-            catch { /* Initialization was cancelled with the stdio connection. */ }
+            catch { }
             await connection?.client.close();
             connection = undefined;
         }

package/dist/runtime/smokeMainnetRead.js

@@ -125,8 +125,6 @@ async function main() {
         });
         const reviewDependencies = createRuntimeReviewDependencies({ client: suiClient, chainIdentifier,
             expectedChainIdentifier: config.expectedChainIdentifier, materialStore: transactionMaterialStore, readService });
-        // Utility-only read context in this script's temporary DB. This does not
-        // create a live wallet session or prove address ownership.
         await activityStore.setActiveAccount(smokeAddress, "wallet_connection", new Date(), { name: "Explicit smoke read fixture" });
         server = createMcpServer({
             sessions,

package/dist/runtime/smokeReview.js

@@ -3,8 +3,6 @@ import { computeReviewStateWithPrivateArtifacts } from "../core/review/reviewCom
 export class SmokeReviewConfigError extends Error {
 }
 const requiredSwapInputs = ["SMOKE_SWAP_PROTOCOL", "SMOKE_SWAP_FROM_SYMBOL", "SMOKE_SWAP_TO_SYMBOL", "SMOKE_SWAP_AMOUNT_DISPLAY"];
-/** Optional read-only review computation. This never establishes a wallet
- * connection; the caller owns the explicit temporary read-account fixture. */
 export async function computeSmokeReview(options) {
     const { env, sessions, computation, account } = options;
     const rawSlippage = env.SMOKE_SWAP_MAX_SLIPPAGE_BPS;
@@ -16,8 +14,6 @@ export async function computeSmokeReview(options) {
         return { status: "not_run", notRunReason: "missing_env", requiredEnv: [...requiredSwapInputs] };
     if (missing.length)
         throw new SmokeReviewConfigError(`Partial account-bound swap smoke configuration; missing: ${missing.join(", ")}`);
-    // Preserve the utility's existing 50 bps CLI default; it is not a product
-    // recommendation or a silently selected protocol/settlement asset.
     const parsed = swapIntentInputSchema.safeParse({ type: "swap", protocol: env.SMOKE_SWAP_PROTOCOL,
         from: { symbol: env.SMOKE_SWAP_FROM_SYMBOL, amount: env.SMOKE_SWAP_AMOUNT_DISPLAY },
         to: { symbol: env.SMOKE_SWAP_TO_SYMBOL }, maxSlippageBps: Number(env.SMOKE_SWAP_MAX_SLIPPAGE_BPS ?? "50") });

package/dist/runtime/start.js

@@ -43,8 +43,6 @@ async function main() {
             grpcOverride: process.env.SUI_GRPC_URL ?? null, graphqlOverride: process.env.SUI_GRAPHQL_URL ?? null
         });
         void controlReady.catch(() => { });
-        // The SDK owns stdin from the start, including fragmented initialization
-        // and EOF while backend startup is pending. No second reader buffers bytes.
         stage = "stdio_start";
         bridge = await startSharedStdio({ stdio, port: bootConfig.reviewPort, control: controlReady, ready: backendReady,
             onError: (error) => logger.error("MCP transport failed", { error: error.message }) });

package/dist/runtime/suiTransactionGraphqlMapping.js

@@ -187,8 +187,6 @@ function executionStatusFromGraphql(value) {
         return "success";
     if (value === "FAILURE")
         return "failure";
-    // Null status can occur before checkpointed effects are available; unmapped
-    // provider enum values stay unknown until explicitly mapped.
     return "unknown";
 }
 function normalizeGraphqlTimestamp(value) {

package/dist/runtime/suiTransactionGraphqlQueries.js

@@ -211,9 +211,6 @@ async function queryGraphql(client, options) {
         const result = await client.query({ query: options.query, variables: options.variables ?? {} });
         if (result.errors && result.errors.length > 0) {
             const message = result.errors.map((error) => error.message).join("; ");
-            // The pinned SDK exposes provider GraphQL errors as messages here. Cursor
-            // rejection is intentionally detected conservatively and otherwise falls
-            // back to provider_error.
             throw new TransactionActivitySourceError(message.toLowerCase().includes("cursor") ? "cursor_invalid" : "provider_error", "Sui GraphQL query returned errors", { message });
         }
         if (!result.data) {

package/dist/runtime/walletConnectConfig.js

@@ -1,3 +1 @@
-// Product-owned public dApp identifier. All installations share this Relay project.
-// This is not a wallet credential and has no user configuration override.
 export const WALLETCONNECT_PROJECT_ID = "62c5f7d7917d3936258d4b0746c99cab";

package/dist/runtime/walletConnectStorage.js

@@ -2,9 +2,6 @@ import { existsSync, lstatSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import { serialize, deserialize } from "node:v8";
 import Database from "better-sqlite3";
-// Restoration namespaces of pinned SignClient/Core 2.23.10. Request history,
-// pending requests, messages, unacknowledged envelopes and new namespaces are
-// intentionally volatile; they may contain transaction or signature material.
 const persistentKeys = new Set([
     "wc@2:core:0.3//keychain", "wc@2:core:0.3//pairing",
     "wc@2:core:0.3//subscription", "wc@2:core:0.3//expirer",
@@ -60,8 +57,6 @@ export function openWalletConnectStorage(dataDirectory) {
                 db.exec(storageSchema);
             })();
         }
-        // There is exactly one SDK owner. FULL protects the session material that
-        // the SDK needs to resume an acknowledged connection after process exit.
         db.pragma("journal_mode = DELETE");
         db.pragma("synchronous = FULL");
     }
@@ -92,6 +87,5 @@ export function openWalletConnectStorage(dataDirectory) {
                 volatile.delete(key);
         }
     };
-    // Once injected, SDK timers own the storage until the owner process exits.
     return { storage, closeBeforeSdkUse: () => { volatile.clear(); db.close(); } };
 }

package/dist/runtime/walletConnectTransport.js

@@ -27,8 +27,6 @@ export async function createWalletConnectTransport(options) {
     if (!/^[0-9a-f]{32}$/i.test(options.projectId))
         throw new Error("WalletConnect project ID format is invalid.");
     const owner = openWalletConnectStorage(options.dataDirectory);
-    // SDK log bodies can contain pairing credentials and serialized requests.
-    // Product failure stages are recorded by the caller without these values.
     options.onSdkStart?.();
     const client = await (options.initialize ?? SignClient.init.bind(SignClient))({ projectId: options.projectId, metadata: { ...options.metadata, icons: [] },
         storage: owner.storage, logger: "silent", telemetryEnabled: false });
@@ -37,8 +35,6 @@ export async function createWalletConnectTransport(options) {
     const changed = (event) => { if (!stopped)
         for (const listener of listeners)
             listener(event.topic); };
-    // Pinned SignClient emits session_event without changing session.namespaces.
-    // Treat active account/chain changes as invalidation, not new authorization.
     const selectionChanged = (event) => {
         if (!stopped && ["accountsChanged", "chainChanged"].includes(event.params.event.name)) {
             for (const listener of listeners)
@@ -60,7 +56,6 @@ export async function createWalletConnectTransport(options) {
     const inspect = (topic) => {
         if (stopped)
             throw new Error("WalletConnect owner stopped.");
-        // A store failure is not evidence that the session disappeared.
         const session = client.session.getAll().find((item) => item.topic === topic);
         return session ? inspectValue(session) : { topic, status: "absent" };
     };
@@ -75,8 +70,6 @@ export async function createWalletConnectTransport(options) {
     return {
         async restore() {
             requireActive();
-            // A pending proposal is not an approved session and must not reappear as
-            // a new approval ceremony after owner replacement.
             for (const pairing of client.core.pairing.getPairings()) {
                 if (!pairing.active)
                     await client.core.pairing.disconnect({ topic: pairing.topic });
@@ -89,8 +82,6 @@ export async function createWalletConnectTransport(options) {
                         chains: [SUI_MAINNET_WALLET_CHAIN], methods: [SUI_SIGN_TRANSACTION_METHOD], events: ["accountsChanged", "chainChanged"]
                     } } });
             const approval = connecting.approval().then(sessionValue).catch((error) => { throw transportError(error); });
-            // Attach a rejection handler immediately; the backend records the same
-            // promise's outcome once the private QR has been associated with its row.
             void approval.catch(() => undefined);
             if (!connecting.uri)
                 throw new Error("The wallet pairing could not be prepared.");
@@ -121,8 +112,6 @@ export async function createWalletConnectTransport(options) {
             client.off("session_delete", changed);
             client.off("session_expire", changed);
             client.off("session_event", selectionChanged);
-            // SignClient has no supported complete in-process disposal. The runtime
-            // ends the owner process; it must not close injected storage under timers.
         }
     };
 }

package/dist/runtime/walletSdkChildRuntime.js

@@ -4,8 +4,6 @@ import { isDeepStrictEqual } from "node:util";
 import { WalletUserRejectedError } from "../core/session/walletConnection.js";
 import { acquireDataDirectoryOwner } from "./shared/ownerLease.js";
 import { walletCommandSchema, walletEventSchema } from "./walletSdkIpc.js";
-// Production and the real-SDK wire fixture run this same process lifecycle.
-// The factory is a code dependency, never a serialized command or setting.
 export function runWalletSdkChild(createTransport) {
     let init, transport;
     let sequence = 0, lastRequest = 0, ready = false, exiting = false;
@@ -30,7 +28,6 @@ export function runWalletSdkChild(createTransport) {
         ready = false;
         if (init && !exiting)
             send({ ...envelope(), type: "failure", reason });
-        // Neither SDK cleanup nor a callback is a prerequisite for process exit.
         if (!exiting) {
             exiting = true;
             process.exit(1);
@@ -75,7 +72,6 @@ export function runWalletSdkChild(createTransport) {
     };
     const start = async (input) => {
         init = input;
-        // The child alone opens the SDK store; OS exit releases this separate lock.
         ownership = acquireDataDirectoryOwner(join(input.dataDirectory, "walletconnect", "sessions.sqlite"));
         send({ ...envelope(), type: "stage", stage: "sdk_start" });
         transport = await createTransport(input);
@@ -154,7 +150,6 @@ export function runWalletSdkChild(createTransport) {
         }
         if (!init || input.runId !== init.runId || input.requestId <= lastRequest)
             return;
-        // Reserve before awaiting anything, including a connect approval.
         lastRequest = input.requestId;
         void command(input).catch(() => fail("wallet_state_unavailable"));
     });

package/dist/runtime/walletSdkProcess.js

@@ -5,8 +5,6 @@ import { isDeepStrictEqual } from "node:util";
 import { walletUnavailable, WalletUnavailableError, WalletUserRejectedError } from "../core/session/walletConnection.js";
 import { WalletRunInterruptedError, WalletReplacementFailedError } from "../core/session/walletRuntime.js";
 import { walletCommandSchema, walletEventSchema } from "./walletSdkIpc.js";
-/** Owns one SDK process. Business authority and all database transitions remain
- * in the workflow; a process event is never transaction approval. */
 export class WalletSdkProcess {
     options;
     run = this.newRun();
@@ -75,7 +73,6 @@ export class WalletSdkProcess {
             child.once("exit", () => this.exited(run));
             child.once("error", () => {
                 this.lose(run, this.failureReason());
-                // Failed spawn has no process and therefore cannot emit exit.
                 if (child.pid === undefined)
                     this.exited(run);
             });
@@ -93,7 +90,6 @@ export class WalletSdkProcess {
     send(run, message) {
         if (run !== this.run || run.fenced || this.closed || !run.child?.connected)
             throw new WalletRunInterruptedError(run.id);
-        // A false return means backpressure, not permission to repeat the command.
         run.child.send(walletCommandSchema.parse(message), (error) => { if (error)
             this.lose(run, "wallet_state_unavailable"); });
     }
@@ -271,8 +267,6 @@ export class WalletSdkProcess {
             if (this.closed || this.run !== old || this.replacement !== replacement)
                 throw new WalletRunInterruptedError(runId);
             const next = this.newRun();
-            // A failed reservation ends this attempt. Reads may save its failure,
-            // but only a new explicit admission may start another SDK process.
             beforeStart(next.id);
             this.run = next;
             this.state = this.starting(next.id, "process_start");

package/docs/AGENT_BEHAVIOR.md

@@ -4,7 +4,7 @@ This document is the MCP-exposed answer playbook for AI clients. It owns user-qu
 
 It does not define tool schemas or field contracts. Use `docs/MCP_TOOLS.md` for the MCP API reference, response fields, statuses, and follow-up fields.
 
-It is not the contributor rulebook and it is not enforcement. Development rules live in `AGENTS.md` and `docs/AGENT_DEVELOPMENT_POLICY.md`. Hard product boundaries live in code, schemas, allowlists, mainnet guards, and the local review layer.
+It is not the contributor rulebook and it is not enforcement. Development rules live in `AGENTS.md` and `docs/AGENT_DEVELOPMENT_POLICY.md` in the [source repository](https://github.com/zktx-mcp/sui-mcp). They are not installed MCP resources. Hard product boundaries live in code, schemas, allowlists, mainnet guards, and the local review layer.
 
 ## Support Matrix
 
@@ -552,7 +552,3 @@ Avoid unqualified words such as best, recommended, guaranteed, or safe. Prefer:
 ## Language
 
 This reference document stays in English. Reply in the user's language. Translate response patterns as needed, but keep SDK names, tool names, object IDs, package IDs, and token symbols in their original form.
-
-## Golden Scenarios
-
-Detailed expected response classes live in `docs/golden-scenarios/BEHAVIOR_MATRIX.md`. They are documentation for release review, not automated cross-client results.

package/docs/LOCAL_DB_ARCHITECTURE.md

@@ -178,7 +178,7 @@ target must name the recorded file and pass size/SHA checks before `saved` is
 committed. Existing destinations are never overwritten or removed. Private
 unlink follows that result and actual descriptor closure; the final file has
 no automatic expiry. Historical export path validation remains distinct from
-the private `.download` row identity. No table, column or schema version changes.
+the private `.download` row identity.
 
 Unknown file effects remain `saving`, retaining their source and reservations.
 A failed DB result write retains the ended physical outcome for settlement.
@@ -476,7 +476,7 @@ The runtime accepts one current SQLite structure, checked against its table, col
 
 A current backup carries `format`, `network`, `exportedAt` and its product data. It has no numeric schema version. Import rejects a different format, unknown or missing fields, invalid references or invalid raw quantities. Missing settings or activity arrays are not filled from defaults. Supported `function_scan` provenance remains part of the current format. Validation failure leaves current data intact.
 
-New installations do not inherit older local review records, activity scans, known/active accounts or stored endpoints. Users configure the required context again; environment overrides retain their existing precedence. Empty local history does not imply an absence of on-chain transactions. Existing DB and backup files are not deleted by startup.
+With a new empty data directory, users configure account context and endpoints; environment overrides retain their existing precedence. Empty local history does not imply an absence of on-chain transactions. Existing DB and backup files are not deleted by startup.
 
 ## Boundaries
 
@@ -496,7 +496,7 @@ Ownership and simulation private artifacts use their v2 evidence formats to
 bind transaction funding to the stored material. They cover real coin objects,
 address withdrawals, gas reservations, and their observed balance/epoch facts.
 They are deeply copied and revalidated before admission, and are excluded from
-public backup. They introduce no table, column, or DB format migration.
+public backup.
 
 Old private evidence is not upgraded into funding proof. Existing owner recovery
 removes private material; a new review recomputes it. Historical public reviews,

package/docs/MCP_SETUP.md

@@ -6,7 +6,7 @@ It does not define tool field contracts or response wording. Use `docs/MCP_TOOLS
 
 The README keeps only the short entry path; client-specific setup, restart behavior, and troubleshooting live here.
 
-These instructions target `@zktx.io/sui-mcp@0.6.0`. Package installation requires
+These instructions target `@zktx.io/sui-mcp@0.6.1`. Package installation requires
 that exact version to be published; use the developer checkout instructions when
 it is not available. A repository rename or local build does not publish the
 package. Changing client settings or rebuilding files does not replace an
@@ -130,7 +130,7 @@ per-client configuration below, which give the exact `command` and `args`.
 
 The npm package for this release is `@zktx.io/sui-mcp`. The commands below
 require the requested version to be published; confirm it with
-`npm view @zktx.io/sui-mcp@0.6.0 version` before switching. Both installation
+`npm view @zktx.io/sui-mcp@0.6.1 version` before switching. Both installation
 methods start the same `sui-mcp` stdio MCP server. Use a local checkout when
 working on a version that has not been published.
 
@@ -193,20 +193,20 @@ command, for example `"command": "cmd", "args": ["/c", "npx", "-y", "@zktx.io/su
 ### Updating an Existing Sui MCP Installation
 
 Confirm that the requested package version is available before changing every
-participating client's configuration. This release requires a new empty data
-directory when replacing a 0.5.x installation. Preserve the previous data,
-backups and private WalletConnect store; they are not converted or imported.
-Configure endpoints and read context as needed and connect through a new card.
-Use the same new data directory and review port in every participating client.
-Fully quit the participating apps, update
+participating client's configuration. A compatible update can retain the current
+data directory, backups and private WalletConnect store. Use the same directory
+and review port in every participating client. Stop the participating MCP
+connections and wait for the shared backend to exit, update
 the installed package or configured version, then reopen them and check
 `read.get_server_status` in each client. The package name, version and server
 name must match the intended installation. Updating the package does not
 replace a backend that is already running.
 
-A compatible update that retains the current database structure can use existing
-data. Incompatible databases and backups are rejected without migration;
-see [Local Database Architecture](LOCAL_DB_ARCHITECTURE.md#current-format-and-backups).
+Incompatible databases and backups are rejected without migration. To use a
+different database structure, choose a new empty directory and preserve the
+existing data and backups. Configure endpoints and read context as needed and
+connect through a new card. See
+[Local Database Architecture](LOCAL_DB_ARCHITECTURE.md#current-format-and-backups).
 Do not reset data or resend a transaction as an update step. Coordinate a safe
 restart if a transaction request is still in progress.
 
@@ -229,7 +229,7 @@ restart first. A previous wallet pairing can remain in the wallet app; remove
 an unwanted pairing there rather than assuming new local storage disconnected it.
 
 Replace the old registration instead of adding a second one. Use exactly
-`sui-mcp` for the registration name and select `@zktx.io/sui-mcp@0.6.0` in its
+`sui-mcp` for the registration name and select `@zktx.io/sui-mcp@0.6.1` in its
 command arguments. Do not append an environment label, version or numeric
 suffix. Remove obsolete runtime environment overrides. If you set
 `SUI_MCP_DATA_DIR`, choose a new empty directory; never point it at another
@@ -534,7 +534,7 @@ A card accepts one read selection. Moving between chats or recreating its frame
 
 ## Local data format
 
-Start this runtime with an empty `SUI_MCP_DATA_DIR` or a database already in its current format. A mismatched existing database is refused before writes. There is no older DB or backup migration. A checkout with different table, constraint or field definitions needs a new empty data folder, preserving the previous folder. Databases and backups do not carry a separate numeric schema version. Older local records, known/active accounts and stored endpoints are not inherited; set the needed account context and endpoints again. Existing files are left in place, and environment overrides keep their existing precedence. See [Local DB Architecture](LOCAL_DB_ARCHITECTURE.md) for the current format, backup scope and card-result retention. Card results do not expire with the input period and can increase DB size. Reset/import removes them along with the affected local data; it is not a card-only space cleanup operation.
+Start this runtime with an empty `SUI_MCP_DATA_DIR` or a database already in its current format. A mismatched existing database is refused before writes; incompatible databases and backups are not migrated or converted. A database with different table, constraint or field definitions requires a new empty data folder, preserving the existing folder. Databases and backups do not carry a separate numeric schema version. With a new empty folder, configure the required account context and endpoints. Existing files are left in place, and environment overrides keep their existing precedence. See [Local DB Architecture](LOCAL_DB_ARCHITECTURE.md) for the current format, backup scope and card-result retention. Card results do not expire with the input period and can increase DB size. Reset/import removes them along with the affected local data; it is not a card-only space cleanup operation.
 
 ## Local Settings
 
@@ -776,7 +776,7 @@ If the user supplied a specific Sui address for `read.summarize_wallet_assets` o
 
 A 404 means the requested package or version could not be retrieved from the
 selected registry. Confirm the exact name and version, for example with
-`npm view @zktx.io/sui-mcp@0.6.0 version --registry=https://registry.npmjs.org`.
+`npm view @zktx.io/sui-mcp@0.6.1 version --registry=https://registry.npmjs.org`.
 A new version may not have been published or become visible yet; a mistyped name
 or an alternate/private registry can also explain the response. Check the
 publication result and registry configuration before retrying. Do not assume