@zktx.io/sui-mcp 0.6.0 → 0.6.1

package/docs/MCP_TOOLS.md

@@ -18,6 +18,21 @@ that smaller card limit. Restore files may contain up to 16 MiB and are sent in
 separate messages within the card budget; the 4 MiB request limit is not a
 backup-file limit.
 
+Internal cards require the current MCP connection to advertise
+`extensions["io.modelcontextprotocol/ui"].mimeTypes` as a string array containing
+`text/html;profile=mcp-app`. Client names and versions do not select card
+support. An absent, malformed or nonstandard advertisement returns
+`ui_unavailable` without creating a card or issuing its source query; ordinary
+evidence tools remain available. An advertisement enables card delivery, not
+transaction or Settings authorization. Scoped UI permission, stored target and
+revision checks still apply to each input action.
+
+Card responses use structured content or the corresponding JSON text payload.
+A single serialized MCP tool-result carrier and exact saved-card resource links
+are normalized by format. Conflicting payloads, private metadata or card
+identities are rejected. JSON inside ordinary product data and saved links do
+not grant input permission; a saved card is read through its bound resource.
+
 ## Read-Only Tools
 
 | Tool | Status | Purpose |

package/docs/SDK_API.md

@@ -40,6 +40,18 @@ dependency update requires rebuilding and distributing the card resources.
 
 ## MCP Apps
 
+Card support uses the current MCP connection's
+`extensions["io.modelcontextprotocol/ui"].mimeTypes` advertisement. The pinned
+`getUiCapability` and `RESOURCE_MIME_TYPE` exports own extraction and the
+standard MIME identifier. The UI object and its string array are validated;
+client names, versions and unrelated MIME types do not enable cards.
+Capability negotiation does not grant scoped card or transaction authority.
+
+The common View normalizes structured results, their JSON text fallback and a
+single serialized `CallToolResult` carrier validated with the pinned SDK
+schema. Conflicting payloads or private metadata are rejected. Ordinary data
+does not supply input permission, and saved resource links remain read-only.
+
 `@modelcontextprotocol/ext-apps` is pinned to `1.7.5`, with MCP SDK `1.31.0`. The server uses `registerAppTool`, `registerAppResource` and `getUiCapability`; the view uses `App` for host-mediated calls and teardown. Account, Receipt, Chart, Connect, Review and Settings are separate self-contained resources, so an account card does not load the PTB or chart renderer. Settings uses scoped app-only inputs for local actions and file transfer. The server keeps app-only permissions out of model content.
 
 Settings completes a selected upload's verification and restore preparation on

package/docs/WALLET_CONNECTION.md

@@ -2,7 +2,8 @@
 
 WalletConnect provides approved Sui mainnet account context and a transport for
 individual wallet requests. It is not login, proof of address ownership, custody, or standing permission to transact. Frontend behavior is defined in
-[Frontend Policy](FRONTEND_POLICY.md); tools are in [MCP Tools](MCP_TOOLS.md).
+[Frontend Policy](https://github.com/zktx-mcp/sui-mcp/blob/main/docs/FRONTEND_POLICY.md)
+in the source repository; tools are in [MCP Tools](MCP_TOOLS.md).
 
 ## Connection and read account
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zktx.io/sui-mcp",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "mcpName": "io.github.zktx-mcp/sui-mcp",
   "description": "Sui MCP is a local-first toolkit for helping AI applications and users inspect Sui DeFi actions before execution.",
   "license": "MIT",
@@ -11,7 +11,15 @@
   "files": [
     "dist/",
     "README.md",
-    "docs/",
+    "docs/MCP_SETUP.md",
+    "docs/MCP_TOOLS.md",
+    "docs/AGENT_BEHAVIOR.md",
+    "docs/WALLET_CONNECTION.md",
+    "docs/LOCAL_DB_ARCHITECTURE.md",
+    "docs/SDK_API.md",
+    "docs/SIGNABLE_ADAPTER_CONTRACT.md",
+    "docs/TRANSACTION_ACTIVITY_LOG.md",
+    "docs/UTILITY_INDEX.md",
     "protocols/deepbook-v3.md",
     "protocols/deepbook-margin.md",
     "LICENSE",