agentwallet-mcp 1.13.8 → 1.13.9

package/build/index.js

@@ -20,7 +20,7 @@ import { localSignAuthorization, localEthCall, localGetCode, localSignPermit2Upt
 import { WRAPPED_NATIVE } from './wrapped-native.js';
 import { buildUptoAuthorization, uptoPayload, permit2AllowanceCalldata, permit2ApproveCalldata, decodeUint, permit2Address, } from './x402-permit2.js';
 import { assessTokenRisk } from './token-risk.js';
-import { isLegacyAgentWalletAccept, requiredAmount, buildAuthorization, buildPaymentPayload, buildPaymentPayloadRaw, paymentHeaderFor, parsePaymentRequired, parseSettlement, pickOption, knownTokenDomain, parseEip7702Delegation, erc1271ProbeCalldata, classifyErc1271Probe, settlementVerdict, legacyReceiptAllowed, } from './x402-eip3009.js';
+import { isLegacyAgentWalletAccept, requiredAmount, buildAuthorization, buildPaymentPayload, buildPaymentPayloadRaw, paymentHeaderFor, parsePaymentRequired, parseSettlement, pickOption, knownTokenDomain, decodeAbiString as decodeDomainString, parseEip7702Delegation, erc1271ProbeCalldata, classifyErc1271Probe, settlementVerdict, legacyReceiptAllowed, } from './x402-eip3009.js';
 import { isSolanaLocalMode, getSolanaAddress, solanaWalletRecord, localSolBalance, localSplBalance, localSolTransfer, localSplTransfer, resolveSolanaRpc, mintDecimalsStrict, } from './local-solana.js';
 /** True when either chain family is running non-custodially. */
 function anyLocalMode() {
@@ -679,7 +679,7 @@ function resolveChainId(network) {
 const AddressSchema = z.string().regex(/^(0x[a-fA-F0-9]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})$/, 'Must be a 0x-prefixed 40-hex EVM address or a base58 Solana address');
 const server = new McpServer({
     name: 'agentwallet',
-    version: '1.13.8',
+    version: '1.13.9',
 }, {
     instructions: `AgentWallet gives AI agents their own blockchain wallets. ${anyLocalMode()
         ? 'This server runs in LOCAL (self-custody) mode: the operator supplied the key, signing happens in this process, and the only spend guards are the AGENTWALLET_MAX_TX_* environment caps. There is no server-side pause, daily limit or approval email; pause_wallet, unpause_wallet and delete_wallet are refused.'
@@ -1290,8 +1290,11 @@ async function resolveTokenDomain(chainId, asset, extra) {
         return declared;
     let name = '', version = '';
     try {
-        name = decodeAbiString(await ethCallHex(chainId, asset, '0x06fdde03')); // name()
-        version = decodeAbiString(await ethCallHex(chainId, asset, '0x54fd4d50')); // version()
+        // The signing decoder (256 bytes, strict UTF-8), not the 64-char display sanitiser
+        // get_token_info uses: a truncated or replaced name signs under a domain the
+        // token never had (round 3).
+        name = decodeDomainString(await ethCallHex(chainId, asset, '0x06fdde03')); // name()
+        version = decodeDomainString(await ethCallHex(chainId, asset, '0x54fd4d50')); // version()
     }
     catch { /* refused below */ }
     if (!name || !version) {
@@ -1609,7 +1612,7 @@ server.tool('pay_x402', 'Handle an x402 payment flow. Fetches a URL, and if the
             const [, live] = other;
             return jsonResponse({
                 status: 402, payment_required: true, payment_made: false,
-                error: `This resource already holds a live authorization signed ${Math.round((Date.now() - live.signedAt) / 1000)} s ago for ${live.amount} ${tokenLabel} (the endpoint's requirement changed between answers: amount, recipient, asset or scheme). It is re-sent by calling pay_x402 again with the same arguments once the endpoint asks for the same requirement; to sign a second authorization for this resource pass fresh_authorization=true.`,
+                error: `This resource already holds a live authorization signed ${Math.round((Date.now() - live.signedAt) / 1000)} s ago for ${live.amount} ${tokenLabel} (the endpoint's requirement changed between answers: amount, recipient, asset or scheme). It is re-sent by calling pay_x402 again with the same arguments once the endpoint asks for the same requirement. Nothing more is signed for this resource until that authorization expires.`,
                 live_authorization: { amount: live.amount, valid_until: new Date(live.until).toISOString(), payer: live.payer },
                 requested_amount: amount, token: tokenLabel, pay_to: option.payTo, chain_id: chainId,
             });
@@ -1654,7 +1657,7 @@ server.tool('pay_x402', 'Handle an x402 payment flow. Fetches a URL, and if the
                         token: tokenLabel, token_address: tokenAddress, chain_id: chainId, payer, permit2: permit2Address(chainId),
                         error: `This endpoint uses the x402 "upto" scheme, which settles through Permit2. Wallet ${payer} has not approved ` +
                             `${tokenLabel} to Permit2 on chain ${chainId}. Call approve_permit2 once for this token (a normal transaction that needs gas), ` +
-                            `or set AGENTWALLET_PERMIT2_AUTO_APPROVE=1, then call pay_x402 again.`,
+                            `then call pay_x402 again.` + (assetPolicy.via === 'stablecoin' ? ' The operator may instead set AGENTWALLET_PERMIT2_AUTO_APPROVE=1 (registry stablecoins only); that is the operator\'s setting, not the agent\'s.' : ''),
                     });
                 }
             }
@@ -1749,6 +1752,8 @@ server.tool('pay_x402', 'Handle an x402 payment flow. Fetches a URL, and if the
     const retryServedFrom = finalUrlOf(retryRes, url);
     const retryCrossOrigin = new URL(retryServedFrom).origin !== new URL(url).origin;
     const verdict = settlementVerdict(retryRes.status, settlement, retryCrossOrigin);
+    const claimedRaw = typeof settlement?.amount === 'string' && /^\d+$/.test(settlement.amount) ? settlement.amount : null;
+    const claimedAboveMax = claimedRaw !== null && BigInt(claimedRaw) > BigInt(rawAmount);
     if (retryCrossOrigin) {
         retryError = `The paid request was redirected to another origin (${new URL(retryServedFrom).origin}); the payment header is never forwarded across origins, so this response did not see the payment.`;
     }
@@ -1773,6 +1778,9 @@ server.tool('pay_x402', 'Handle an x402 payment flow. Fetches a URL, and if the
         permit2_approval_tx: permit2ApprovalTx,
         x402_version: x402Version,
         amount,
+        // For upto the amount is the MAXIMUM the facilitator may settle, not what was
+        // taken; the server's claimed settled amount is shown apart and unverified (round 3).
+        ...(isUpto ? { amount_is_maximum: true, authorized_max: amount, settled_amount_claimed: serverText(settlement?.amount), settled_claim_inconsistent: claimedAboveMax } : {}),
         token: tokenLabel,
         token_address: tokenAddress || null,
         network: option.network,

package/build/x402-eip3009.js

@@ -121,7 +121,14 @@ export function decodeAbiString(hex) {
     if (!Number.isFinite(len) || len <= 0 || len > 256)
         return '';
     const bytes = Buffer.from(h.slice(128, 128 + len * 2), 'hex');
-    return bytes.toString('utf8');
+    // The domain separator is keccak of the raw bytes: a name that is not valid
+    // UTF-8 cannot be reproduced from a string, so it is refused, never guessed.
+    try {
+        return new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    }
+    catch {
+        return '';
+    }
 }
 /** Build the payment payload the resource server expects for this x402 version. */
 export function buildPaymentPayload(x402Version, req, auth, signature, resource, extensions) {
@@ -188,7 +195,11 @@ export function parsePaymentRequired(getHeader, body) {
    network and payTo are strings. A null entry, or an array where an address
    should be, used to reach the pickers and surface a raw TypeError or a
    coerced value (2026-10-04 round 2). Numeric amounts are kept as strings. */
-const MAX_ACCEPTS = 64; // a bound on the picker's work, well above anything a real server lists
+const MAX_ACCEPTS = 64;
+/** An all-uppercase hex address is not an EIP-55 checksum and viem refuses it at signing; lowercase has no checksum to fail (round 3). Mixed case is kept: it IS a checksum. */
+function lowerIfAllCaps(v) {
+    return (typeof v === 'string' && /^0x[0-9A-F]{40}$/.test(v) && /[A-F]/.test(v)) ? v.toLowerCase() : v;
+} // a bound on the picker's work, well above anything a real server lists
 export function sanitizeRequired(req) {
     const str = (v) => (typeof v === 'string' ? v : typeof v === 'number' && Number.isFinite(v) ? String(v) : undefined);
     const accepts = [];
@@ -196,7 +207,7 @@ export function sanitizeRequired(req) {
         if (!a || typeof a !== 'object' || Array.isArray(a))
             continue;
         const o = a;
-        const scheme = str(o.scheme), network = str(o.network), payTo = str(o.payTo);
+        const scheme = str(o.scheme), network = str(o.network), payTo = lowerIfAllCaps(str(o.payTo));
         if (scheme === undefined || network === undefined || payTo === undefined)
             continue;
         const extraIn = (o.extra && typeof o.extra === 'object' && !Array.isArray(o.extra)) ? o.extra : undefined;
@@ -206,6 +217,8 @@ export function sanitizeRequired(req) {
                 if (k in extra && typeof extra[k] !== 'string')
                     delete extra[k];
             }
+        if (extra && typeof extra.token === 'string')
+            extra.token = lowerIfAllCaps(extra.token);
         const out = { ...o, scheme, network, payTo };
         for (const k of ['amount', 'maxAmountRequired', 'asset', 'description', 'resource', 'mimeType']) {
             const v = str(o[k]);
@@ -214,6 +227,8 @@ export function sanitizeRequired(req) {
             else
                 out[k] = v;
         }
+        if (typeof out.asset === 'string')
+            out.asset = lowerIfAllCaps(out.asset);
         if (extra)
             out.extra = extra;
         else
@@ -267,7 +282,11 @@ export function pickOption(accepts, resolveChainId, preferChain) {
     const payable = [...exact, ...upto];
     if (payable.length === 0) {
         const schemes = Array.from(new Set(accepts.map(a => String(a.scheme).slice(0, 40)))).slice(0, 10).join(', ') || 'none';
-        const reason = accepts.some(a => a.scheme === 'upto')
+        if (onChain.length === 0 && accepts.length > 0) {
+            const nets = Array.from(new Set(accepts.map(a => String(a.network).slice(0, 40)))).slice(0, 10).join(', ');
+            return { option: null, chainId: null, reason: `No payable option: the offered network(s) ${nets} are not ones this client knows (pass a CAIP-2 id like eip155:8453 or a chain id).` };
+        }
+        const reason = onChain.some(a => a.scheme === 'upto')
             ? 'This endpoint offers the x402 "upto" scheme without an extra.facilitatorAddress (or without an asset), so the ' +
                 'Permit2 authorization cannot be bound to a facilitator. AgentWallet will not approximate it with an upfront transfer. ' +
                 'Ask the endpoint operator to publish facilitatorAddress, or an "exact" option.'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agentwallet-mcp",
   "mcpName": "io.github.hifriendbot/agentwallet",
-  "version": "1.13.8",
+  "version": "1.13.9",
   "description": "MCP server for AgentWallet: self-custody local signing on EVM and Solana, or hosted wallets. Sign, broadcast, pay x402 invoices, and accept x402 payments.",
   "type": "module",
   "main": "build/index.js",
@@ -16,7 +16,7 @@
   "scripts": {
     "build": "tsc",
     "start": "node build/index.js",
-    "test": "node test/x402-payment.test.mjs && node test/eip3009.test.mjs && node test/permit2-risk.test.mjs && node test/token-cap.test.mjs && node test/spl-cap.test.mjs && node test/unknown-decimals-cap.test.mjs && node test/decimals-range-cap.test.mjs && node test/local-mode.test.mjs && node test/ssrf-guard.test.mjs && node test/x402-policy.test.mjs && node test/local-guard-shape.test.mjs && node test/allowance-total-cap.test.mjs && node test/autopay-scheme.test.mjs && node test/spl-recipient-guard.test.mjs && node test/approval-binding.test.mjs && node test/ata-rent-size.test.mjs && node test/final-url-guard.test.mjs && node test/audit-1135.test.mjs && node test/local-no-autopay.test.mjs && node test/audit-1136.test.mjs && node test/delete-confirm.test.mjs && node test/audit-1138.test.mjs",
+    "test": "node test/x402-payment.test.mjs && node test/eip3009.test.mjs && node test/permit2-risk.test.mjs && node test/token-cap.test.mjs && node test/spl-cap.test.mjs && node test/unknown-decimals-cap.test.mjs && node test/decimals-range-cap.test.mjs && node test/local-mode.test.mjs && node test/ssrf-guard.test.mjs && node test/x402-policy.test.mjs && node test/local-guard-shape.test.mjs && node test/allowance-total-cap.test.mjs && node test/autopay-scheme.test.mjs && node test/spl-recipient-guard.test.mjs && node test/approval-binding.test.mjs && node test/ata-rent-size.test.mjs && node test/final-url-guard.test.mjs && node test/audit-1135.test.mjs && node test/local-no-autopay.test.mjs && node test/audit-1136.test.mjs && node test/delete-confirm.test.mjs && node test/audit-1138.test.mjs && node test/audit-1139.test.mjs",
     "prepublishOnly": "npm run build"
   },
   "keywords": [