callx402 1.0.5 → 1.0.6

package/.github/release-intent/callx402-v1.0.6.txt

@@ -0,0 +1 @@
+Release callx402@1.0.6: npm metadata rewrite — buyer-language description and expanded discovery keywords. No code changes.

package/.github/workflows/npm-publish.yml

@@ -7,7 +7,7 @@ on:
   push:
     branches: [main]
     paths:
-      - '.github/release-intent/callx402-v1.0.5.txt'
+      - '.github/release-intent/callx402-v1.0.6.txt'
 
 permissions:
   id-token: write
@@ -28,11 +28,11 @@ jobs:
       - run: npm pack --dry-run
       - name: Confirm release version
         run: |
-          node -e "if (require('./package.json').version !== '1.0.5') process.exit(1)"
+          node -e "if (require('./package.json').version !== '1.0.6') process.exit(1)"
       - name: Check whether version is already published
         id: published
         run: |
-          if npm view callx402@1.0.5 version >/dev/null 2>&1; then
+          if npm view callx402@1.0.6 version >/dev/null 2>&1; then
             echo "exists=true" >> "$GITHUB_OUTPUT"
           else
             echo "exists=false" >> "$GITHUB_OUTPUT"
@@ -52,6 +52,6 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          if ! gh release view v1.0.5 --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
-            gh release create v1.0.5 --repo "$GITHUB_REPOSITORY" --target "$GITHUB_SHA" --title "callx402 v1.0.5" --notes "Free read-only MCP diagnostics work from a clean npm installation. Existing configured local/remote subsystems remain available. Financial execution remains disabled through MCP. Release verified by full test suite and npm-pack consumer tests."
+          if ! gh release view v1.0.6 --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
+            gh release create v1.0.6 --repo "$GITHUB_REPOSITORY" --target "$GITHUB_SHA" --title "callx402 v1.0.6" --notes "Published callx402 v1.0.6 to npm. See https://github.com/Payloadhq/callx402/releases/tag/v1.0.6"
           fi

package/README.md

@@ -282,6 +282,18 @@ callx402 works out of the box. There are two modes:
 A bare `npm install callx402` gives you the hosted mode — no separate tree,
 no config, no keys. The v2 tree is never required for standard use.
 
+## How payment works
+
+Hosted paid actions settle through Payload's signed-redemption flow, not a generic x402 facilitator:
+
+1. Get a free quote for the action: the exact price, before any payment.
+2. Call the action and read the x402 v2 `402` challenge: USDC on Base, the amount, and the `payTo` address.
+3. Pay the quoted amount to `payTo` from your own wallet.
+4. Redeem the original quote with the payment tx hash and an EIP-191 signed authorization from the paying wallet. A public tx hash alone never authorizes an action.
+5. The rail verifies the payment exactly once on-chain and returns the result.
+
+The full redemption contract is documented in [docs/signed-redemption.md](docs/signed-redemption.md). The free local tier above never charges and never moves money.
+
 ## Paid one-off diagnostics (no subscription)
 
 The CLI and MCP tools above are the **free local tier**: read-only

package/package.json

@@ -4,7 +4,7 @@
     "callx402": "./bin/callx402.js"
   },
   "dependencies": {},
-  "description": "Universal action layer that calls the x402 infrastructure subsystems (Sentinel, Rescue, Doctor, Router, SpendGuard, Settlement Resolver, MCP fabric, RevRule) behind one CLI/SDK entry point. callx402 is the ACTION, not the product name.",
+  "description": "free local MCP diagnostics for failed x402 payments, plus hosted per-action diagnostics paid in USDC on Base",
   "engines": {
     "node": ">=18"
   },
@@ -14,7 +14,15 @@
     "mcp",
     "cli",
     "agents",
-    "payments"
+    "payments",
+    "diagnostics",
+    "debugging",
+    "troubleshooting",
+    "402",
+    "failed-payments",
+    "usdc",
+    "base",
+    "model-context-protocol"
   ],
   "license": "MIT",
   "main": "./sdk/js/index.js",
@@ -27,6 +35,6 @@
     "smoke": "node bin/callx402.js status --json",
     "test": "node --test test/*.test.js"
   },
-  "version": "1.0.5",
+  "version": "1.0.6",
   "mcpName": "io.github.payload-tools/callx402"
 }

package/server.json

@@ -10,7 +10,7 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "1.0.5"
+      "version": "1.0.6"
     }
   ],
   "repository": {
@@ -18,6 +18,6 @@
     "url": "https://github.com/Payloadhq/callx402"
   },
   "title": "callx402 MCP server",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "websiteUrl": "https://github.com/Payloadhq/callx402"
 }