crewpay-goat-plugin 0.1.0 → 0.2.0

package/README.md

@@ -15,23 +15,21 @@ const dry = await plugin.service.crewpay_launch_dry_run({
   ticker: 'DCAT',
   autoHire: { seats: 3 },
 })
-// human confirms…
+// human opens dry.approvalUrl…
 await plugin.service.crewpay_launch({
   name: 'Desk Cat',
   ticker: 'DCAT',
   autoHire: { seats: 3 },
-  dryRunToken: dry.dryRunToken,
-  humanConfirmed: true,
-  confirmPhrase: 'APPROVE_SOL_SPEND',
+  dryRunId: dry.dryRunId,
 })
 ```
 
-Prefer `npx -y crewpay-mcp@1.2.1` for local signing; hosted MCP `https://mcp.crewpay.dev/mcp` for discover/autohire without a launcher secret.
+Prefer `npx -y crewpay-mcp@1.2.3` for local signing; hosted MCP `https://mcp.crewpay.dev/mcp` for discover/autohire without a launcher secret.
 
 ## Safety
 
 - Fee map **60/15/25**; buyback cron not live yet
-- Launch/wire require dry-run token + exact phrase `APPROVE_SOL_SPEND`
+- Launch requires server `dryRunId` after human approval on `approvalUrl`
 
 ## Links
 

package/dist/client.d.ts

@@ -2,21 +2,17 @@
  * Minimal CrewPay REST client for framework plugins.
  * Keys from env only — never accept private keys as function arguments.
  *
- * Spend gates: dry-run issues a short-lived dryRunToken; launch/wire require that
- * token (launch) plus the exact confirmPhrase APPROVE_SOL_SPEND (not a free-form
- * boolean the model can invent from chat alone).
+ * Spend gate: POST /api/agent/launch/dry-run returns dryRunId + approvalUrl
+ * (no approve secret). Operator opens approvalUrl and wallet-signs.
+ * Launch/wire require dryRunId after approval. Image content is bound by sha256.
  */
 export declare const DEFAULT_API_URL = "https://api.crewpay.dev";
-/** Exact phrase a human must supply for SOL-spending calls. */
-export declare const SOL_SPEND_CONFIRM_PHRASE = "APPROVE_SOL_SPEND";
 export type CrewPayEnv = {
     apiUrl?: string;
     apiKey?: string;
     launcherKey?: string;
 };
 export declare function loadCrewPayEnv(overrides?: CrewPayEnv): Required<Pick<CrewPayEnv, 'apiUrl'>> & CrewPayEnv;
-/** Canonical hash of launch fields so dry-run and launch bodies must match. */
-export declare function hashLaunchBody(body: Record<string, unknown>): string;
 export declare class CrewPayClient {
     private readonly env;
     constructor(env?: ReturnType<typeof loadCrewPayEnv>);
@@ -32,27 +28,19 @@ export declare class CrewPayClient {
         model?: string;
     }): Promise<unknown>;
     autohire(body: Record<string, unknown>): Promise<unknown>;
-    dryRun(body: Record<string, unknown>): Promise<{
-        dryRunToken: string;
-        confirmPhraseRequired: string;
-        tip: string;
-    }>;
-    /**
-     * Real launch — spends SOL. Requires a prior dryRunToken for this body plus
-     * humanConfirmed and confirmPhrase APPROVE_SOL_SPEND.
-     */
+    /** Server dry-run — returns plan + dryRunId + approvalUrl (no approve secret). */
+    dryRun(body: Record<string, unknown>): Promise<unknown>;
     launch(body: Record<string, unknown>, opts: {
-        humanConfirmed: boolean;
-        confirmPhrase: string;
-        dryRunToken: string;
+        dryRunId: string;
     }): Promise<unknown>;
     wireFees(body: {
         mint: string;
         mode?: string;
         crew?: unknown[];
+        name?: string;
+        ticker?: string;
     }, opts: {
-        humanConfirmed: boolean;
-        confirmPhrase: string;
+        dryRunId: string;
     }): Promise<unknown>;
     crank(body: {
         mint: string;

package/dist/client.js

@@ -2,16 +2,11 @@
  * Minimal CrewPay REST client for framework plugins.
  * Keys from env only — never accept private keys as function arguments.
  *
- * Spend gates: dry-run issues a short-lived dryRunToken; launch/wire require that
- * token (launch) plus the exact confirmPhrase APPROVE_SOL_SPEND (not a free-form
- * boolean the model can invent from chat alone).
+ * Spend gate: POST /api/agent/launch/dry-run returns dryRunId + approvalUrl
+ * (no approve secret). Operator opens approvalUrl and wallet-signs.
+ * Launch/wire require dryRunId after approval. Image content is bound by sha256.
  */
-import { createHash, randomBytes } from 'node:crypto';
 export const DEFAULT_API_URL = 'https://api.crewpay.dev';
-/** Exact phrase a human must supply for SOL-spending calls. */
-export const SOL_SPEND_CONFIRM_PHRASE = 'APPROVE_SOL_SPEND';
-const pendingDryRuns = new Map();
-const DRY_RUN_TTL_MS = 30 * 60 * 1000;
 export function loadCrewPayEnv(overrides = {}) {
     return {
         apiUrl: (overrides.apiUrl || process.env.CREW_API_URL || DEFAULT_API_URL).replace(/\/$/, ''),
@@ -24,29 +19,6 @@ export function loadCrewPayEnv(overrides = {}) {
             '',
     };
 }
-/** Canonical hash of launch fields so dry-run and launch bodies must match. */
-export function hashLaunchBody(body) {
-    const pick = {
-        name: body.name,
-        ticker: body.ticker,
-        description: body.description ?? null,
-        mode: body.mode ?? 'agent',
-        initialBuySol: body.initialBuySol ?? 0,
-        imageUrl: body.imageUrl ?? null,
-        autoHire: body.autoHire ?? null,
-        crew: body.crew ?? null,
-        holderKol: body.holderKol ?? false,
-    };
-    return createHash('sha256').update(JSON.stringify(pick)).digest('hex');
-}
-function assertSpendConfirm(opts, action) {
-    if (opts.humanConfirmed !== true) {
-        throw new Error(`${action} blocked: humanConfirmed must be true after an explicit human approval`);
-    }
-    if (opts.confirmPhrase !== SOL_SPEND_CONFIRM_PHRASE) {
-        throw new Error(`${action} blocked: confirmPhrase must be exactly "${SOL_SPEND_CONFIRM_PHRASE}" (human-supplied; do not invent)`);
-    }
-}
 export class CrewPayClient {
     env;
     constructor(env = loadCrewPayEnv()) {
@@ -102,52 +74,36 @@ export class CrewPayClient {
             body: JSON.stringify(body),
         });
     }
-    async dryRun(body) {
-        const data = await this.fetch('/api/agent/launch/dry-run', {
+    /** Server dry-run — returns plan + dryRunId + approvalUrl (no approve secret). */
+    dryRun(body) {
+        return this.fetch('/api/agent/launch/dry-run', {
             method: 'POST',
             auth: true,
             body: JSON.stringify(body),
         });
-        const dryRunToken = randomBytes(16).toString('hex');
-        pendingDryRuns.set(dryRunToken, {
-            bodyHash: hashLaunchBody(body),
-            expiresAt: Date.now() + DRY_RUN_TTL_MS,
-        });
-        return {
-            ...(typeof data === 'object' && data ? data : { result: data }),
-            dryRunToken,
-            confirmPhraseRequired: SOL_SPEND_CONFIRM_PHRASE,
-            tip: `To launch: pass the same body + dryRunToken + humanConfirmed:true + confirmPhrase:"${SOL_SPEND_CONFIRM_PHRASE}" (human must supply the phrase).`,
-        };
     }
-    /**
-     * Real launch — spends SOL. Requires a prior dryRunToken for this body plus
-     * humanConfirmed and confirmPhrase APPROVE_SOL_SPEND.
-     */
     launch(body, opts) {
-        assertSpendConfirm(opts, 'Launch');
-        const pending = pendingDryRuns.get(opts.dryRunToken);
-        if (!pending || pending.expiresAt < Date.now()) {
-            throw new Error('Launch blocked: missing/expired dryRunToken — call dryRun first and reuse its dryRunToken');
-        }
-        if (pending.bodyHash !== hashLaunchBody(body)) {
-            throw new Error('Launch blocked: body does not match the dry-run that issued dryRunToken');
+        const dryRunId = String(opts.dryRunId || '').trim();
+        if (!dryRunId) {
+            throw new Error('Launch blocked: dryRunId required — dry-run, operator wallet-approves on approvalUrl, then launch');
         }
-        pendingDryRuns.delete(opts.dryRunToken);
         return this.fetch('/api/agent/launch', {
             method: 'POST',
             auth: true,
             launcher: true,
-            body: JSON.stringify(body),
+            body: JSON.stringify({ ...body, dryRunId }),
         });
     }
     wireFees(body, opts) {
-        assertSpendConfirm(opts, 'Wire-fees');
+        const dryRunId = String(opts.dryRunId || '').trim();
+        if (!dryRunId) {
+            throw new Error('Wire-fees blocked: dryRunId required — dry-run with intent=wire-fees, wallet-approve, then wire');
+        }
         return this.fetch('/api/agent/wire-fees', {
             method: 'POST',
             auth: true,
             launcher: true,
-            body: JSON.stringify(body),
+            body: JSON.stringify({ ...body, dryRunId }),
         });
     }
     crank(body) {

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 /**
  * GOAT SDK plugin scaffold for CrewPay.
- * Prefer MCP: npx -y crewpay-mcp@1.2.1 or https://mcp.crewpay.dev/mcp
+ * Prefer MCP: npx -y crewpay-mcp@1.2.3 or https://mcp.crewpay.dev/mcp
  */
 export type CrewPayGoatOptions = {
     apiUrl?: string;
@@ -11,24 +11,17 @@ export declare class CrewPayGoatService {
     constructor(opts?: CrewPayGoatOptions);
     crewpay_discover(): Promise<unknown>;
     crewpay_autohire(params: Record<string, unknown>): Promise<unknown>;
-    crewpay_launch_dry_run(params: Record<string, unknown>): Promise<{
-        dryRunToken: string;
-        confirmPhraseRequired: string;
-        tip: string;
-    }>;
+    crewpay_launch_dry_run(params: Record<string, unknown>): Promise<unknown>;
     /**
-     * Spends SOL. Requires dryRunToken from dry-run + confirmPhrase APPROVE_SOL_SPEND + humanConfirmed.
+     * Spends SOL. Requires dryRunId from dry-run after human approval on approvalUrl.
      */
     crewpay_launch(params: Record<string, unknown> & {
-        humanConfirmed?: boolean;
-        confirmPhrase?: string;
-        dryRunToken?: string;
+        dryRunId?: string;
     }): Promise<unknown>;
     crewpay_wire_fees(params: {
         mint: string;
         mode?: string;
-        humanConfirmed?: boolean;
-        confirmPhrase?: string;
+        dryRunId?: string;
     }): Promise<unknown>;
     crewpay_crank(params: {
         mint: string;
@@ -38,6 +31,6 @@ export declare class CrewPayGoatService {
 export declare function crewpay(options?: CrewPayGoatOptions): {
     name: string;
     description: string;
-    service: CrewPayGoatService;
+    tools: CrewPayGoatService;
 };
 export default crewpay;

package/dist/index.js

@@ -1,8 +1,8 @@
 /**
  * GOAT SDK plugin scaffold for CrewPay.
- * Prefer MCP: npx -y crewpay-mcp@1.2.1 or https://mcp.crewpay.dev/mcp
+ * Prefer MCP: npx -y crewpay-mcp@1.2.3 or https://mcp.crewpay.dev/mcp
  */
-import { CrewPayClient, loadCrewPayEnv, SOL_SPEND_CONFIRM_PHRASE, } from './client.js';
+import { CrewPayClient, loadCrewPayEnv } from './client.js';
 function api(opts = {}) {
     return new CrewPayClient(loadCrewPayEnv(opts));
 }
@@ -21,22 +21,16 @@ export class CrewPayGoatService {
         return api(this.opts).dryRun(params);
     }
     /**
-     * Spends SOL. Requires dryRunToken from dry-run + confirmPhrase APPROVE_SOL_SPEND + humanConfirmed.
+     * Spends SOL. Requires dryRunId from dry-run after human approval on approvalUrl.
      */
     async crewpay_launch(params) {
-        const { humanConfirmed, confirmPhrase, dryRunToken, ...rest } = params;
+        const { dryRunId, humanConfirmed: _h, confirmPhrase: _c, dryRunToken: _t, ...rest } = params;
         return api(this.opts).launch(rest, {
-            humanConfirmed: humanConfirmed === true,
-            confirmPhrase: confirmPhrase || '',
-            dryRunToken: dryRunToken || '',
+            dryRunId: dryRunId || '',
         });
     }
     async crewpay_wire_fees(params) {
-        const { humanConfirmed, confirmPhrase, mint, mode } = params;
-        return api(this.opts).wireFees({ mint, mode }, {
-            humanConfirmed: humanConfirmed === true,
-            confirmPhrase: confirmPhrase || '',
-        });
+        return api(this.opts).wireFees({ mint: params.mint, mode: params.mode }, { dryRunId: params.dryRunId || '' });
     }
     async crewpay_crank(params) {
         return api(this.opts).crank(params);
@@ -48,8 +42,8 @@ export class CrewPayGoatService {
 export function crewpay(options = {}) {
     return {
         name: 'crewpay',
-        description: `CrewPay — Pump.fun KOL Autohire + fee-shares (60/15/25). Buyback not live. Dry-run token + ${SOL_SPEND_CONFIRM_PHRASE} before launch.`,
-        service: new CrewPayGoatService(options),
+        description: 'CrewPay — Pump.fun KOL Autohire + fee-shares (60/15/25). Buyback not live. Dry-run → approvalUrl → launch with dryRunId.',
+        tools: new CrewPayGoatService(options),
     };
 }
 export default crewpay;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "crewpay-goat-plugin",
-  "version": "0.1.0",
-  "description": "GOAT SDK plugin for CrewPay REST tools. Fee map 60/15/25; buyback not live; dryRunToken + APPROVE_SOL_SPEND before launch.",
+  "version": "0.2.0",
+  "description": "GOAT SDK plugin for CrewPay REST tools. Fee map 60/15/25; buyback not live; dryRunId after approvalUrl before launch.",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,8 +17,7 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "prepublishOnly": "npm run build"
+    "build": "tsc -p tsconfig.json"
   },
   "keywords": [
     "goat-sdk",
@@ -45,5 +44,6 @@
   },
   "publishConfig": {
     "access": "public"
-  }
+  },
+  "private": false
 }