cryptoiz-mcp 4.16.10 → 4.16.12

package/index.js

@@ -1,14 +1,17 @@
 'use strict';
-var VERSION = 'v4.16.10';
+var VERSION = 'v4.16.12';
 var GATEWAY = 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-x402-gateway';
+// FIX v4.16.12: route ALL paid tools to gateway. Per-tool endpoints (mcp-alpha-scanner etc.)
+// have stale hardcoded fee payer that breaks after Dexter key rotation. Gateway has dynamic
+// fee payer fetched from /supported. Single source of truth = no per-tool drift.
 var TOOL_ENDPOINTS = {
-  get_whale_alpha: 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-alpha-scanner',
-  get_whale_divergence: 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-divergence',
-  get_whale_accumulation: 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-accumulation',
-  get_whale_neutral: 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-neutral',
-  get_whale_distribution: 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-distribution',
-  get_btc_regime: 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-btc-regime',
-  get_btc_futures_signal: 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-btc-futures',
+  get_whale_alpha: GATEWAY,
+  get_whale_divergence: GATEWAY,
+  get_whale_accumulation: GATEWAY,
+  get_whale_neutral: GATEWAY,
+  get_whale_distribution: GATEWAY,
+  get_btc_regime: GATEWAY,
+  get_btc_futures_signal: GATEWAY,
   get_token_ca: GATEWAY,
   get_status: GATEWAY,
 };
@@ -93,18 +96,25 @@ async function buildV2PaymentPayload(amount, feePayerAddr) {
   transferData.writeUInt32LE(Math.floor(amount / 0x100000000) & 0xFFFFFFFF, 5);
   transferData[9] = 6;
   var transferIx = { programId: tokenProgramPk, keys: transferKeys, data: transferData };
-  // FIX v4.16.10: NO Memo instruction in V2 — Dexter scheme_exact_svm whitelist
-  // only allows ComputeBudget + SPL Token + Lighthouse. Memo would be rejected.
+  // FIX v4.16.12: RESTORE Memo instruction in V2 (4-ix tx: Limit+Price+TransferChecked+Memo).
+  // Empirical: April 6-8 logs prove V2 with memo accepted by Dexter. Removing memo (v4.16.10)
+  // didn't fix anything — the actual bug was Dexter key rotation, fixed in gateway v44.
+  // Memo also makes TX visible to x402scan (memo carries x402 nonce marker).
+  var memoProgramPk = new PublicKey(MEMO_PROGRAM);
+  var nonceBytes = new Uint8Array(16);
+  for (var i = 0; i < 16; i++) nonceBytes[i] = Math.floor(Math.random() * 256);
+  var nonceHex = Array.from(nonceBytes).map(function(b) { return b.toString(16).padStart(2,'0'); }).join('');
+  var memoIx = { programId: memoProgramPk, keys: [], data: Buffer.from('x402:v2:' + nonceHex, 'utf8') };
   var bh = await conn.getLatestBlockhash('confirmed');
   var message = new TransactionMessage({
     payerKey: feePayerPk,
     recentBlockhash: bh.blockhash,
-    instructions: [setLimitIx, setPriceIx, transferIx],
+    instructions: [setLimitIx, setPriceIx, transferIx, memoIx],
   }).compileToV0Message();
   var vtx = new VersionedTransaction(message);
   vtx.sign([kp]);
   var txB64 = Buffer.from(vtx.serialize()).toString('base64');
-  console.error('[cryptoiz-mcp] V2 tx built (Dexter gas-sponsored), 3 ix: limit+price+transferChecked');
+  console.error('[cryptoiz-mcp] V2 tx built (Dexter gas-sponsored), 4 ix: limit+price+transferChecked+memo');
   return txB64;
 }
 
@@ -162,13 +172,15 @@ async function callTool(toolName, args) {
   if (resp1.status !== 402) throw new Error('Server error ' + resp1.status + ': ' + (await resp1.text()).substring(0, 200));
 
   // Step 2: parse payment requirements
+  // FIX v4.16.11: detect V2 by extra.feePayer presence (Dexter sponsorship marker),
+  // not by header. Per-tool endpoints (mcp-alpha-scanner, mcp-btc-regime, etc.) only
+  // serve 402 in body, no payment-required header. Header check stays as fast path.
   var payReq = null;
-  var useV2 = false;
   var prHeader = resp1.headers.get('payment-required');
   if (prHeader) {
     try {
       var arr = JSON.parse(Buffer.from(prHeader, 'base64').toString('utf8'));
-      if (arr && arr[0]) { payReq = arr[0]; useV2 = true; }
+      if (arr && arr[0]) payReq = arr[0];
     } catch(_e) {}
   }
   if (!payReq) {
@@ -176,6 +188,8 @@ async function callTool(toolName, args) {
     if (b402 && b402.accepts && b402.accepts[0]) payReq = b402.accepts[0];
   }
   if (!payReq) throw new Error('No payment requirements in 402');
+  // V2 = Dexter sponsored gas = extra.feePayer field present (independent of transport)
+  var useV2 = !!(payReq.extra && payReq.extra.feePayer);
 
   var amount = parseInt(payReq.maxAmountRequired || payReq.amount || '10000');
   var hasFeePayer = payReq.extra && payReq.extra.feePayer;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cryptoiz-mcp",
-  "version": "4.16.10",
+  "version": "4.16.12",
   "description": "CryptoIZ MCP Server - Solana DEX whale intelligence via Claude Desktop with x402 USDC micropayments",
   "main": "index.js",
   "type": "commonjs",