mppx 0.9.0 → 0.9.1

package/dist/tempo/session/client/SessionManager.js

@@ -530,11 +530,10 @@ export function sessionManager(parameters) {
             trackCreates: false,
         };
         channelUse = use;
-        // Cold starts resume from `channelStore` after the 402 reveals the scope.
-        const liveHint = runtime.channel?.opened ? runtime.channel.channelId : undefined;
         try {
             await bootstrapSession(input, init);
             use.trackCreates = true;
+            const liveHint = runtime.channel?.opened ? runtime.channel.channelId : undefined;
             let effectiveInit = requestInitWithSessionHint(input, init, liveHint);
             // Stored channels may be stale, so retry once after evicting the resumed entry.
             let canRetryResumed = !previous.channel?.opened;

package/dist/tempo/session/server/Session.js

@@ -129,10 +129,13 @@ async function verifyBootstrapCredential(parameters) {
         });
     Expires.assert(credential.challenge.expires, credential.challenge.id);
     assertBootstrapChallengeMatches(challenge, credential.challenge);
+    const payload = Methods.charge.schema.credential.payload.safeParse(credential.payload);
+    if (!payload.success)
+        throw new Errors.InvalidPayloadError();
     return charge.verify({
         credential: {
             ...credential,
-            payload: Methods.charge.schema.credential.payload.parse(credential.payload),
+            payload: payload.data,
         },
         request: rawRequest,
     });
@@ -159,7 +162,7 @@ async function handleBootstrapPreflight(parameters) {
         });
     }
     catch (error) {
-        return respondBootstrapChallenge(challenge, error instanceof Errors.PaymentError ? error : new Errors.VerificationFailedError());
+        return respondBootstrapChallenge(challenge, error instanceof Errors.PaymentError ? error : new Errors.InternalPaymentError());
     }
     const channelId = await resolveSessionChannelId({
         capturedRequest: parameters.capturedRequest,

package/dist/x402/mcp.js

@@ -2,6 +2,7 @@ import { McpError } from '@modelcontextprotocol/sdk/types.js';
 import { decodePaymentRequiredHeader } from '@x402/core/http';
 import { createPaymentWrapper, MCP_PAYMENT_META_KEY, } from '@x402/mcp';
 import * as Challenge from '../Challenge.js';
+import * as Errors from '../Errors.js';
 import * as Negotiator from '../integrations/x402/Negotiator.js';
 import * as Mcp from '../Mcp.js';
 import * as McpCredential from '../mcp/internal/Credential.js';
@@ -56,7 +57,7 @@ export function mpp(resourceServer, config) {
                 return x402Handler(arguments_, rawExtra);
             if (result.status === 'handled') {
                 if (result.response.status === 402)
-                    throw createCombinedChallenge(result.response);
+                    throw createCombinedChallenge(result.response, credential ? new Errors.VerificationFailedError() : undefined);
                 return attachReceipt(await responseToToolResult(result.response.clone()), result.response, credential);
             }
             const toolResult = await handler(arguments_, {
@@ -118,11 +119,11 @@ function getErrorMessage(value) {
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
-function createCombinedChallenge(response) {
+function createCombinedChallenge(response, error) {
     const challenges = Challenge.fromResponseList(response);
     const encoded = response.headers.get(paymentRequiredHeader);
     const x402 = encoded ? decodePaymentRequiredHeader(encoded) : undefined;
-    return new McpError(Mcp.paymentRequiredCode, 'Payment Required', {
+    return new McpError(Mcp.errorCode(error), error?.title ?? 'Payment Required', {
         challenges,
         httpStatus: 402,
         ...(x402 ? { x402 } : {}),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mppx",
   "type": "module",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "main": "./dist/index.js",
   "license": "MIT",
   "homepage": "https://github.com/wevm/mppx#readme",