mycomesh-consumer 0.1.16 → 0.1.18

package/README.md

@@ -2,7 +2,7 @@
 
 Local-first launcher and request CLI for the MycoMesh OpenAI-compatible
 Consumer edge. With no arguments it starts the pinned Docker runtime, opens the
-wallet and funding page, waits for a V6 Session, and opens Codex through the
+wallet and funding page, waits for prepaid access, and opens Codex through the
 loopback proxy.
 
 The package is published as `mycomesh-consumer`. `mycomesh-consumer` and the
@@ -30,10 +30,10 @@ mycomesh-consumer
 
 No checkout, separate Codex install, host Python, GNU Make, public Gateway URL, or command arguments are
 required. The command always prints the local onboarding URL and opens it when
-possible. Connect the wallet, mint/deposit test tUSDC, and approve the one-time
-V6 `openSession`; Codex opens after `/ready` confirms the Session on-chain.
-Wallet keys stay in the browser wallet. Consumer credentials, transport
-identity, and Session state stay in a protected Docker volume.
+possible. Connect the wallet, mint or transfer test tUSDC, and authorize prepaid
+access once; Codex opens after `/ready` confirms access is ready. Wallet keys stay
+in the browser wallet. Consumer credentials, transport identity, and payment
+state stay in a protected Docker volume.
 
 The runtime image is pinned by digest. Stop it without deleting state with:
 
@@ -47,8 +47,8 @@ local proxy running. Consumer network traffic is direct by default. Use
 hosts are translated to `host.docker.internal`. Dedicated
 `MYCOMESH_CONSUMER_*_PROXY` variables remain available for operators.
 
-Upgrading the npm package does not require clearing a Session. The Consumer
-volume is intentionally reused so its API key, identity and verified Session
+Upgrading the npm package does not require clearing prepaid access. The Consumer
+volume is intentionally reused so its API key, identity and verified payment
 route survive restarts. If the browser page is stuck on an old local record,
 close that tab and reopen the printed onboarding URL, or clear site data for
 `http://127.0.0.1:8110` in the browser. To reset all local Consumer state,
@@ -58,14 +58,13 @@ use the explicit, confirmed reset command:
 mycomesh-consumer --reset-local
 ```
 
-If Codex reports an uncertain request claim, stop Codex, run
-`mycomesh-consumer --no-codex`, open the local page, and click **Activate new
-Session**. The old on-chain Session is intentionally not replayed or deleted.
+If Codex reports an interrupted request, stop Codex, run
+`mycomesh-consumer --no-codex`, open the local page, and click **Refresh prepaid
+access**. The Consumer handles the previous payment state without replaying it.
 
-This removes the local API key, identity, wallet metadata and SQLite Session
-records. It does not close or refund an already-open on-chain V5/V6 Session; let
-that Session expire or submit the contract's close transaction separately
-before treating its escrow as available. The command asks you to type `RESET`
+This removes the local API key, identity, wallet metadata and local payment
+records. Any pending payment authorization remains managed separately. The
+command asks you to type `RESET`
 and removes only the fixed Consumer Compose project and its protected volume.
 
 The existing stateless API commands remain available. For example:
@@ -101,14 +100,11 @@ or provide explicit values:
 ```sh
 export MYCOMESH_BASE_URL=http://127.0.0.1:8110/v1
 export MYCOMESH_API_KEY='replace-with-local-consumer-key'
-export MYCOMESH_SESSION_ID='0x...replace-with-active-v6-session-id'
 ```
 
-The Session ID is not a replacement for the API key. Both values must belong to
-the same local Consumer wallet. A standard OpenAI client may omit the
-`mycomesh_session` extension when it calls the local proxy: the proxy selects
-the latest verified active Session. A public Gateway can still be used
-explicitly with `--base-url`, but it is never the default.
+The local proxy selects the current prepaid access automatically. No session
+identifier or per-request wallet signature is needed. A public Gateway can
+still be used explicitly with `--base-url`, but it is never the default.
 
 ## Commands
 
@@ -128,10 +124,8 @@ mycomesh chat \
   --max-completion-tokens 500
 ```
 
-The request CLI validates `MYCOMESH_SESSION_ID` and adds the
-`mycomesh_session` object automatically. Use `--session-id 0x...` to override it
-for one command. The local proxy also accepts a standard OpenAI-shaped request
-without the extension and binds its latest verified Session.
+The request CLI sends standard OpenAI-shaped requests. The local proxy binds
+each request to the current prepaid access automatically.
 
 Use `--stream` to request SSE. SSE bytes are forwarded to stdout as they arrive,
 without rewriting event boundaries:
@@ -153,18 +147,6 @@ mycomesh chat --json @request.json
 generate-request | mycomesh responses --json -
 ```
 
-When `MYCOMESH_SESSION_ID` or `--session-id` is set, the CLI overwrites any JSON
-session field with that validated value. A client constructing the complete raw
-request body instead may include the extension directly:
-
-```json
-{
-  "mycomesh_session": {
-    "session_id": "0x..."
-  }
-}
-```
-
 Piped stdin is treated as JSON even without `--json`:
 
 ```sh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mycomesh-consumer",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "Local-first MycoMesh Consumer launcher and OpenAI-compatible request CLI.",
   "publishConfig": {
     "access": "public"

package/scripts/start-consumer.sh

@@ -113,7 +113,7 @@ open_browser() {
       if command -v cmd.exe >/dev/null 2>&1; then cmd.exe /c start "" "$url" >/dev/null 2>&1 & return; fi ;;
   esac
   if [[ -n "$opener" ]]; then "$opener" "$url" >/dev/null 2>&1 &
-  else printf '%s\n' "Open this URL in a browser to connect a wallet, fund it, and activate a V6 Session."; fi
+  else printf '%s\n' "Open this URL in a browser to connect a wallet and add prepaid access."; fi
 }
 
 while (($#)); do
@@ -149,7 +149,7 @@ export MYCOMESH_NODE_IMAGE="$NODE_IMAGE"
 
 if ((STOP)); then
   compose stop consumer
-  printf '%s\n' "MycoMesh Consumer stopped. Its wallet and Session state remain in the Docker volume."
+  printf '%s\n' "MycoMesh Consumer stopped. Its wallet and payment state remain in the Docker volume."
   exit 0
 fi
 
@@ -158,12 +158,12 @@ if ((RESET_LOCAL)); then
     printf '%s\n' "Would remove the Consumer containers, network, and protected local volume."
     exit 0
   fi
-  printf '%s\n' "This removes the local API key, Consumer identity, wallet metadata and SQLite Session records."
+  printf '%s\n' "This removes the local API key, Consumer identity, wallet metadata and local payment records."
   printf '%s' 'Type RESET to continue: '
   read -r confirmation
   [[ "$confirmation" == RESET ]] || die "local Consumer reset cancelled"
   compose down --volumes --remove-orphans
-  printf '%s\n' "Local Consumer state removed. Any on-chain V5/V6 Session remains on-chain."
+  printf '%s\n' "Local Consumer state removed. Any pending payment authorization remains managed separately."
   exit 0
 fi
 
@@ -182,12 +182,12 @@ if ((DRY_RUN || NO_CODEX)); then
   exit 0
 fi
 
-printf '%s\n' "Waiting for the browser to activate the local V6 Session..."
+printf '%s\n' "Waiting for the browser to make prepaid access ready..."
 command -v curl >/dev/null 2>&1 || die "curl is required while waiting for wallet onboarding"
 started_at="$(date +%s)"
 while ! curl --noproxy '*' --fail --silent --max-time 3 http://127.0.0.1:8110/ready >/dev/null 2>&1; do
   if (( $(date +%s) - started_at >= READY_TIMEOUT )); then
-    die "timed out waiting for the local Consumer V6 Session; reopen $url"
+    die "timed out waiting for prepaid access; reopen $url"
   fi
   sleep 2
 done

package/src/cli.mjs

@@ -1,7 +1,7 @@
 import { once } from "node:events";
 import { readFile } from "node:fs/promises";
 
-const CLI_VERSION = "0.1.16";
+const CLI_VERSION = "0.1.18";
 // The npm client is local-first. A public Gateway is an explicit override;
 // the default remains the loopback Consumer edge so a blocked domain cannot
 // strand the Codex client.
@@ -29,10 +29,6 @@ Connection options:
                          (env: MYCOMESH_TIMEOUT_SECONDS; default: 300)
   --allow-insecure-http   Allow cleartext HTTP to a non-loopback test gateway
 
-Session options:
-  --session-id <bytes32>  Use an already-opened V6 Session
-                         (env: MYCOMESH_SESSION_ID)
-
 Request body options:
   --json <json|@file|->   JSON object, JSON file, or JSON from stdin
   --model <model>         Set the request model

package/src/consumer.mjs

@@ -2,9 +2,9 @@ import { spawn as defaultSpawn } from "node:child_process";
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
 
-const CONSUMER_RELEASE_VERSION = "0.1.16";
+const CONSUMER_RELEASE_VERSION = "0.1.18";
 const DEFAULT_NODE_IMAGE =
-  "ghcr.io/charleslzp/mycomesh-node@sha256:6c70f7355cf2fa97e3fa5d49724c1091beb6d628d808c9993793e3ee159c4ad8";
+  "ghcr.io/charleslzp/mycomesh-node@sha256:19da19f54d186a070b14e0817eddc933f081f65e3b652c356847a0c033d6edfb";
 const API_COMMANDS = new Set(["health", "models", "responses", "chat"]);
 const API_VALUE_OPTIONS = new Set([
   "--base-url",
@@ -26,7 +26,7 @@ const HELP = `Usage: mycomesh-consumer [options] [-- codex-options]
 Start the local MycoMesh Consumer. No options are needed.
 
 The default command starts the pinned Docker runtime, opens the local wallet
-and funding page, waits for an activated V6 Session, then opens Codex through
+and funding page, waits for prepaid access, then opens Codex through
 the loopback Consumer at http://127.0.0.1:8110/v1.
 
 Options:
@@ -50,7 +50,7 @@ Existing API commands remain available:
 
 Docker Desktop/Engine is required. The package installs official Codex and
 wallet keys remain in the browser wallet; local Consumer credentials and
-Sessions remain in a protected Docker volume.`;
+payment state remain in a protected Docker volume.`;
 
 class ConsumerCliError extends Error {
   constructor(message, exitCode = 1) {