run402-mcp 2.49.0 → 3.1.0

package/dist/tools/contract-call.js

@@ -3,7 +3,7 @@ import { getSdk } from "../sdk.js";
 import { mapSdkError } from "../errors.js";
 export const contractCallSchema = {
     project_id: z.string().describe("The project ID"),
-    wallet_id: z.string().describe("The KMS contract wallet ID"),
+    signer_id: z.string().describe("The KMS signer ID"),
     chain: z.enum(["base-mainnet", "base-sepolia"]).describe("EVM chain"),
     contract_address: z.string().describe("0x-prefixed contract address"),
     abi_fragment: z.array(z.unknown()).describe("ABI fragment containing the function definition"),
@@ -15,7 +15,7 @@ export const contractCallSchema = {
 export async function handleContractCall(args) {
     try {
         const body = await getSdk().contracts.call(args.project_id, {
-            walletId: args.wallet_id,
+            signerId: args.signer_id,
             chain: args.chain,
             contractAddress: args.contract_address,
             abiFragment: args.abi_fragment,

package/dist/tools/contract-call.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract-call.js","sourceRoot":"","sources":["../../src/tools/contract-call.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC5D,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IACrE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACrE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC9F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC5F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;CACpI,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA4N;IACnQ,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YAC1D,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,eAAe;SACrC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yCAAyC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,+DAA+D,EAAE,CAAC,EAAE,CAAC;IAC5L,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}
+{"version":3,"file":"contract-call.js","sourceRoot":"","sources":["../../src/tools/contract-call.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IACrE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACrE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC9F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC5F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;CACpI,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA4N;IACnQ,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YAC1D,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,eAAe;SACrC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yCAAyC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,+DAA+D,EAAE,CAAC,EAAE,CAAC;IAC5L,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/tools/contract-deploy.d.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 export declare const contractDeploySchema: {
     project_id: z.ZodString;
-    wallet_id: z.ZodString;
+    signer_id: z.ZodString;
     chain: z.ZodEnum<["base-mainnet", "base-sepolia"]>;
     bytecode: z.ZodString;
     value: z.ZodOptional<z.ZodString>;
@@ -9,7 +9,7 @@ export declare const contractDeploySchema: {
 };
 export declare function handleContractDeploy(args: {
     project_id: string;
-    wallet_id: string;
+    signer_id: string;
     chain: "base-mainnet" | "base-sepolia";
     bytecode: string;
     value?: string;

package/dist/tools/contract-deploy.js

@@ -3,8 +3,8 @@ import { getSdk } from "../sdk.js";
 import { mapSdkError } from "../errors.js";
 export const contractDeploySchema = {
     project_id: z.string().describe("The project ID"),
-    wallet_id: z.string().describe("The KMS contract wallet ID (cwlt_...) that will sign + own the new contract"),
-    chain: z.enum(["base-mainnet", "base-sepolia"]).describe("EVM chain (must match the wallet's chain)"),
+    signer_id: z.string().describe("The KMS signer ID (cwlt_...) that will sign + own the new contract"),
+    chain: z.enum(["base-mainnet", "base-sepolia"]).describe("EVM chain (must match the signer's chain)"),
     bytecode: z.string().describe("Full creation calldata as 0x-prefixed hex (creation bytecode + ABI-encoded constructor args, concatenated client-side). Non-empty, even-length, ≤ 128 KB. run402 does NOT compile Solidity."),
     value: z.string().optional().describe("Optional native-token value in wei to attach to the deploy (decimal string)"),
     idempotency_key: z.string().optional().describe("Optional idempotency key — same key + same bytecode returns same call_id without re-broadcasting"),
@@ -12,7 +12,7 @@ export const contractDeploySchema = {
 export async function handleContractDeploy(args) {
     try {
         const body = await getSdk().contracts.deploy(args.project_id, {
-            walletId: args.wallet_id,
+            signerId: args.signer_id,
             chain: args.chain,
             bytecode: args.bytecode,
             value: args.value,
@@ -23,7 +23,7 @@ export async function handleContractDeploy(args) {
                     type: "text",
                     text: "## Contract Deploy Submitted\n\n" +
                         "```json\n" + JSON.stringify(body, null, 2) + "\n```\n\n" +
-                        "**Deployed contract address (deterministic CREATE)**: `" + body.contract_address + "` — returned synchronously from `(wallet.address, nonce)`. Verified against the on-chain receipt on confirmation.\n\n" +
+                        "**Deployed contract address (deterministic CREATE)**: `" + body.contract_address + "` — returned synchronously from `(signer.address, nonce)`. Verified against the on-chain receipt on confirmation.\n\n" +
                         "**Cost**: chain gas at-cost + $0.000005 KMS sign fee (same as `contract_call`).\n\n" +
                         "Poll `get_contract_call_status` with `call_id` to confirm. On `status: confirmed`, the deployed contract is callable via `contract_call` at the address above.",
                 }],

package/dist/tools/contract-deploy.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract-deploy.js","sourceRoot":"","sources":["../../src/tools/contract-deploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IAC7G,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACrG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6LAA6L,CAAC;IAC5N,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACpH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kGAAkG,CAAC;CACpJ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAmJ;IAC5L,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;YAC5D,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,eAAe;SACrC,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,kCAAkC;wBAClC,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,WAAW;wBACzD,yDAAyD,GAAG,IAAI,CAAC,gBAAgB,GAAG,uHAAuH;wBAC3M,qFAAqF;wBACrF,gKAAgK;iBACnK,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}
+{"version":3,"file":"contract-deploy.js","sourceRoot":"","sources":["../../src/tools/contract-deploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IACpG,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACrG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6LAA6L,CAAC;IAC5N,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACpH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kGAAkG,CAAC;CACpJ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAmJ;IAC5L,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;YAC5D,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,eAAe;SACrC,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,kCAAkC;wBAClC,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,WAAW;wBACzD,yDAAyD,GAAG,IAAI,CAAC,gBAAgB,GAAG,uHAAuH;wBAC3M,qFAAqF;wBACrF,gKAAgK;iBACnK,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/tools/delete-signer.d.ts

@@ -0,0 +1,16 @@
+import { z } from "zod";
+export declare const deleteSignerSchema: {
+    project_id: z.ZodString;
+    signer_id: z.ZodString;
+};
+export declare function handleDeleteSigner(args: {
+    project_id: string;
+    signer_id: string;
+}): Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+}>;
+//# sourceMappingURL=delete-signer.d.ts.map

package/dist/tools/delete-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-signer.d.ts","sourceRoot":"","sources":["../../src/tools/delete-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,kBAAkB;;;CAG9B,CAAC;AAEF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAOxK"}

package/dist/tools/delete-signer.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+import { getSdk } from "../sdk.js";
+import { mapSdkError } from "../errors.js";
+export const deleteSignerSchema = {
+    project_id: z.string().describe("The project ID"),
+    signer_id: z.string().describe("The KMS signer ID. Schedules KMS key deletion (7-day window). Refused if balance >= dust — drain first."),
+};
+export async function handleDeleteSigner(args) {
+    try {
+        const body = await getSdk().contracts.deleteSigner(args.project_id, args.signer_id);
+        return { content: [{ type: "text", text: "## Signer Deleted\n\n```json\n" + JSON.stringify(body, null, 2) + "\n```" }] };
+    }
+    catch (err) {
+        return mapSdkError(err, "deleting signer");
+    }
+}
+//# sourceMappingURL=delete-signer.js.map

package/dist/tools/delete-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-signer.js","sourceRoot":"","sources":["../../src/tools/delete-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yGAAyG,CAAC;CAC1I,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA+C;IACtF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;IAC3H,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/tools/{drain-contract-wallet.d.ts → drain-signer.d.ts}

@@ -1,12 +1,12 @@
 import { z } from "zod";
-export declare const drainContractWalletSchema: {
+export declare const drainSignerSchema: {
     project_id: z.ZodString;
-    wallet_id: z.ZodString;
+    signer_id: z.ZodString;
     destination_address: z.ZodString;
 };
-export declare function handleDrainContractWallet(args: {
+export declare function handleDrainSigner(args: {
     project_id: string;
-    wallet_id: string;
+    signer_id: string;
     destination_address: string;
 }): Promise<{
     content: Array<{
@@ -15,4 +15,4 @@ export declare function handleDrainContractWallet(args: {
     }>;
     isError?: boolean;
 }>;
-//# sourceMappingURL=drain-contract-wallet.d.ts.map
+//# sourceMappingURL=drain-signer.d.ts.map

package/dist/tools/drain-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drain-signer.d.ts","sourceRoot":"","sources":["../../src/tools/drain-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAOpM"}

package/dist/tools/{drain-contract-wallet.js → drain-signer.js}

@@ -1,18 +1,18 @@
 import { z } from "zod";
 import { getSdk } from "../sdk.js";
 import { mapSdkError } from "../errors.js";
-export const drainContractWalletSchema = {
+export const drainSignerSchema = {
     project_id: z.string().describe("The project ID"),
-    wallet_id: z.string().describe("The KMS contract wallet ID"),
-    destination_address: z.string().describe("Where to send the entire native-token balance. Cost: chain gas + $0.000005 KMS sign fee. Works on suspended wallets."),
+    signer_id: z.string().describe("The KMS signer ID"),
+    destination_address: z.string().describe("Where to send the entire native-token balance. Cost: chain gas + $0.000005 KMS sign fee. Works on suspended signers."),
 };
-export async function handleDrainContractWallet(args) {
+export async function handleDrainSigner(args) {
     try {
-        const body = await getSdk().contracts.drain(args.project_id, args.wallet_id, args.destination_address);
+        const body = await getSdk().contracts.drain(args.project_id, args.signer_id, args.destination_address);
         return { content: [{ type: "text", text: "## Drain Submitted\n\n```json\n" + JSON.stringify(body, null, 2) + "\n```" }] };
     }
     catch (err) {
-        return mapSdkError(err, "draining wallet");
+        return mapSdkError(err, "draining signer");
     }
 }
-//# sourceMappingURL=drain-contract-wallet.js.map
+//# sourceMappingURL=drain-signer.js.map

package/dist/tools/drain-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drain-signer.js","sourceRoot":"","sources":["../../src/tools/drain-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACnD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sHAAsH,CAAC;CACjK,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA4E;IAClH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACvG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;IAC5H,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/tools/get-signer.d.ts

@@ -0,0 +1,16 @@
+import { z } from "zod";
+export declare const getSignerSchema: {
+    project_id: z.ZodString;
+    signer_id: z.ZodString;
+};
+export declare function handleGetSigner(args: {
+    project_id: string;
+    signer_id: string;
+}): Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+}>;
+//# sourceMappingURL=get-signer.d.ts.map

package/dist/tools/get-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-signer.d.ts","sourceRoot":"","sources":["../../src/tools/get-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe;;;CAG3B,CAAC;AAEF,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAOrK"}

package/dist/tools/get-signer.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+import { getSdk } from "../sdk.js";
+import { mapSdkError } from "../errors.js";
+export const getSignerSchema = {
+    project_id: z.string().describe("The project ID"),
+    signer_id: z.string().describe("The KMS signer ID (cwlt_...)"),
+};
+export async function handleGetSigner(args) {
+    try {
+        const body = await getSdk().contracts.getSigner(args.project_id, args.signer_id);
+        return { content: [{ type: "text", text: "```json\n" + JSON.stringify(body, null, 2) + "\n```" }] };
+    }
+    catch (err) {
+        return mapSdkError(err, "fetching signer");
+    }
+}
+//# sourceMappingURL=get-signer.js.map

package/dist/tools/get-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-signer.js","sourceRoot":"","sources":["../../src/tools/get-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC/D,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA+C;IACnF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;IACtG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/tools/{list-contract-wallets.d.ts → list-signers.d.ts}

@@ -1,8 +1,8 @@
 import { z } from "zod";
-export declare const listContractWalletsSchema: {
+export declare const listSignersSchema: {
     project_id: z.ZodString;
 };
-export declare function handleListContractWallets(args: {
+export declare function handleListSigners(args: {
     project_id: string;
 }): Promise<{
     content: Array<{
@@ -11,4 +11,4 @@ export declare function handleListContractWallets(args: {
     }>;
     isError?: boolean;
 }>;
-//# sourceMappingURL=list-contract-wallets.d.ts.map
+//# sourceMappingURL=list-signers.d.ts.map

package/dist/tools/list-signers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-signers.d.ts","sourceRoot":"","sources":["../../src/tools/list-signers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iBAAiB;;CAE7B,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAOpJ"}

package/dist/tools/{list-contract-wallets.js → list-signers.js}

@@ -1,16 +1,16 @@
 import { z } from "zod";
 import { getSdk } from "../sdk.js";
 import { mapSdkError } from "../errors.js";
-export const listContractWalletsSchema = {
+export const listSignersSchema = {
     project_id: z.string().describe("The project ID"),
 };
-export async function handleListContractWallets(args) {
+export async function handleListSigners(args) {
     try {
-        const body = await getSdk().contracts.listWallets(args.project_id);
+        const body = await getSdk().contracts.listSigners(args.project_id);
         return { content: [{ type: "text", text: "```json\n" + JSON.stringify(body, null, 2) + "\n```" }] };
     }
     catch (err) {
-        return mapSdkError(err, "listing wallets");
+        return mapSdkError(err, "listing signers");
     }
 }
-//# sourceMappingURL=list-contract-wallets.js.map
+//# sourceMappingURL=list-signers.js.map

package/dist/tools/list-signers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-signers.js","sourceRoot":"","sources":["../../src/tools/list-signers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;CAClD,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA4B;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;IACtG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/tools/{provision-contract-wallet.d.ts → provision-signer.d.ts}

@@ -1,10 +1,10 @@
 import { z } from "zod";
-export declare const provisionContractWalletSchema: {
+export declare const provisionSignerSchema: {
     project_id: z.ZodString;
     chain: z.ZodEnum<["base-mainnet", "base-sepolia"]>;
     recovery_address: z.ZodOptional<z.ZodString>;
 };
-export declare function handleProvisionContractWallet(args: {
+export declare function handleProvisionSigner(args: {
     project_id: string;
     chain: "base-mainnet" | "base-sepolia";
     recovery_address?: string;
@@ -15,4 +15,4 @@ export declare function handleProvisionContractWallet(args: {
     }>;
     isError?: boolean;
 }>;
-//# sourceMappingURL=provision-contract-wallet.d.ts.map
+//# sourceMappingURL=provision-signer.d.ts.map

package/dist/tools/provision-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision-signer.d.ts","sourceRoot":"","sources":["../../src/tools/provision-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,qBAAqB;;;;CAIjC,CAAC;AAEF,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAU3N"}

package/dist/tools/provision-signer.js

@@ -0,0 +1,21 @@
+import { z } from "zod";
+import { getSdk } from "../sdk.js";
+import { mapSdkError } from "../errors.js";
+export const provisionSignerSchema = {
+    project_id: z.string().describe("The project ID"),
+    chain: z.enum(["base-mainnet", "base-sepolia"]).describe("Which EVM chain. Cost: $0.04/day rental, requires $1.20 in cash credit at creation."),
+    recovery_address: z.string().optional().describe("Optional 0x-prefixed address for auto-drain on day-90 deletion"),
+};
+export async function handleProvisionSigner(args) {
+    try {
+        const body = await getSdk().contracts.provisionSigner(args.project_id, {
+            chain: args.chain,
+            recoveryAddress: args.recovery_address,
+        });
+        return { content: [{ type: "text", text: "## KMS Signer Provisioned\n\n```json\n" + JSON.stringify(body, null, 2) + "\n```\n\n**Cost**: $0.04/day rental ($1.20/month) + $0.000005 per contract call. **Non-custodial** — see https://run402.com/humans/terms.html#non-custodial-kms-wallets" }] };
+    }
+    catch (err) {
+        return mapSdkError(err, "provisioning KMS signer");
+    }
+}
+//# sourceMappingURL=provision-signer.js.map

package/dist/tools/provision-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision-signer.js","sourceRoot":"","sources":["../../src/tools/provision-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,qFAAqF,CAAC;IAC/I,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;CACnH,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAA+F;IACzI,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE;YACrE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE,IAAI,CAAC,gBAAgB;SACvC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,yKAAyK,EAAE,CAAC,EAAE,CAAC;IACrS,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/tools/set-low-balance-alert.d.ts

@@ -1,12 +1,12 @@
 import { z } from "zod";
 export declare const setLowBalanceAlertSchema: {
     project_id: z.ZodString;
-    wallet_id: z.ZodString;
+    signer_id: z.ZodString;
     threshold_wei: z.ZodString;
 };
 export declare function handleSetLowBalanceAlert(args: {
     project_id: string;
-    wallet_id: string;
+    signer_id: string;
     threshold_wei: string;
 }): Promise<{
     content: Array<{

package/dist/tools/set-low-balance-alert.js

@@ -3,12 +3,12 @@ import { getSdk } from "../sdk.js";
 import { mapSdkError } from "../errors.js";
 export const setLowBalanceAlertSchema = {
     project_id: z.string().describe("The project ID"),
-    wallet_id: z.string().describe("The KMS contract wallet ID"),
+    signer_id: z.string().describe("The KMS signer ID"),
     threshold_wei: z.string().describe("Low-balance threshold in wei (decimal string)"),
 };
 export async function handleSetLowBalanceAlert(args) {
     try {
-        await getSdk().contracts.setLowBalanceAlert(args.project_id, args.wallet_id, args.threshold_wei);
+        await getSdk().contracts.setLowBalanceAlert(args.project_id, args.signer_id, args.threshold_wei);
         return { content: [{ type: "text", text: "Low-balance threshold set to " + args.threshold_wei + " wei" }] };
     }
     catch (err) {

package/dist/tools/set-low-balance-alert.js.map

@@ -1 +1 @@
-{"version":3,"file":"set-low-balance-alert.js","sourceRoot":"","sources":["../../src/tools/set-low-balance-alert.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC5D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CACpF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAsE;IACnH,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACjG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,GAAG,IAAI,CAAC,aAAa,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}
+{"version":3,"file":"set-low-balance-alert.js","sourceRoot":"","sources":["../../src/tools/set-low-balance-alert.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CACpF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAsE;IACnH,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACjG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,GAAG,IAAI,CAAC,aAAa,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/tools/set-recovery-address.d.ts

@@ -1,12 +1,12 @@
 import { z } from "zod";
 export declare const setRecoveryAddressSchema: {
     project_id: z.ZodString;
-    wallet_id: z.ZodString;
+    signer_id: z.ZodString;
     recovery_address: z.ZodNullable<z.ZodString>;
 };
 export declare function handleSetRecoveryAddress(args: {
     project_id: string;
-    wallet_id: string;
+    signer_id: string;
     recovery_address: string | null;
 }): Promise<{
     content: Array<{

package/dist/tools/set-recovery-address.js

@@ -3,12 +3,12 @@ import { getSdk } from "../sdk.js";
 import { mapSdkError } from "../errors.js";
 export const setRecoveryAddressSchema = {
     project_id: z.string().describe("The project ID"),
-    wallet_id: z.string().describe("The KMS contract wallet ID"),
+    signer_id: z.string().describe("The KMS signer ID"),
     recovery_address: z.string().nullable().describe("0x-prefixed address (or null to clear). Used for auto-drain on day-90 deletion."),
 };
 export async function handleSetRecoveryAddress(args) {
     try {
-        await getSdk().contracts.setRecovery(args.project_id, args.wallet_id, args.recovery_address);
+        await getSdk().contracts.setRecovery(args.project_id, args.signer_id, args.recovery_address);
         return { content: [{ type: "text", text: "Recovery address " + (args.recovery_address ? "set to " + args.recovery_address : "cleared") }] };
     }
     catch (err) {

package/dist/tools/set-recovery-address.js.map

@@ -1 +1 @@
-{"version":3,"file":"set-recovery-address.js","sourceRoot":"","sources":["../../src/tools/set-recovery-address.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC5D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;CACpI,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAgF;IAC7H,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9I,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}
+{"version":3,"file":"set-recovery-address.js","sourceRoot":"","sources":["../../src/tools/set-recovery-address.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;CACpI,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAgF;IAC7H,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9I,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402-mcp",
-  "version": "2.49.0",
+  "version": "3.1.0",
   "description": "MCP server for Run402 — AI-native Postgres databases with REST API, auth, storage, and row-level security. Pay with x402 USDC micropayments.",
   "type": "module",
   "main": "dist/index.js",

package/sdk/README.md

@@ -75,7 +75,7 @@ The `CredentialsProvider` interface has two required methods (`getAuth`, `getPro
 | `apps` | `browse`, `getApp`, `fork`, `publish`, `listVersions`, `updateVersion`, `deleteVersion` |
 | `tier` | `set`, `status` (tier pricing lives on `r.projects.getQuote()`) |
 | `billing` | `createEmailOrganization`, `linkWallet`, `createCheckout`, `setAutoRecharge`, `checkBalance`, `getOrganization`, `lookupOrganization`, `getHistory`, `balance`, `history` |
-| `contracts` | `provisionWallet`, `getWallet`, `listWallets`, `setRecovery`, `setLowBalanceAlert`, `call`, `read`, `callStatus`, `drain`, `deleteWallet` |
+| `contracts` | `provisionSigner`, `getSigner`, `listSigners`, `setRecovery`, `setLowBalanceAlert`, `call`, `read`, `callStatus`, `drain`, `deleteSigner` |
 | `ai` | `translate`, `moderate`, `usage`, `generateImage` |
 | `allowance` | `status`, `create`, `export`, `faucet` |
 | `service` | `status`, `health` (no auth, no setup — works on a fresh install) |

package/sdk/core-dist/control-plane-session.d.ts

@@ -1,11 +1,14 @@
 /**
- * A cached **control-plane session** — the human principal's *write-capable*
- * bearer, minted by the loopback-PKCE flow (`run402 operator login --loopback`).
- * Distinct from the device-flow {@link OperatorSession} (read-only): this one
- * carries `provenance` (`loopback_pkce`) and `amr`, and is accepted everywhere a
- * SIWX wallet is. Cached at the BASE config dir (email/principal-scoped, shared
- * across local named wallets), mode 0600 — the token is as sensitive as the
- * allowance key.
+ * A cached **control-plane session** — the human principal's bearer, minted by
+ * the loopback-PKCE flow (`run402 operator login --loopback`). Distinct from the
+ * device-flow {@link OperatorSession} (read-only): this one carries `provenance`
+ * (`loopback_pkce`) and `amr`. It authorizes most control-plane operations, but
+ * since gateway v1.85/v1.87 it is NOT sufficient on its own for the high-stakes
+ * writes `provision` / `deploy` / secrets — those additionally require a
+ * passkey-fresh **operator approval** (`X-Run402-Write-Auth`, minted by
+ * `run402 operator approve`; see {@link WriteAuthApproval}). Cached at the BASE
+ * config dir (email/principal-scoped, shared across local named wallets), mode
+ * 0600 — the token is as sensitive as the allowance key.
  *
  * Stored shape vs the gateway payload: the gateway returns a relative
  * `expires_in` (seconds); we persist the absolute `expires_at` (epoch ms) so a

package/sdk/core-dist/write-auth-session.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Cache of **operator-approval** tokens — the passkey-fresh write-auth tokens a
+ * wallet-less human mints to provision/deploy (gateway v1.85/v1.87). Distinct
+ * from the control-plane session ({@link ControlPlaneSessionCache}) it pairs
+ * with: the gateway scopes each token to one `(action, target)`, so this is a
+ * **multi-entry** cache keyed by `(api_origin, control_plane_session_hash,
+ * action, target)`. An `org.project.create` approval for org Y and a
+ * `project.deploy` approval for project X coexist.
+ *
+ * Stored at the BASE config dir (principal-scoped), mode 0600 — as sensitive as
+ * the allowance key. The token dies with its control-plane session; the
+ * `control_plane_session_hash` binding lets the client drop a stale approval
+ * locally rather than replay it into a `WRITE_AUTH_BINDING_MISMATCH`.
+ */
+export interface WriteAuthApproval {
+    write_auth_token: string;
+    token_type: string;
+    header: string;
+    /** Gateway capability: `org.project.create` | `project.deploy` | `project.secret.write`. */
+    action: string;
+    org_id?: string;
+    project_id?: string;
+    /** Epoch ms when the approval expires (derived from the gateway-returned session). */
+    expires_at: number;
+    /** Short hash of the control-plane session this approval is bound to. */
+    control_plane_session_hash: string;
+    control_plane_principal_id: string;
+    /** API origin (e.g. `https://api.run402.com`) the token was minted against. */
+    api_origin: string;
+    amr?: string[];
+    minted_at: number;
+}
+/** The token payload from `POST /agent/v1/control-plane/write-auth/cli/token`. */
+export interface WriteAuthTokenResponse {
+    write_auth_token: string;
+    token_type?: string;
+    header?: string;
+    /** The write-auth session; its expiry is the token's expiry. */
+    session?: {
+        expires_at?: string | number;
+        absolute_expires_at?: string | number;
+        amr?: string[];
+        [k: string]: unknown;
+    } | null;
+    [k: string]: unknown;
+}
+/** A capability target — exactly one of these is set per approval. */
+export interface WriteAuthTargetKey {
+    org_id?: string;
+    project_id?: string;
+}
+/**
+ * Path to the approval cache: `{base}/write-auth-session.json`.
+ * `RUN402_WRITE_AUTH_SESSION_PATH` overrides for testing.
+ */
+export declare function getWriteAuthSessionPath(): string;
+/** Stable short hash binding an approval to a control-plane session token. */
+export declare function hashControlPlaneSession(token: string): string;
+/**
+ * Read all cached approvals. Returns `[]` for the "no cache" cases (absent,
+ * unreadable, unparseable). Throws when the file parses as JSON but the shape
+ * is wrong, so a corrupted cache surfaces a clear fix-it.
+ */
+export declare function readApprovals(path?: string): WriteAuthApproval[];
+/**
+ * Persist an approval. Replaces any existing entry with the same
+ * `(api_origin, control_plane_session_hash, action, target)` key and leaves
+ * every other entry intact (multi-entry, non-thrashing). Atomic, mode 0600.
+ */
+export declare function saveApproval(approval: WriteAuthApproval, path?: string): void;
+/** Delete the whole approval cache — local half of `operator logout`. Idempotent. */
+export declare function clearApprovals(path?: string): void;
+/** Whether an approval is past its usable life (with a small skew buffer). */
+export declare function isApprovalExpired(approval: WriteAuthApproval, nowMs?: number, skewMs?: number): boolean;
+/**
+ * Return the cached approval matching ALL of `(apiOrigin, cpSessionHash,
+ * capability, target)` and still live, or `null` if none matches or it is
+ * expired. This is the exact-match the gateway's target gate requires — a
+ * non-match (wrong action/target/origin/session) fails closed.
+ */
+export declare function loadLiveApproval(q: {
+    apiOrigin: string;
+    cpSessionHash: string;
+    capability: string;
+    target: WriteAuthTargetKey;
+}, path?: string, nowMs?: number): WriteAuthApproval | null;
+/**
+ * Build a cache entry from the gateway token response + the binding context
+ * (the cp-session it was minted under, the API origin, and the `(action,
+ * target)` it covers). Expiry is taken from the returned `session`.
+ */
+export declare function approvalFromTokenResponse(resp: WriteAuthTokenResponse, binding: {
+    action: string;
+    target: WriteAuthTargetKey;
+    apiOrigin: string;
+    controlPlaneSessionHash: string;
+    controlPlanePrincipalId: string;
+}, nowMs?: number): WriteAuthApproval;
+//# sourceMappingURL=write-auth-session.d.ts.map