xytara 3.9.13 → 3.9.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/RELEASE_NOTES.md +4 -4
  2. package/package.json +1 -1
package/RELEASE_NOTES.md CHANGED
@@ -1,6 +1,6 @@
1
- `xytara` 3.9.13 makes each MCP tool's discovery listing point at the always-paid form of the endpoint. It also gives clearer directions to callers that leave out `task_ref`, and makes the daily buyer-journey report more exact.
1
+ `xytara` 3.9.15 makes the MCP server's HTTP 402 endpoint always paid, so the URL listed for x402 discovery (the CDP Bazaar) answers every call with a payment challenge. It also records discovery probes.
2
2
 
3
- - **Listed URL answers with the price:** the payment resource catalogued by x402 discovery (the CDP Bazaar) is now `https://mcp.naxytra.com/mcp/http402?allowance=off#<tool>` (and `…/mcp?allowance=off#<tool>` for MCP-native calls). Calling the listed URL with its published example answers with the payment challenge (HTTP 402 on the HTTP-402 variant), as other listed sellers' URLs do, never with a free-allowance result. The free allowance on the plain `/mcp` URL is unchanged.
4
- - **`task_ref` missing:** `POST /x402/commands/execute` without `task_ref` now also returns a request body example (`adapter.mcp.invoke` with `tool_name` and `arguments`), where to find provider tools and prices, and the MCP server as the easier path. Nothing is charged.
5
- - **Report:** MCP methods such as `tools/call` are no longer clipped to 8 characters in the buyer-event log. Failure details in the daily report name the tool or task they came from.
3
+ - **`/mcp/http402` is always paid:** the free allowance (20 tool calls per UTC day) now applies on `https://mcp.naxytra.com/mcp` only. The HTTP 402 variant, used by x402 clients that pay per call, answers an unpaid `tools/call` with HTTP 402 and the price every time; its challenge says where the free allowance applies.
4
+ - **Listed URL without a query string:** each tool's payment resource is `https://mcp.naxytra.com/mcp/http402#<tool>` (and `…/mcp#<tool>` for MCP-native payments). Discovery indexers drop query strings, so the URL now means the same thing with or without one.
5
+ - **Discovery probes are visible:** `GET https://mcp.naxytra.com/bazaar/status` now also lists requests from discovery indexers (by user agent) and the status we answered, next to the facilitator's decisions.
6
6
  - No change to pricing, payment, settlement, routing, the provider ledger or the client package.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "xytara",
3
- "version": "3.9.13",
3
+ "version": "3.9.15",
4
4
  "description": "Client for the hosted naxytra runtime: discover a capability, pay per call with x402 (gasless USDC on Base) or credits, get the deliverable and a signed delivery receipt you can verify offline. The runtime is a hosted service; this package is the client.",
5
5
  "main": "client.js",
6
6
  "exports": {