v0.2.23: sync from monorepo 2026-07-02

Author: azeth-sync[bot]

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@azeth/mcp-server",
-  "version": "0.2.22",
+  "version": "0.2.23",
   "mcpName": "io.github.azeth-protocol/mcp-server",
   "type": "module",
   "description": "MCP server for the Azeth trust infrastructure — smart accounts, payments, reputation, and discovery tools for AI agents",
@@ -41,8 +41,8 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@azeth/common": "^0.2.22",
-    "@azeth/sdk": "^0.2.22",
+    "@azeth/common": "^0.2.23",
+    "@azeth/sdk": "^0.2.23",
     "@modelcontextprotocol/sdk": "^1.0.0",
     "dotenv": "^16.4.0",
     "viem": "^2.21.0",

src/index.ts

@@ -7,6 +7,7 @@ import { registerPaymentTools } from './tools/payments.js';
 import { registerAgreementTools } from './tools/agreements.js';
 import { registerRegistryTools } from './tools/registry.js';
 import { registerReputationTools } from './tools/reputation.js';
+import { registerCrosschainTools } from './tools/crosschain.js';
 import { registerMessagingTools } from './tools/messaging.js';
 import { registerGuardianTools } from './tools/guardian.js';
 import { registerGuardianApprovalTools } from './tools/guardian-approval.js';
@@ -38,6 +39,7 @@ function createServer(): McpServer {
   registerAgreementTools(rateLimitedServer);
   registerRegistryTools(rateLimitedServer);
   registerReputationTools(rateLimitedServer);
+  registerCrosschainTools(rateLimitedServer);
   registerMessagingTools(rateLimitedServer);
   registerGuardianTools(rateLimitedServer);
   registerGuardianApprovalTools(rateLimitedServer);

src/tools/account.ts

@@ -55,8 +55,10 @@ export function registerAccountTools(server: McpServer): void {
         '',
         'Returns: The deployed smart account address, trust registry token ID, and transaction hash.',
         '',
-        'Gas is automatically sponsored — no ETH required. The SDK uses a gasless relay (EIP-712 signature)',
-        'so the account can be created without any pre-funding. On testnet, USDC is also auto-funded.',
+        'Gas: when the Azeth server relay is reachable, creation is sponsored (EIP-712 gasless relay —',
+        'no ETH required, and testnet USDC is auto-dripped). When the relay is unreachable, creation',
+        'FALLS BACK to a direct transaction paid by your EOA (requires ETH for gas). The response\'s',
+        '"creationPath" field reports which path was used ("gasless-relay" or "direct").',
         '',
         'Guardian: By default, the guardian is derived from AZETH_GUARDIAN_KEY env var. If not set, falls back to self-guardian (owner address).',
         'For production, always use a separate guardian key. Set AZETH_GUARDIAN_KEY in your .env file.',
@@ -182,6 +184,12 @@ export function registerAccountTools(server: McpServer): void {
             account: result.account,
             tokenId: tokenIdStr,
             txHash: result.txHash,
+            ...(result.creationPath ? {
+              creationPath: result.creationPath,
+              ...(result.creationPath === 'direct' ? {
+                creationPathNote: 'The gasless relay was unreachable — creation was paid by your EOA as a direct transaction.',
+              } : {}),
+            } : {}),
             guardian: guardianAddress,
             guardianSource,
             emergencyWithdrawTo: emergencyAddress,
@@ -638,9 +646,10 @@ export function registerAccountTools(server: McpServer): void {
         '',
         'Returns: Transaction hash confirming the whitelist update.',
         '',
-        'Note: Only the account owner can update their own whitelist. If a guardian is configured,',
-        'whitelisting a token is a guardrail change that requires guardian co-signature — the call',
-        'returns a GUARDIAN_COSIGN_REQUIRED error with guidance until the guardian signs.',
+        'Note: Only the account owner can update their own whitelist. Whitelisting a token is a',
+        'guardrail change that requires guardian co-signature. Self-guardian accounts (guardian ==',
+        'owner) co-sign automatically; with a distinct guardian the call returns a',
+        'GUARDIAN_COSIGN_REQUIRED error with guidance until the guardian signs.',
         '',
         'Example: { "token": "0x036CbD53842c5426634e7929541eC2318f3dCF7e", "allowed": true }',
       ].join('\n'),

src/tools/agreements.ts

@@ -6,7 +6,7 @@ import { TOKENS, type SupportedChainName } from '@azeth/common';
 import { PaymentAgreementModuleAbi } from '@azeth/common/abis';
 import { createClient, resolveChain } from '../utils/client.js';
 import { resolveAddress, resolveSmartAccount } from '../utils/resolve.js';
-import { success, error, handleError, formatUSD, guardianRequiredError } from '../utils/response.js';
+import { success, error, handleError, formatUSD, guardianRequiredError, safeIso } from '../utils/response.js';
 
 // ──────────────────────────────────────────────
 // Shared formatting utilities
@@ -481,8 +481,6 @@ export function registerAgreementTools(server: McpServer): void {
         const chain = resolveChain(args.chain);
 
         // Resolve to the caller's OWN smart account (not arbitrary addresses).
-        // Only the payer can cancel their own agreements — resolveSmartAccount
-        // restricts resolution to accounts owned by the caller's private key.
         let account: `0x${string}`;
         if (args.smartAccount) {
           try {
@@ -499,6 +497,19 @@ export function registerAgreementTools(server: McpServer): void {
           account = await client.resolveSmartAccount();
         }
 
+        // OWNERSHIP GATE: resolveSmartAccount passes raw addresses through unchecked,
+        // so a foreign account address would reach the signing path and die with a
+        // misleading guardian-co-signature error (the chain rejects it regardless —
+        // this check exists for error quality, not security). Only the payer can cancel.
+        const ownedAccounts = await client.getSmartAccounts();
+        if (!ownedAccounts.some((a) => a.toLowerCase() === account.toLowerCase())) {
+          return error(
+            'UNAUTHORIZED',
+            `Smart account ${account} is not owned by your key — only the payer (agreement creator) can cancel an agreement.`,
+            'Use azeth_accounts to list your own accounts. To stop receiving payments as a payee, contact the payer or simply stop providing the service.',
+          );
+        }
+
         const agreementId = BigInt(args.agreementId);
 
         // Pre-flight: check agreement exists and is active
@@ -620,7 +631,7 @@ export function registerAgreementTools(server: McpServer): void {
         // schedules from creation), so lastExecuted is never 0n even before any execution.
         const lastExecutedAt = agreement.executionCount === 0n
           ? null
-          : new Date(Number(agreement.lastExecuted) * 1000).toISOString();
+          : safeIso(agreement.lastExecuted);
 
         let nextExecutionTime: string;
         let nextExecutionIn: string;
@@ -632,7 +643,9 @@ export function registerAgreementTools(server: McpServer): void {
           nextExecutionIn = `N/A (${status})`;
           isDue = false;
         } else {
-          nextExecutionTime = new Date(Number(nextExecTime) * 1000).toISOString();
+          // safeIso: read path of ON-CHAIN data — an agreement created by a non-MCP client
+          // can hold a uint256 timestamp beyond the JS Date range; reporting must not throw.
+          nextExecutionTime = safeIso(nextExecTime);
           const nowSecs = Math.floor(Date.now() / 1000);
           const diff = Number(nextExecTime) - nowSecs;
           if (diff <= 0) {
@@ -697,7 +710,7 @@ export function registerAgreementTools(server: McpServer): void {
           lastExecutedAt,
           nextExecutionTime,
           nextExecutionIn,
-          expiresAt: agreement.endTime === 0n ? 'never' : new Date(Number(agreement.endTime) * 1000).toISOString(),
+          expiresAt: agreement.endTime === 0n ? 'never' : safeIso(agreement.endTime),
           // Checks
           isDue,
           canExecute,