
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@suigar/mcp
Advanced tools
@suigar/mcpLightweight reusable Suigar helpers for Sui casino flows.
It includes:
coinflip, limbo, plinko, wheel, range, and pvp-coinfliptestnet@suigar/sdkSUIGAR_* and frontend VITE_* keys as overrides for repo/test workflowspartner follows the beta SDK model: pass it once per build input and do not set metadata.partner or metadata.referrer manuallyThe package reads either SUIGAR_* or VITE_* values.
SUIGAR_NETWORK / VITE_NETWORKSUIGAR_PACKAGE_ID / VITE_SUIGAR_PACKAGE_IDCOINFLIP_PACKAGE_ID / VITE_COINFLIP_PACKAGE_IDPVP_COINFLIP_PACKAGE_ID / VITE_PVP_COINFLIP_PACKAGE_IDPLINKO_PACKAGE_ID / VITE_PLINKO_PACKAGE_IDLIMBO_PACKAGE_ID / VITE_LIMBO_PACKAGE_IDRANGE_PACKAGE_ID / VITE_RANGE_PACKAGE_IDWHEEL_PACKAGE_ID / VITE_WHEEL_PACKAGE_IDSWEETHOUSE_ID / VITE_SWEETHOUSE_IDSUI_COIN_TYPE / VITE_SUI_COIN_TYPEUSDC_COIN_TYPE / VITE_USDC_COIN_TYPESUI_PYTH_PRICE_INFO_OBJECT_ID / VITE_SUI_PYTH_PRICE_INFO_OBJECT_IDUSDC_PYTH_PRICE_INFO_OBJECT_ID / VITE_USDC_PYTH_PRICE_INFO_OBJECT_IDimport { buildCoinflipTransaction, createReadOnlyClientBundle, resolveSuigarConfig, serializeTransactionToBase64 } from '@suigar/mcp';
const bundle = createReadOnlyClientBundle({ network: 'testnet' });
const tx = await buildCoinflipTransaction({
client: bundle.client,
config: resolveSuigarConfig({ network: 'testnet' }),
owner: '0xabc...',
coinType: '0x2::sui::SUI',
stake: 1_000_000_000,
side: 'heads',
partner: '0xpartner_wallet_address',
});
const bytes = await serializeTransactionToBase64(tx, bundle.rawClient);
The beta SDK moved partner attribution into extension-level configuration instead of per-call metadata patching.
@suigar/mcp follows the same rule:
partner as a top-level builder input when you need attribution onchainmetadata.partner or metadata.referrerThis applies to both the exported transaction builders and the MCP tools.
For a packaged install, point your MCP client at the package bin:
{
"mcpServers": {
"suigar": {
"command": "npx",
"args": ["-y", "@suigar/mcp"]
}
}
}
Because the package carries SDK-backed testnet/mainnet defaults, a normal install does not need to source this repository's .env.testnet.shared.
When packed, the MCP package bundles its private internal runtime packages, so consumers do not need repo-relative file: dependencies.
Run the workspace stdio server while developing this package:
npm run -w packages/mcp build
node packages/mcp/dist/bin.mjs
Available tools:
read_configread_game_metadatabuild_coinflip_transactionbuild_limbo_transactionbuild_plinko_transactionbuild_wheel_transactionbuild_range_transactionbuild_pvp_coinflip_create_transactionbuild_pvp_coinflip_join_transactionbuild_pvp_coinflip_cancel_transactionTool modes:
build: returns a serialized transaction plus a summarydry-run: simulates the transaction on-chain with a read-only clientread-only: returns resolved config and a transaction plan without buildingFor supported on-chain builders, you can also pass:
partner: partner wallet address for beta-style attribution injectionmetadata: custom metadata, excluding reserved attribution keysread_config and read_game_metadata include MCP support fields so agents can distinguish:
executionSurface: "onchain" | "backend"toolSupported: booleanprimaryToolName: string | nullSlots are intentionally disabled in the MCP package for now. They may still appear in game metadata as backend-driven, but toolSupported is false and no slots tool is exposed.
Use the repo-level smoke command to validate the MCP through the MCP protocol with managed wallets:
npm run smoke:mcp:testnet
This smoke path loads .env.testnet.shared, starts the MCP stdio server, validates read tools, runs dry-runs, and executes testnet transactions for the on-chain builders.
The repo includes a local skill scaffold at .codex/skills/mcp/.
Install it into Codex by copying or symlinking it into $CODEX_HOME/skills:
mkdir -p "${CODEX_HOME:-$HOME/.codex}/skills"
ln -s "$(pwd)/.codex/skills/mcp" "${CODEX_HOME:-$HOME/.codex}/skills/mcp"
If you prefer a copy instead of a symlink:
mkdir -p "${CODEX_HOME:-$HOME/.codex}/skills"
cp -R .codex/skills/mcp "${CODEX_HOME:-$HOME/.codex}/skills/mcp"
0x2::sui::SUI. Configured gameplay coins such as testnet TEST_SUI must come from owned coin objects.coinObjectIds.coinSource: { kind: 'object-ids', objectIds: [...] }.FAQs
Lightweight MCP tools and transaction builders for Suigar on Sui
The npm package @suigar/mcp receives a total of 88 weekly downloads. As such, @suigar/mcp popularity was classified as not popular.
We found that @suigar/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.