@agent-shield/mcp 0.3.1 → 0.4.1

package/dist/tools/fund-wallet.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fundWalletTool = exports.fundWalletSchema = void 0;
+exports.fundWallet = fundWallet;
+const zod_1 = require("zod");
+const config_1 = require("../config");
+const ACTIONS_SERVER_URL = "https://agent-middleware.vercel.app";
+exports.fundWalletSchema = zod_1.z.object({
+    mint: zod_1.z
+        .string()
+        .optional()
+        .describe("Token mint address (base58). Omit for SOL. Use EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v for USDC."),
+    amount: zod_1.z
+        .string()
+        .optional()
+        .describe("Amount to fund (in human-readable units, e.g. '1.5' for 1.5 SOL)"),
+});
+/**
+ * Generate funding URLs for the configured wallet.
+ * Returns Blink URL (desktop), Solana Pay URL (mobile QR), and raw address.
+ */
+async function fundWallet(_client, input) {
+    const config = (0, config_1.loadShieldConfig)();
+    if (!config) {
+        return ("AgentShield is not configured yet. " +
+            'Ask me to set it up first with "Set up AgentShield".');
+    }
+    const destination = config.wallet.publicKey;
+    const tier = (0, config_1.getCurrentTier)(config);
+    const tierLabels = {
+        1: "Shield wallet (keypair)",
+        2: "TEE wallet (hardware enclave)",
+        3: "Vault wallet (on-chain enforced)",
+    };
+    const lines = [
+        "## Fund Your AgentShield Wallet",
+        "",
+        `**Sending to:** ${destination}`,
+        `**Wallet Type:** ${tierLabels[tier]}`,
+        `**Network:** ${config.network}`,
+        "",
+    ];
+    // Build funding URLs
+    const params = new URLSearchParams();
+    params.set("destination", destination);
+    if (input.mint) {
+        params.set("mint", input.mint);
+    }
+    if (input.amount) {
+        params.set("amount", input.amount);
+    }
+    const actionUrl = `${ACTIONS_SERVER_URL}/api/actions/fund?${params.toString()}`;
+    const blinkUrl = `https://dial.to/?action=solana-action:${encodeURIComponent(actionUrl)}`;
+    // Solana Pay URL
+    const solPayParams = new URLSearchParams();
+    if (input.amount) {
+        solPayParams.set("amount", input.amount);
+    }
+    if (input.mint) {
+        solPayParams.set("spl-token", input.mint);
+    }
+    const solanaPayUrl = `solana:${destination}${solPayParams.toString() ? "?" + solPayParams.toString() : ""}`;
+    lines.push("### Option 1: Blink URL (Desktop)");
+    lines.push(`${blinkUrl}`);
+    lines.push("");
+    lines.push("### Option 2: Solana Pay (Mobile QR)");
+    lines.push(`${solanaPayUrl}`);
+    lines.push("");
+    lines.push("### Option 3: Send Directly");
+    lines.push(`Address: \`${destination}\``);
+    if (input.mint) {
+        lines.push(`Token Mint: \`${input.mint}\``);
+    }
+    if (input.amount) {
+        lines.push(`Amount: ${input.amount}`);
+    }
+    lines.push("");
+    lines.push(`Send ${input.mint ? "tokens" : "SOL"} to the address above using any Solana wallet.`);
+    return lines.join("\n");
+}
+exports.fundWalletTool = {
+    name: "shield_fund_wallet",
+    description: "Generate funding links for the configured AgentShield wallet. " +
+        "Returns a Blink URL (desktop), Solana Pay URL (mobile QR), and raw address. " +
+        "Works for any tier — sends to whatever wallet is configured.",
+    schema: exports.fundWalletSchema,
+    handler: fundWallet,
+};
+//# sourceMappingURL=fund-wallet.js.map

package/dist/tools/fund-wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fund-wallet.js","sourceRoot":"","sources":["../../src/tools/fund-wallet.ts"],"names":[],"mappings":";;;AA0BA,gCAwEC;AAlGD,6BAAwB;AACxB,sCAA6D;AAE7D,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AAEpD,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,uGAAuG,CACxG;IACH,MAAM,EAAE,OAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,kEAAkE,CACnE;CACJ,CAAC,CAAC;AAIH;;;GAGG;AACI,KAAK,UAAU,UAAU,CAC9B,OAAY,EACZ,KAAsB;IAEtB,MAAM,MAAM,GAAG,IAAA,yBAAgB,GAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CACL,qCAAqC;YACrC,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAA,uBAAc,EAAC,MAAM,CAAC,CAAC;IACpC,MAAM,UAAU,GAA2B;QACzC,CAAC,EAAE,yBAAyB;QAC5B,CAAC,EAAE,+BAA+B;QAClC,CAAC,EAAE,kCAAkC;KACtC,CAAC;IAEF,MAAM,KAAK,GAAa;QACtB,iCAAiC;QACjC,EAAE;QACF,mBAAmB,WAAW,EAAE;QAChC,oBAAoB,UAAU,CAAC,IAAI,CAAC,EAAE;QACtC,gBAAgB,MAAM,CAAC,OAAO,EAAE;QAChC,EAAE;KACH,CAAC;IAEF,qBAAqB;IACrB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,kBAAkB,qBAAqB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAG,yCAAyC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IAE1F,iBAAiB;IACjB,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,YAAY,GAAG,UAAU,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAE5G,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,EAAE,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,cAAc,WAAW,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,gDAAgD,CACtF,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAEY,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,gEAAgE;QAChE,8EAA8E;QAC9E,8DAA8D;IAChE,MAAM,EAAE,wBAAgB;IACxB,OAAO,EAAE,UAAU;CACpB,CAAC"}

package/dist/tools/index.d.ts

@@ -16,4 +16,8 @@ export { applyPendingPolicyTool, applyPendingPolicy, applyPendingPolicySchema, }
 export { cancelPendingPolicyTool, cancelPendingPolicy, cancelPendingPolicySchema, } from "./cancel-pending-policy";
 export { checkPendingPolicyTool, checkPendingPolicy, checkPendingPolicySchema, } from "./check-pending-policy";
 export { agentTransferTool, agentTransfer, agentTransferSchema, } from "./agent-transfer";
+export { setupStatusTool, setupStatus, setupStatusSchema, } from "./setup-status";
+export { configureTool, configure, configureSchema } from "./configure";
+export { fundWalletTool, fundWallet, fundWalletSchema } from "./fund-wallet";
+export { upgradeTierTool, upgradeTier, upgradeTierSchema, } from "./upgrade-tier";
 //# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,GAClB,MAAM,gBAAgB,CAAC"}

package/dist/tools/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkPendingPolicy = exports.checkPendingPolicyTool = exports.cancelPendingPolicySchema = exports.cancelPendingPolicy = exports.cancelPendingPolicyTool = exports.applyPendingPolicySchema = exports.applyPendingPolicy = exports.applyPendingPolicyTool = exports.queuePolicyUpdateSchema = exports.queuePolicyUpdate = exports.queuePolicyUpdateTool = exports.provisionSchema = exports.provision = exports.provisionTool = exports.closePositionSchema = exports.closePosition = exports.closePositionTool = exports.openPositionSchema = exports.openPosition = exports.openPositionTool = exports.executeSwapSchema = exports.executeSwap = exports.executeSwapTool = exports.reactivateVaultSchema = exports.reactivateVault = exports.reactivateVaultTool = exports.revokeAgentSchema = exports.revokeAgent = exports.revokeAgentTool = exports.updatePolicySchema = exports.updatePolicy = exports.updatePolicyTool = exports.registerAgentSchema = exports.registerAgent = exports.registerAgentTool = exports.withdrawSchema = exports.withdraw = exports.withdrawTool = exports.depositSchema = exports.deposit = exports.depositTool = exports.createVaultSchema = exports.createVault = exports.createVaultTool = exports.checkSpendingSchema = exports.checkSpending = exports.checkSpendingTool = exports.checkVaultSchema = exports.checkVault = exports.checkVaultTool = void 0;
-exports.agentTransferSchema = exports.agentTransfer = exports.agentTransferTool = exports.checkPendingPolicySchema = void 0;
+exports.upgradeTierSchema = exports.upgradeTier = exports.upgradeTierTool = exports.fundWalletSchema = exports.fundWallet = exports.fundWalletTool = exports.configureSchema = exports.configure = exports.configureTool = exports.setupStatusSchema = exports.setupStatus = exports.setupStatusTool = exports.agentTransferSchema = exports.agentTransfer = exports.agentTransferTool = exports.checkPendingPolicySchema = void 0;
 var check_vault_1 = require("./check-vault");
 Object.defineProperty(exports, "checkVaultTool", { enumerable: true, get: function () { return check_vault_1.checkVaultTool; } });
 Object.defineProperty(exports, "checkVault", { enumerable: true, get: function () { return check_vault_1.checkVault; } });
@@ -74,4 +74,20 @@ var agent_transfer_1 = require("./agent-transfer");
 Object.defineProperty(exports, "agentTransferTool", { enumerable: true, get: function () { return agent_transfer_1.agentTransferTool; } });
 Object.defineProperty(exports, "agentTransfer", { enumerable: true, get: function () { return agent_transfer_1.agentTransfer; } });
 Object.defineProperty(exports, "agentTransferSchema", { enumerable: true, get: function () { return agent_transfer_1.agentTransferSchema; } });
+var setup_status_1 = require("./setup-status");
+Object.defineProperty(exports, "setupStatusTool", { enumerable: true, get: function () { return setup_status_1.setupStatusTool; } });
+Object.defineProperty(exports, "setupStatus", { enumerable: true, get: function () { return setup_status_1.setupStatus; } });
+Object.defineProperty(exports, "setupStatusSchema", { enumerable: true, get: function () { return setup_status_1.setupStatusSchema; } });
+var configure_1 = require("./configure");
+Object.defineProperty(exports, "configureTool", { enumerable: true, get: function () { return configure_1.configureTool; } });
+Object.defineProperty(exports, "configure", { enumerable: true, get: function () { return configure_1.configure; } });
+Object.defineProperty(exports, "configureSchema", { enumerable: true, get: function () { return configure_1.configureSchema; } });
+var fund_wallet_1 = require("./fund-wallet");
+Object.defineProperty(exports, "fundWalletTool", { enumerable: true, get: function () { return fund_wallet_1.fundWalletTool; } });
+Object.defineProperty(exports, "fundWallet", { enumerable: true, get: function () { return fund_wallet_1.fundWallet; } });
+Object.defineProperty(exports, "fundWalletSchema", { enumerable: true, get: function () { return fund_wallet_1.fundWalletSchema; } });
+var upgrade_tier_1 = require("./upgrade-tier");
+Object.defineProperty(exports, "upgradeTierTool", { enumerable: true, get: function () { return upgrade_tier_1.upgradeTierTool; } });
+Object.defineProperty(exports, "upgradeTier", { enumerable: true, get: function () { return upgrade_tier_1.upgradeTier; } });
+Object.defineProperty(exports, "upgradeTierSchema", { enumerable: true, get: function () { return upgrade_tier_1.upgradeTierSchema; } });
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA6E;AAApE,6GAAA,cAAc,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AACrD,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAErB,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AAEnB,qCAAgE;AAAvD,sGAAA,WAAW,OAAA;AAAE,kGAAA,OAAO,OAAA;AAAE,wGAAA,aAAa,OAAA;AAC5C,uCAAoE;AAA3D,wGAAA,YAAY,OAAA;AAAE,oGAAA,QAAQ,OAAA;AAAE,0GAAA,cAAc,OAAA;AAC/C,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAErB,iDAIyB;AAHvB,iHAAA,gBAAgB,OAAA;AAChB,6GAAA,YAAY,OAAA;AACZ,mHAAA,kBAAkB,OAAA;AAEpB,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AAEnB,uDAI4B;AAH1B,uHAAA,mBAAmB,OAAA;AACnB,mHAAA,eAAe,OAAA;AACf,yHAAA,qBAAqB,OAAA;AAEvB,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AAEnB,iDAIyB;AAHvB,iHAAA,gBAAgB,OAAA;AAChB,6GAAA,YAAY,OAAA;AACZ,mHAAA,kBAAkB,OAAA;AAEpB,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAErB,yCAAwE;AAA/D,0GAAA,aAAa,OAAA;AAAE,sGAAA,SAAS,OAAA;AAAE,4GAAA,eAAe,OAAA;AAClD,6DAI+B;AAH7B,4HAAA,qBAAqB,OAAA;AACrB,wHAAA,iBAAiB,OAAA;AACjB,8HAAA,uBAAuB,OAAA;AAEzB,+DAIgC;AAH9B,8HAAA,sBAAsB,OAAA;AACtB,0HAAA,kBAAkB,OAAA;AAClB,gIAAA,wBAAwB,OAAA;AAE1B,iEAIiC;AAH/B,gIAAA,uBAAuB,OAAA;AACvB,4HAAA,mBAAmB,OAAA;AACnB,kIAAA,yBAAyB,OAAA;AAE3B,+DAIgC;AAH9B,8HAAA,sBAAsB,OAAA;AACtB,0HAAA,kBAAkB,OAAA;AAClB,gIAAA,wBAAwB,OAAA;AAE1B,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA6E;AAApE,6GAAA,cAAc,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AACrD,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAErB,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AAEnB,qCAAgE;AAAvD,sGAAA,WAAW,OAAA;AAAE,kGAAA,OAAO,OAAA;AAAE,wGAAA,aAAa,OAAA;AAC5C,uCAAoE;AAA3D,wGAAA,YAAY,OAAA;AAAE,oGAAA,QAAQ,OAAA;AAAE,0GAAA,cAAc,OAAA;AAC/C,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAErB,iDAIyB;AAHvB,iHAAA,gBAAgB,OAAA;AAChB,6GAAA,YAAY,OAAA;AACZ,mHAAA,kBAAkB,OAAA;AAEpB,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AAEnB,uDAI4B;AAH1B,uHAAA,mBAAmB,OAAA;AACnB,mHAAA,eAAe,OAAA;AACf,yHAAA,qBAAqB,OAAA;AAEvB,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AAEnB,iDAIyB;AAHvB,iHAAA,gBAAgB,OAAA;AAChB,6GAAA,YAAY,OAAA;AACZ,mHAAA,kBAAkB,OAAA;AAEpB,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAErB,yCAAwE;AAA/D,0GAAA,aAAa,OAAA;AAAE,sGAAA,SAAS,OAAA;AAAE,4GAAA,eAAe,OAAA;AAClD,6DAI+B;AAH7B,4HAAA,qBAAqB,OAAA;AACrB,wHAAA,iBAAiB,OAAA;AACjB,8HAAA,uBAAuB,OAAA;AAEzB,+DAIgC;AAH9B,8HAAA,sBAAsB,OAAA;AACtB,0HAAA,kBAAkB,OAAA;AAClB,gIAAA,wBAAwB,OAAA;AAE1B,iEAIiC;AAH/B,gIAAA,uBAAuB,OAAA;AACvB,4HAAA,mBAAmB,OAAA;AACnB,kIAAA,yBAAyB,OAAA;AAE3B,+DAIgC;AAH9B,8HAAA,sBAAsB,OAAA;AACtB,0HAAA,kBAAkB,OAAA;AAClB,gIAAA,wBAAwB,OAAA;AAE1B,mDAI0B;AAHxB,mHAAA,iBAAiB,OAAA;AACjB,+GAAA,aAAa,OAAA;AACb,qHAAA,mBAAmB,OAAA;AAErB,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AAEnB,yCAAwE;AAA/D,0GAAA,aAAa,OAAA;AAAE,sGAAA,SAAS,OAAA;AAAE,4GAAA,eAAe,OAAA;AAClD,6CAA6E;AAApE,6GAAA,cAAc,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AACrD,+CAIwB;AAHtB,+GAAA,eAAe,OAAA;AACf,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA"}

package/dist/tools/provision.d.ts

@@ -7,17 +7,17 @@ export declare const provisionSchema: z.ZodObject<{
     allowedProtocols: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     maxLeverageBps: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
-    platformUrl: string;
     template: "conservative" | "moderate" | "aggressive";
+    platformUrl: string;
     allowedProtocols?: string[] | undefined;
     maxLeverageBps?: number | undefined;
     dailyCap?: number | undefined;
     agentPubkey?: string | undefined;
 }, {
+    template?: "conservative" | "moderate" | "aggressive" | undefined;
     allowedProtocols?: string[] | undefined;
     maxLeverageBps?: number | undefined;
     platformUrl?: string | undefined;
-    template?: "conservative" | "moderate" | "aggressive" | undefined;
     dailyCap?: number | undefined;
     agentPubkey?: string | undefined;
 }>;
@@ -41,17 +41,17 @@ export declare const provisionTool: {
         allowedProtocols: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         maxLeverageBps: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        platformUrl: string;
         template: "conservative" | "moderate" | "aggressive";
+        platformUrl: string;
         allowedProtocols?: string[] | undefined;
         maxLeverageBps?: number | undefined;
         dailyCap?: number | undefined;
         agentPubkey?: string | undefined;
     }, {
+        template?: "conservative" | "moderate" | "aggressive" | undefined;
         allowedProtocols?: string[] | undefined;
         maxLeverageBps?: number | undefined;
         platformUrl?: string | undefined;
-        template?: "conservative" | "moderate" | "aggressive" | undefined;
         dailyCap?: number | undefined;
         agentPubkey?: string | undefined;
     }>;

package/dist/tools/setup-status.d.ts

@@ -0,0 +1,18 @@
+import { z } from "zod";
+export declare const setupStatusSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+export type SetupStatusInput = z.infer<typeof setupStatusSchema>;
+/**
+ * Check the current AgentShield setup status.
+ * Reads ~/.agentshield/config.json and reports tier, wallet, policy, network.
+ * If Tier 3 (vault), also includes vault address.
+ *
+ * This tool works without an SDK client — it only reads local config.
+ */
+export declare function setupStatus(_client: any, _input: SetupStatusInput): Promise<string>;
+export declare const setupStatusTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    handler: typeof setupStatus;
+};
+//# sourceMappingURL=setup-status.d.ts.map

package/dist/tools/setup-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-status.d.ts","sourceRoot":"","sources":["../../src/tools/setup-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,iBAAiB,gDAAe,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,GAAG,EACZ,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAiGjB;AAED,eAAO,MAAM,eAAe;;;;;CAQ3B,CAAC"}

package/dist/tools/setup-status.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setupStatusTool = exports.setupStatusSchema = void 0;
+exports.setupStatus = setupStatus;
+const zod_1 = require("zod");
+const config_1 = require("../config");
+exports.setupStatusSchema = zod_1.z.object({});
+/**
+ * Check the current AgentShield setup status.
+ * Reads ~/.agentshield/config.json and reports tier, wallet, policy, network.
+ * If Tier 3 (vault), also includes vault address.
+ *
+ * This tool works without an SDK client — it only reads local config.
+ */
+async function setupStatus(_client, _input) {
+    const config = (0, config_1.loadShieldConfig)();
+    if (!config) {
+        return [
+            "## AgentShield Setup Status",
+            "",
+            "**Status:** Not configured",
+            "",
+            "AgentShield is not configured on this machine. Ask me to set it up!",
+            "",
+            "I can configure three layers of protection:",
+            "- **Shield** (Tier 1) — Software spending controls, free, instant",
+            "- **TEE** (Tier 2) — Hardware enclave key protection, free, ~30s",
+            "- **Vault** (Tier 3) — On-chain policy enforcement, ~0.003 SOL, ~2min",
+            "",
+            'Say "Set up AgentShield" to get started.',
+        ].join("\n");
+    }
+    const tier = (0, config_1.getCurrentTier)(config);
+    const tierLabels = {
+        1: "Shield (software controls)",
+        2: "Shield + TEE (hardware enclave)",
+        3: "Shield + TEE + Vault (on-chain enforcement)",
+    };
+    const lines = [
+        "## AgentShield Setup Status",
+        "",
+        `**Current Tier:** ${tier} — ${tierLabels[tier]}`,
+        `**Network:** ${config.network}`,
+        `**Template:** ${config.template}`,
+        `**Configured:** ${config.configuredAt}`,
+        "",
+    ];
+    // Wallet info
+    lines.push("### Wallet");
+    lines.push(`- **Type:** ${config.wallet.type}`);
+    lines.push(`- **Public Key:** ${config.wallet.publicKey}`);
+    if (config.wallet.path) {
+        lines.push(`- **Keypair Path:** ${config.wallet.path}`);
+    }
+    lines.push("");
+    // Shield layer
+    lines.push("### Shield Layer (Tier 1)");
+    const shield = config.layers.shield;
+    lines.push(`- **Enabled:** ${shield.enabled}`);
+    if (shield.enabled) {
+        lines.push(`- **Daily Cap:** $${shield.dailyCapUsd}`);
+        lines.push(`- **Allowed Protocols:** ${shield.allowedProtocols.length > 0 ? shield.allowedProtocols.join(", ") : "Any"}`);
+        lines.push(`- **Max Leverage:** ${shield.maxLeverageBps} BPS`);
+        lines.push(`- **Rate Limit:** ${shield.rateLimit} tx/min`);
+    }
+    lines.push("");
+    // TEE layer
+    lines.push("### TEE Layer (Tier 2)");
+    const tee = config.layers.tee;
+    lines.push(`- **Enabled:** ${tee.enabled}`);
+    if (tee.enabled) {
+        lines.push(`- **Public Key:** ${tee.publicKey}`);
+        lines.push(`- **Locator:** ${tee.locator}`);
+    }
+    lines.push("");
+    // Vault layer
+    lines.push("### Vault Layer (Tier 3)");
+    const vault = config.layers.vault;
+    lines.push(`- **Enabled:** ${vault.enabled}`);
+    if (vault.enabled) {
+        lines.push(`- **Vault Address:** ${vault.address}`);
+        lines.push(`- **Owner:** ${vault.owner}`);
+        lines.push(`- **Vault ID:** ${vault.vaultId}`);
+    }
+    // Upgrade suggestion
+    if (tier < 3) {
+        lines.push("");
+        lines.push("### Recommended Upgrade");
+        if (tier === 1) {
+            lines.push("For production use, add **TEE custody** (Tier 2) to protect your agent's private key in a hardware enclave.");
+        }
+        else {
+            lines.push("For maximum security (>$5k/day), add **on-chain Vault** (Tier 3) for blockchain-enforced policy limits.");
+        }
+        lines.push('Say "Upgrade my security" to add the next layer.');
+    }
+    return lines.join("\n");
+}
+exports.setupStatusTool = {
+    name: "shield_setup_status",
+    description: "Check the current AgentShield setup status. Shows which security tiers are active, " +
+        "wallet configuration, and policy settings. Works even when AgentShield is not configured — " +
+        "reports setup instructions in that case.",
+    schema: exports.setupStatusSchema,
+    handler: setupStatus,
+};
+//# sourceMappingURL=setup-status.js.map

package/dist/tools/setup-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-status.js","sourceRoot":"","sources":["../../src/tools/setup-status.ts"],"names":[],"mappings":";;;AAkBA,kCAoGC;AAtHD,6BAAwB;AACxB,sCAImB;AAEN,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAI9C;;;;;;GAMG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAY,EACZ,MAAwB;IAExB,MAAM,MAAM,GAAG,IAAA,yBAAgB,GAAE,CAAC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,6BAA6B;YAC7B,EAAE;YACF,4BAA4B;YAC5B,EAAE;YACF,qEAAqE;YACrE,EAAE;YACF,6CAA6C;YAC7C,mEAAmE;YACnE,kEAAkE;YAClE,uEAAuE;YACvE,EAAE;YACF,0CAA0C;SAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,IAAA,uBAAc,EAAC,MAAM,CAAC,CAAC;IACpC,MAAM,UAAU,GAA2B;QACzC,CAAC,EAAE,4BAA4B;QAC/B,CAAC,EAAE,iCAAiC;QACpC,CAAC,EAAE,6CAA6C;KACjD,CAAC;IAEF,MAAM,KAAK,GAAa;QACtB,6BAA6B;QAC7B,EAAE;QACF,qBAAqB,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE;QACjD,gBAAgB,MAAM,CAAC,OAAO,EAAE;QAChC,iBAAiB,MAAM,CAAC,QAAQ,EAAE;QAClC,mBAAmB,MAAM,CAAC,YAAY,EAAE;QACxC,EAAE;KACH,CAAC;IAEF,cAAc;IACd,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,eAAe;IACf,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CACR,4BAA4B,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAC9G,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,cAAc,MAAM,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,SAAS,SAAS,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,YAAY;IACZ,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,cAAc;IACd,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CACR,6GAA6G,CAC9G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAEY,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,qFAAqF;QACrF,6FAA6F;QAC7F,0CAA0C;IAC5C,MAAM,EAAE,yBAAiB;IACzB,OAAO,EAAE,WAAW;CACrB,CAAC"}

package/dist/tools/upgrade-tier.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const upgradeTierSchema: z.ZodObject<{
+    targetTier: z.ZodUnion<[z.ZodLiteral<2>, z.ZodLiteral<3>]>;
+}, "strip", z.ZodTypeAny, {
+    targetTier: 2 | 3;
+}, {
+    targetTier: 2 | 3;
+}>;
+export type UpgradeTierInput = z.infer<typeof upgradeTierSchema>;
+/**
+ * Upgrade from the current tier to a higher one.
+ * Preserves existing policy settings.
+ */
+export declare function upgradeTier(_client: any, input: UpgradeTierInput): Promise<string>;
+export declare const upgradeTierTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{
+        targetTier: z.ZodUnion<[z.ZodLiteral<2>, z.ZodLiteral<3>]>;
+    }, "strip", z.ZodTypeAny, {
+        targetTier: 2 | 3;
+    }, {
+        targetTier: 2 | 3;
+    }>;
+    handler: typeof upgradeTier;
+};
+//# sourceMappingURL=upgrade-tier.d.ts.map

package/dist/tools/upgrade-tier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-tier.d.ts","sourceRoot":"","sources":["../../src/tools/upgrade-tier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,iBAAiB;;;;;;EAI5B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,GAAG,EACZ,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,CAkIjB;AAED,eAAO,MAAM,eAAe;;;;;;;;;;;CAS3B,CAAC"}

package/dist/tools/upgrade-tier.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.upgradeTierTool = exports.upgradeTierSchema = void 0;
+exports.upgradeTier = upgradeTier;
+const zod_1 = require("zod");
+const config_1 = require("../config");
+const ACTIONS_SERVER_URL = "https://agent-middleware.vercel.app";
+exports.upgradeTierSchema = zod_1.z.object({
+    targetTier: zod_1.z
+        .union([zod_1.z.literal(2), zod_1.z.literal(3)])
+        .describe("Target tier: 2=add TEE custody, 3=add on-chain Vault"),
+});
+/**
+ * Upgrade from the current tier to a higher one.
+ * Preserves existing policy settings.
+ */
+async function upgradeTier(_client, input) {
+    const config = (0, config_1.loadShieldConfig)();
+    if (!config) {
+        return ("AgentShield is not configured yet. " +
+            "Use shield_configure to set up from scratch instead of upgrading.");
+    }
+    const currentTier = (0, config_1.getCurrentTier)(config);
+    if (input.targetTier <= currentTier) {
+        return `Already at Tier ${currentTier} — cannot downgrade to Tier ${input.targetTier}. Downgrades are not supported via tools.`;
+    }
+    const lines = [];
+    // ── Upgrade to Tier 2 (add TEE) ──────────────────────────────
+    if (input.targetTier >= 2 && !config.layers.tee.enabled) {
+        try {
+            const response = await fetch(`${ACTIONS_SERVER_URL}/api/actions/provision-tee`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ network: config.network }),
+            });
+            if (!response.ok) {
+                const errorBody = await response.text();
+                return `Error provisioning TEE wallet: ${response.status} ${errorBody}`;
+            }
+            const teeResult = (await response.json());
+            const oldPubkey = config.wallet.publicKey;
+            config.layers.tee = {
+                enabled: true,
+                locator: teeResult.locator,
+                publicKey: teeResult.publicKey,
+            };
+            config.wallet.type = "crossmint";
+            config.wallet.publicKey = teeResult.publicKey;
+            lines.push("## Upgraded to Tier 2 (Shield + TEE)");
+            lines.push("");
+            lines.push(`**TEE Public Key:** ${teeResult.publicKey}`);
+            lines.push(`**Locator:** ${teeResult.locator}`);
+            lines.push("");
+            lines.push("Your agent's private key is now protected in a hardware enclave.");
+            lines.push("**Disclosure:** Your TEE wallet is custodied by AgentShield's platform. You can export or migrate later.");
+            lines.push("");
+            lines.push("### Transfer Funds");
+            lines.push(`If you have funds in your old wallet (\`${oldPubkey}\`), transfer them to the new TEE wallet:`);
+            lines.push(`- **New address:** \`${teeResult.publicKey}\``);
+            lines.push("- Use any Solana wallet to send SOL and tokens to the new address.");
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            return `Error connecting to AgentShield platform for TEE provisioning: ${msg}`;
+        }
+    }
+    // ── Upgrade to Tier 3 (add Vault) ────────────────────────────
+    if (input.targetTier >= 3 && !config.layers.vault.enabled) {
+        const params = new URLSearchParams();
+        params.set("template", config.template);
+        params.set("agentPubkey", config.wallet.publicKey);
+        const shield = config.layers.shield;
+        if (shield.dailyCapUsd) {
+            params.set("dailyCap", shield.dailyCapUsd.toString());
+        }
+        const actionUrl = `${ACTIONS_SERVER_URL}/api/actions/provision?${params.toString()}`;
+        const blinkUrl = `https://dial.to/?action=solana-action:${encodeURIComponent(actionUrl)}`;
+        config.layers.vault.enabled = true;
+        if (lines.length > 0) {
+            lines.push("");
+            lines.push("---");
+            lines.push("");
+        }
+        lines.push(lines.length === 0
+            ? "## Upgraded to Tier 3 (Shield + Vault)"
+            : "## Also Adding Tier 3 (On-Chain Vault)");
+        if (!config.layers.tee.enabled) {
+            lines.push("");
+            lines.push("**Warning:** Your agent's private key is stored locally without hardware protection. " +
+                "We recommend adding TEE custody for production use.");
+        }
+        lines.push("");
+        lines.push("Sign the vault creation transaction to complete the upgrade:");
+        lines.push(`1. **Blink URL:** ${blinkUrl}`);
+        lines.push(`2. **Action URL:** ${actionUrl}`);
+        lines.push("");
+        lines.push("After signing, your vault address will be saved and on-chain policy enforcement will be active.");
+        lines.push("");
+        lines.push("### Policy Applied");
+        lines.push(`Your existing policy will be enforced on-chain: $${shield.dailyCapUsd}/day cap, ${shield.allowedProtocols.length} protocols, ${shield.maxLeverageBps} BPS max leverage.`);
+    }
+    // Save updated config
+    (0, config_1.saveShieldConfig)(config);
+    return lines.join("\n");
+}
+exports.upgradeTierTool = {
+    name: "shield_upgrade_tier",
+    description: "Upgrade AgentShield from the current tier to a higher one. " +
+        "Tier 2 adds TEE custody (hardware enclave key protection). " +
+        "Tier 3 adds on-chain Vault (blockchain-enforced policy). " +
+        "Preserves existing policy settings during upgrade.",
+    schema: exports.upgradeTierSchema,
+    handler: upgradeTier,
+};
+//# sourceMappingURL=upgrade-tier.js.map

package/dist/tools/upgrade-tier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-tier.js","sourceRoot":"","sources":["../../src/tools/upgrade-tier.ts"],"names":[],"mappings":";;;AAiBA,kCAqIC;AAtJD,6BAAwB;AACxB,sCAA+E;AAE/E,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AAEpD,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,OAAC;SACV,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;SACnC,QAAQ,CAAC,sDAAsD,CAAC;CACpE,CAAC,CAAC;AAIH;;;GAGG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAY,EACZ,KAAuB;IAEvB,MAAM,MAAM,GAAG,IAAA,yBAAgB,GAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CACL,qCAAqC;YACrC,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,uBAAc,EAAC,MAAM,CAAC,CAAC;IAE3C,IAAI,KAAK,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;QACpC,OAAO,mBAAmB,WAAW,+BAA+B,KAAK,CAAC,UAAU,2CAA2C,CAAC;IAClI,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,gEAAgE;IAChE,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,kBAAkB,4BAA4B,EACjD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aAClD,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,kCAAkC,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC1E,CAAC;YAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGvC,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YAE1C,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG;gBAClB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,WAAW,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;YAE9C,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CACR,kEAAkE,CACnE,CAAC;YACF,KAAK,CAAC,IAAI,CACR,0GAA0G,CAC3G,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CACR,2CAA2C,SAAS,2CAA2C,CAChG,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,wBAAwB,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC;YAC5D,KAAK,CAAC,IAAI,CACR,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,OAAO,kEAAkE,GAAG,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,kBAAkB,0BAA0B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrF,MAAM,QAAQ,GAAG,yCAAyC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAE1F,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QAEnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,MAAM,KAAK,CAAC;YAChB,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,wCAAwC,CAC7C,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CACR,uFAAuF;gBACrF,qDAAqD,CACxD,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,iGAAiG,CAClG,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,oDAAoD,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,gBAAgB,CAAC,MAAM,eAAe,MAAM,CAAC,cAAc,oBAAoB,CAC1K,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAA,yBAAgB,EAAC,MAAM,CAAC,CAAC;IAEzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAEY,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,6DAA6D;QAC7D,6DAA6D;QAC7D,2DAA2D;QAC3D,oDAAoD;IACtD,MAAM,EAAE,yBAAiB;IACzB,OAAO,EAAE,WAAW;CACrB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-shield/mcp",
-  "version": "0.3.1",
+  "version": "0.4.1",
   "author": "Kaleb Rupe (https://x.com/MightieMags)",
   "homepage": "https://github.com/Kaleb-Rupe/agentshield#readme",
   "bugs": {
@@ -13,6 +13,12 @@
   "bin": {
     "agent-shield-mcp": "dist/index.js"
   },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "test": "mocha --require ts-node/register 'tests/*.test.ts' 'tests/**/*.test.ts' --timeout 30000",
+    "prepublishOnly": "pnpm run build"
+  },
   "files": [
     "dist/**/*",
     "README.md"
@@ -37,6 +43,8 @@
     }
   },
   "devDependencies": {
+    "@agent-shield/sdk": "workspace:*",
+    "@agent-shield/custody-crossmint": "workspace:*",
     "@coral-xyz/anchor": "^0.32.1",
     "@solana/spl-token": "^0.4.0",
     "@solana/web3.js": "^1.95.0",
@@ -48,9 +56,7 @@
     "mocha": "^10.3.0",
     "sinon": "^17.0.1",
     "ts-node": "^10.9.2",
-    "typescript": "^5.3.3",
-    "@agent-shield/sdk": "0.4.1",
-    "@agent-shield/custody-crossmint": "0.1.3"
+    "typescript": "^5.3.3"
   },
   "keywords": [
     "mcp",
@@ -68,10 +74,5 @@
     "type": "git",
     "url": "https://github.com/Kaleb-Rupe/agentshield",
     "directory": "packages/mcp"
-  },
-  "scripts": {
-    "build": "tsc",
-    "clean": "rm -rf dist",
-    "test": "mocha --require ts-node/register 'tests/*.test.ts' 'tests/**/*.test.ts' --timeout 30000"
   }
-}
+}