@aifinpay/mcp 2.0.0-rc.12 → 2.0.0-rc.13

package/dist/directory.d.ts

@@ -0,0 +1,55 @@
+/**
+ * createDirectoryServer — the READ-ONLY MCP server submitted to the OpenAI
+ * ChatGPT App Directory. Distinct from `createServer` (the full BYO-MCP
+ * connector with payment execution): this one exposes ONLY the read-only
+ * directory tools, requires NO agent identity and NO auth, and never moves
+ * money — so it is reviewable under OpenAI's directory policy (Obsidian/32 /34).
+ *
+ * One codebase, two profiles: the HTTP wrapper picks this when
+ * AIFINPAY_MCP_PROFILE=directory.
+ */
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+export interface DirectoryServerConfig {
+    /** Public API base for the wrapped GET endpoints. Defaults to production. */
+    apiBase?: string;
+    /** Per-request timeout (ms). */
+    timeoutMs?: number;
+    log?: (level: "info" | "warn" | "error", msg: string) => void;
+}
+export declare function createDirectoryServer(config?: DirectoryServerConfig): Promise<{
+    server: Server<{
+        method: string;
+        params?: {
+            [x: string]: unknown;
+            _meta?: {
+                [x: string]: unknown;
+                progressToken?: string | number | undefined;
+                "io.modelcontextprotocol/related-task"?: {
+                    taskId: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    }, {
+        method: string;
+        params?: {
+            [x: string]: unknown;
+            _meta?: {
+                [x: string]: unknown;
+                progressToken?: string | number | undefined;
+                "io.modelcontextprotocol/related-task"?: {
+                    taskId: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    }, {
+        [x: string]: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    }>;
+}>;
+//# sourceMappingURL=directory.d.ts.map

package/dist/directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.d.ts","sourceRoot":"","sources":["../src/directory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAYnE,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/D;AAwBD,wBAAsB,qBAAqB,CAAC,MAAM,GAAE,qBAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2B7E"}

package/dist/directory.js

@@ -0,0 +1,56 @@
+/**
+ * createDirectoryServer — the READ-ONLY MCP server submitted to the OpenAI
+ * ChatGPT App Directory. Distinct from `createServer` (the full BYO-MCP
+ * connector with payment execution): this one exposes ONLY the read-only
+ * directory tools, requires NO agent identity and NO auth, and never moves
+ * money — so it is reviewable under OpenAI's directory policy (Obsidian/32 /34).
+ *
+ * One codebase, two profiles: the HTTP wrapper picks this when
+ * AIFINPAY_MCP_PROFILE=directory.
+ */
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { directoryTools, runDirectoryTool, DIRECTORY_API_BASE, } from "./tools/directory.js";
+// Server-wide instructions returned at initialize. ChatGPT/Codex use these as a
+// cross-tool guide (OpenAI readiness checklist item; the audit found it ABSENT
+// on the connector server). States the read-only contract, networks, and limits.
+const DIRECTORY_INSTRUCTIONS = [
+    "AiFinPay is payment infrastructure for AI agents. THIS server is the",
+    "read-only directory surface: it answers questions about the AiFinPay agent",
+    "economy and prices AI services — it does NOT move money, hold funds, sign",
+    "transactions, or execute any payment. Every tool is read-only.",
+    "",
+    "Use it to: list available AI providers and their per-call prices",
+    "(list_providers / provider_info / provider_status / service_coverage),",
+    "preview a fee-on-top cost breakdown without paying (quote_cost), read public",
+    "protocol stats (network_stats) and the on-chain agent leaderboard",
+    "(leaderboard), verify an agent's AgentPassport (verify_passport), and look up",
+    "a public agent profile (agent_profile).",
+    "",
+    "Networks: Polygon and Solana mainnet. Data is public on-chain / registry",
+    "information. To actually execute a payment, an agent uses the separate",
+    "AiFinPay connector or SDK — not this directory app. Requests are rate limited;",
+    "on HTTP 429 (rate_limit_exceeded), back off and retry.",
+].join("\n");
+export async function createDirectoryServer(config = {}) {
+    const log = config.log ?? ((lvl, msg) => process.stderr.write(`[${lvl}] ${msg}\n`));
+    const ctx = {
+        apiBase: (config.apiBase || DIRECTORY_API_BASE).replace(/\/$/, ""),
+        timeoutMs: config.timeoutMs ?? 15000,
+        log,
+    };
+    const server = new Server({ name: "@aifinpay/mcp-directory", version: "1.0.0" }, {
+        capabilities: { tools: {} },
+        instructions: DIRECTORY_INSTRUCTIONS,
+    });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: directoryTools(),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const { name, arguments: args } = request.params;
+        return runDirectoryTool(ctx, name, args ?? {});
+    });
+    log("info", `[aifinpay-mcp-directory] read-only profile · api=${ctx.apiBase}`);
+    return { server };
+}
+//# sourceMappingURL=directory.js.map

package/dist/directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.js","sourceRoot":"","sources":["../src/directory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAU9B,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,MAAM,sBAAsB,GAAG;IAC7B,sEAAsE;IACtE,4EAA4E;IAC5E,2EAA2E;IAC3E,gEAAgE;IAChE,EAAE;IACF,kEAAkE;IAClE,wEAAwE;IACxE,8EAA8E;IAC9E,mEAAmE;IACnE,+EAA+E;IAC/E,yCAAyC;IACzC,EAAE;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,gFAAgF;IAChF,wDAAwD;CACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAgC,EAAE;IAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IACpF,MAAM,GAAG,GAAqB;QAC5B,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAClE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;QACpC,GAAG;KACJ,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,EACrD;QACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,YAAY,EAAE,sBAAsB;KACrC,CACF,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,cAAc,EAAE;KACxB,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACjD,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,EAAE,oDAAoD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC"}

package/dist/tools/agent-call.d.ts

@@ -0,0 +1,68 @@
+import type { ToolContext } from "../server.js";
+/**
+ * `agent_call` — unified registry-resolved paid HTTP call.
+ *
+ * The agent picks a provider by name ("exa", "io-net", "venice", …),
+ * the SDK looks up the bridge URL + price from the public AiFinPay
+ * registry, negotiates the 402 challenge, settles on Polygon via
+ * B2BSplitter.payMatic, retries with proof, and returns the upstream
+ * response body.
+ *
+ * Use this in preference to `payable_fetch` when you have a registered
+ * provider name — it auto-routes price, chain, and bridge URL.
+ *
+ * Requires the EVM address (from `agent_address`) to be funded with POL
+ * on Polygon mainnet (gas + payment), or USDC if the provider quotes in
+ * stablecoin.
+ */
+export declare function agentCallTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            provider: {
+                type: string;
+                description: string;
+            };
+            body: {
+                type: string;
+                description: string;
+                additionalProperties: boolean;
+            };
+            method: {
+                type: string;
+                enum: string[];
+                default: string;
+                description: string;
+            };
+            cost: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        openWorldHint: boolean;
+        destructiveHint: boolean;
+    };
+    outputSchema: {
+        type: string;
+    };
+};
+export declare function runAgentCall(ctx: ToolContext, args: Record<string, unknown>): Promise<{
+    isError: boolean;
+    content: {
+        type: string;
+        text: string;
+    }[];
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=agent-call.d.ts.map

package/dist/tools/agent-call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-call.d.ts","sourceRoot":"","sources":["../../src/tools/agent-call.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgD5B;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;GAkE9B"}

package/dist/tools/agent-call.js

@@ -0,0 +1,129 @@
+/**
+ * `agent_call` — unified registry-resolved paid HTTP call.
+ *
+ * The agent picks a provider by name ("exa", "io-net", "venice", …),
+ * the SDK looks up the bridge URL + price from the public AiFinPay
+ * registry, negotiates the 402 challenge, settles on Polygon via
+ * B2BSplitter.payMatic, retries with proof, and returns the upstream
+ * response body.
+ *
+ * Use this in preference to `payable_fetch` when you have a registered
+ * provider name — it auto-routes price, chain, and bridge URL.
+ *
+ * Requires the EVM address (from `agent_address`) to be funded with POL
+ * on Polygon mainnet (gas + payment), or USDC if the provider quotes in
+ * stablecoin.
+ */
+export function agentCallTool() {
+    return {
+        name: "agent_call",
+        description: "USE THIS TOOL whenever the user asks to call, pay, query, search via, " +
+            "or use any of these AiFinPay-registered paid providers: 'exa' (neural " +
+            "web search), 'io-net' (LLM inference, Llama-3.3-70B), 'venice' (image " +
+            "generation), or any other provider listed at " +
+            "https://aifinpay.io/api/providers. " +
+            "DO NOT use WebSearch or WebFetch for these providers — they are paid " +
+            "APIs accessible only through this MCP, and a plain web search will " +
+            "return public marketing pages instead of the actual API. " +
+            "Natural-language triggers that should invoke this tool: 'call exa for X', " +
+            "'search exa', 'pay venice to generate Y', 'use io-net to run inference', " +
+            "'query exa', 'ask io-net'. Provider name maps to the `provider` argument. " +
+            "Body is the provider-specific request shape (e.g. {messages:[...]} for " +
+            "io-net inference, {query:'...'} for exa search). Returns the upstream " +
+            "response with the Polygon tx hash + Polygonscan link prepended. " +
+            "Settlement is automatic — Polygon mainnet, atomic 99/1 split via B2BSplitter.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                provider: {
+                    type: "string",
+                    description: "Registered provider name. Example: 'io-net', 'exa', 'venice'.",
+                },
+                body: {
+                    type: "object",
+                    description: "Provider-specific request body. Forwarded to the bridge after payment.",
+                    additionalProperties: true,
+                },
+                method: {
+                    type: "string",
+                    enum: ["GET", "POST"],
+                    default: "POST",
+                    description: "HTTP method. Defaults to POST (matches all current providers).",
+                },
+                cost: {
+                    type: "number",
+                    description: "Optional override of the registry-quoted price (USD). Use to enforce a stricter budget cap.",
+                },
+            },
+            required: ["provider"],
+        },
+        // Settles a real on-chain payment to an arbitrary registered provider.
+        annotations: { readOnlyHint: false, openWorldHint: true, destructiveHint: true },
+        outputSchema: { type: "object" },
+    };
+}
+export async function runAgentCall(ctx, args) {
+    const provider = args.provider;
+    const body = args.body;
+    const method = args.method ?? "POST";
+    const cost = args.cost;
+    if (!provider) {
+        return {
+            isError: true,
+            content: [{ type: "text", text: "`provider` is required (e.g. 'exa', 'io-net')" }],
+        };
+    }
+    try {
+        const resp = await ctx.agent.call({
+            provider,
+            body,
+            method,
+            cost,
+        });
+        if (resp === null) {
+            return {
+                isError: true,
+                content: [{ type: "text", text: "Call skipped — budget cap exceeded (on_limit_exceeded='skip')." }],
+            };
+        }
+        const text = await resp.text();
+        let parsed = text;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch { /* keep as text */ }
+        // Pull the @internal settlement metadata attached by AiFinPayAgent.call
+        // (see unifiedAgent.ts). Surfacing the tx hash here lets the agent show
+        // a clickable explorer link in chat without re-querying the chain.
+        const meta = resp;
+        const txHash = meta.aifinpayTx;
+        const txChain = meta.aifinpayChain;
+        const txLine = txHash
+            ? `Paid on ${txChain ?? "polygon"}. Tx: ${txHash} → https://${txChain === "solana" ? "solscan.io/tx" : "polygonscan.com/tx"}/${txHash}\n\n`
+            : "";
+        const bodyText = typeof parsed === "string"
+            ? parsed
+            : JSON.stringify({ status: resp.status, body: parsed }, null, 2);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: txLine + bodyText,
+                },
+            ],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const hint = message.toLowerCase().includes("budget")
+            ? "Tip: increase the per-call cost cap or use `agent_quote` to preview before paying."
+            : message.toLowerCase().includes("revert") || message.toLowerCase().includes("insufficient")
+                ? `Tip: ensure the EVM address ${ctx.agent.evmAddress} holds enough POL on Polygon for gas + payment.`
+                : `Provider may be misconfigured. Check https://aifinpay.io/api/providers.`;
+        return {
+            isError: true,
+            content: [{ type: "text", text: `agent_call failed: ${message}\n\n${hint}` }],
+        };
+    }
+}
+//# sourceMappingURL=agent-call.js.map

package/dist/tools/agent-call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-call.js","sourceRoot":"","sources":["../../src/tools/agent-call.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,+CAA+C;YAC/C,qCAAqC;YACrC,uEAAuE;YACvE,qEAAqE;YACrE,2DAA2D;YAC3D,4EAA4E;YAC5E,2EAA2E;YAC3E,4EAA4E;YAC5E,yEAAyE;YACzE,wEAAwE;YACxE,kEAAkE;YAClE,+EAA+E;QACjF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+DAA+D;iBAC7E;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;oBACrF,oBAAoB,EAAE,IAAI;iBAC3B;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;oBACrB,OAAO,EAAE,MAAM;oBACf,WAAW,EAAE,gEAAgE;iBAC9E;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6FAA6F;iBAC3G;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;QACD,uEAAuE;QACvE,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;QAChF,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAgB,EAChB,IAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA8B,CAAC;IACrD,MAAM,IAAI,GAAO,IAAI,CAAC,IAA+C,CAAC;IACtE,MAAM,MAAM,GAAM,IAAI,CAAC,MAAsC,IAAI,MAAM,CAAC;IACxE,MAAM,IAAI,GAAO,IAAI,CAAC,IAA8B,CAAC;IAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;SACnF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAChC,QAAQ;YACR,IAAI;YACJ,MAAM;YACN,IAAI;SACL,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gEAAgE,EAAE,CAAC;aACpG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAM,GAAY,IAAI,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE/D,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAkE,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM;YACnB,CAAC,CAAC,WAAW,OAAO,IAAI,SAAS,SAAS,MAAM,cAAc,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,IAAI,MAAM,MAAM;YAC3I,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ;YACzC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEnE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM,GAAG,QAAQ;iBACxB;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAC1F,CAAC,CAAC,+BAA+B,GAAG,CAAC,KAAK,CAAC,UAAU,iDAAiD;gBACtG,CAAC,CAAC,yEAAyE,CAAC;QAClF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,OAAO,OAAO,IAAI,EAAE,EAAE,CAAC;SAC9E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/agent-claim-self.d.ts

@@ -0,0 +1,66 @@
+import type { ToolContext } from "../server.js";
+/**
+ * `agent_claim_self` — agent attaches itself to a user's AiFinPay account
+ * autonomously by signing a claim challenge with its own key.
+ *
+ * Flow (executed inside the tool, no copy-paste between UIs):
+ *   1. User signs in to /login on aifinpay.io → gets a magic-link
+ *      email with URL like `https://aifinpay.io/api/auth/verify?token=…`
+ *   2. User pastes that URL to the agent: "claim yourself on my account
+ *      using this magic link"
+ *   3. Agent calls this tool with the magic_link_url
+ *   4. Tool hits the magic link → server issues session cookie
+ *   5. Tool POSTs to /api/me/agents/challenge with the agent's EVM address
+ *   6. Tool signs the returned message with the agent's EVM key (EIP-191)
+ *   7. Tool POSTs to /api/me/agents/claim → server verifies signature →
+ *      agent attached to user's watchlist
+ *
+ * Optional `label` field gives the agent a friendly name in the user's UI.
+ *
+ * Security model:
+ *   - Magic-link URL is one-shot, 15-min TTL, identifies the user
+ *   - Signature proves the agent holds the EVM private key
+ *   - Combination: "this user OWNS this agent". Either alone is
+ *     insufficient (signature alone can't pick an account; magic link
+ *     alone can't prove key control).
+ */
+export declare function agentClaimSelfTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            magic_link_url: {
+                type: string;
+                description: string;
+            };
+            label: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        openWorldHint: boolean;
+        destructiveHint: boolean;
+    };
+    outputSchema: {
+        type: string;
+    };
+};
+export declare function runAgentClaimSelf(ctx: ToolContext, args: Record<string, unknown>): Promise<{
+    isError: boolean;
+    content: {
+        type: string;
+        text: string;
+    }[];
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=agent-claim-self.d.ts.map

package/dist/tools/agent-claim-self.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-claim-self.d.ts","sourceRoot":"","sources":["../../src/tools/agent-claim-self.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;EAgCjC;AAiED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;GA4L9B"}