@aifinpay/mcp 2.2.2 → 2.2.4

package/dist/tools/agent-call.d.ts

@@ -0,0 +1,68 @@
+import type { ToolContext } from "../server.js";
+/**
+ * `agent_call` — unified registry-resolved paid HTTP call.
+ *
+ * The agent picks a provider by name ("exa", "io-net", "venice", …),
+ * the SDK looks up the bridge URL + price from the public AiFinPay
+ * registry, negotiates the 402 challenge, settles on Polygon via
+ * B2BSplitter.payMatic, retries with proof, and returns the upstream
+ * response body.
+ *
+ * Use this in preference to `payable_fetch` when you have a registered
+ * provider name — it auto-routes price, chain, and bridge URL.
+ *
+ * Requires the EVM address (from `agent_address`) to be funded with POL
+ * on Polygon mainnet (gas + payment), or USDC if the provider quotes in
+ * stablecoin.
+ */
+export declare function agentCallTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            provider: {
+                type: string;
+                description: string;
+            };
+            body: {
+                type: string;
+                description: string;
+                additionalProperties: boolean;
+            };
+            method: {
+                type: string;
+                enum: string[];
+                default: string;
+                description: string;
+            };
+            cost: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        openWorldHint: boolean;
+        destructiveHint: boolean;
+    };
+    outputSchema: {
+        type: string;
+    };
+};
+export declare function runAgentCall(ctx: ToolContext, args: Record<string, unknown>): Promise<{
+    isError: boolean;
+    content: {
+        type: string;
+        text: string;
+    }[];
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=agent-call.d.ts.map

package/dist/tools/agent-call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-call.d.ts","sourceRoot":"","sources":["../../src/tools/agent-call.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgD5B;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;GAkE9B"}

package/dist/tools/agent-call.js

@@ -0,0 +1,129 @@
+/**
+ * `agent_call` — unified registry-resolved paid HTTP call.
+ *
+ * The agent picks a provider by name ("exa", "io-net", "venice", …),
+ * the SDK looks up the bridge URL + price from the public AiFinPay
+ * registry, negotiates the 402 challenge, settles on Polygon via
+ * B2BSplitter.payMatic, retries with proof, and returns the upstream
+ * response body.
+ *
+ * Use this in preference to `payable_fetch` when you have a registered
+ * provider name — it auto-routes price, chain, and bridge URL.
+ *
+ * Requires the EVM address (from `agent_address`) to be funded with POL
+ * on Polygon mainnet (gas + payment), or USDC if the provider quotes in
+ * stablecoin.
+ */
+export function agentCallTool() {
+    return {
+        name: "agent_call",
+        description: "USE THIS TOOL whenever the user asks to call, pay, query, search via, " +
+            "or use any of these AiFinPay-registered paid providers: 'exa' (neural " +
+            "web search), 'io-net' (LLM inference, Llama-3.3-70B), 'venice' (image " +
+            "generation), or any other provider listed at " +
+            "https://aifinpay.io/api/providers. " +
+            "DO NOT use WebSearch or WebFetch for these providers — they are paid " +
+            "APIs accessible only through this MCP, and a plain web search will " +
+            "return public marketing pages instead of the actual API. " +
+            "Natural-language triggers that should invoke this tool: 'call exa for X', " +
+            "'search exa', 'pay venice to generate Y', 'use io-net to run inference', " +
+            "'query exa', 'ask io-net'. Provider name maps to the `provider` argument. " +
+            "Body is the provider-specific request shape (e.g. {messages:[...]} for " +
+            "io-net inference, {query:'...'} for exa search). Returns the upstream " +
+            "response with the Polygon tx hash + Polygonscan link prepended. " +
+            "Settlement is automatic — Polygon mainnet, atomic 99/1 split via B2BSplitter.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                provider: {
+                    type: "string",
+                    description: "Registered provider name. Example: 'io-net', 'exa', 'venice'.",
+                },
+                body: {
+                    type: "object",
+                    description: "Provider-specific request body. Forwarded to the bridge after payment.",
+                    additionalProperties: true,
+                },
+                method: {
+                    type: "string",
+                    enum: ["GET", "POST"],
+                    default: "POST",
+                    description: "HTTP method. Defaults to POST (matches all current providers).",
+                },
+                cost: {
+                    type: "number",
+                    description: "Optional override of the registry-quoted price (USD). Use to enforce a stricter budget cap.",
+                },
+            },
+            required: ["provider"],
+        },
+        // Settles a real on-chain payment to an arbitrary registered provider.
+        annotations: { readOnlyHint: false, openWorldHint: true, destructiveHint: true },
+        outputSchema: { type: "object" },
+    };
+}
+export async function runAgentCall(ctx, args) {
+    const provider = args.provider;
+    const body = args.body;
+    const method = args.method ?? "POST";
+    const cost = args.cost;
+    if (!provider) {
+        return {
+            isError: true,
+            content: [{ type: "text", text: "`provider` is required (e.g. 'exa', 'io-net')" }],
+        };
+    }
+    try {
+        const resp = await ctx.agent.call({
+            provider,
+            body,
+            method,
+            cost,
+        });
+        if (resp === null) {
+            return {
+                isError: true,
+                content: [{ type: "text", text: "Call skipped — budget cap exceeded (on_limit_exceeded='skip')." }],
+            };
+        }
+        const text = await resp.text();
+        let parsed = text;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch { /* keep as text */ }
+        // Pull the @internal settlement metadata attached by AiFinPayAgent.call
+        // (see unifiedAgent.ts). Surfacing the tx hash here lets the agent show
+        // a clickable explorer link in chat without re-querying the chain.
+        const meta = resp;
+        const txHash = meta.aifinpayTx;
+        const txChain = meta.aifinpayChain;
+        const txLine = txHash
+            ? `Paid on ${txChain ?? "polygon"}. Tx: ${txHash} → https://${txChain === "solana" ? "solscan.io/tx" : "polygonscan.com/tx"}/${txHash}\n\n`
+            : "";
+        const bodyText = typeof parsed === "string"
+            ? parsed
+            : JSON.stringify({ status: resp.status, body: parsed }, null, 2);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: txLine + bodyText,
+                },
+            ],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const hint = message.toLowerCase().includes("budget")
+            ? "Tip: increase the per-call cost cap or use `agent_quote` to preview before paying."
+            : message.toLowerCase().includes("revert") || message.toLowerCase().includes("insufficient")
+                ? `Tip: ensure the EVM address ${ctx.agent.evmAddress} holds enough POL on Polygon for gas + payment.`
+                : `Provider may be misconfigured. Check https://aifinpay.io/api/providers.`;
+        return {
+            isError: true,
+            content: [{ type: "text", text: `agent_call failed: ${message}\n\n${hint}` }],
+        };
+    }
+}
+//# sourceMappingURL=agent-call.js.map

package/dist/tools/agent-call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-call.js","sourceRoot":"","sources":["../../src/tools/agent-call.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,+CAA+C;YAC/C,qCAAqC;YACrC,uEAAuE;YACvE,qEAAqE;YACrE,2DAA2D;YAC3D,4EAA4E;YAC5E,2EAA2E;YAC3E,4EAA4E;YAC5E,yEAAyE;YACzE,wEAAwE;YACxE,kEAAkE;YAClE,+EAA+E;QACjF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+DAA+D;iBAC7E;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;oBACrF,oBAAoB,EAAE,IAAI;iBAC3B;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;oBACrB,OAAO,EAAE,MAAM;oBACf,WAAW,EAAE,gEAAgE;iBAC9E;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6FAA6F;iBAC3G;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;QACD,uEAAuE;QACvE,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;QAChF,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAgB,EAChB,IAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA8B,CAAC;IACrD,MAAM,IAAI,GAAO,IAAI,CAAC,IAA+C,CAAC;IACtE,MAAM,MAAM,GAAM,IAAI,CAAC,MAAsC,IAAI,MAAM,CAAC;IACxE,MAAM,IAAI,GAAO,IAAI,CAAC,IAA8B,CAAC;IAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC;SACnF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAChC,QAAQ;YACR,IAAI;YACJ,MAAM;YACN,IAAI;SACL,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gEAAgE,EAAE,CAAC;aACpG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAM,GAAY,IAAI,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE/D,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAkE,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM;YACnB,CAAC,CAAC,WAAW,OAAO,IAAI,SAAS,SAAS,MAAM,cAAc,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,IAAI,MAAM,MAAM;YAC3I,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ;YACzC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEnE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM,GAAG,QAAQ;iBACxB;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAC1F,CAAC,CAAC,+BAA+B,GAAG,CAAC,KAAK,CAAC,UAAU,iDAAiD;gBACtG,CAAC,CAAC,yEAAyE,CAAC;QAClF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,OAAO,OAAO,IAAI,EAAE,EAAE,CAAC;SAC9E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/agent-claim-self.d.ts

@@ -0,0 +1,66 @@
+import type { ToolContext } from "../server.js";
+/**
+ * `agent_claim_self` — agent attaches itself to a user's AiFinPay account
+ * autonomously by signing a claim challenge with its own key.
+ *
+ * Flow (executed inside the tool, no copy-paste between UIs):
+ *   1. User signs in to /login on aifinpay.io → gets a magic-link
+ *      email with URL like `https://aifinpay.io/api/auth/verify?token=…`
+ *   2. User pastes that URL to the agent: "claim yourself on my account
+ *      using this magic link"
+ *   3. Agent calls this tool with the magic_link_url
+ *   4. Tool hits the magic link → server issues session cookie
+ *   5. Tool POSTs to /api/me/agents/challenge with the agent's EVM address
+ *   6. Tool signs the returned message with the agent's EVM key (EIP-191)
+ *   7. Tool POSTs to /api/me/agents/claim → server verifies signature →
+ *      agent attached to user's watchlist
+ *
+ * Optional `label` field gives the agent a friendly name in the user's UI.
+ *
+ * Security model:
+ *   - Magic-link URL is one-shot, 15-min TTL, identifies the user
+ *   - Signature proves the agent holds the EVM private key
+ *   - Combination: "this user OWNS this agent". Either alone is
+ *     insufficient (signature alone can't pick an account; magic link
+ *     alone can't prove key control).
+ */
+export declare function agentClaimSelfTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            magic_link_url: {
+                type: string;
+                description: string;
+            };
+            label: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        openWorldHint: boolean;
+        destructiveHint: boolean;
+    };
+    outputSchema: {
+        type: string;
+    };
+};
+export declare function runAgentClaimSelf(ctx: ToolContext, args: Record<string, unknown>): Promise<{
+    isError: boolean;
+    content: {
+        type: string;
+        text: string;
+    }[];
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=agent-claim-self.d.ts.map

package/dist/tools/agent-claim-self.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-claim-self.d.ts","sourceRoot":"","sources":["../../src/tools/agent-claim-self.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;EA8BjC;AAqED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;GAmMtF"}

package/dist/tools/agent-claim-self.js

@@ -0,0 +1,300 @@
+/**
+ * `agent_claim_self` — agent attaches itself to a user's AiFinPay account
+ * autonomously by signing a claim challenge with its own key.
+ *
+ * Flow (executed inside the tool, no copy-paste between UIs):
+ *   1. User signs in to /login on aifinpay.io → gets a magic-link
+ *      email with URL like `https://aifinpay.io/api/auth/verify?token=…`
+ *   2. User pastes that URL to the agent: "claim yourself on my account
+ *      using this magic link"
+ *   3. Agent calls this tool with the magic_link_url
+ *   4. Tool hits the magic link → server issues session cookie
+ *   5. Tool POSTs to /api/me/agents/challenge with the agent's EVM address
+ *   6. Tool signs the returned message with the agent's EVM key (EIP-191)
+ *   7. Tool POSTs to /api/me/agents/claim → server verifies signature →
+ *      agent attached to user's watchlist
+ *
+ * Optional `label` field gives the agent a friendly name in the user's UI.
+ *
+ * Security model:
+ *   - Magic-link URL is one-shot, 15-min TTL, identifies the user
+ *   - Signature proves the agent holds the EVM private key
+ *   - Combination: "this user OWNS this agent". Either alone is
+ *     insufficient (signature alone can't pick an account; magic link
+ *     alone can't prove key control).
+ */
+export function agentClaimSelfTool() {
+    return {
+        name: "agent_claim_self",
+        description: "Link this agent to its owner's AiFinPay dashboard, so the owner sees the agent's " +
+            "balance, payments and receipts. Offer this after creating a wallet. The owner " +
+            "generates a one-time URL at https://dash.aifinpay.io → My Agents → Claim via MCP " +
+            "and pastes it here; the tool signs only an AiFinPay claim challenge for this " +
+            "agent's own address and moves no funds.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                magic_link_url: {
+                    type: "string",
+                    description: "The one-time URL from My Agents → Claim via MCP. Looks like " +
+                        "https://dash.aifinpay.io/api/auth/verify?token=… — single use, " +
+                        "expires 15 minutes after it was generated.",
+                },
+                label: {
+                    type: "string",
+                    description: "Optional human-friendly label (e.g. 'claude-research-bot').",
+                },
+            },
+            required: ["magic_link_url"],
+        },
+        // Binds the agent to a user account (bounded to AiFinPay; not fund-moving).
+        annotations: { readOnlyHint: false, openWorldHint: false, destructiveHint: false },
+        outputSchema: { type: "object" },
+    };
+}
+// ── Who this tool may talk to, and what it may sign ─────────────────────────
+//
+// This tool took the API host out of the URL it was handed, checked only that
+// the string contained "/api/auth/verify?token=", fetched a challenge from that
+// host, and signed whatever came back with the agent's EVM key AND its Solana
+// secret — then posted both signatures back to the same host.
+//
+// That is a signing oracle with an SSRF in front of it. Anyone who can put a
+// URL in front of the agent, prompt injection included, could name their own
+// server, choose the text to be signed, and collect the signatures. Naming
+// 127.0.0.1 or 169.254.169.254 instead reached whatever the host could reach.
+//
+// Two independent barriers below, because either alone is one mistake away
+// from failing.
+const DEFAULT_CLAIM_ORIGINS = [
+    "https://aifinpay.io",
+    "https://www.aifinpay.io",
+    "https://dash.aifinpay.io",
+    "https://api.aifinpay.io",
+];
+/** Origins this tool will contact. Override deliberately, for staging. */
+function allowedOrigins() {
+    const raw = process.env.AIFINPAY_CLAIM_ORIGINS;
+    if (!raw)
+        return DEFAULT_CLAIM_ORIGINS;
+    return raw
+        .split(",")
+        .map((o) => o.trim().replace(/\/+$/, ""))
+        .filter(Boolean);
+}
+/** null when the URL may be used; otherwise the reason it may not. */
+function originRefusal(url) {
+    const origin = `${url.protocol}//${url.host}`;
+    const allowed = allowedOrigins();
+    if (!allowed.includes(origin)) {
+        return (`refusing to use ${origin}: not an allowed AiFinPay origin. ` +
+            `Allowed: ${allowed.join(", ")}. Set AIFINPAY_CLAIM_ORIGINS to add one deliberately.`);
+    }
+    return null;
+}
+/**
+ * The only shape this agent will sign here.
+ *
+ * The server builds `AiFinPay-claim:<chain>:<address>:<nonce>` and nothing
+ * else. Checking that locally means even an allowed origin — compromised, or
+ * simply the wrong one — cannot choose the bytes. The address must be this
+ * agent's own, so a signature obtained here says only "I am this agent", which
+ * is the whole purpose of the exchange.
+ *
+ * EVM addresses compare case-insensitively because the server lowercases them.
+ * base58 is case-significant and compares exactly.
+ */
+function challengeIsWellFormed(message, address) {
+    if (typeof message !== "string")
+        return false;
+    const chain = address.startsWith("0x") ? "polygon" : "solana";
+    const prefix = `AiFinPay-claim:${chain}:${address}:`;
+    const matches = chain === "polygon" ? message.toLowerCase().startsWith(prefix.toLowerCase()) : message.startsWith(prefix);
+    if (!matches)
+        return false;
+    return /^[0-9a-f]{32}$/.test(message.slice(prefix.length));
+}
+export async function runAgentClaimSelf(ctx, args) {
+    const magicLinkUrl = typeof args.magic_link_url === "string" ? args.magic_link_url : "";
+    const label = typeof args.label === "string" ? args.label : null;
+    if (!magicLinkUrl || !magicLinkUrl.includes("/api/auth/verify?token=")) {
+        return {
+            isError: true,
+            content: [
+                {
+                    type: "text",
+                    text: "magic_link_url required — should look like https://aifinpay.io/api/auth/verify?token=…",
+                },
+            ],
+        };
+    }
+    // Derive API base from the magic link itself so demo can run against
+    // staging / localhost without extra config.
+    let apiBase;
+    try {
+        const u = new URL(magicLinkUrl);
+        const refusal = originRefusal(u);
+        if (refusal) {
+            return { isError: true, content: [{ type: "text", text: refusal }] };
+        }
+        apiBase = `${u.protocol}//${u.host}`;
+    }
+    catch {
+        return {
+            isError: true,
+            content: [{ type: "text", text: "magic_link_url is not a valid URL" }],
+        };
+    }
+    // ── 1. Establish session by hitting the magic link ─────────────────
+    let setCookie = null;
+    try {
+        const res = await fetch(magicLinkUrl, { redirect: "manual" });
+        setCookie = res.headers.get("set-cookie");
+        if (!setCookie) {
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: "text",
+                        text: `Magic link did not return a session cookie (HTTP ${res.status}). Link may be expired or already used.`,
+                    },
+                ],
+            };
+        }
+    }
+    catch (e) {
+        return {
+            isError: true,
+            content: [{ type: "text", text: `Failed to fetch magic link: ${e.message}` }],
+        };
+    }
+    // Some setups split multiple cookies; grab the session one we care about.
+    const cookieHeader = setCookie
+        .split(",")
+        .map((c) => c.trim().split(";")[0])
+        .join("; ");
+    // Claim both chains (EVM + Solana). Each is its own challenge + sig.
+    // We try Polygon first because that's where live bridges settle today;
+    // Solana side is best-effort — if anything fails we still consider the
+    // overall claim successful as long as Polygon went through.
+    const evmAddr = ctx.agent.evmAddress;
+    const solAddr = ctx.agent.solanaAddress;
+    const innerAny = ctx.agent.inner;
+    const solSecret = innerAny.secretKey; // tweetnacl 64-byte secretKey
+    async function claimOne(address, sigFn) {
+        // 1) challenge
+        const cr = await fetch(`${apiBase}/api/me/agents/challenge`, {
+            method: "POST",
+            redirect: "error", // a redirect would leave the origin we vetted
+            headers: { "content-type": "application/json", cookie: cookieHeader },
+            body: JSON.stringify({ address }),
+        });
+        const cj = (await cr.json());
+        if (!cr.ok || !cj.challenge_id || !cj.message) {
+            return { ok: false, reason: cj.error || `challenge HTTP ${cr.status}` };
+        }
+        // 2) sign — but only the one shape this exchange is defined to produce.
+        if (!challengeIsWellFormed(cj.message, address)) {
+            return {
+                ok: false,
+                reason: "challenge is not a well-formed AiFinPay claim for this agent — refusing to sign it",
+            };
+        }
+        let sigPayload;
+        try {
+            sigPayload = await sigFn(cj.message);
+        }
+        catch (e) {
+            return { ok: false, reason: `sign: ${e.message}` };
+        }
+        // 3) submit
+        const sr = await fetch(`${apiBase}/api/me/agents/claim`, {
+            method: "POST",
+            redirect: "error", // a redirect would leave the origin we vetted
+            headers: { "content-type": "application/json", cookie: cookieHeader },
+            body: JSON.stringify({ challenge_id: cj.challenge_id, label, ...sigPayload }),
+        });
+        const sj = (await sr.json());
+        if (!sr.ok) {
+            return { ok: false, reason: sj.error + (sj.reason ? ` (${sj.reason})` : "") };
+        }
+        return { ok: true };
+    }
+    // ── 2. Claim Polygon EVM ───────────────────────────────────────────
+    const polRes = await claimOne(evmAddr, async (msg) => ({
+        signature: await ctx.agent.evmAccount.signMessage({ message: msg }),
+    }));
+    if (!polRes.ok) {
+        return {
+            isError: true,
+            content: [{ type: "text", text: `Polygon claim failed: ${polRes.reason}` }],
+        };
+    }
+    // ── 3. Claim Solana (best-effort) ──────────────────────────────────
+    let solRes;
+    try {
+        const nacl = (await import("tweetnacl")).default;
+        const bs58 = (await import("bs58")).default;
+        solRes = await claimOne(solAddr, async (msg) => {
+            const sig = nacl.sign.detached(Buffer.from(msg, "utf8"), solSecret);
+            return { signature_base58: bs58.encode(sig) };
+        });
+    }
+    catch (e) {
+        solRes = { ok: false, reason: `solana_signer_unavailable: ${e.message}` };
+    }
+    // ── 4. Balance check (best-effort) — drives funded-vs-unfunded copy ─
+    // Never block the claim flow on a balance check; if the RPC is down or
+    // balance() throws, fall back to the standard funding recommendation.
+    // payable_fetch settles AIFP-1 v1.4 in native POL, so POL is what counts.
+    let polygonPol = 0;
+    let polUsd = null;
+    try {
+        const bal = await ctx.agent.balance();
+        polygonPol = bal.chains.polygon.matic ?? 0;
+        polUsd = Number.isFinite(bal.prices?.pol?.usd) ? bal.prices.pol.usd : null;
+    }
+    catch {
+        /* swallow — keep funding_recommendation as-is */
+    }
+    // ── 5. Report ──────────────────────────────────────────────────────
+    try {
+        // The dashboard is dash.aifinpay.io; /me redirects to My Agents.
+        // (dashboard.aifinpay.io only 301s here.)
+        const DASHBOARD_BASE = "https://dash.aifinpay.io";
+        // Funded threshold: $0.20 of POL — the smallest batch ($0.10) plus gas.
+        // At or above it we say so, so the agent does not ask for money it has.
+        const FUNDED_USD_THRESHOLD = 0.2;
+        const polValueUsd = polUsd === null ? null : polygonPol * polUsd;
+        const fundingFields = polValueUsd !== null && polValueUsd >= FUNDED_USD_THRESHOLD
+            ? { funding_status: `Funded — ${polygonPol.toFixed(4)} POL (≈ $${polValueUsd.toFixed(2)}) on Polygon` }
+            : {
+                // AIFP-1 v1.4 settles in native POL on Polygon, and gas is POL too.
+                funding_recommendation: `Send POL on Polygon to ${evmAddr}. The smallest batch is $0.10 plus gas; 2–3 POL covers many batches.`,
+            };
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        ok: true,
+                        polygon_address: evmAddr,
+                        polygon_claim: "ok",
+                        solana_address: solAddr,
+                        solana_claim: solRes.ok ? "ok" : `skipped (${solRes.reason})`,
+                        label: label || null,
+                        ...fundingFields,
+                        next: `Open ${DASHBOARD_BASE}/me (My Agents) to see this agent's balance, payments and receipts. Public page: ${DASHBOARD_BASE}/agents/${evmAddr}.`,
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+    catch (e) {
+        return {
+            isError: true,
+            content: [{ type: "text", text: `Claim POST failed: ${e.message}` }],
+        };
+    }
+}
+//# sourceMappingURL=agent-claim-self.js.map

package/dist/tools/agent-claim-self.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-claim-self.js","sourceRoot":"","sources":["../../src/tools/agent-claim-self.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,mFAAmF;YACnF,gFAAgF;YAChF,mFAAmF;YACnF,+EAA+E;YAC/E,yCAAyC;QAC3C,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,cAAc,EAAE;oBACd,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,8DAA8D;wBAC9D,iEAAiE;wBACjE,4CAA4C;iBAC/C;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6DAA6D;iBAC3E;aACF;YACD,QAAQ,EAAE,CAAC,gBAAgB,CAAC;SAC7B;QACD,4EAA4E;QAC5E,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;QAClF,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,gBAAgB;AAEhB,MAAM,qBAAqB,GAAG;IAC5B,qBAAqB;IACrB,yBAAyB;IACzB,0BAA0B;IAC1B,yBAAyB;CAC1B,CAAC;AAEF,0EAA0E;AAC1E,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACvC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,GAAQ;IAC7B,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,CACL,mBAAmB,MAAM,oCAAoC;YAC7D,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAAC,OAAgB,EAAE,OAAe;IAC9D,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,MAAM,MAAM,GAAG,kBAAkB,KAAK,IAAI,OAAO,GAAG,CAAC;IACrD,MAAM,OAAO,GACX,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5G,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAgB,EAAE,IAA6B;IACrF,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjE,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,wFAAwF;iBAC/F;aACF;SACF,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,4CAA4C;IAC5C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,oDAAoD,GAAG,CAAC,MAAM,yCAAyC;qBAC9G;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAAgC,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;SACzF,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,MAAM,YAAY,GAAG,SAAS;SAC3B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAClC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAA6C,CAAC;IACzE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,8BAA8B;IAEpE,KAAK,UAAU,QAAQ,CACrB,OAAe,EACf,KAAkF;QAElF,eAAe;QACf,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,0BAA0B,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO,EAAE,8CAA8C;YACjE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE;YACrE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAgE,CAAC;QAC5F,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,IAAI,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACnF,CAAC;QACD,wEAAwE;QACxE,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAChD,OAAO;gBACL,EAAE,EAAE,KAAc;gBAClB,MAAM,EAAE,oFAAoF;aAC7F,CAAC;QACJ,CAAC;QACD,IAAI,UAA6D,CAAC;QAClE,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,SAAU,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACzE,CAAC;QACD,YAAY;QACZ,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,sBAAsB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO,EAAE,8CAA8C;YACjE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE;YACrE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAwC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;IAC/B,CAAC;IAED,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACrD,SAAS,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;KACpE,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5C,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;YACpE,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA+B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACtC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IAED,sEAAsE;IACtE,IAAI,CAAC;QACH,iEAAiE;QACjE,0CAA0C;QAC1C,MAAM,cAAc,GAAG,0BAA0B,CAAC;QAElD,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,oBAAoB,GAAG,GAAG,CAAC;QACjC,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC;QACjE,MAAM,aAAa,GACjB,WAAW,KAAK,IAAI,IAAI,WAAW,IAAI,oBAAoB;YACzD,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;YACvG,CAAC,CAAC;gBACE,oEAAoE;gBACpE,sBAAsB,EAAE,0BAA0B,OAAO,sEAAsE;aAChI,CAAC;QAER,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,EAAE,EAAE,IAAI;wBACR,eAAe,EAAE,OAAO;wBACxB,aAAa,EAAE,IAAI;wBACnB,cAAc,EAAE,OAAO;wBACvB,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,GAAG;wBAC7D,KAAK,EAAE,KAAK,IAAI,IAAI;wBACpB,GAAG,aAAa;wBAChB,IAAI,EAAE,QAAQ,cAAc,oFAAoF,cAAc,WAAW,OAAO,GAAG;qBACpJ,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;SAChF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/agent-quote.d.ts

@@ -0,0 +1,41 @@
+import type { ToolContext } from "../server.js";
+export declare function agentQuoteTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            url: {
+                type: string;
+                description: string;
+            };
+            method: {
+                type: string;
+                enum: string[];
+                default: string;
+            };
+        };
+        required: string[];
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        openWorldHint: boolean;
+        destructiveHint: boolean;
+    };
+    outputSchema: {
+        type: string;
+    };
+};
+export declare function runAgentQuote(ctx: ToolContext, args: Record<string, unknown>): Promise<{
+    isError: boolean;
+    content: {
+        type: string;
+        text: string;
+    }[];
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+}>;
+//# sourceMappingURL=agent-quote.d.ts.map

package/dist/tools/agent-quote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-quote.d.ts","sourceRoot":"","sources":["../../src/tools/agent-quote.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,wBAAgB,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;EAuB7B;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;GA2D9B"}