@ashlar-blue/x402-trust 0.3.0 → 0.5.0

package/dist/mcp-server.d.ts

@@ -0,0 +1,191 @@
+export declare const MCP_SERVER_INFO: {
+    readonly name: "@ashlar-blue/x402-trust";
+    readonly title: "Ashlar Blue x402 Trust Layer MCP Server";
+    readonly version: "0.4.0";
+};
+export declare const X402_MCP_TOOLS: readonly [{
+    readonly name: "x402_check_service";
+    readonly description: "Discover and verify an x402 payment endpoint by domain (DNS TXT _x402 + /.well-known/x402). Verifies same-origin requirements, attestation checkability, and live facilitator consistency, returning an authoritative safeToPay decision with full rationale.";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly domain: {
+                readonly type: "string";
+                readonly description: "Bare domain name or hostname to discover (e.g. \"api.flareclaw.app\" or \"correntelabs.com\")";
+            };
+            readonly requireAttestation: {
+                readonly type: "boolean";
+                readonly description: "If true, safeToPay requires an independently checkable hardware TEE attestation verifier (default: false)";
+            };
+            readonly requireLiveConsistent: {
+                readonly type: "boolean";
+                readonly description: "If true, safeToPay requires live facilitator /supported capability cross-check to pass (default: false)";
+            };
+        };
+        readonly required: readonly ["domain"];
+    };
+}, {
+    readonly name: "x402_verify_attestation_entry";
+    readonly description: "Mathematically verify a hardware-attested directory entry (Intel TDX / AMD SEV quote measurement + MRTD hash) against a signed directory root. Pure math (RFC 6962), zero network, zero trust in intermediate servers.";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly entry: {
+                readonly type: "object";
+                readonly description: "The DirectoryEntry object containing domain, verdict, detail, and optional record";
+            };
+            readonly index: {
+                readonly type: "number";
+                readonly description: "Zero-based leaf index in the census";
+            };
+            readonly size: {
+                readonly type: "number";
+                readonly description: "Total number of entries in the census";
+            };
+            readonly proof: {
+                readonly type: "array";
+                readonly items: {
+                    readonly type: "string";
+                };
+                readonly description: "Array of 32-byte hex sibling hashes forming the Merkle audit path";
+            };
+            readonly outputRoot: {
+                readonly type: "string";
+                readonly description: "The 32-byte hex signed outputRoot of the directory census";
+            };
+        };
+        readonly required: readonly ["entry", "index", "size", "proof", "outputRoot"];
+    };
+}, {
+    readonly name: "x402_verify_transcript_inclusion";
+    readonly description: "Mathematically verify that a specific agent-to-agent session interaction {drawId, nonce, seed} is provably included in a signed Merkle transcript root (RFC 6962). Pure math, zero network.";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly entry: {
+                readonly type: "object";
+                readonly description: "The TranscriptEntry object with drawId, nonce, and seed";
+            };
+            readonly index: {
+                readonly type: "number";
+                readonly description: "Zero-based leaf index in the transcript";
+            };
+            readonly size: {
+                readonly type: "number";
+                readonly description: "Total number of entries in the transcript";
+            };
+            readonly proof: {
+                readonly type: "array";
+                readonly items: {
+                    readonly type: "string";
+                };
+                readonly description: "Array of 32-byte hex sibling hashes forming the Merkle audit path";
+            };
+            readonly expectedRoot: {
+                readonly type: "string";
+                readonly description: "The expected 32-byte hex Merkle root";
+            };
+        };
+        readonly required: readonly ["entry", "index", "size", "proof", "expectedRoot"];
+    };
+}, {
+    readonly name: "x402_verify_reconcile_row";
+    readonly description: "Verify a payment authorization settlement reconciliation row (EIP-3009 / XRPL) against its signed census root without network calls.";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly row: {
+                readonly type: "object";
+                readonly description: "The ReconcileRow containing domain, category, a, b, and note";
+            };
+            readonly index: {
+                readonly type: "number";
+                readonly description: "Zero-based row index in the reconciliation";
+            };
+            readonly size: {
+                readonly type: "number";
+                readonly description: "Total number of rows in the reconciliation";
+            };
+            readonly proof: {
+                readonly type: "array";
+                readonly items: {
+                    readonly type: "string";
+                };
+                readonly description: "Array of 32-byte hex sibling hashes";
+            };
+            readonly rowsRoot: {
+                readonly type: "string";
+                readonly description: "The expected signed rowsRoot (hex string)";
+            };
+        };
+        readonly required: readonly ["row", "index", "size", "proof", "rowsRoot"];
+    };
+}, {
+    readonly name: "x402_catalog_search";
+    readonly description: "Search the open x402 resource directory with provenance tags (Bazaar-mirror vs discovery). Filter by network, source, or independently checkable attestation.";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly source: {
+                readonly type: "string";
+                readonly enum: readonly ["bazaar-mirror", "discovery"];
+                readonly description: "Filter by provenance lane";
+            };
+            readonly network: {
+                readonly type: "string";
+                readonly description: "Blockchain network identifier (e.g. \"coston2\", \"flare\", \"base\", \"eip155:114\")";
+            };
+            readonly attested: {
+                readonly type: "boolean";
+                readonly description: "If true, only return entries with independently checkable attestation claims";
+            };
+            readonly limit: {
+                readonly type: "number";
+                readonly description: "Number of rows to return (default: 50, max: 500)";
+            };
+            readonly offset: {
+                readonly type: "number";
+                readonly description: "Pagination offset";
+            };
+        };
+    };
+}, {
+    readonly name: "x402_catalog_get";
+    readonly description: "Look up verified Open Catalog records for an exact resource URL, prefix, or domain across both discovery and bazaar-mirror lanes.";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly resource: {
+                readonly type: "string";
+                readonly description: "Resource URL or bare hostname";
+            };
+        };
+        readonly required: readonly ["resource"];
+    };
+}, {
+    readonly name: "x402_catalog_stats";
+    readonly description: "Retrieve high-level network statistics: total mirrored vs discovered vs attested services, network distribution, and the on-chain Coston2/Flare anchor hash.";
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {};
+    };
+}];
+/** Handle a single JSON-RPC 2.0 request */
+export declare function handleMcpRequest(request: {
+    jsonrpc?: string;
+    id?: string | number | null;
+    method?: string;
+    params?: Record<string, any>;
+}, catalogStatePath?: string): Promise<{
+    jsonrpc: '2.0';
+    id: string | number | null;
+    result?: any;
+    error?: {
+        code: number;
+        message: string;
+        data?: any;
+    };
+}>;
+/** Run the MCP server over standard input/output (stdio) */
+export declare function startStdioMcpServer(catalogStatePath?: string): void;
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwKjB,CAAC;AAEX,2CAA2C;AAC3C,wBAAsB,gBAAgB,CAClC,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,EACzG,gBAAgB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAA;CAAE,CAAC,CAsV9H;AAED,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,gBAAgB,CAAC,EAAE,MAAM,QAyB5D"}