@aspect-warden/mcp-server 0.4.0 → 0.5.0

package/dist/index.js

@@ -64,18 +64,58 @@ function decrypt(payload, passphrase) {
     return decrypted;
 }
 const STORAGE_KEY = process.env.WARDEN_STORAGE_KEY || `warden-${homedir()}`;
-function saveState(state) {
+function ensureStorageDir() {
+    if (!existsSync(STORAGE_DIR)) {
+        mkdirSync(STORAGE_DIR, { recursive: true, mode: 0o700 });
+    }
+}
+function saveFullState() {
+    if (!storedPrivateKey || !policyEngine)
+        return;
     try {
-        if (!existsSync(STORAGE_DIR)) {
-            mkdirSync(STORAGE_DIR, { recursive: true, mode: 0o700 });
-        }
+        ensureStorageDir();
+        const p = policyEngine.getPolicy();
+        const state = {
+            privateKey: storedPrivateKey,
+            agentId: p.agentId,
+            policy: {
+                maxPerTx: p.maxPerTx.toString(),
+                dailyLimit: p.dailyLimit.toString(),
+                requireApprovalAbove: p.requireApprovalAbove.toString(),
+                cooldownMs: p.cooldownMs,
+                allowedTokens: p.allowedTokens,
+                blockedTokens: p.blockedTokens,
+                allowedRecipients: p.allowedRecipients,
+                blockedRecipients: p.blockedRecipients,
+                allowedChains: p.allowedChains,
+            },
+            tracker: policyEngine.exportTracker(),
+            auditLog: auditLogger?.exportEntries() ?? [],
+            frozen,
+            sessionKeys: Array.from(sessionKeys.entries()).map(([key, data]) => ({
+                key,
+                data: {
+                    agentAddress: data.agentAddress,
+                    maxPerTx: data.maxPerTx.toString(),
+                    dailyLimit: data.dailyLimit.toString(),
+                    validUntil: data.validUntil,
+                    cooldownSeconds: data.cooldownSeconds,
+                    createdAt: data.createdAt,
+                    revoked: data.revoked,
+                    txHash: data.txHash,
+                },
+            })),
+            permissionGrants: Array.from(permissionGrants.entries()).map(([key, data]) => ({
+                key, data,
+            })),
+        };
         const json = JSON.stringify(state);
         const encrypted = encrypt(json, STORAGE_KEY);
         writeFileSync(STATE_FILE, encrypted, { mode: 0o600 });
-        console.error('[Warden MCP] Wallet state saved to ~/.warden/wallet-state.enc');
+        console.error('[Warden MCP] Full state saved to ~/.warden/wallet-state.enc');
     }
     catch (err) {
-        console.error('[Warden MCP] Failed to save wallet state:', err);
+        console.error('[Warden MCP] Failed to save state:', err);
     }
 }
 function loadState() {
@@ -172,22 +212,8 @@ server.tool('warden_create_wallet', 'Create a new policy-enforced wallet for the
     policyEngine = new PolicyEngine(policy);
     auditLogger = new AuditLogger({ maxEntries: 10000 });
     frozen = false;
-    // Persist wallet state for recovery across restarts
-    saveState({
-        privateKey: storedPrivateKey,
-        agentId,
-        policy: {
-            maxPerTx: policy.maxPerTx.toString(),
-            dailyLimit: policy.dailyLimit.toString(),
-            requireApprovalAbove: policy.requireApprovalAbove.toString(),
-            cooldownMs: policy.cooldownMs,
-            allowedTokens: policy.allowedTokens,
-            blockedTokens: policy.blockedTokens,
-            allowedRecipients: policy.allowedRecipients,
-            blockedRecipients: policy.blockedRecipients,
-            allowedChains: policy.allowedChains,
-        },
-    });
+    // Persist full state for recovery across restarts
+    saveFullState();
     return {
         content: [{
                 type: 'text',
@@ -321,7 +347,9 @@ server.tool('warden_transfer', 'Send ERC-20 tokens with policy enforcement. Eval
     const valueMicro = BigInt(Math.round(amount * 1e6));
     const decision = policyEngine.evaluate(recipient, valueMicro, tokenAddress, 'ethereum');
     auditLogger.log(decision);
+    saveFullState(); // Persist audit log entry (blocked or approved)
     if (!decision.approved) {
+        const currentPolicy = policyEngine.getPolicy();
         return {
             content: [{
                     type: 'text',
@@ -331,6 +359,10 @@ server.tool('warden_transfer', 'Send ERC-20 tokens with policy enforcement. Eval
                         reason: decision.reason,
                         ruleTriggered: decision.ruleTriggered,
                         riskScore: decision.riskScore,
+                        currentLimits: {
+                            maxPerTx: `${Number(currentPolicy.maxPerTx) / 1e6} USDT`,
+                            dailyLimit: `${Number(currentPolicy.dailyLimit) / 1e6} USDT`,
+                        },
                     }),
                 }],
         };
@@ -371,6 +403,8 @@ server.tool('warden_transfer', 'Send ERC-20 tokens with policy enforcement. Eval
             blockNumber: Number(receipt.blockNumber),
             gasUsed: receipt.gasUsed,
         });
+        // Persist spending tracker + audit log after successful transfer
+        saveFullState();
         return {
             content: [{
                     type: 'text',
@@ -486,6 +520,8 @@ server.tool('warden_update_policy', 'Modify policy rules at runtime. Can update
         updatedFields.push('cooldownMs');
     }
     policyEngine.updatePolicy(updates);
+    // Persist updated policy so it survives restarts
+    saveFullState();
     return {
         content: [{
                 type: 'text',
@@ -498,6 +534,7 @@ server.tool('warden_update_policy', 'Modify policy rules at runtime. Can update
 // ============================================================
 server.tool('warden_freeze', 'EMERGENCY: Freeze all wallet operations immediately. No transfers will be allowed until unfrozen.', {}, async () => {
     frozen = true;
+    saveFullState();
     return {
         content: [{
                 type: 'text',
@@ -514,6 +551,7 @@ server.tool('warden_freeze', 'EMERGENCY: Freeze all wallet operations immediatel
 // ============================================================
 server.tool('warden_unfreeze', 'Resume wallet operations after an emergency freeze.', {}, async () => {
     frozen = false;
+    saveFullState();
     return {
         content: [{
                 type: 'text',
@@ -604,6 +642,7 @@ server.tool('warden_create_session_key', 'Create a scoped session key for a sub-
             txHash: hash,
         };
         sessionKeys.set(agentAddress.toLowerCase(), sessionData);
+        saveFullState();
         return {
             content: [{
                     type: 'text',
@@ -681,6 +720,7 @@ server.tool('warden_revoke_session_key', 'Revoke a previously created session ke
                 };
             }
             session.revoked = true;
+            saveFullState();
             return {
                 content: [{
                         type: 'text',
@@ -704,6 +744,7 @@ server.tool('warden_revoke_session_key', 'Revoke a previously created session ke
         }
     }
     session.revoked = true;
+    saveFullState();
     return {
         content: [{
                 type: 'text',
@@ -934,6 +975,7 @@ server.tool('warden_grant_permissions', 'Grant scoped permissions to an AI agent
         txHash,
     };
     permissionGrants.set(agentId, grant);
+    saveFullState();
     return {
         content: [{
                 type: 'text',
@@ -1026,6 +1068,7 @@ server.tool('warden_revoke_permissions', 'Revoke all permissions from an AI agen
     });
     frozen = true;
     permissionGrants.delete(agentId);
+    saveFullState();
     return {
         content: [{
                 type: 'text',
@@ -1132,8 +1175,42 @@ async function main() {
             };
             policyEngine = new PolicyEngine(restoredPolicy);
             auditLogger = new AuditLogger({ maxEntries: 10000 });
-            frozen = false;
-            console.error(`[Warden MCP] Restored wallet ${walletAddress} (agent: ${saved.agentId})`);
+            // Restore spending tracker
+            if (saved.tracker) {
+                policyEngine.importTracker(saved.tracker);
+                console.error('[Warden MCP] Restored spending tracker');
+            }
+            // Restore audit log
+            if (saved.auditLog && Array.isArray(saved.auditLog)) {
+                auditLogger.loadEntries(saved.auditLog);
+                console.error(`[Warden MCP] Restored ${saved.auditLog.length} audit log entries`);
+            }
+            // Restore frozen state
+            frozen = saved.frozen ?? false;
+            // Restore session keys
+            if (saved.sessionKeys) {
+                for (const { key, data } of saved.sessionKeys) {
+                    sessionKeys.set(key, {
+                        agentAddress: data.agentAddress,
+                        maxPerTx: BigInt(data.maxPerTx || '0'),
+                        dailyLimit: BigInt(data.dailyLimit || '0'),
+                        validUntil: data.validUntil,
+                        cooldownSeconds: data.cooldownSeconds,
+                        createdAt: data.createdAt,
+                        revoked: data.revoked,
+                        txHash: data.txHash,
+                    });
+                }
+                console.error(`[Warden MCP] Restored ${saved.sessionKeys.length} session keys`);
+            }
+            // Restore permission grants
+            if (saved.permissionGrants) {
+                for (const { key, data } of saved.permissionGrants) {
+                    permissionGrants.set(key, data);
+                }
+                console.error(`[Warden MCP] Restored ${saved.permissionGrants.length} permission grants`);
+            }
+            console.error(`[Warden MCP] Restored wallet ${walletAddress} (agent: ${saved.agentId}, frozen: ${frozen})`);
         }
         catch (err) {
             console.error('[Warden MCP] Failed to restore wallet state:', err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aspect-warden/mcp-server",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "type": "module",
   "bin": {
     "warden-mcp": "dist/index.js"