@axorum/mcp 0.0.0-stage → 1.0.0

package/dist/verify.js

@@ -0,0 +1,297 @@
+/**
+ * Offline verification of `axorum.evidence.v0` envelopes — the `verify_receipt`
+ * tool's engine, in nothing but `node:crypto`.
+ *
+ * This is a deliberate second implementation of the verifier the Rust
+ * `axorum-evidence` crate ships, built from the committed JSON Schemas
+ * (`spec/schemas/`) and `spec/evidence-signing.md` §3.1/§4 alone. It shares no
+ * code with the service: an envelope that verifies here has been checked the
+ * way a stranger's stack would check it. The refusal sentences are the spec's
+ * §4 catalogue, verbatim.
+ *
+ * The signed message is:
+ *
+ * ```text
+ * "axorum.evidence.v0" || 0x0A || kind || 0x0A || deployment || 0x0A || SHA-256(payload)
+ * ```
+ *
+ * with the deployment and kind *inside* the signed bytes — no artifact
+ * transplants across deployments, no signature replays across kinds.
+ *
+ * @packageDocumentation
+ */
+import { createHash, createPublicKey, verify as cryptoVerify } from "node:crypto";
+/** The line-feed-free, non-empty deployment constraint the committed schema pins. */
+const DEPLOYMENT_PATTERN = /^[^\n]+$/;
+/** The envelope format version this verifier understands. */
+export const ENVELOPE_VERSION = "axorum.evidence.v0";
+/** The key-list format version this verifier understands. */
+export const KEYS_VERSION = "axorum.keys.v0";
+/** The receipt payload version this verifier understands. */
+export const RECEIPT_VERSION = "axorum.receipt.v0";
+/** The closed six-kind artifact vocabulary (`spec/evidence-signing.md` §3.1). */
+export const ARTIFACT_KINDS = [
+    "receipt",
+    "evidence-package",
+    "lake-manifest",
+    "lake-head",
+    "oplog-head",
+    "key-list",
+];
+/** The RFC 8410 SPKI prefix for a raw 32-byte Ed25519 public key. */
+const SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
+/** A verification refusal, carrying the §4 sentence as its message. */
+export class VerifyRefusal extends Error {
+}
+const HEX_64 = /^[0-9a-f]{64}$/;
+const HEX_128 = /^[0-9a-f]{128}$/;
+function refuse(message) {
+    throw new VerifyRefusal(message);
+}
+function asRecord(value, what) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        refuse(`the ${what} is not a JSON object`);
+    }
+    return value;
+}
+function asString(value, what) {
+    if (typeof value !== "string") {
+        refuse(`the ${what} is not a string`);
+    }
+    return value;
+}
+/** Reads and structurally checks a wire envelope from parsed JSON. */
+export function readEnvelope(value) {
+    const raw = asRecord(value, "envelope");
+    const envelope = {
+        version: asString(raw.version, "envelope version"),
+        kind: asString(raw.kind, "envelope kind"),
+        deployment: asString(raw.deployment, "envelope deployment"),
+        key_id: asString(raw.key_id, "envelope key_id"),
+        payload: asString(raw.payload, "envelope payload"),
+        signature: asString(raw.signature, "envelope signature"),
+    };
+    if (envelope.version !== ENVELOPE_VERSION) {
+        refuse(`the envelope version is '${envelope.version}', not '${ENVELOPE_VERSION}'`);
+    }
+    if (!ARTIFACT_KINDS.includes(envelope.kind)) {
+        refuse(`'${envelope.kind}' is not one of the six artifact kinds`);
+    }
+    if (!DEPLOYMENT_PATTERN.test(envelope.deployment)) {
+        refuse("the envelope deployment is empty or contains a line feed");
+    }
+    if (!HEX_64.test(envelope.key_id)) {
+        refuse("the envelope key_id is not 64 lowercase hex characters");
+    }
+    if (!HEX_128.test(envelope.signature)) {
+        refuse("the envelope signature is not 128 lowercase hex characters");
+    }
+    return envelope;
+}
+/** Strict standard base64: decodes, and refuses any non-canonical spelling. */
+function decodeBase64Strict(payload) {
+    const decoded = Buffer.from(payload, "base64");
+    if (decoded.toString("base64") !== payload) {
+        refuse("the envelope payload is not canonical standard base64");
+    }
+    return decoded;
+}
+/** The §3.1 signed message for `(kind, deployment, payload)`. */
+export function signedMessage(kind, deployment, payload) {
+    const digest = createHash("sha256").update(payload).digest();
+    return Buffer.concat([
+        Buffer.from(`${ENVELOPE_VERSION}\n`, "utf8"),
+        Buffer.from(`${kind}\n`, "utf8"),
+        Buffer.from(`${deployment}\n`, "utf8"),
+        digest,
+    ]);
+}
+/** Ed25519 signature check against a raw 32-byte public key (hex). */
+function signatureVerifies(publicKeyHex, message, signatureHex) {
+    const spki = Buffer.concat([SPKI_PREFIX, Buffer.from(publicKeyHex, "hex")]);
+    const key = createPublicKey({ key: spki, format: "der", type: "spki" });
+    return cryptoVerify(null, message, key, Buffer.from(signatureHex, "hex"));
+}
+/** SHA-256 of the raw public key bytes — the key's identity. */
+function keyIdFor(publicKeyHex) {
+    return createHash("sha256").update(Buffer.from(publicKeyHex, "hex")).digest("hex");
+}
+/** The SPKI PEM a raw 32-byte Ed25519 public key encodes to — the canonical
+ * form, so a key-list entry's `public_key_pem` can be checked against its raw
+ * `public_key` (the Rust verifier's `pem_matches` rule). */
+function spkiPemFor(publicKeyHex) {
+    const der = Buffer.concat([SPKI_PREFIX, Buffer.from(publicKeyHex, "hex")]);
+    const key = createPublicKey({ key: der, format: "der", type: "spki" });
+    return key.export({ format: "pem", type: "spki" }).toString();
+}
+/** Structural checks every entry must pass, duplicates refused (both paths). */
+function readKeyList(value) {
+    const raw = asRecord(value, "key list");
+    const version = asString(raw.version, "key list version");
+    if (version !== KEYS_VERSION) {
+        refuse(`the key list version is '${version}', not '${KEYS_VERSION}'`);
+    }
+    const deployment = asString(raw.deployment, "key list deployment");
+    const generation = raw.generation;
+    if (typeof generation !== "number" || !Number.isInteger(generation) || generation < 0) {
+        refuse("the key list generation is not a non-negative integer");
+    }
+    if (!Array.isArray(raw.keys)) {
+        refuse("the key list carries no keys array");
+    }
+    const seen = new Set();
+    const keys = raw.keys.map((item) => {
+        const record = asRecord(item, "key entry");
+        const keyId = asString(record.key_id, "key entry key_id");
+        const publicKey = asString(record.public_key, "key entry public_key");
+        const pem = asString(record.public_key_pem, "key entry public_key_pem");
+        const status = asString(record.status, "key entry status");
+        if (!HEX_64.test(keyId) || !HEX_64.test(publicKey)) {
+            refuse("a key entry's hex fields are not 64 lowercase hex characters");
+        }
+        if (status !== "active" && status !== "retired" && status !== "revoked") {
+            refuse(`'${status}' is not a key status`);
+        }
+        if (keyIdFor(publicKey) !== keyId) {
+            refuse(`key ${keyId} does not hash from its own public key`);
+        }
+        // The PEM must encode the same raw key (the Rust verifier's pem_matches):
+        // normalize both to DER so line-ending / trailing-newline differences do
+        // not matter, only the key material.
+        if (createPublicKey({ key: pem, format: "pem", type: "spki" })
+            .export({ format: "der", type: "spki" })
+            .toString("hex") !==
+            createPublicKey({ key: spkiPemFor(publicKey), format: "pem", type: "spki" })
+                .export({ format: "der", type: "spki" })
+                .toString("hex")) {
+            refuse(`key ${keyId}'s PEM does not encode its raw public key`);
+        }
+        if (seen.has(keyId)) {
+            refuse(`key ${keyId} appears more than once in the list`);
+        }
+        seen.add(keyId);
+        const entry = {
+            key_id: keyId,
+            public_key: publicKey,
+            public_key_pem: pem,
+            status,
+        };
+        return entry;
+    });
+    return { version, deployment, generation, keys };
+}
+/**
+ * Verifies a signed key-list envelope (`kind: key-list`, self-signed by its
+ * own active key) and returns the verified list. `pinnedGeneration` refuses a
+ * rolled-back list, exactly as the spec's §4 row words it.
+ */
+export function verifyKeyList(value, pinnedGeneration) {
+    const envelope = readEnvelope(value);
+    if (envelope.kind !== "key-list") {
+        refuse(`the key list envelope's kind is '${envelope.kind}', not 'key-list'`);
+    }
+    const payload = decodeBase64Strict(envelope.payload);
+    const list = readKeyList(JSON.parse(payload.toString("utf8")));
+    if (list.deployment !== envelope.deployment) {
+        refuse(`the key list names deployment '${list.deployment}' but its envelope names ` +
+            `'${envelope.deployment}'`);
+    }
+    const actives = list.keys.filter((key) => key.status === "active");
+    if (actives.length !== 1) {
+        refuse(`the key list carries ${actives.length} active keys; exactly one is required`);
+    }
+    const active = actives[0];
+    if (envelope.key_id !== active.key_id) {
+        refuse("the key list envelope is not signed by the list's own active key — a " +
+            "revocation-stripping forgery, or a stale envelope");
+    }
+    const message = signedMessage(envelope.kind, envelope.deployment, payload);
+    if (!signatureVerifies(active.public_key, message, envelope.signature)) {
+        refuse("The signature does not verify: these are not the bytes that were signed, " +
+            `or the signature was not produced by key ${envelope.key_id}.`);
+    }
+    if (pinnedGeneration !== undefined && list.generation < pinnedGeneration) {
+        refuse(`The supplied key list is generation ${list.generation}, older than the ` +
+            `generation ${pinnedGeneration} list previously pinned. Refusing to verify ` +
+            "against a rolled-back key list.");
+    }
+    return list;
+}
+/**
+ * Verifies one envelope against a **verified** key list, with the spec's §4
+ * refusal sentences: unknown key, revoked key, deployment mismatch, and the
+ * signature itself.
+ */
+export function verifyEnvelope(value, list) {
+    const envelope = readEnvelope(value);
+    if (envelope.deployment !== list.deployment) {
+        refuse(`The artifact was issued by deployment ${envelope.deployment} but the supplied ` +
+            `key list belongs to ${list.deployment}. Obtain the issuing deployment's key ` +
+            "list and retry.");
+    }
+    const entry = list.keys.find((key) => key.key_id === envelope.key_id);
+    if (entry === undefined) {
+        refuse(`The artifact names signing key ${envelope.key_id}, which is not in the ` +
+            "supplied key list. Obtain the deployment's published key list and retry.");
+    }
+    if (entry.status === "revoked") {
+        refuse(`The artifact was signed by key ${envelope.key_id}, which has been revoked. ` +
+            "Artifacts signed by this key can no longer be relied upon.");
+    }
+    const payload = decodeBase64Strict(envelope.payload);
+    const message = signedMessage(envelope.kind, envelope.deployment, payload);
+    if (!signatureVerifies(entry.public_key, message, envelope.signature)) {
+        refuse("The signature does not verify: these are not the bytes that were signed, " +
+            `or the signature was not produced by key ${envelope.key_id}.`);
+    }
+    return {
+        kind: envelope.kind,
+        deployment: envelope.deployment,
+        keyId: envelope.key_id,
+        keyStatus: entry.status,
+        payload,
+    };
+}
+/** Reads the exact `tick` digits from the signed payload bytes (never rounded). */
+function exactTick(payloadText) {
+    const match = /"tick"\s*:\s*(\d+)/.exec(payloadText);
+    return match ? match[1] : "unknown";
+}
+/**
+ * The whole `axorum verify` flow for one receipt, offline: verify the key
+ * list (self-signed, generation-pinned), verify the receipt envelope against
+ * it, parse and cross-check the payload. Throws {@link VerifyRefusal} with
+ * the spec's §4 sentence on any failure.
+ */
+export function verifyReceipt(receiptEnvelope, keyListEnvelope, pinnedGeneration) {
+    const list = verifyKeyList(keyListEnvelope, pinnedGeneration);
+    const verified = verifyEnvelope(receiptEnvelope, list);
+    if (verified.kind !== "receipt") {
+        refuse(`the envelope's kind is '${verified.kind}', not 'receipt'`);
+    }
+    const payloadText = verified.payload.toString("utf8");
+    const receipt = asRecord(JSON.parse(payloadText), "receipt payload");
+    if (receipt.version !== RECEIPT_VERSION) {
+        refuse(`the receipt payload version is '${String(receipt.version)}', not '${RECEIPT_VERSION}'`);
+    }
+    if (receipt.deployment !== verified.deployment) {
+        refuse(`the receipt payload names deployment '${String(receipt.deployment)}' but its ` +
+            `envelope names '${verified.deployment}'`);
+    }
+    const evidence = receipt.evidence;
+    if (!Array.isArray(evidence) || evidence.length === 0) {
+        refuse("the receipt payload carries no evidence vector");
+    }
+    if (evidence[evidence.length - 1] !== receipt.justification_hash) {
+        refuse("the receipt's justification_hash is not the final evidence element — the " +
+            "§3.2 contract does not hold, so this payload was not minted by the ledger");
+    }
+    return {
+        deployment: verified.deployment,
+        keyStatus: verified.keyStatus,
+        keyId: verified.keyId,
+        receipt,
+        tickExact: exactTick(payloadText),
+    };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,aAAa,CAAC;AAElF,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAErD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAE7C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS;IACT,kBAAkB;IAClB,eAAe;IACf,WAAW;IACX,YAAY;IACZ,UAAU;CACF,CAAC;AAEX,qEAAqE;AACrE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AA4BnE,uEAAuE;AACvE,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAElC,SAAS,MAAM,CAAC,OAAe;IAC7B,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAiB;QAC7B,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC;QAClD,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC;QACzC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC;QAC3D,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC;QAC/C,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC;QAClD,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC;KACzD,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,4BAA4B,QAAQ,CAAC,OAAO,WAAW,gBAAgB,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,wCAAwC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,0DAA0D,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,wDAAwD,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,4DAA4D,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,uDAAuD,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,UAAkB,EAAE,OAAe;IAC7E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,IAAI,EAAE,MAAM,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,MAAM,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,EAAE,MAAM,CAAC;QACtC,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,SAAS,iBAAiB,CAAC,YAAoB,EAAE,OAAe,EAAE,YAAoB;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,gEAAgE;AAChE,SAAS,QAAQ,CAAC,YAAoB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AAED;;4DAE4D;AAC5D,SAAS,UAAU,CAAC,YAAoB;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChE,CAAC;AAED,gFAAgF;AAChF,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,MAAM,CAAC,4BAA4B,OAAO,WAAW,YAAY,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACtF,MAAM,CAAC,uDAAuD,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,8DAA8D,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,MAAM,uBAAuB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,OAAO,KAAK,wCAAwC,CAAC,CAAC;QAC/D,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,qCAAqC;QACrC,IACE,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aACvD,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aACvC,QAAQ,CAAC,KAAK,CAAC;YAClB,eAAe,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;iBACzE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;iBACvC,QAAQ,CAAC,KAAK,CAAC,EAClB,CAAC;YACD,MAAM,CAAC,OAAO,KAAK,2CAA2C,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,KAAK,qCAAqC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,KAAK,GAAiB;YAC1B,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,GAAG;YACnB,MAAM;SACP,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,gBAAyB;IACrE,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,CAAC,oCAAoC,QAAQ,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,CACJ,kCAAkC,IAAI,CAAC,UAAU,2BAA2B;YAC1E,IAAI,QAAQ,CAAC,UAAU,GAAG,CAC7B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,wBAAwB,OAAO,CAAC,MAAM,uCAAuC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,CACJ,uEAAuE;YACrE,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,CACJ,2EAA2E;YACzE,4CAA4C,QAAQ,CAAC,MAAM,GAAG,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;QACzE,MAAM,CACJ,uCAAuC,IAAI,CAAC,UAAU,mBAAmB;YACvE,cAAc,gBAAgB,8CAA8C;YAC5E,iCAAiC,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,IAAiB;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,CACJ,yCAAyC,QAAQ,CAAC,UAAU,oBAAoB;YAC9E,uBAAuB,IAAI,CAAC,UAAU,wCAAwC;YAC9E,iBAAiB,CACpB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,CACJ,kCAAkC,QAAQ,CAAC,MAAM,wBAAwB;YACvE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CACJ,kCAAkC,QAAQ,CAAC,MAAM,4BAA4B;YAC3E,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,CACJ,2EAA2E;YACzE,4CAA4C,QAAQ,CAAC,MAAM,GAAG,CACjE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,OAAO;KACR,CAAC;AACJ,CAAC;AAsBD,mFAAmF;AACnF,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,eAAwB,EACxB,eAAwB,EACxB,gBAAyB;IAEzB,MAAM,IAAI,GAAG,aAAa,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,2BAA2B,QAAQ,CAAC,IAAI,kBAAkB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACxC,MAAM,CAAC,mCAAmC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,eAAe,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,CACJ,yCAAyC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY;YAC7E,mBAAmB,QAAQ,CAAC,UAAU,GAAG,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,gDAAgD,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACjE,MAAM,CACJ,2EAA2E;YACzE,2EAA2E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO;QACP,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,67 @@
 {
   "name": "@axorum/mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "1.0.0",
+  "description": "The official Axorum MCP server — exposes the Axorum agent plane as MCP tools, so any MCP-capable agent becomes a policy-governed spender with no integration code.",
+  "license": "Apache-2.0",
+  "author": "Roland Rodriguez <roland@axorum.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AxorumHQ/axorum.git",
+    "directory": "clients/mcp"
+  },
+  "homepage": "https://github.com/AxorumHQ/axorum/tree/main/clients/mcp#readme",
+  "bugs": "https://github.com/AxorumHQ/axorum/issues",
+  "keywords": [
+    "axorum",
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "agent",
+    "agent-plane",
+    "ledger",
+    "payments",
+    "policy"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "bin": {
+    "axorum-mcp": "./dist/main.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "types": "./dist/index.d.ts",
+  "main": "./dist/index.js",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.4.3",
+    "@axorum/client": "^1.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "typescript": "^5.7.2",
+    "undici": "^7.28.0",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "build": "tsc --project tsconfig.build.json",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit",
+    "test:integration": "vitest run test/integration"
+  }
 }