@continuumdao/continuum-node-sdk 1.2.10 → 1.2.11

package/dist/mcp/detops/registry/networks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networks.js","sourceRoot":"","sources":["../../../../src/mcp/detops/registry/networks.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,GACvB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACN,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAC,YAAY,EAAE,OAAO,EAAC,MAAM,qBAAqB,CAAC;AAE1D,MAAM,UAAU,0BAA0B,CACzC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,kBAAkB,CAAC,EAChC;QACC,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,2BAA2B;QACxC,YAAY,EAAE,0BAA0B;KACxC,EACD,KAAK,EAAE,KAAkD,EAAE,EAAE,CAC5D,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CACzC,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,oBAAoB,CAAC,EAClC;QACC,WAAW,EAAE,0CAA0C;QACvD,WAAW,EAAE,2BAA2B;QACxC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,KAAkD,EAAE,EAAE,CAC5D,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAC3C,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,yBAAyB,CAAC,EACvC;QACC,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;SACrE,CAAC;QACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,EAAC,OAAO,EAA6B,EAAE,EAAE,CAC/C,OAAO,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAC,OAAO,EAAC,CAAC,CAAC,CACpD,CAAC;AACH,CAAC"}

package/dist/mcp/detops/registry/tokens.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { NodeSdkConfig } from '../../../config/schema.js';
+export declare function registerTokenRegistryTools(server: McpServer, config: NodeSdkConfig): void;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/mcp/detops/registry/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../../src/mcp/detops/registry/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,yCAAyC,CAAC;AAEvE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,2BAA2B,CAAC;AAe7D,wBAAgB,0BAA0B,CACzC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,aAAa,GACnB,IAAI,CAiEN"}

package/dist/mcp/detops/registry/tokens.js

@@ -0,0 +1,43 @@
+import { z } from 'zod';
+import { addToTokenRegistry, getTokenRegistry, removeFromTokenRegistry, } from '../../../detops/registry/tokens.js';
+import { GetTokenRegistryDataSchema, GetTokenRegistryQuerySchema, SelectedSigningKeySchema, TokenContractInputSchema, TokenTypeSchema, } from '../../../schemas/extended.js';
+import { camelToSnake, wrapSdk } from '../../tool-utils.js';
+export function registerTokenRegistryTools(server, config) {
+    server.registerTool(camelToSnake('getTokenRegistry'), {
+        description: 'Get token registry entries.',
+        inputSchema: GetTokenRegistryQuerySchema,
+        outputSchema: GetTokenRegistryDataSchema,
+    }, async (query) => wrapSdk(getTokenRegistry(config, query)));
+    server.registerTool(camelToSnake('addToTokenRegistry'), {
+        description: 'Add a token to the token registry.',
+        inputSchema: z.object({
+            chainType: z.string().min(1),
+            chainId: z.union([z.string().min(1), z.number().int().nonnegative()]),
+            tokenType: TokenTypeSchema,
+            contract: TokenContractInputSchema,
+            transferSig: z.string().optional(),
+            transferNames: z.array(z.string()).optional(),
+        }),
+        outputSchema: z.object({
+            message: z.string(),
+            selectedSigningKey: SelectedSigningKeySchema,
+            signingMessage: z.string(),
+        }),
+    }, async (input) => wrapSdk(addToTokenRegistry(config, input)));
+    server.registerTool(camelToSnake('removeFromTokenRegistry'), {
+        description: 'Remove a token from the token registry.',
+        inputSchema: z.object({
+            chainType: z.string().min(1),
+            chainId: z.union([z.string().min(1), z.number().int().nonnegative()]),
+            tokenType: TokenTypeSchema,
+            contractAddress: z.string().min(1),
+            tokenId: z.string().optional(),
+        }),
+        outputSchema: z.object({
+            message: z.string(),
+            selectedSigningKey: SelectedSigningKeySchema,
+            signingMessage: z.string(),
+        }),
+    }, async (input) => wrapSdk(removeFromTokenRegistry(config, input)));
+}
+//# sourceMappingURL=tokens.js.map

package/dist/mcp/detops/registry/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../../src/mcp/detops/registry/tokens.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,eAAe,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAC,YAAY,EAAE,OAAO,EAAC,MAAM,qBAAqB,CAAC;AAE1D,MAAM,UAAU,0BAA0B,CACzC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,kBAAkB,CAAC,EAChC;QACC,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,2BAA2B;QACxC,YAAY,EAAE,0BAA0B;KACxC,EACD,KAAK,EAAE,KAAkD,EAAE,EAAE,CAC5D,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CACzC,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,oBAAoB,CAAC,EAClC;QACC,WAAW,EAAE,oCAAoC;QACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,SAAS,EAAE,eAAe;YAC1B,QAAQ,EAAE,wBAAwB;YAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC7C,CAAC;QACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,KAON,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAChD,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,yBAAyB,CAAC,EACvC;QACC,WAAW,EAAE,yCAAyC;QACtD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,SAAS,EAAE,eAAe;YAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC9B,CAAC;QACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,KAMN,EAAE,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CACrD,CAAC;AACH,CAAC"}

package/dist/mcp/ed25519/management-signing.d.ts

@@ -0,0 +1,51 @@
+import type { NodeSdkConfig } from '../../config/schema.js';
+import { MPA_HOME_DIR, MANAGEMENT_KEYS_DIR } from '../../config/paths.js';
+import type { ManagementKeyOption } from '../schemas.js';
+export type { ManagementKeyOption } from '../schemas.js';
+export type LocalManagementKeyEntry = {
+    fileName: string;
+    publicKeyRaw: string;
+    publicKeyHex?: string;
+};
+type ToMcpApiError = (message: string, data?: unknown) => Error;
+type MgtGet = <T>(route: string, params?: Record<string, string>) => Promise<T>;
+export declare function normalizeEd25519PublicKeyToHex(value: string, toMcpApiError: ToMcpApiError): string;
+export declare function buildManagementSigningMessage(bodyWithEmptySig: Record<string, unknown>): string;
+export declare function getPreferredSignerPublicKeyHex(deps: {
+    mgtGET: MgtGet;
+    toMcpApiError: ToMcpApiError;
+}): Promise<string | undefined>;
+export declare function listLocalManagementPublicKeys(keyRoot: string, toMcpApiError: ToMcpApiError): Promise<LocalManagementKeyEntry[]>;
+export declare function ensureLocalKeyPairForPublicKey(publicKey: string, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<{
+    fileName: string;
+    publicKeyPath: string;
+    privateKeyPath: string;
+}>;
+export declare function resolvePreferredManagementKeyOption(keyOptions: ManagementKeyOption[], deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+    mgtGET: MgtGet;
+}): Promise<ManagementKeyOption>;
+export declare function getPrivateKeyStatus(option: ManagementKeyOption, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<{
+    available: boolean;
+    reason?: string;
+}>;
+export declare function assertAgentCanSignManagementRequests(deps: {
+    keyRoot: string;
+    mgtGET: MgtGet;
+    toMcpApiError: ToMcpApiError;
+}): Promise<void>;
+export declare function signManagementMessage(option: ManagementKeyOption, message: string, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+    assertAgentCanSignManagementRequests: () => Promise<void>;
+    config?: NodeSdkConfig;
+}): Promise<string>;
+export { MANAGEMENT_KEYS_DIR, MPA_HOME_DIR };
+//# sourceMappingURL=management-signing.d.ts.map

package/dist/mcp/ed25519/management-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-signing.d.ts","sourceRoot":"","sources":["../../../src/mcp/ed25519/management-signing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAC,YAAY,EAAE,mBAAmB,EAAC,MAAM,uBAAuB,CAAC;AAGxE,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,eAAe,CAAC;AAEvD,YAAY,EAAC,mBAAmB,EAAC,MAAM,eAAe,CAAC;AAEvD,MAAM,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,KAAK,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,KAAK,CAAC;AAChE,KAAK,MAAM,GAAG,CAAC,CAAC,EACf,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;AAEhB,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,aAAa,GAC1B,MAAM,CASR;AAED,wBAAgB,6BAA6B,CAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,MAAM,CAER;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,aAAa,CAAC;CAC7B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAsB9B;AAED,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,aAAa,GAC1B,OAAO,CAAC,uBAAuB,EAAE,CAAC,CA4BpC;AAkDD,wBAAsB,8BAA8B,CACnD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAC,GACnD,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,CAAC,CA6B5E;AAED,wBAAsB,mCAAmC,CACxD,UAAU,EAAE,mBAAmB,EAAE,EACjC,IAAI,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CACf,GACC,OAAO,CAAC,mBAAmB,CAAC,CAyD9B;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAC,GACnD,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAUhD;AAED,wBAAsB,oCAAoC,CAAC,IAAI,EAAE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,aAAa,CAAC;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhB;AAED,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,oCAAoC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,EAAE,aAAa,CAAC;CACvB,GACC,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,OAAO,EAAC,mBAAmB,EAAE,YAAY,EAAC,CAAC"}

package/dist/mcp/ed25519/management-signing.js

@@ -0,0 +1,198 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { MPA_HOME_DIR, MANAGEMENT_KEYS_DIR } from '../../config/paths.js';
+import { discoverKeys, resolveKeyPath } from '../../config/keys.js';
+import { signUtf8Message, readPublicKeyHex } from '../../api/management-key.js';
+export function normalizeEd25519PublicKeyToHex(value, toMcpApiError) {
+    const trimmed = value.trim();
+    const normalizedHex = trimmed.toLowerCase().replace(/^0x/, '');
+    if (/^[a-f0-9]{64}$/.test(normalizedHex)) {
+        return normalizedHex;
+    }
+    throw toMcpApiError('Unsupported public key format; expected 64-character hex Ed25519 key');
+}
+export function buildManagementSigningMessage(bodyWithEmptySig) {
+    return JSON.stringify(bodyWithEmptySig);
+}
+export async function getPreferredSignerPublicKeyHex(deps) {
+    const { mgtGET, toMcpApiError } = deps;
+    try {
+        const raw = await mgtGET('/getPreferredSigner');
+        if (typeof raw === 'string') {
+            const s = raw.trim();
+            return s ? normalizeEd25519PublicKeyToHex(s, toMcpApiError) : undefined;
+        }
+        if (raw && typeof raw === 'object') {
+            const obj = raw;
+            const candidate = [obj.publicKeyHex, obj.publicKey, obj.key].find(v => typeof v === 'string');
+            if (!candidate || candidate.trim().length === 0) {
+                return undefined;
+            }
+            return normalizeEd25519PublicKeyToHex(candidate, toMcpApiError);
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function listLocalManagementPublicKeys(keyRoot, toMcpApiError) {
+    const keyDir = path.join(keyRoot, 'management_keys');
+    let entries = [];
+    try {
+        entries = await fs.readdir(keyDir);
+    }
+    catch {
+        return [];
+    }
+    const pubFiles = entries.filter(entry => entry.endsWith('.pub'));
+    const results = [];
+    for (const pubFile of pubFiles) {
+        const fileName = pubFile.slice(0, -4);
+        const pubPath = path.join(keyDir, pubFile);
+        try {
+            const raw = (await fs.readFile(pubPath, 'utf8')).trim();
+            let publicKeyHex;
+            try {
+                publicKeyHex = normalizeEd25519PublicKeyToHex(raw, toMcpApiError);
+            }
+            catch {
+                publicKeyHex = undefined;
+            }
+            results.push({ fileName, publicKeyRaw: raw, publicKeyHex });
+        }
+        catch {
+            // ignore unreadable keys
+        }
+    }
+    return results;
+}
+async function resolvePrivateKeyPathForPublicKey(publicKey, keyRoot, config, toMcpApiError) {
+    const normalized = publicKey.replace(/^0x/i, '').toLowerCase();
+    const managementDir = path.join(keyRoot, 'management_keys');
+    if (toMcpApiError) {
+        const localKeys = await listLocalManagementPublicKeys(keyRoot, toMcpApiError);
+        for (const entry of localKeys) {
+            if (entry.publicKeyHex?.toLowerCase() === normalized) {
+                return path.join(managementDir, entry.fileName);
+            }
+        }
+    }
+    if (config) {
+        const keys = discoverKeys(config.node.mpcConfigPath);
+        for (const key of keys) {
+            const pub = readPublicKeyHex(key.path)?.toLowerCase();
+            if (pub === normalized) {
+                return key.path;
+            }
+        }
+        const defaultPath = resolveKeyPath(config.signer.defaultKey, config.signer.defaultKeyPath, config.node.mpcConfigPath);
+        if (defaultPath) {
+            const defaultPub = readPublicKeyHex(defaultPath)?.toLowerCase();
+            if (defaultPub === normalized) {
+                return defaultPath;
+            }
+        }
+    }
+    throw new Error(`No local private key found for management public key ${publicKey}`);
+}
+export async function ensureLocalKeyPairForPublicKey(publicKey, deps) {
+    const { keyRoot, toMcpApiError } = deps;
+    const keyDir = path.join(keyRoot, 'management_keys');
+    const normalizedTarget = normalizeEd25519PublicKeyToHex(publicKey, toMcpApiError);
+    const localKeys = await listLocalManagementPublicKeys(keyRoot, toMcpApiError);
+    const match = localKeys.find(k => k.publicKeyHex === normalizedTarget);
+    if (!match) {
+        throw toMcpApiError('Preferred signer key does not exist locally in management_keys', { preferredKey: normalizedTarget, keyDirectory: keyDir });
+    }
+    const privateKeyPath = path.join(keyDir, match.fileName);
+    try {
+        await fs.access(privateKeyPath);
+    }
+    catch {
+        throw toMcpApiError('Preferred signer key does not have a corresponding private key', { preferredKey: normalizedTarget, expectedPrivateKeyPath: privateKeyPath });
+    }
+    return {
+        fileName: match.fileName,
+        publicKeyPath: path.join(keyDir, `${match.fileName}.pub`),
+        privateKeyPath,
+    };
+}
+export async function resolvePreferredManagementKeyOption(keyOptions, deps) {
+    const { keyRoot, toMcpApiError, mgtGET } = deps;
+    const preferred = await getPreferredSignerPublicKeyHex({ mgtGET, toMcpApiError });
+    const failures = [];
+    if (preferred) {
+        try {
+            const normalizedPreferred = normalizeEd25519PublicKeyToHex(preferred, toMcpApiError);
+            const selected = keyOptions.find(opt => normalizeEd25519PublicKeyToHex(opt.value, toMcpApiError) ===
+                normalizedPreferred);
+            if (!selected) {
+                throw toMcpApiError('Preferred signer is not in allowed management keys', {
+                    preferredSigner: normalizedPreferred,
+                    allowedKeys: keyOptions.map(k => k.value),
+                });
+            }
+            await ensureLocalKeyPairForPublicKey(normalizedPreferred, {
+                keyRoot,
+                toMcpApiError,
+            });
+            return selected;
+        }
+        catch (error) {
+            failures.push({
+                key: preferred,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    for (const opt of keyOptions) {
+        try {
+            await ensureLocalKeyPairForPublicKey(opt.value, {
+                keyRoot,
+                toMcpApiError,
+            });
+            return opt;
+        }
+        catch (error) {
+            failures.push({
+                key: opt.value,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    throw toMcpApiError('No preferred signer is set, and no allowed management key has a usable local private key', { failures });
+}
+export async function getPrivateKeyStatus(option, deps) {
+    try {
+        await ensureLocalKeyPairForPublicKey(option.value, deps);
+        return { available: true };
+    }
+    catch (error) {
+        return {
+            available: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+export async function assertAgentCanSignManagementRequests(deps) {
+    const { keyRoot, mgtGET, toMcpApiError } = deps;
+    const configuredKeys = await mgtGET('/getAllowedEd25519MgtKeys');
+    if (configuredKeys.length === 0) {
+        throw toMcpApiError('No EdDSA management keys are configured. Configure a bootstrap Ed25519 key before agent-signed management requests.');
+    }
+    if (configuredKeys.length === 1) {
+        const bootstrap = configuredKeys[0];
+        await ensureLocalKeyPairForPublicKey(bootstrap.publicKey, {
+            keyRoot,
+            toMcpApiError,
+        });
+    }
+}
+export async function signManagementMessage(option, message, deps) {
+    await deps.assertAgentCanSignManagementRequests();
+    const keyPath = await resolvePrivateKeyPathForPublicKey(option.value, deps.keyRoot, deps.config, deps.toMcpApiError);
+    return signUtf8Message(keyPath, message);
+}
+export { MANAGEMENT_KEYS_DIR, MPA_HOME_DIR };
+//# sourceMappingURL=management-signing.js.map

package/dist/mcp/ed25519/management-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-signing.js","sourceRoot":"","sources":["../../../src/mcp/ed25519/management-signing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,IAAI,EAAE,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAC,YAAY,EAAE,mBAAmB,EAAC,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAC,YAAY,EAAE,cAAc,EAAC,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAC,eAAe,EAAE,gBAAgB,EAAC,MAAM,6BAA6B,CAAC;AAiB9E,MAAM,UAAU,8BAA8B,CAC7C,KAAa,EACb,aAA4B;IAE5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,aAAa,CAClB,sEAAsE,CACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC5C,gBAAyC;IAEzC,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAGpD;IACA,MAAM,EAAC,MAAM,EAAE,aAAa,EAAC,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAU,qBAAqB,CAAC,CAAC;QACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,CAAC;QACD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,GAA8B,CAAC;YAC3C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAChE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CACJ,CAAC;YACxB,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjD,OAAO,SAAS,CAAC;YAClB,CAAC;YACD,OAAO,8BAA8B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,OAAe,EACf,aAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrD,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,IAAI,YAAgC,CAAC;YACrC,IAAI,CAAC;gBACJ,YAAY,GAAG,8BAA8B,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACR,YAAY,GAAG,SAAS,CAAC;YAC1B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACR,yBAAyB;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC/C,SAAiB,EACjB,OAAe,EACf,MAAsB,EACtB,aAA6B;IAE7B,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE5D,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,6BAA6B,CACpD,OAAO,EACP,aAAa,CACb,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC;YACtD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBACxB,OAAO,GAAG,CAAC,IAAI,CAAC;YACjB,CAAC;QACF,CAAC;QAED,MAAM,WAAW,GAAG,cAAc,CACjC,MAAM,CAAC,MAAM,CAAC,UAAU,EACxB,MAAM,CAAC,MAAM,CAAC,cAAc,EAC5B,MAAM,CAAC,IAAI,CAAC,aAAa,CACzB,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;YAChE,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC/B,OAAO,WAAW,CAAC;YACpB,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,IAAI,KAAK,CACd,wDAAwD,SAAS,EAAE,CACnE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,SAAiB,EACjB,IAAqD;IAErD,MAAM,EAAC,OAAO,EAAE,aAAa,EAAC,GAAG,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,8BAA8B,CACtD,SAAS,EACT,aAAa,CACb,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,gBAAgB,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,aAAa,CAClB,gEAAgE,EAChE,EAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAC,CACtD,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,aAAa,CAClB,gEAAgE,EAChE,EAAC,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,cAAc,EAAC,CACxE,CAAC;IACH,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,MAAM,CAAC;QACzD,cAAc;KACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACxD,UAAiC,EACjC,IAIC;IAED,MAAM,EAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC,EAAC,MAAM,EAAE,aAAa,EAAC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAyC,EAAE,CAAC;IAE1D,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACJ,MAAM,mBAAmB,GAAG,8BAA8B,CACzD,SAAS,EACT,aAAa,CACb,CAAC;YACF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAC/B,GAAG,CAAC,EAAE,CACL,8BAA8B,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC;gBACxD,mBAAmB,CACpB,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,aAAa,CAClB,oDAAoD,EACpD;oBACC,eAAe,EAAE,mBAAmB;oBACpC,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;iBACzC,CACD,CAAC;YACH,CAAC;YACD,MAAM,8BAA8B,CAAC,mBAAmB,EAAE;gBACzD,OAAO;gBACP,aAAa;aACb,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACb,GAAG,EAAE,SAAS;gBACd,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACJ,MAAM,8BAA8B,CAAC,GAAG,CAAC,KAAK,EAAE;gBAC/C,OAAO;gBACP,aAAa;aACb,CAAC,CAAC;YACH,OAAO,GAAG,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACb,GAAG,EAAE,GAAG,CAAC,KAAK;gBACd,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,MAAM,aAAa,CAClB,0FAA0F,EAC1F,EAAC,QAAQ,EAAC,CACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAA2B,EAC3B,IAAqD;IAErD,IAAI,CAAC;QACJ,MAAM,8BAA8B,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzD,OAAO,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,IAI1D;IACA,MAAM,EAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAC,GAAG,IAAI,CAAC;IAC9C,MAAM,cAAc,GAAG,MAAM,MAAM,CAClC,2BAA2B,CAC3B,CAAC;IACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,aAAa,CAClB,qHAAqH,CACrH,CAAC;IACH,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;QACrC,MAAM,8BAA8B,CAAC,SAAS,CAAC,SAAS,EAAE;YACzD,OAAO;YACP,aAAa;SACb,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,MAA2B,EAC3B,OAAe,EACf,IAKC;IAED,MAAM,IAAI,CAAC,oCAAoC,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,iCAAiC,CACtD,MAAM,CAAC,KAAK,EACZ,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,aAAa,CAClB,CAAC;IACF,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,OAAO,EAAC,mBAAmB,EAAE,YAAY,EAAC,CAAC"}

package/dist/mcp/ed25519/openssh-ed25519.d.ts

@@ -0,0 +1,20 @@
+/**
+ * OpenSSH "openssh-key-v1" unencrypted Ed25519 PEM ("BEGIN OPENSSH PRIVATE KEY") import.
+ * Node.js + OpenSSL 3.6+ commonly reject this envelope via createPrivateKey(); we decode wire
+ * format per OpenSSH PROTOCOL.key and import via JWK.
+ */
+import { KeyObject } from "crypto";
+export declare const OPENSSH_V1_MAGIC: Buffer<ArrayBuffer>;
+export declare function readSshString(buf: Buffer, offset: number): {
+    value: Buffer;
+    next: number;
+};
+/** @returns first 32-byte seed and 32-byte public key (from private pair string). */
+export declare function parseUnencryptedOpenSshEd25519FromV1Blob(blob: Buffer): {
+    seed32: Buffer;
+    pub32: Buffer;
+    comment: string;
+};
+/** Import unencrypted ssh-keygen/OpenSSH PEM into a native KeyObject (Ed25519 only). */
+export declare function importUnencryptedOpenSshEd25519PrivateKeyFromPem(pemArmored: string): KeyObject;
+//# sourceMappingURL=openssh-ed25519.d.ts.map

package/dist/mcp/ed25519/openssh-ed25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openssh-ed25519.d.ts","sourceRoot":"","sources":["../../../src/mcp/ed25519/openssh-ed25519.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAoB,SAAS,EAAE,MAAM,QAAQ,CAAA;AAEpD,eAAO,MAAM,gBAAgB,qBAAkC,CAAA;AAE/D,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAU1F;AAoBD,qFAAqF;AACrF,wBAAgB,wCAAwC,CAAC,IAAI,EAAE,MAAM,GAAG;IACtE,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;CAChB,CA4FA;AAMD,wFAAwF;AACxF,wBAAgB,gDAAgD,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAY9F"}

package/dist/mcp/ed25519/openssh-ed25519.js

@@ -0,0 +1,129 @@
+/**
+ * OpenSSH "openssh-key-v1" unencrypted Ed25519 PEM ("BEGIN OPENSSH PRIVATE KEY") import.
+ * Node.js + OpenSSL 3.6+ commonly reject this envelope via createPrivateKey(); we decode wire
+ * format per OpenSSH PROTOCOL.key and import via JWK.
+ */
+import { createPrivateKey } from "crypto";
+export const OPENSSH_V1_MAGIC = Buffer.from("openssh-key-v1\0");
+export function readSshString(buf, offset) {
+    if (offset + 4 > buf.length) {
+        throw new Error(`SSH string header EOF at offset ${offset}`);
+    }
+    const len = buf.readUInt32BE(offset);
+    const next = offset + 4 + len;
+    if (next > buf.length || len < 0) {
+        throw new Error(`SSH string length ${len} out of range at offset ${offset}`);
+    }
+    return { value: buf.subarray(offset + 4, next), next };
+}
+function pemBase64BodyForOpenSshBlock(pemArmored) {
+    const m = pemArmored.match(/-----BEGIN OPENSSH PRIVATE KEY-----([\s\S]*?)-----END OPENSSH PRIVATE KEY-----/i);
+    if (!m) {
+        throw new Error("missing -----BEGIN/END OPENSSH PRIVATE KEY----- PEM block");
+    }
+    const compact = m[1].replace(/\s+/g, "");
+    return Buffer.from(compact, "base64");
+}
+function assertOpenSshPadding(privList, offsetAfterComment) {
+    for (let pad = 1, o = offsetAfterComment; o < privList.length; pad++, o++) {
+        const expected = pad & 0xff;
+        if (privList[o] !== expected) {
+            throw new Error("invalid OpenSSH private key padding (file may be truncated or encrypted incorrectly)");
+        }
+    }
+}
+/** @returns first 32-byte seed and 32-byte public key (from private pair string). */
+export function parseUnencryptedOpenSshEd25519FromV1Blob(blob) {
+    if (blob.length < OPENSSH_V1_MAGIC.length || !blob.subarray(0, OPENSSH_V1_MAGIC.length).equals(OPENSSH_V1_MAGIC)) {
+        throw new Error("not an openssh-key-v1 blob");
+    }
+    let offset = OPENSSH_V1_MAGIC.length;
+    const cipherName = readSshString(blob, offset);
+    offset = cipherName.next;
+    const kdfName = readSshString(blob, offset);
+    offset = kdfName.next;
+    const kdfOptions = readSshString(blob, offset);
+    offset = kdfOptions.next;
+    if (cipherName.value.toString("utf8") !== "none" || kdfName.value.toString("utf8") !== "none") {
+        throw new Error("OpenSSH private key is encrypted; use `ssh-keygen -p -N '' -m PKCS8 -f <keyfile>` to write an importable PKCS#8 PEM, or provide an unencrypted key");
+    }
+    const nKeys = blob.readUInt32BE(offset);
+    offset += 4;
+    if (nKeys !== 1) {
+        throw new Error(`OpenSSH file has ${nKeys} keys; only single-key Ed25519 files are supported`);
+    }
+    /** Public ssh wire blobs (validated against private material). */
+    const pubBlob = readSshString(blob, offset);
+    offset = pubBlob.next;
+    const encryptedPrivateListMaybe = readSshString(blob, offset);
+    offset = encryptedPrivateListMaybe.next;
+    const privList = encryptedPrivateListMaybe.value;
+    if (privList.length < 16) {
+        throw new Error("OpenSSH private key list too short");
+    }
+    const check1 = privList.readUInt32BE(0);
+    const check2 = privList.readUInt32BE(4);
+    if (check1 !== check2) {
+        throw new Error("OpenSSH private key checkints mismatch (wrong passphrase or corrupted file)");
+    }
+    let inner = 8;
+    const algo = readSshString(privList, inner);
+    inner = algo.next;
+    const ak = algo.value.toString("utf8");
+    if (ak !== "ssh-ed25519") {
+        throw new Error(`OpenSSH private key algorithm is ${JSON.stringify(ak)}, expected "ssh-ed25519"`);
+    }
+    const pubFromPrivate = readSshString(privList, inner);
+    inner = pubFromPrivate.next;
+    if (pubFromPrivate.value.length !== 32) {
+        throw new Error(`invalid Ed25519 public key length ${pubFromPrivate.value.length}`);
+    }
+    const pair = readSshString(privList, inner);
+    inner = pair.next;
+    if (pair.value.length !== 64) {
+        throw new Error(`invalid Ed25519 secret+public concat length ${pair.value.length}`);
+    }
+    const seed32 = Buffer.from(pair.value.subarray(0, 32));
+    const duplicatePub32 = Buffer.from(pair.value.subarray(32, 64));
+    if (!duplicatePub32.equals(pubFromPrivate.value)) {
+        throw new Error("OpenSSH Ed25519 public key mismatch inside private pair (corrupted key)");
+    }
+    const cm = readSshString(privList, inner);
+    inner = cm.next;
+    /** Wire-format public blob should match pubkey from private serialization. */
+    const pubOuter = pubBlob.value;
+    let po = 0;
+    const pubAlgo = readSshString(pubOuter, po);
+    po = pubAlgo.next;
+    if (pubAlgo.value.toString("utf8") !== "ssh-ed25519") {
+        throw new Error("OpenSSH outer public blob algorithm mismatch");
+    }
+    const pubOuterKeyBytes = readSshString(pubOuter, po).value;
+    if (!pubOuterKeyBytes.equals(pubFromPrivate.value)) {
+        throw new Error("OpenSSH outer public blob does not match embedded private pubkey (corrupted key)");
+    }
+    assertOpenSshPadding(privList, inner);
+    return {
+        seed32,
+        pub32: pubFromPrivate.value,
+        comment: cm.value.toString("utf8"),
+    };
+}
+function b64Url(buf) {
+    return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+/** Import unencrypted ssh-keygen/OpenSSH PEM into a native KeyObject (Ed25519 only). */
+export function importUnencryptedOpenSshEd25519PrivateKeyFromPem(pemArmored) {
+    const blob = pemBase64BodyForOpenSshBlock(pemArmored.trim());
+    const { seed32, pub32 } = parseUnencryptedOpenSshEd25519FromV1Blob(blob);
+    return createPrivateKey({
+        format: "jwk",
+        key: {
+            kty: "OKP",
+            crv: "Ed25519",
+            d: b64Url(seed32),
+            x: b64Url(pub32),
+        },
+    });
+}
+//# sourceMappingURL=openssh-ed25519.js.map

package/dist/mcp/ed25519/openssh-ed25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openssh-ed25519.js","sourceRoot":"","sources":["../../../src/mcp/ed25519/openssh-ed25519.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,gBAAgB,EAAa,MAAM,QAAQ,CAAA;AAEpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;AAE/D,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAc;IACvD,IAAI,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,GAAG,CAAA;IAC7B,IAAI,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,2BAA2B,MAAM,EAAE,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;AACxD,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAA;IAC7G,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,kBAA0B;IACxE,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAA;QAC3B,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAA;QACzG,CAAC;IACH,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,wCAAwC,CAAC,IAAY;IAKnE,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC/C,CAAC;IAED,IAAI,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAA;IACpC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,GAAG,UAAU,CAAC,IAAI,CAAA;IACxB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;IACrB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,GAAG,UAAU,CAAC,IAAI,CAAA;IAExB,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,IAAI,CAAC,CAAA;IACX,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,oDAAoD,CAAC,CAAA;IAChG,CAAC;IAED,kEAAkE;IAClE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;IAErB,MAAM,yBAAyB,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7D,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAA;IAEvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAA;IAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;IAChG,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC3C,KAAK,GAAG,IAAI,CAAC,IAAI,CAAA;IACjB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAA;IACnG,CAAC;IAED,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrD,KAAK,GAAG,cAAc,CAAC,IAAI,CAAA;IAC3B,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC3C,KAAK,GAAG,IAAI,CAAC,IAAI,CAAA;IACjB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC/D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACzC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAA;IAEf,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAA;IAC9B,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAC3C,EAAE,GAAG,OAAO,CAAC,IAAI,CAAA;IACjB,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IACD,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAA;IAC1D,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;IACrG,CAAC;IAED,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAErC,OAAO;QACL,MAAM;QACN,KAAK,EAAE,cAAc,CAAC,KAAK;QAC3B,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;KACnC,CAAA;AACH,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AACzF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gDAAgD,CAAC,UAAkB;IACjF,MAAM,IAAI,GAAG,4BAA4B,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;IAC5D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,wCAAwC,CAAC,IAAI,CAAC,CAAA;IACxE,OAAO,gBAAgB,CAAC;QACtB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE;YACH,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,SAAS;YACd,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;SACjB;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/mcp/group.js

@@ -17,7 +17,7 @@ export function registerGroupTools(server, config) {
         description: 'Create a new MPC group request for the given node IDs.',
         inputSchema: z.object({ nodeIds: z.array(NodeIdSchema).min(2) }),
         outputSchema: z.object({
-            groupRequestId: z.string(),
+            groupRequestId: GroupRequestIdSchema,
             selectedSigningKey: SelectedSigningKeySchema,
             signingMessage: z.string(),
         }),

package/dist/mcp/group.js.map

@@ -1 +1 @@
-{"version":3,"file":"group.js","sourceRoot":"","sources":["../../src/mcp/group.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,wBAAwB,EAAC,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAC,YAAY,EAAE,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAEtD,MAAM,UAAU,kBAAkB,CACjC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,mBAAmB,CAAC,EACjC;QACC,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAC,CAAC;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAC,CAAC;KACpE,EACD,KAAK,EAAE,EAAC,MAAM,EAA0C,EAAE,EAAE,CAC3D,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC3C,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,kBAAkB,CAAC,EAChC;QACC,WAAW,EAAE,mCAAmC;QAChD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAC,CAAC;KAC5D,EACD,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAC7C,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,oBAAoB,CAAC,EAClC;QACC,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC;QAC9D,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;YAC1B,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,EAAC,OAAO,EAAsB,EAAE,EAAE,CACxC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAC,OAAO,EAAC,CAAC,CAAC,CAC/C,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,oBAAoB,CAAC,EAClC;QACC,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAE,oBAAoB,EAAC,CAAC;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,EAAC,SAAS,EAAsB,EAAE,EAAE,CAC1C,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAC,SAAS,EAAC,CAAC,CAAC,CACjD,CAAC;AACH,CAAC"}
+{"version":3,"file":"group.js","sourceRoot":"","sources":["../../src/mcp/group.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,wBAAwB,EAAC,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAC,YAAY,EAAE,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAEtD,MAAM,UAAU,kBAAkB,CACjC,MAAiB,EACjB,MAAqB;IAErB,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,mBAAmB,CAAC,EACjC;QACC,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAC,CAAC;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAC,CAAC;KACpE,EACD,KAAK,EAAE,EAAC,MAAM,EAA0C,EAAE,EAAE,CAC3D,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC3C,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,kBAAkB,CAAC,EAChC;QACC,WAAW,EAAE,mCAAmC;QAChD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAC,CAAC;KAC5D,EACD,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAC7C,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,oBAAoB,CAAC,EAClC;QACC,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC;QAC9D,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,cAAc,EAAE,oBAAoB;YACpC,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,EAAC,OAAO,EAAsB,EAAE,EAAE,CACxC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAC,OAAO,EAAC,CAAC,CAAC,CAC/C,CAAC;IAEF,MAAM,CAAC,YAAY,CAClB,YAAY,CAAC,oBAAoB,CAAC,EAClC;QACC,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAE,oBAAoB,EAAC,CAAC;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,kBAAkB,EAAE,wBAAwB;YAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;SAC1B,CAAC;KACF,EACD,KAAK,EAAE,EAAC,SAAS,EAAsB,EAAE,EAAE,CAC1C,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAC,SAAS,EAAC,CAAC,CAAC,CACjD,CAAC;AACH,CAAC"}

package/dist/mcp/groups.d.ts

@@ -0,0 +1,71 @@
+import type { NodeSdkConfig } from '../config/schema.js';
+import type { SdkResult } from '../detops/result.js';
+import { type Filter, type McpGroupRequest, type McpGroupResult, type NodeId } from './schemas.js';
+import { toSelectedSigningKey } from './signing.js';
+export declare function listAvailableNodeIds(config: NodeSdkConfig): Promise<SdkResult<{
+    selfNodeId: NodeId;
+    nodes: Array<{
+        index: number;
+        ip: string;
+        nodeId: NodeId;
+        isSelf: boolean;
+    }>;
+    nodeIdByIp: Record<string, NodeId>;
+}>>;
+export declare function createGroupRequest(config: NodeSdkConfig, input: {
+    nodeIds: NodeId[];
+}): Promise<SdkResult<{
+    groupRequestId: string;
+    selectedSigningKey: ReturnType<typeof toSelectedSigningKey>;
+    signingMessage: string;
+}>>;
+export declare function acceptGroupRequest(config: NodeSdkConfig, input: {
+    requestId: string;
+}): Promise<SdkResult<{
+    message: string;
+    selectedSigningKey: ReturnType<typeof toSelectedSigningKey>;
+    signingMessage: string;
+}>>;
+export declare function listValidGroupNodeSetsMcp(config: NodeSdkConfig): Promise<SdkResult<{
+    selfNodeId: NodeId;
+    configuredNodeIds: NodeId[];
+    validPairs: NodeId[][];
+}>>;
+declare function buildAgreementChecks(localNodeId: NodeId, requests: McpGroupRequest[]): {
+    requestId: string;
+    originator: string;
+    isOriginatorLocal: boolean;
+    agreementRequired: boolean;
+    note: string;
+}[];
+export declare function listMcpGroupRequests(config: NodeSdkConfig, options?: {
+    filter?: Filter;
+    pagenum?: number;
+    pagesize?: number;
+}): Promise<SdkResult<{
+    localNodeId: NodeId;
+    requests: McpGroupRequest[];
+    agreementChecks: ReturnType<typeof buildAgreementChecks>;
+}>>;
+export declare function listMcpGroupResults(config: NodeSdkConfig, options?: {
+    filter?: Filter;
+    pagenum?: number;
+    pagesize?: number;
+}): Promise<SdkResult<{
+    results: McpGroupResult[];
+}>>;
+export declare function getMcpGroupRequestById(config: NodeSdkConfig, input: {
+    id: string;
+}): Promise<SdkResult<{
+    request: McpGroupRequest;
+    localNodeId: NodeId;
+    isOriginatorLocal: boolean;
+    agreementRequired: boolean;
+    note: string;
+}>>;
+export declare function getMcpGroupResultById(config: NodeSdkConfig, input: {
+    id?: string;
+    group_id?: string;
+}): Promise<SdkResult<McpGroupResult>>;
+export {};
+//# sourceMappingURL=groups.d.ts.map

package/dist/mcp/groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/mcp/groups.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAMvD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAMN,KAAK,MAAM,EAEX,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,MAAM,EACX,MAAM,cAAc,CAAC;AAQtB,OAAO,EAEN,oBAAoB,EACpB,MAAM,cAAc,CAAC;AA2DtB,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,aAAa,GACnB,OAAO,CACT,SAAS,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC,CACF,CAwBA;AAED,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAC,GACxB,OAAO,CACT,SAAS,CAAC;IACT,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;IAC5D,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CAqDA;AAED,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,GACxB,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;IAC5D,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC,CACF,CAwDA;AAED,wBAAsB,yBAAyB,CAC9C,MAAM,EAAE,aAAa,GACnB,OAAO,CACT,SAAS,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC;CACvB,CAAC,CACF,CAwBA;AAED,iBAAS,oBAAoB,CAC5B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,eAAe,EAAE;;;;;;IAc3B;AAED,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACb,GACJ,OAAO,CACT,SAAS,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,eAAe,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;CACzD,CAAC,CACF,CA2CA;AAkCD,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE;IACR,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACb,GACJ,OAAO,CAAC,SAAS,CAAC;IAAC,OAAO,EAAE,cAAc,EAAE,CAAA;CAAC,CAAC,CAAC,CAajD;AAED,wBAAsB,sBAAsB,CAC3C,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,EAAE,EAAE,MAAM,CAAA;CAAC,GACjB,OAAO,CACT,SAAS,CAAC;IACT,OAAO,EAAE,eAAe,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACb,CAAC,CACF,CAqCA;AAED,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAC,GACrC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CA8BpC"}