@continuumdao/continuum-node-sdk 1.2.29 → 1.3.1

package/dist/mcp/register.js

@@ -6,19 +6,19 @@ import { registerGroupTools } from './group.js';
 import { registerKeyGenTools } from './keygen.js';
 import { registerKeyGenMessagingTools } from './keygen-messaging.js';
 import { registerManagementSignerTools } from './management-signer.js';
+import { registerMcpMarkdownResource } from './mcp-resources.js';
 import { registerNodeTools } from './node.js';
 import { registerAddressBookTools } from './registry/address-book.js';
 import { registerChainRegistryTools } from './registry/networks.js';
 import { registerTokenRegistryTools } from './registry/tokens.js';
 import { registerMpcTools } from './mpc.js';
+import { registerTaResources, registerTaTools } from './ta/register.js';
 import { registerVpnTools } from './vpn.js';
 import { registerAgentMcpServerTools } from './agent-mcp-servers.js';
 import { registerAgentEnvironmentVariableTools } from './agent-environment-variables.js';
 import { registerAgentCronJobTools } from './agent-cron-jobs.js';
 import { registerAgentWebhookTools } from './agent-webhooks.js';
 import { registerAgentSkillTools } from './agent-skills.js';
-import { promises as fs } from 'node:fs';
-import path from 'node:path';
 export function registerContinuumTools(server, config, defiContext) {
     registerNodeTools(server, config);
     registerGroupTools(server, config);
@@ -30,6 +30,7 @@ export function registerContinuumTools(server, config, defiContext) {
     registerChainRegistryTools(server, config);
     registerMpcTools(server, config);
     registerVpnTools(server, config);
+    registerTaTools(server);
     registerAgentMcpServerTools(server, config);
     registerAgentEnvironmentVariableTools(server, config);
     registerAgentCronJobTools(server, config);
@@ -53,36 +54,21 @@ export function createContinuumMcpServer(config, options = {}) {
         },
     });
     registerContinuumTools(server, config, defiContext);
-    function registerMarkdownResource(name, filename, description) {
-        const uri = `docs://${filename}`;
-        server.registerResource(name, uri, { description, mimeType: 'text/markdown' }, async () => {
-            const filePath = path.join(process.cwd(), 'src/mcp/resources', filename);
-            const text = await fs.readFile(filePath, 'utf8');
-            return {
-                contents: [
-                    {
-                        uri,
-                        mimeType: 'text/markdown',
-                        text,
-                    },
-                ],
-            };
-        });
-    }
-    registerMarkdownResource('overview_docs', 'overview.md', 'High-level MCP host overview for this server.');
-    registerMarkdownResource('group_docs', 'group.md', 'Group creation flow and validation rules.');
-    registerMarkdownResource('sign_docs', 'sign.md', 'Modular signing flow and reusable signing tools.');
-    registerMarkdownResource('management_signer_docs', 'management-signer.md', 'Management signer lifecycle, MCP tools, and local key requirements.');
-    registerMarkdownResource('keygen_docs', 'keygen.md', 'Key generation request, acceptance, and result flow.');
-    registerMarkdownResource('address_book_registry_docs', 'registry/address-book.md', 'Address book registry tools and workflows.');
-    registerMarkdownResource('token_registry_docs', 'registry/tokens.md', 'Saved token registry tools and workflows.');
-    registerMarkdownResource('chain_registry_docs', 'registry/networks.md', 'Chain registry tools and workflows.');
-    registerMarkdownResource('mpc_docs', 'mpc.md', 'MPC multi-sign requests, Get Sig, Execute, and MPA workflows.');
-    registerMarkdownResource('vpn_docs', 'vpn.md', 'Admin VPN and peer egress: enable/disable, client configs, sharing, revoke.');
-    registerMarkdownResource('agent_mcp_servers_docs', 'agent-mcp-servers.md', 'Agent MCP server catalog: list, add, and remove node MCP integrations.');
-    registerMarkdownResource('agent_cron_jobs_docs', 'agent-cron-jobs.md', 'Agent cron jobs: scheduled agent tasks, run history, and lifecycle.');
-    registerMarkdownResource('agent_webhooks_docs', 'agent-webhooks.md', 'Agent inbound webhooks: list, add, activate, and test HTTP hook jobs.');
-    registerMarkdownResource('agent_skills_docs', 'agent-skills.md', 'Agent skills: local markdown/txt guidance files and initialLoad behavior.');
+    registerMcpMarkdownResource(server, 'overview_docs', 'overview.md', 'High-level MCP host overview for this server.');
+    registerMcpMarkdownResource(server, 'group_docs', 'group.md', 'Group creation flow and validation rules.');
+    registerMcpMarkdownResource(server, 'sign_docs', 'sign.md', 'Modular signing flow and reusable signing tools.');
+    registerMcpMarkdownResource(server, 'management_signer_docs', 'management-signer.md', 'Management signer lifecycle, MCP tools, and local key requirements.');
+    registerMcpMarkdownResource(server, 'keygen_docs', 'keygen.md', 'Key generation request, acceptance, and result flow.');
+    registerMcpMarkdownResource(server, 'address_book_registry_docs', 'registry/address-book.md', 'Address book registry tools and workflows.');
+    registerMcpMarkdownResource(server, 'token_registry_docs', 'registry/tokens.md', 'Saved token registry tools and workflows.');
+    registerMcpMarkdownResource(server, 'chain_registry_docs', 'registry/networks.md', 'Chain registry tools and workflows.');
+    registerMcpMarkdownResource(server, 'mpc_docs', 'mpc.md', 'MPC multi-sign requests, Get Sig, Execute, and MPA workflows.');
+    registerMcpMarkdownResource(server, 'vpn_docs', 'vpn.md', 'Admin VPN and peer egress: enable/disable, client configs, sharing, revoke.');
+    registerTaResources(server);
+    registerMcpMarkdownResource(server, 'agent_mcp_servers_docs', 'agent-mcp-servers.md', 'Agent MCP server catalog: list, add, and remove node MCP integrations.');
+    registerMcpMarkdownResource(server, 'agent_cron_jobs_docs', 'agent-cron-jobs.md', 'Agent cron jobs: scheduled agent tasks, run history, and lifecycle.');
+    registerMcpMarkdownResource(server, 'agent_webhooks_docs', 'agent-webhooks.md', 'Agent inbound webhooks: list, add, activate, and test HTTP hook jobs.');
+    registerMcpMarkdownResource(server, 'agent_skills_docs', 'agent-skills.md', 'Agent skills: local markdown/txt guidance files and initialLoad behavior.');
     server.server.oninitialized = () => {
         void server.server.sendToolListChanged().catch(error => {
             console.error('Failed to send tools/list_changed notification:', error);
@@ -100,6 +86,7 @@ export { registerTokenRegistryTools } from './registry/tokens.js';
 export { registerChainRegistryTools } from './registry/networks.js';
 export { registerMpcTools } from './mpc.js';
 export { registerVpnTools } from './vpn.js';
+export { registerTaTools, registerTaResources } from './ta/register.js';
 export { registerAgentMcpServerTools } from './agent-mcp-servers.js';
 export { registerAgentCronJobTools } from './agent-cron-jobs.js';
 export { registerAgentWebhookTools } from './agent-webhooks.js';

package/dist/mcp/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/mcp/register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,yCAAyC,CAAC;AAElE,OAAO,EACN,mBAAmB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,0BAA0B,EAAC,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAC,4BAA4B,EAAC,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAC,kBAAkB,EAAC,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAC,mBAAmB,EAAC,MAAM,aAAa,CAAC;AAChD,OAAO,EAAC,4BAA4B,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAC,6BAA6B,EAAC,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAC,wBAAwB,EAAC,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAC,0BAA0B,EAAC,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAC,0BAA0B,EAAC,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,2BAA2B,EAAC,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAC,qCAAqC,EAAC,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAC,yBAAyB,EAAC,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAC,yBAAyB,EAAC,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAC,QAAQ,IAAI,EAAE,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,sBAAsB,CACrC,MAAiB,EACjB,MAAqB,EACrB,WAAiC;IAEjC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,qCAAqC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,WAAW,EAAE,CAAC;QACjB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACxD,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,MAAqB,EACrB,UAA2C,EAAE;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,mBAAmB,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,SAAS,CAC3B;QACC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,OAAO;KAChB,EACD;QACC,YAAY,EAAE;YACb,KAAK,EAAE;gBACN,WAAW,EAAE,IAAI;aACjB;SACD;KACD,CACD,CAAC;IAEF,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAEnD,SAAS,wBAAwB,CAC/B,IAAY,EACZ,QAAgB,EAChB,WAAmB;QAEnB,MAAM,GAAG,GAAG,UAAU,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,gBAAgB,CACrB,IAAI,EACJ,GAAG,EACH,EAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAC,EACxC,KAAK,IAAI,EAAE;YACT,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,OAAO,CAAC,GAAG,EAAE,EACb,mBAAmB,EACnB,QAAQ,CACT,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG;wBACH,QAAQ,EAAE,eAAe;wBACzB,IAAI;qBACL;iBACF;aACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,wBAAwB,CACtB,eAAe,EACf,aAAa,EACb,+CAA+C,CAChD,CAAC;IACF,wBAAwB,CACtB,YAAY,EACZ,UAAU,EACV,2CAA2C,CAC5C,CAAC;IACF,wBAAwB,CACtB,WAAW,EACX,SAAS,EACT,kDAAkD,CACnD,CAAC;IACF,wBAAwB,CACtB,wBAAwB,EACxB,sBAAsB,EACtB,qEAAqE,CACtE,CAAC;IACF,wBAAwB,CACtB,aAAa,EACb,WAAW,EACX,sDAAsD,CACvD,CAAC;IACF,wBAAwB,CACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,4CAA4C,CAC7C,CAAC;IACF,wBAAwB,CACtB,qBAAqB,EACrB,oBAAoB,EACpB,2CAA2C,CAC5C,CAAC;IACF,wBAAwB,CACtB,qBAAqB,EACrB,sBAAsB,EACtB,qCAAqC,CACtC,CAAC;IACF,wBAAwB,CACtB,UAAU,EACV,QAAQ,EACR,+DAA+D,CAChE,CAAC;IACF,wBAAwB,CACtB,UAAU,EACV,QAAQ,EACR,6EAA6E,CAC9E,CAAC;IACF,wBAAwB,CACtB,wBAAwB,EACxB,sBAAsB,EACtB,wEAAwE,CACzE,CAAC;IACF,wBAAwB,CACtB,sBAAsB,EACtB,oBAAoB,EACpB,qEAAqE,CACtE,CAAC;IACF,wBAAwB,CACtB,qBAAqB,EACrB,mBAAmB,EACnB,uEAAuE,CACxE,CAAC;IACF,wBAAwB,CACtB,mBAAmB,EACnB,iBAAiB,EACjB,2EAA2E,CAC5E,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE;QACjC,KAAK,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAC,kBAAkB,EAAC,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAC,mBAAmB,EAAE,mBAAmB,EAAC,MAAM,aAAa,CAAC;AACrE,OAAO,EAAC,4BAA4B,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACN,6BAA6B,EAC7B,0BAA0B,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAC,wBAAwB,EAAC,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAC,0BAA0B,EAAC,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAC,0BAA0B,EAAC,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,2BAA2B,EAAC,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAC,yBAAyB,EAAC,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAC,yBAAyB,EAAC,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAC,YAAY,EAAE,yBAAyB,EAAE,OAAO,EAAC,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/mcp/register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,yCAAyC,CAAC;AAElE,OAAO,EACN,mBAAmB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,0BAA0B,EAAC,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAC,4BAA4B,EAAC,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAC,kBAAkB,EAAC,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAC,mBAAmB,EAAC,MAAM,aAAa,CAAC;AAChD,OAAO,EAAC,4BAA4B,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAC,6BAA6B,EAAC,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAC,2BAA2B,EAAC,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAC,wBAAwB,EAAC,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAC,0BAA0B,EAAC,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAC,0BAA0B,EAAC,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,mBAAmB,EAAE,eAAe,EAAC,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,2BAA2B,EAAC,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAC,qCAAqC,EAAC,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAC,yBAAyB,EAAC,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAC,yBAAyB,EAAC,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAC;AAE1D,MAAM,UAAU,sBAAsB,CACrC,MAAiB,EACjB,MAAqB,EACrB,WAAiC;IAEjC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,qCAAqC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,WAAW,EAAE,CAAC;QACjB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACxD,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,MAAqB,EACrB,UAA2C,EAAE;IAE7C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,mBAAmB,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,SAAS,CAC3B;QACC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,OAAO;KAChB,EACD;QACC,YAAY,EAAE;YACb,KAAK,EAAE;gBACN,WAAW,EAAE,IAAI;aACjB;SACD;KACD,CACD,CAAC;IAEF,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAEpD,2BAA2B,CAC1B,MAAM,EACN,eAAe,EACf,aAAa,EACb,+CAA+C,CAC/C,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,YAAY,EACZ,UAAU,EACV,2CAA2C,CAC3C,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,WAAW,EACX,SAAS,EACT,kDAAkD,CAClD,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,wBAAwB,EACxB,sBAAsB,EACtB,qEAAqE,CACrE,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,aAAa,EACb,WAAW,EACX,sDAAsD,CACtD,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,4BAA4B,EAC5B,0BAA0B,EAC1B,4CAA4C,CAC5C,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,qBAAqB,EACrB,oBAAoB,EACpB,2CAA2C,CAC3C,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,qBAAqB,EACrB,sBAAsB,EACtB,qCAAqC,CACrC,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,UAAU,EACV,QAAQ,EACR,+DAA+D,CAC/D,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,UAAU,EACV,QAAQ,EACR,6EAA6E,CAC7E,CAAC;IACF,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,2BAA2B,CAC1B,MAAM,EACN,wBAAwB,EACxB,sBAAsB,EACtB,wEAAwE,CACxE,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,sBAAsB,EACtB,oBAAoB,EACpB,qEAAqE,CACrE,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,qBAAqB,EACrB,mBAAmB,EACnB,uEAAuE,CACvE,CAAC;IACF,2BAA2B,CAC1B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,EACjB,2EAA2E,CAC3E,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE;QAClC,KAAK,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACtD,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AACf,CAAC;AAED,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAC,kBAAkB,EAAC,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAC,mBAAmB,EAAE,mBAAmB,EAAC,MAAM,aAAa,CAAC;AACrE,OAAO,EAAC,4BAA4B,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACN,6BAA6B,EAC7B,0BAA0B,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAC,wBAAwB,EAAC,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAC,0BAA0B,EAAC,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAC,0BAA0B,EAAC,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,eAAe,EAAE,mBAAmB,EAAC,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAC,2BAA2B,EAAC,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAC,yBAAyB,EAAC,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAC,yBAAyB,EAAC,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAC,YAAY,EAAE,yBAAyB,EAAE,OAAO,EAAC,MAAM,iBAAiB,CAAC"}

package/dist/mcp/resources/agent-cron-jobs.md

@@ -0,0 +1,50 @@
+# Agent cron jobs
+
+Scheduled agent tasks stored under `agent_llm_config/cron/jobs.json`. Each job gets a fixed **conversationId**; every run appends to that thread.
+
+## MCP tools
+
+### Read (GET)
+
+- `list_cron_jobs` — summaries only (no message body)
+- `get_cron_job` — full job by **id** or **name** (includes message)
+- `list_cron_job_runs` — recent run history for **jobId** (optional **limit**, default 50)
+
+### Write (management-signed POST, preferred Ed25519 signer)
+
+- `add_cron_job` — create job (**name**, **message**, **schedule**; optional **enabled**, **deleteAfterRun**)
+- `update_cron_job` — update schedule/message/metadata only (not **enabled**)
+- `activate_cron_job` / `deactivate_cron_job` — enable or disable without deleting
+- `remove_cron_job` — delete job; optional **deleteConversation** (default false)
+- `run_cron_job` — manual async trigger (works when deactivated)
+
+## Schedule kinds
+
+| kind | fields | behavior |
+|------|--------|----------|
+| `cron` | `expr` (5-field), optional `tz` (default UTC) | clock-anchored cron |
+| `every` | `everyMs` | fixed interval from activation |
+| `at` | `at` (RFC3339) | one-shot; defaults **deleteAfterRun: true** |
+
+**`add_cron_job` schedule shorthands** (coerced automatically):
+
+- `"every 5 minutes"`, `"5m"`, `"5 minutes"` → `{ "kind": "every", "everyMs": 300000 }`
+- `"*/5 * * * *"` (5-field cron string) → `{ "kind": "cron", "expr": "...", "tz": "UTC" }`
+- `300000` (number) → `{ "kind": "every", "everyMs": 300000 }`
+
+Prefer structured objects when possible; use shorthands only when simpler for the caller.
+
+## Suggested workflow
+
+1. **`list_cron_jobs`** — inspect schedules, enabled state, last/next run.
+2. **`get_cron_job`** — read the instruction message before editing.
+3. **`add_cron_job`** or **`update_cron_job`** — set or change the agent prompt and schedule.
+4. **`activate_cron_job`** / **`deactivate_cron_job`** — pause or resume scheduling.
+5. **`run_cron_job`** — test immediately; then **`list_cron_job_runs`** for outcome.
+6. **`remove_cron_job`** when retiring a task.
+
+## Notes
+
+- Scheduler can be disabled node-wide via `EnableAgentCron: false` or `MPC_AUTH_ENABLE_AGENT_CRON=0`; CRUD and manual runs still work.
+- Cron runs use the full agent turn but fail if MCP elicitation would block on human input.
+- Job **name**: lowercase `a-z`, digits, hyphen, underscore; max 64 chars.

package/dist/mcp/resources/agent-mcp-servers.md

@@ -0,0 +1,18 @@
+# Agent MCP servers
+
+Tools for optional MCP servers on the node. Catalog templates come from the bind-mounted mpc-config file **`agent_llm_config.defaults/MCP_servers.json`** (not from this SDK).
+
+**To add a new catalog server:** edit that JSON in the mpc-config repo — see **`mpc-config/agent_llm_config.defaults/CATALOG.md`**. Use **Variables** for secrets (`apiKeyEnvVar` / `envVars` names only — never inline `apiKey`). The agent must not see Variable values.
+
+## Suggested workflow
+
+1. **`list_mcp_servers`** — active servers plus **`availableCatalog`** / **`addableTemplates`** from the repository file (entries not yet on this node).
+2. Activate a catalog row with **`add_mcp_server_from_catalog`** (management-signed), or **`add_mcp_server`** for a custom definition.
+3. Set **Variables** before **`initialLoad`: true** when `apiKeyEnvVar` / `envVars` are required.
+4. **`remove_mcp_server`** — user/catalog-activated servers only (not builtin **continuum**).
+
+## IDs and transports
+
+- **id**: lowercase `a-z`, digits, hyphen, underscore; max 64 chars.
+- **http**: requires **url**
+- **stdio**: requires **command**; optional **args**, **envVars**, **useUserFolder**, **runtime**

package/dist/mcp/resources/agent-skills.md

@@ -0,0 +1,35 @@
+# Agent skills
+
+Markdown or plain-text guidance stored under `agent_llm_config/Skills/` (manifest `skills.json` plus one file per skill). Skills are local to this node and are not propagated between nodes.
+
+## MCP tools
+
+### Read (GET)
+
+- `list_skills` — skill names only (no content)
+- `get_skill` — full skill by **name** (content, **initialLoad**, **format**)
+
+### Write (management-signed POST, preferred Ed25519 signer)
+
+- `add_skill` — upsert skill (**name**, **content**, **initialLoad**; optional **format** `md`|`txt`, default `md`)
+- `remove_skill` — delete skill by **name**
+
+## initialLoad
+
+| Value | Behavior |
+|-------|----------|
+| `true` | Content injected as a **system** message at chat startup |
+| `false` | Agent may load the skill during the session via `agent_load_skill` |
+
+## Suggested workflow
+
+1. **`list_skills`** — see what is configured.
+2. **`get_skill`** — read existing content before editing.
+3. **`add_skill`** — create or update a skill file and manifest entry.
+4. **`remove_skill`** — retire a skill when no longer needed.
+
+## Validation
+
+- **name**: lowercase `a-z`, digits, hyphen, underscore; max 64 chars
+- **content**: required; max **512 KiB**
+- **format**: `md` (default) or `txt`

package/dist/mcp/resources/agent-webhooks.md

@@ -0,0 +1,19 @@
+# Agent inbound webhooks
+
+Tools for **inbound HTTP webhooks** that trigger agent chat turns (`POST /hooks/inbound/{id}` on the hook listener port, default `127.0.0.1:18090`).
+
+Active webhooks live in MongoDB (`LocalAgentWebhooks`). Repository catalog templates are in `agent_llm_config.defaults/hooks/webhooks.json` (bind-mounted from mpc-config).
+
+**Secrets:** use **`add_environment_variable`** for `WEBHOOK_SECRET_*` and `TELEGRAM_BOT_TOKEN`. The agent must not see Variable values — only names and `*Configured` flags in listings.
+
+## Suggested workflow
+
+1. **`list_webhooks`** — `activeWebhooks` plus `availableCatalog` (templates not yet on the node).
+2. **`add_webhook_from_catalog`** or **`add_webhook`** (custom) — creates job + auto-generated secret env var name.
+4. **`add_environment_variable`** — set provider signing secret (Stripe `whsec_`, Slack signing secret, etc.) before enabling.
+5. **`activate_webhook`** — enable after secrets are configured.
+6. **`run_webhook`** — manual test trigger.
+
+## Types
+
+`generic`, `github`, `gmail`, `proton`, `stripe`, `slack`, `telegram` — each verifies inbound auth differently. See mpc-config `docs/AGENT_HOOKS.md` for provider setup.

package/dist/mcp/resources/group.md

@@ -0,0 +1,70 @@
+# Group Operations
+
+This document explains how to create and manage MPC groups with this server.
+
+## Purpose
+
+Groups define which node IDs can participate in key generation and signing.
+A valid group must include your node and at least one peer. Group creation is unanimous: all requested nodes must accept before the group is formed. The originator is auto-agreed when creating the request and does not perform a separate accept step.
+
+## MCP tools
+
+- `list_group_requests`
+  - List MPC group requests with an optional filter (`all`, `pending`, `success`, `failed`; default `all`).
+  - Returns `groupRequests` entries with request ID, group ID, key list, status, originator, and signatures.
+- `list_group_results`
+  - List completed MPC group results.
+  - Returns `groups` with `groupId` and `nodeKeys`.
+- `create_group_request`
+  - Create a new MPC group request for the given `nodeIds` (minimum 2).
+  - Signs and POSTs internally with Ed25519 management signing.
+  - Returns `groupRequestId`, `selectedSigningKey`, and `signingMessage`.
+- `accept_group_request`
+  - Accept a pending MPC group request by `requestId`.
+  - Signs and POSTs internally with Ed25519 management signing.
+  - Returns `message`, `selectedSigningKey`, and `signingMessage`.
+
+SDK-only helpers (`availableNodeIds`, `validGroupNodeSets`, `buildCreateGroupRequest`, `buildAcceptGroupRequest`) are **not** registered as MCP tools. Use `node_id` to read this node's ID and pass explicit `nodeIds` to `create_group_request`; the server validates them against configured nodes.
+
+## Create group flow
+
+1. Read this node's ID
+   - Call `node_id`.
+2. Ask the user which peer node IDs to include
+   - `nodeIds` must be 128-character hex node IDs from configured nodes.
+3. (Optional) set preferred signer
+   - Call `set_preferred_management_signer`.
+4. Submit group request
+   - Call `create_group_request` with `nodeIds`.
+5. Group peers accept
+   - Other members call `accept_group_request` with the pending `requestId`.
+   - All requested nodes must accept; otherwise group creation does not complete. The originator is already counted as agreed at creation time.
+6. Verify completion
+   - Use `list_group_results`, or filter `list_group_requests` with `success`.
+
+## Validation rules enforced
+
+`create_group_request` validates before signing:
+
+- `nodeIds` must contain at least 2 unique values (duplicates are normalized away).
+- Every ID must be a configured node ID (including this node).
+- This node's ID must be included in `nodeIds`.
+- A group with the same node set must not already exist.
+
+`accept_group_request` validates before signing:
+
+- `requestId` must be a valid group request ID (`NewGroup` + 25 hex characters). A hex suffix without the prefix is accepted and normalized automatically.
+- The request must exist and have status `pending`.
+
+## Signing behavior
+
+`create_group_request` and `accept_group_request` sign and submit internally. Clients only pass business arguments (`nodeIds` or `requestId`). Do not use separate signing or build/sign/post tools.
+
+Successful responses may include `selectedSigningKey` (the Ed25519 key used) and `signingMessage` (canonical JSON that was signed).
+
+## Notes for MCP clients
+
+- Prompt users for concrete node-ID choices, not free text.
+- Use `list_group_requests` with `filter: "pending"` to find requests awaiting acceptance.
+- Treat tool responses as source of truth for IDs and status.
+- Load `management-signer.md` if signing fails due to missing or unavailable local keys.

package/dist/mcp/resources/keygen.md

@@ -0,0 +1,175 @@
+# Key Generation
+
+This document covers MPC key generation request lifecycle in this server.
+
+## Purpose
+
+After a group is formed, keygen creates one MPC keypair shared across group members. KeyGen creation itself is unanimous: all requested group members must accept the request. The originator auto-agrees when creating the request and does not need a separate accept step.
+That key can later be used in signing workflows.
+
+## MCP tools
+
+- `create_key_gen_request`
+  - Initiate a request to members of a group to generate a new MPC key pair.
+  - Input: `groupId`, `gate` (integer ≥ 2), `msgCheck`, `keyType`.
+  - Signs and POSTs internally with Ed25519 management signing.
+  - Returns `requestId`, `selectedSigningKey`, and `signingMessage`.
+- `accept_key_gen_request`
+  - Accept a pending MPC key generation request.
+  - Input: `requestId` (KeyGen ID).
+  - Signs and POSTs internally.
+  - Returns `message`, `selectedSigningKey`, and `signingMessage`.
+- `list_key_gen_requests`
+  - List MPC key generation requests with optional filter and pagination.
+  - Input: optional `filter`, `pagenum`, `pagesize`.
+  - Returns `localNodeId`, `requests`, and `agreementChecks` (whether this node must accept each request).
+- `get_key_gen_request_by_id`
+  - Get a single MPC key generation request by ID.
+  - Input: `id` (KeyGen ID).
+  - Returns `request`, `localNodeId`, `isOriginatorLocal`, `agreementRequired`, and `note`.
+- `fetch_key_gen_result`
+  - Get the MPC key generation result for a completed KeyGen (`GET /getKeyGenResultById`).
+  - Input: `id` (KeyGen ID).
+  - Returns the result payload (shape varies by key type and status). For **`secp256k1`**, the EVM executor/wallet address is **`ethereumaddress`** — use it as-is; do **not** derive an address from `pubkeyhex` or from `pubKey` on `get_preferred_key_gen`.
+- `get_key_gen_parent_group_id`
+  - Get the parent group ID for a key generation request.
+  - Input: `id` (KeyGen ID).
+  - Returns `requestid` and `groupId`.
+- `fetch_global_nonce_by_key_gen_id`
+  - Get the global nonce for a key generation request.
+  - Input: `id` (KeyGen ID).
+  - Returns `globalNonce`.
+- `get_preferred_key_gen`
+  - Get the default multi-agree KeyGen for agent `POST /multiSignRequest` (`GET /getPreferredKeyGen`).
+  - Input: none.
+  - Returns `keyGenId`, `pubKey`, and `keyType` only (no EVM address). Empty strings when nothing is stored or the KeyGen is no longer valid. For executor address, chain with `fetch_key_gen_result` — see **EVM executor address** below.
+- `post_preferred_key_gen`
+  - Store a multi-agree KeyGen request id as the agent default for composing multiSignRequest payloads (`POST /postPreferredKeyGen`).
+  - Input: `keyGenId` (KeyGen request ID).
+  - Signs and POSTs internally.
+  - Returns `message`, `selectedSigningKey`, and `signingMessage`.
+- `send_key_gen_message`
+  - Send a top-level or reply message in a KeyGen channel (`POST /sendMessage`).
+  - Input: `keyGenId`, `body`, and either `title` (top-level) or `replyTo` (reply).
+  - **Orchestration sub-agents:** one reply with `replyTo` set to the top-level message id and `mpc-task-result v1` in the body (not `mpc-orchestrate-task`; no `@agent`). Include human-readable findings for the KeyGen group. **Orchestrator synthesis:** post a reply to the same top-level id when all tasks finish. Do not poll `list_key_gen_messages` for orchestration completion.
+  - Signs and POSTs internally.
+  - Returns `message`, `selectedSigningKey`, and `signingMessage`.
+- `list_key_gen_messages`
+  - List KeyGen channel messages (`GET /listMessages`).
+  - Input: `keyGenId`; optional `unread`, `topLevel`, `fromTime`, `toTime`, `pagenum`, `pagesize`.
+  - Returns `{ list, total }`.
+- `get_key_gen_message_by_id`
+  - Get one message (`GET /getMessageById`).
+  - Input: `keyGenId`, `messageId`.
+- `get_key_gen_message_thread`
+  - Get a top-level message and nested replies (`GET /getMessageThread`).
+  - Input: `keyGenId`, `messageId` (top-level id).
+- `mark_key_gen_message_read`
+  - Mark one message read for this node (`POST /markMessageRead`).
+  - Input: `keyGenId`, `messageId`; optional `signature` for the read receipt.
+  - Signs and POSTs internally.
+  - Returns `message` (`ok`), `selectedSigningKey`, and `signingMessage`.
+- `multi_mark_key_gen_messages_read`
+  - Mark multiple messages read (`POST /multiMarkMessagesRead`).
+  - Input: `keyGenId`, `messageIds` (non-empty); optional `signature`.
+  - Signs and POSTs internally.
+  - Returns `marked`, `notFound`, `selectedSigningKey`, and `signingMessage`.
+  - Intended for external inbox poll scripts, not orchestration sub-agent return paths.
+- `delete_key_gen_message`
+  - Soft-delete a message and its reply tree (`POST /deleteMessage`). Originator only.
+  - Input: `keyGenId`, `messageId`.
+  - Signs and POSTs internally.
+  - Returns `deleted`, `selectedSigningKey`, and `signingMessage`.
+- `multi_delete_key_gen_messages`
+  - Batch soft-delete messages and reply trees (`POST /multiDeleteMessages`). Originator only per id.
+  - Input: `keyGenId`, `messageIds` (non-empty).
+  - Signs and POSTs internally.
+  - Returns `deleted`, `notFound`, `forbidden`, `selectedSigningKey`, and `signingMessage`.
+
+SDK-only helpers (`buildCreateKeyGenRequest`, `buildAcceptKeyGenRequest`, `buildPostPreferredKeyGen`, `buildSendKeyGenMessage`, `buildMarkKeyGenMessageRead`, `buildMultiMarkKeyGenMessagesRead`, `buildDeleteKeyGenMessage`, `buildMultiDeleteKeyGenMessages`) are **not** registered as MCP tools.
+
+## Create keygen flow
+
+1. Ensure group exists and members agreed
+   - Validate via group tools (`list_group_results`) before keygen.
+2. (Optional) set preferred signer
+   - Call `set_preferred_management_signer`.
+3. Create request
+   - Call `create_key_gen_request` with:
+     - `groupId` — 64-character hex group ID
+     - `gate` — signing threshold: minimum number of group members that must participate to sign (CGGMP24/FROST)
+     - `msgCheck` — `multi-agree` or `tx-check`
+     - `keyType` — `ed25519` or `secp256k1`
+4. Peers accept
+   - Each non-originator group member calls `accept_key_gen_request` with the pending `requestId`.
+   - KeyGen is formed only when all requested members have agreed; originator agreement is automatic on request creation.
+   - Use `list_key_gen_requests` or `get_key_gen_request_by_id` to read `agreementRequired` / `isOriginatorLocal`.
+5. Track progress
+   - Poll `list_key_gen_requests` (optional filters below) or `get_key_gen_request_by_id`.
+6. Read result
+   - Call `fetch_key_gen_result` when the request has completed successfully.
+   - For `secp256k1`, read **`ethereumaddress`** from the result when you need the on-chain MPC wallet (executor).
+   - Optionally call `fetch_global_nonce_by_key_gen_id` or `get_key_gen_parent_group_id` for follow-up workflows.
+
+## EVM executor address (preferred KeyGen)
+
+When the user asks for the **Ethereum address** of the **preferred** KeyGen (or “MPC wallet” / “executor” for EVM txs):
+
+1. `get_preferred_key_gen` → `keyGenId` (ignore `pubKey` for address answers).
+2. `fetch_key_gen_result` with `{ "id": "<keyGenId>" }` → **`ethereumaddress`**.
+
+Do **not** (even when `fetch_key_gen_result` errors):
+
+- Convert `pubKey` or `pubkeyhex` to an address (Keccak-256 in the model is wrong often; never “derive manually”).
+- Explain how derivation works instead of fixing the lookup.
+- Infer the address from past transaction `from` / swapper fields.
+
+On **`fetch_key_gen_result` failure**, report the exact tool error, suggest **retry**, and point to the **node UI** KeyGen result page. A request can show **success** before this node returns a result object from `/getKeyGenResultById`.
+
+`get_preferred_key_gen` intentionally omits `ethereumaddress` so the full result stays on `/getKeyGenResultById`.
+
+## Inputs that matter
+
+- `groupId`: target group to generate a key for.
+- `gate`: CGGMP24/FROST signing threshold (minimum nodes required to sign after KeyGen completes). Sent to the API as `threshold`. Gate does not change unanimous agreement requirements for group or keygen creation.
+- `msgCheck`: downstream signing policy mode (`multi-agree` or `tx-check`).
+- `keyType`: MPC key curve/type (`ed25519` or `secp256k1`).
+
+## List filters
+
+`list_key_gen_requests` accepts optional `filter`:
+
+- `all`
+- `pending`
+- `success`
+- `failed`
+- `agree`
+- `originator`
+
+Optional pagination: `pagenum` (non-negative integer), `pagesize` (positive integer).
+
+## Signing behavior
+
+`create_key_gen_request` and `accept_key_gen_request` sign and submit internally. Pass business arguments only (`groupId`, `gate`, `msgCheck`, `keyType`, or `requestId`); do not orchestrate signing manually.
+
+Successful responses may include `selectedSigningKey` (the Ed25519 key used) and `signingMessage` (canonical JSON that was signed).
+
+## Status expectations
+
+Keygen requests can move through states such as:
+
+- `pending`
+- `agree`
+- `success`
+- `failed`
+
+Exact transitions depend on group member participation and backend processing.
+
+## Client guidance
+
+- For EVM executor address questions, use **EVM executor address** above (`get_preferred_key_gen` then `fetch_key_gen_result`).
+- Show users the `requestId` immediately after creation (format: `KeyGen…`).
+- Keep the request ID available for accept and query tools.
+- Check `agreementChecks` or `agreementRequired` before prompting a user to accept.
+- Prefer explicit polling over assumptions about completion timing.
+- Load `management-signer.md` if signing fails due to missing or unavailable local keys.

package/dist/mcp/resources/management-signer.md

@@ -0,0 +1,110 @@
+# Management Signer
+
+This server signs management actions with Ed25519 keys. Management signer tools configure authorized keys on the node and ensure matching local private key material is available for agent-signed requests.
+
+## Goal
+
+Maintain usable local signer keys and keep authorized public keys in sync with the node.
+
+## MCP tools
+
+- `get_management_signers`
+  - List allowed management signers configured on the node (`managementKeys` entries with labels and validity).
+- `has_management_signer`
+  - Check whether the node has an Ed25519 management signer configured (`hasEdDSAKey`).
+- `list_management_signers_detailed`
+  - List allowed signers with preferred signer, per-key nonce, local file name, and local private-key availability.
+- `get_preferred_management_signer`
+  - Read the resolved preferred management signer public key.
+- `get_management_signer`
+  - Read the preferred signer with `nonce` and `nodeKey` (signing context for the active signer).
+- `set_preferred_management_signer`
+  - Set the preferred management signer (signs internally with Ed25519).
+- `add_management_signer`
+  - Add a new Ed25519 management signer on the node; the server generates the key pair and writes files under `mpcConfigPath/added_keys` (Docker: `/app/added_keys/added_key_<N>`). Requires an existing authorized signer with a local private key.
+- `create_management_signer_keypair`
+  - **Deprecated.** Generates a local keypair only (does not register on the node). Prefer `add_management_signer`.
+
+Low-level SDK helpers (`buildManagementPostRequest`, `managementSign`, `buildAddManagementSigner`, and similar build/sign/post steps) are **not** registered as MCP tools. Clients must use the tools above or route tools that sign internally.
+
+## Key lifecycle
+
+1. Check whether any Ed25519 management signer is configured
+   - `has_management_signer`
+2. Inspect current signer state
+   - `get_management_signers` for node authorization list
+   - `list_management_signers_detailed` before signed workflows (preferred signer, nonce, local key status)
+3. Add a new authorized signer (normal path)
+   - `add_management_signer` — node generates the key pair server-side
+4. Set default signer for signed tools
+   - `set_preferred_management_signer` with a 64-character hex Ed25519 public key
+5. (Optional) read signing context
+   - `get_management_signer` for `publicKey`, `nonce`, and `nodeKey`
+
+## `list_management_signers_detailed` output use
+
+Response fields:
+
+- `preferredSigner` (top-level, when resolvable)
+- Per key in `keys`:
+  - `localFileName`
+  - `kind` (`EdDSA`)
+  - `value` (public key)
+  - `nonce`
+  - `label`
+  - `localPrivateKeyAvailable`
+  - `localPrivateKeyError` (when missing or unusable)
+
+Use this as the source of truth before any signed operation.
+
+## Adding a management signer
+
+`add_management_signer`:
+
+- takes no arguments
+- signs `{ nonce, clientSig: "", nodeKey }` with an existing authorized management key (Ed25519)
+- POST `/addManagementKey`
+- returns `publicKey`, `nodeKey`, and optionally `keySlot`, `fileName`, `privateKeyPath`, `publicKeyPath` from the node response
+
+The node writes key files under `mpcConfigPath/added_keys`. Use this for normal operation.
+
+## Deprecated local keypair generation
+
+`create_management_signer_keypair`:
+
+- writes files under `mpcConfigPath/added_keys`
+- labels file as `added_key_{N}` based on current key count
+- returns generated public key and file paths
+- does **not** authorize the new key on the node
+
+Use only when you need a local key file before node authorization is possible (bootstrap / offline generation).
+
+## Preferred signer rules
+
+`set_preferred_management_signer`:
+
+1. Requested public key must already be in allowed management keys.
+2. Matching local private key must exist and be readable (bootstrap key or `added_keys` entry).
+3. Private key must derive to the same Ed25519 public key.
+
+If any check fails, the tool returns a clear error and does not call `/setPreferredSigner`.
+
+Signer resolution for signed route tools (server-side):
+
+1. If a preferred signer is set: it must be allowed and have a usable local keypair.
+2. Otherwise: the server uses the first allowed key with a usable local private key.
+3. If none qualify: the tool fails with an explicit error.
+
+## Operational checks
+
+- If only a bootstrap key exists, ensure its private key is present locally under `mpcConfigPath/bootstrap_key`.
+- If preferred signer is set to a key not available locally, signed tools will fail.
+- If key files are moved or renamed manually, local key matching can fail.
+- If `localPrivateKeyAvailable` is false, signing tools will fail for that key.
+
+## Recommended client behavior
+
+- Refresh `list_management_signers_detailed` before each signed workflow.
+- Show preferred signer and nonce when asking for approval.
+- Prefer explicit error surfacing (missing private key, unauthorized key, nonce mismatch, parse errors).
+- Load `sign.md` for how signed route tools use the preferred signer internally.