@crossly/mcp 0.0.0-stage → 0.1.0

package/dist/tools/connected_apps.d.ts

@@ -0,0 +1,12 @@
+import { ToolDef } from './types.js';
+/**
+ * "What third-party software can reach my store, and cut off anything I don't
+ * recognise." A security audit an agent can actually run.
+ *
+ * Note what is NOT here: there is no tool to register an OAuth app or to mint
+ * one a client secret. Creating a credential that other people's software will
+ * authenticate with is a deliberate act by a developer at a keyboard, not
+ * something to hand an agent a button for.
+ */
+export declare const connectedAppsTools: ToolDef[];
+//# sourceMappingURL=connected_apps.d.ts.map

package/dist/tools/connected_apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected_apps.d.ts","sourceRoot":"","sources":["../../src/tools/connected_apps.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,OAAO,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,EAmCvC,CAAC"}

package/dist/tools/connected_apps.js

@@ -0,0 +1,42 @@
+import { apiDelete, apiGet } from '../api.js';
+import { IDEMPOTENCY_PROP } from './types.js';
+/**
+ * "What third-party software can reach my store, and cut off anything I don't
+ * recognise." A security audit an agent can actually run.
+ *
+ * Note what is NOT here: there is no tool to register an OAuth app or to mint
+ * one a client secret. Creating a credential that other people's software will
+ * authenticate with is a deliberate act by a developer at a keyboard, not
+ * something to hand an agent a button for.
+ */
+export const connectedAppsTools = [
+    {
+        name: 'list_connected_apps',
+        description: 'List third-party OAuth apps with access to this Crossly account. Each entry has grantId, appName, ' +
+            'appDescription, developerName, developerEmail, scopes, connectedAt and lastUsedAt. `lastUsedAt` is the ' +
+            'useful signal when auditing: an app that has never been used, or has been silent for months, is a ' +
+            'candidate for disconnection. This is distinct from list_accounts, which is the marketplaces the seller ' +
+            'sells on — these are programs acting on their behalf.',
+        inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+        handler: () => apiGet('/v1/connected-apps'),
+    },
+    {
+        name: 'disconnect_app',
+        description: "Disconnect a third-party app by GRANT id (from list_connected_apps — not the app id). Its access tokens " +
+            'stop working immediately and anything it was doing on a schedule stops. The seller can reconnect later by ' +
+            'going through the app\'s own connect flow again. Confirm with the user first: this breaks a working ' +
+            'integration, and the breakage shows up wherever that app runs rather than in Crossly. Refused with ' +
+            '403 not_available_to_apps when the caller is itself an OAuth app — one app may not disconnect another.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                grantId: { type: 'string', description: 'The `grantId` from list_connected_apps.' },
+                ...IDEMPOTENCY_PROP,
+            },
+            required: ['grantId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiDelete(`/v1/connected-apps/${encodeURIComponent(args.grantId)}`, args.idempotencyKey),
+    },
+];
+//# sourceMappingURL=connected_apps.js.map

package/dist/tools/connected_apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected_apps.js","sourceRoot":"","sources":["../../src/tools/connected_apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAW,MAAM,YAAY,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAc;IAC3C;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,oGAAoG;YACpG,yGAAyG;YACzG,oGAAoG;YACpG,yGAAyG;YACzG,uDAAuD;QACzD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;QAC5E,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,0GAA0G;YAC1G,4GAA4G;YAC5G,sGAAsG;YACtG,qGAAqG;YACrG,wGAAwG;QAC1G,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;gBACnF,GAAG,gBAAgB;aACpB;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,SAAS,CACP,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,OAAiB,CAAC,EAAE,EAClE,IAAI,CAAC,cAAoC,CAC1C;KACJ;CACF,CAAC"}

package/dist/tools/cosm/attestations.d.ts

@@ -0,0 +1,3 @@
+import { ToolDef } from '../types.js';
+export declare const cosmAttestations: ToolDef[];
+//# sourceMappingURL=attestations.d.ts.map

package/dist/tools/cosm/attestations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestations.d.ts","sourceRoot":"","sources":["../../../src/tools/cosm/attestations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,eAAO,MAAM,gBAAgB,EAAE,OAAO,EAiHrC,CAAC"}

package/dist/tools/cosm/attestations.js

@@ -0,0 +1,102 @@
+import { apiGet, apiPost } from '../../api.js';
+export const cosmAttestations = [
+    {
+        name: 'list_cosm_attestations',
+        description: 'Published Merkle commitments \u2014 what somebody can CHECK instead of trusting '
+            + 'Crossly. `cosm_emission` commits an epoch of activity claims (so emission can be '
+            + 'confirmed never to exceed committed real activity); `cbx_liability` commits every '
+            + 'balance (the half of proof-of-reserve usually hand-waved). '
+            + 'ALWAYS REPORT `anchoredAt`. Null means the root is computed and stored but NOT on '
+            + 'chain, so it is a database row the operator could edit. Describing an unanchored '
+            + 'commitment as proof is the one misstatement this feature cannot survive.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                kind: {
+                    type: 'string',
+                    enum: ['cosm_emission', 'cbx_liability'],
+                    description: 'Filter to one kind.',
+                },
+                limit: {
+                    type: 'integer',
+                    minimum: 1,
+                    maximum: 200,
+                    default: 50,
+                    description: 'How many commitments, newest first. Default 50.',
+                },
+            },
+            additionalProperties: false,
+        },
+        handler: (args) => {
+            const query = {};
+            if (args.kind)
+                query.kind = String(args.kind);
+            if (args.limit !== undefined)
+                query.limit = String(args.limit);
+            return apiGet('/v1/cosm/attestations', Object.keys(query).length ? query : undefined);
+        },
+    },
+    {
+        name: 'get_cosm_attestation_proof',
+        description: "A Merkle inclusion proof for one subject against a published root. Returns the "
+            + 'canonical leaf, the sibling path, and the root. '
+            + 'Tell the user they can verify it THEMSELVES and how: sha256 the leaf with a 0x00 '
+            + 'prefix, fold each proof step with a 0x01 prefix, order each pair '
+            + 'lexicographically, compare to the root. Do not present the `verified` field as '
+            + 'the proof \u2014 it is our own check, and the point of the feature is that they do '
+            + 'not have to take our word for it. '
+            + 'A 409 means the underlying data no longer reproduces the published root. That is '
+            + 'a disclosure event, not a retryable error.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                commitmentId: {
+                    type: 'string',
+                    description: 'The published commitment to prove against, from list_cosm_attestations. '
+                        + 'Check its `anchoredAt` — an unanchored root is not yet proof of anything.',
+                },
+                subjectId: {
+                    type: 'string',
+                    description: 'The CBX subject to prove membership for, within that commitment.',
+                },
+            },
+            required: ['commitmentId', 'subjectId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet(`/v1/cosm/attestations/${encodeURIComponent(String(args.commitmentId))}/proof`, { subjectId: String(args.subjectId) }),
+    },
+    {
+        name: 'record_cosm_manual_anchor',
+        description: 'Record the chain signature for a commitment that was anchored BY HAND. '
+            + 'AN OPS TOOL, NOT A TRUST BOUNDARY. It writes a signature somebody else '
+            + 'produced; it does not verify that the signature anchors this root, and it does '
+            + 'not send a transaction. A wrong value recorded here produces a commitment that '
+            + 'LOOKS anchored and is not — which is strictly worse than `anchoredAt: null`, '
+            + 'because null is honest. '
+            + 'Do not call this to "mark something done", and never on a signature a user '
+            + 'supplied without independently confirming it on chain first. Automated '
+            + 'anchoring needs an RPC and a dedicated attest key; until those exist this is '
+            + 'the manual path and it should be used rarely and deliberately.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                commitmentId: {
+                    type: 'string',
+                    description: 'The commitment to mark, from list_cosm_attestations.',
+                },
+                chainSignature: {
+                    type: 'string',
+                    description: 'The transaction signature that anchored this exact root, 64-128 chars. '
+                        + 'Confirm it on chain before recording it — nothing here checks it.',
+                },
+            },
+            required: ['commitmentId', 'chainSignature'],
+            additionalProperties: false,
+        },
+        handler: (args) => {
+            const { commitmentId, ...body } = args;
+            return apiPost(`/v1/cosm/attestations/${encodeURIComponent(commitmentId)}/anchor`, body);
+        },
+    },
+];
+//# sourceMappingURL=attestations.js.map

package/dist/tools/cosm/attestations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestations.js","sourceRoot":"","sources":["../../../src/tools/cosm/attestations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG/C,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,kFAAkF;cAChF,mFAAmF;cACnF,oFAAoF;cACpF,6DAA6D;cAC7D,oFAAoF;cACpF,mFAAmF;cACnF,0EAA0E;QAC9E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;oBACxC,WAAW,EAAE,qBAAqB;iBACnC;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,iDAAiD;iBAC/D;aACF;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/D,OAAO,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxF,CAAC;KACF;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,iFAAiF;cAC/E,kDAAkD;cAClD,mFAAmF;cACnF,mEAAmE;cACnE,iFAAiF;cACjF,qFAAqF;cACrF,oCAAoC;cACpC,mFAAmF;cACnF,4CAA4C;QAChD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,0EAA0E;0BACxE,2EAA2E;iBAChF;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,kEAAkE;iBACrE;aACF;YACD,QAAQ,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;YACvC,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CACJ,yBAAyB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAC9E,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CACtC;KACJ;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,yEAAyE;cACvE,yEAAyE;cACzE,iFAAiF;cACjF,iFAAiF;cACjF,+EAA+E;cAC/E,0BAA0B;cAC1B,6EAA6E;cAC7E,yEAAyE;cACzE,+EAA+E;cAC/E,gEAAgE;QACpE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,sDAAsD;iBACpE;gBACD,cAAc,EAAE;oBACd,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,yEAAyE;0BACvE,mEAAmE;iBACxE;aACF;YACD,QAAQ,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC;YAC5C,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,IAGjC,CAAC;YACF,OAAO,OAAO,CACZ,yBAAyB,kBAAkB,CAAC,YAAY,CAAC,SAAS,EAClE,IAAI,CACL,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/tools/cosm/auction.d.ts

@@ -0,0 +1,3 @@
+import { ToolDef } from '../types.js';
+export declare const cosmAuction: ToolDef[];
+//# sourceMappingURL=auction.d.ts.map

package/dist/tools/cosm/auction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auction.d.ts","sourceRoot":"","sources":["../../../src/tools/cosm/auction.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,eAAO,MAAM,WAAW,EAAE,OAAO,EA2GhC,CAAC"}

package/dist/tools/cosm/auction.js

@@ -0,0 +1,97 @@
+import { apiGet, apiPost } from '../../api.js';
+export const cosmAuction = [
+    {
+        name: 'list_cosm_auction',
+        description: 'Open cosmetic auction listings, priced in COSM. A COSM-denominated peer market: '
+            + 'buyers pay COSM, sellers receive COSM, and the 8% fee BURNS. It is not a cash '
+            + 'market and cannot be used to convert COSM to money.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                cosmeticId: { type: 'string', description: 'Filter to one SKU.' },
+            },
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet('/v1/cosm/auction', args.cosmeticId ? { cosmeticId: String(args.cosmeticId) } : undefined),
+    },
+    {
+        name: 'quote_cosm_auction_fee',
+        description: 'What listing at a given ask would cost in fees, before committing. The fee is 8% '
+            + 'of the ask rounded UP, and the seller always nets something. Quote this and show '
+            + 'the net before calling the listing tool.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                askBaseUnits: {
+                    type: 'string',
+                    description: 'Ask in base units, as a string. Six decimals; must exceed 1.',
+                },
+            },
+            required: ['askBaseUnits'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet('/v1/cosm/auction/quote', { askBaseUnits: String(args.askBaseUnits) }),
+    },
+    {
+        name: 'list_cosm_cosmetic_for_sale',
+        description: 'List an owned cosmetic on the auction house for COSM. Refuses a BOUND item. '
+            + 'One open listing per item. `askBaseUnits` is a string of base units (six '
+            + 'decimals) and must exceed 1. Quote the fee first so the seller sees their net.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: {
+                    type: 'string',
+                    description: 'The selling CBX subject. Must own the item and must be one you own.',
+                },
+                ownershipId: {
+                    type: 'string',
+                    description: 'From list_cosm_inventory — the ownership row, not the cosmetic id.',
+                },
+                askBaseUnits: {
+                    type: 'string',
+                    description: 'Ask price in COSM base units, as a STRING (six decimals, never a float). '
+                        + 'Must exceed 1. Priced in COSM, not dollars — this is not a cash market.',
+                },
+                expiresAt: {
+                    type: 'string',
+                    description: 'Optional ISO-8601 expiry. Omit for an open-ended listing.',
+                },
+            },
+            required: ['subjectId', 'ownershipId', 'askBaseUnits'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/auction', {
+            subjectId: String(args.subjectId),
+            ownershipId: String(args.ownershipId),
+            askBaseUnits: String(args.askBaseUnits),
+            ...(args.expiresAt ? { expiresAt: String(args.expiresAt) } : {}),
+        }),
+    },
+    {
+        name: 'buy_cosm_auction_listing',
+        description: 'Buy an open auction listing with COSM. The listing is claimed before any COSM '
+            + 'moves, so a race loses cleanly rather than debiting twice. Buying your own '
+            + 'listing is refused. Confirm the spend with the user first — there is no refund.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                listingId: {
+                    type: 'string',
+                    description: 'The open auction listing to buy, from list_cosm_auction.',
+                },
+                subjectId: {
+                    type: 'string',
+                    description: 'The buying CBX subject. Must be one you own, and cannot be the seller — '
+                        + 'buying your own listing is refused.',
+                },
+            },
+            required: ['listingId', 'subjectId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost(`/v1/cosm/auction/${encodeURIComponent(String(args.listingId))}/buy`, {
+            subjectId: String(args.subjectId),
+        }),
+    },
+];
+//# sourceMappingURL=auction.js.map

package/dist/tools/cosm/auction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auction.js","sourceRoot":"","sources":["../../../src/tools/cosm/auction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG/C,MAAM,CAAC,MAAM,WAAW,GAAc;IACpC;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,kFAAkF;cAChF,gFAAgF;cAChF,qDAAqD;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;aAClE;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CACJ,kBAAkB,EAClB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CACtE;KACJ;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,mFAAmF;cACjF,mFAAmF;cACnF,0CAA0C;QAC9C,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,8DAA8D;iBAC5E;aACF;YACD,QAAQ,EAAE,CAAC,cAAc,CAAC;YAC1B,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,wBAAwB,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;KAChF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,8EAA8E;cAC5E,2EAA2E;cAC3E,gFAAgF;QACpF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qEAAqE;iBACnF;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oEAAoE;iBAClF;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,2EAA2E;0BACzE,yEAAyE;iBAC9E;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,2DAA2D;iBACzE;aACF;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC;YACtD,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,OAAO,CAAC,kBAAkB,EAAE;YAC1B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACrC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;KACL;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,gFAAgF;cAC9E,6EAA6E;cAC7E,iFAAiF;QACrF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0DAA0D;iBACxE;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,0EAA0E;0BACxE,qCAAqC;iBAC1C;aACF;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;YACpC,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,OAAO,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;YAC5E,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;SAClC,CAAC;KACL;CACF,CAAC"}

package/dist/tools/cosm/cosmetics.d.ts

@@ -0,0 +1,3 @@
+import { ToolDef } from '../types.js';
+export declare const cosmCosmetics: ToolDef[];
+//# sourceMappingURL=cosmetics.d.ts.map

package/dist/tools/cosm/cosmetics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cosmetics.d.ts","sourceRoot":"","sources":["../../../src/tools/cosm/cosmetics.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,eAAO,MAAM,aAAa,EAAE,OAAO,EAgGlC,CAAC"}

package/dist/tools/cosm/cosmetics.js

@@ -0,0 +1,95 @@
+import { apiGet, apiPost } from '../../api.js';
+export const cosmCosmetics = [
+    {
+        name: 'list_cosm_cosmetics',
+        description: 'The cosmetics catalogue. TIERS ARE DISJOINT and no SKU has two prices: `premium` '
+            + 'is CASH only (`priceCents`), `earned` is COSM only (`priceBaseUnits`), and '
+            + '`stake_exclusive` cannot be bought at any price in any currency — it is granted '
+            + 'on stake TENURE. '
+            + 'Never imply a premium item can be earned with COSM or that a stake-exclusive one '
+            + 'is purchasable; the disjointness is enforced by database constraints because '
+            + 'pricing one SKU in both currencies would be arbitrageable.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                tier: {
+                    type: 'string',
+                    enum: ['premium', 'earned', 'stake_exclusive'],
+                    description: 'Filter by tier.',
+                },
+                slot: {
+                    type: 'string',
+                    description: 'Filter by slot, e.g. avatar_head, room_material, room_prop, nameplate.',
+                },
+            },
+            additionalProperties: false,
+        },
+        handler: (args) => {
+            const query = {};
+            if (args.tier)
+                query.tier = String(args.tier);
+            if (args.slot)
+                query.slot = String(args.slot);
+            return apiGet('/v1/cosm/cosmetics', Object.keys(query).length ? query : undefined);
+        },
+    },
+    {
+        name: 'buy_cosm_cosmetic',
+        description: 'Buy an earned-tier cosmetic with COSM. THE COSM IS DESTROYED — it is not credited '
+            + 'to Crossly, and it no longer exists afterwards. '
+            + 'Refuses a premium SKU (cash only) or a stake-exclusive one (not purchasable). '
+            + 'Also counts toward any open community burn goal. '
+            + 'Confirm the spend with the user before calling: there is no refund, because '
+            + 'refunding a burn would mean minting.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                cosmeticId: { type: 'string', description: 'The cosmetic id from the catalogue.' },
+                subjectId: { type: 'string', description: 'The CBX subject buying it.' },
+            },
+            required: ['cosmeticId', 'subjectId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost(`/v1/cosm/cosmetics/${encodeURIComponent(String(args.cosmeticId))}/buy`, {
+            subjectId: String(args.subjectId),
+        }),
+    },
+    {
+        name: 'list_cosm_inventory',
+        description: 'Cosmetics a subject holds. `bound` true means it can NEVER be traded or fused — '
+            + 'that applies to stake-exclusive grants and make-goods, and is enforced by a '
+            + 'database constraint rather than a setting somebody can change. '
+            + '`editionNumber` identifies the item and travels with it through a sale.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: {
+                    type: 'string',
+                    description: 'The CBX subject whose cosmetics to list. Must be one you own.',
+                },
+            },
+            required: ['subjectId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet('/v1/cosm/inventory', { subjectId: String(args.subjectId) }),
+    },
+    {
+        name: 'list_cosm_unlocks',
+        description: 'Which spatial cosmetic values a subject may apply to their rooms. Values no SKU '
+            + 'claims — the stock walls, floors and themes — are FREE and are not listed here, '
+            + 'so an empty result does not mean they can change nothing.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: {
+                    type: 'string',
+                    description: 'The CBX subject whose spatial unlocks to list. Must be one you own.',
+                },
+            },
+            required: ['subjectId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet('/v1/cosm/unlocks', { subjectId: String(args.subjectId) }),
+    },
+];
+//# sourceMappingURL=cosmetics.js.map

package/dist/tools/cosm/cosmetics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cosmetics.js","sourceRoot":"","sources":["../../../src/tools/cosm/cosmetics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG/C,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,mFAAmF;cACjF,6EAA6E;cAC7E,kFAAkF;cAClF,mBAAmB;cACnB,mFAAmF;cACnF,+EAA+E;cAC/E,4DAA4D;QAChE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC;oBAC9C,WAAW,EAAE,iBAAiB;iBAC/B;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,wEAAwE;iBAC3E;aACF;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrF,CAAC;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,oFAAoF;cAClF,kDAAkD;cAClD,gFAAgF;cAChF,mDAAmD;cACnD,8EAA8E;cAC9E,sCAAsC;QAC1C,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBAClF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;aACzE;YACD,QAAQ,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACrC,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,OAAO,CAAC,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE;YAC/E,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;SAClC,CAAC;KACL;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,kFAAkF;cAChF,8EAA8E;cAC9E,iEAAiE;cACjE,yEAAyE;QAC7E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+DAA+D;iBAC7E;aACF;YACD,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;KACvF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,kFAAkF;cAChF,kFAAkF;cAClF,2DAA2D;QAC/D,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qEAAqE;iBACnF;aACF;YACD,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;KACrF;CACF,CAAC"}

package/dist/tools/cosm/designer.d.ts

@@ -0,0 +1,3 @@
+import { ToolDef } from '../types.js';
+export declare const cosmDesigner: ToolDef[];
+//# sourceMappingURL=designer.d.ts.map

package/dist/tools/cosm/designer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"designer.d.ts","sourceRoot":"","sources":["../../../src/tools/cosm/designer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAUtC,eAAO,MAAM,YAAY,EAAE,OAAO,EAoOjC,CAAC"}

package/dist/tools/cosm/designer.js

@@ -0,0 +1,224 @@
+import { apiGet, apiPost } from '../../api.js';
+// ── Designer surface ──────────────────────────────────────────────
+//
+// Publishing terms, opening a design to the chain, and the mint state
+// machine. An agent driving these is acting for a DESIGNER, and two
+// of them are irreversible in ways worth stating in the tool text
+// rather than a doc it will not read: a chain unlock burns COSM, and
+// a confirmed materialisation retires the in-world copy for good.
+export const cosmDesigner = [
+    {
+        name: 'get_cosm_designer_terms',
+        description: 'The published terms for a design: resale rules, the price window, the secondary '
+            + 'royalty and any collaborator splits. Also reports the platform rates the designer '
+            + 'does NOT control, and whether the terms are enforceable on chain. Report that last '
+            + 'field honestly — inside Crossly every rule is enforced, but a third-party '
+            + 'marketplace honours a royalty voluntarily at best, so never tell a designer their '
+            + 'royalty is guaranteed everywhere.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                cosmeticId: { type: 'string', description: 'The design to read terms for.' },
+            },
+            required: ['cosmeticId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet('/v1/cosm/designer/terms', { cosmeticId: String(args.cosmeticId) }),
+    },
+    {
+        name: 'publish_cosm_designer_terms',
+        description: 'Publish terms for a design. NEVER an edit: every call creates a new VERSION, and a '
+            + 'copy already sold under an earlier version keeps those terms forever — so this '
+            + 'cannot be used to change the deal on copies already out there. Designer-only. '
+            + 'Collaborator splits are shares of the ROYALTY, not of the sale price, and may total '
+            + 'at most 100%; the remainder stays with the designer. A total above 100% is REFUSED '
+            + 'rather than scaled down.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: { type: 'string', description: 'The designer, as a CBX subject.' },
+                cosmeticId: { type: 'string', description: 'The design these terms govern.' },
+                resaleAllowed: {
+                    type: 'boolean',
+                    description: 'Whether holders may resell a copy in the COSM auction house.',
+                },
+                maxResaleBaseUnits: {
+                    type: ['string', 'null'],
+                    description: 'Upper bound on a resale ask, in COSM base units. Null clears it.',
+                },
+                minResaleBaseUnits: {
+                    type: ['string', 'null'],
+                    description: 'Lower bound on a resale ask, in COSM base units. Null clears it.',
+                },
+                secondaryRoyaltyBps: {
+                    type: 'integer',
+                    description: "The designer's cut of a RESALE, in basis points. Capped by the platform.",
+                },
+                splits: {
+                    type: 'array',
+                    description: 'Collaborators, each taking a share OF THE ROYALTY. Shares total at most 10000 bps.',
+                    items: {
+                        type: 'object',
+                        properties: {
+                            recipientSubjectId: { type: 'string' },
+                            shareBps: { type: 'integer' },
+                            memo: { type: ['string', 'null'] },
+                        },
+                        required: ['recipientSubjectId', 'shareBps'],
+                        additionalProperties: false,
+                    },
+                },
+            },
+            required: ['subjectId', 'cosmeticId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/designer/terms', args),
+    },
+    {
+        name: 'unlock_cosm_design_for_chain',
+        description: 'Burn COSM to make a design mintable on chain. THE FEE IS DESTROYED, not collected, '
+            + 'and this is not reversible — confirm the designer means to do it. Idempotent: a '
+            + 'second call returns the existing unlock WITHOUT charging again, so a retry is safe. '
+            + 'Limited editions only; an open edition has no scarcity for a token to attest. Once '
+            + 'unlocked, ANY holder may take their own copy on chain, not just the designer.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: { type: 'string', description: 'The designer, as a CBX subject.' },
+                cosmeticId: { type: 'string', description: 'The design to unlock.' },
+            },
+            required: ['subjectId', 'cosmeticId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/designer/chain-unlock', args),
+    },
+    {
+        name: 'set_cosm_design_chain_auto_unlock',
+        description: 'Opt a design in or out of the FREE chain unlock a popular limited design earns '
+            + '(on by default; 25 holders with half the edition out, or 10 resales, or 40 in use). '
+            + 'Designer-only. Answers the popularity of the design toward the bar.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: { type: 'string', description: 'The designer, as a CBX subject.' },
+                cosmeticId: { type: 'string', description: 'The design.' },
+                enabled: { type: 'boolean', description: 'true = may unlock free when popular; false = never.' },
+            },
+            required: ['subjectId', 'cosmeticId', 'enabled'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/designer/chain-auto-unlock', args),
+    },
+    {
+        name: 'submit_cosm_design_for_review',
+        description: 'Submit a user-authored design for moderation. Refuses a design with no preview image '
+            + 'HERE rather than at approval, so the designer learns what is missing while they can '
+            + 'still fix it. Submitting twice returns the EXISTING pending review rather than '
+            + 'queueing a second one — do not treat a repeat call as a new submission.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: { type: 'string', description: 'The designer, as a CBX subject.' },
+                cosmeticId: { type: 'string', description: 'The design to submit.' },
+            },
+            required: ['subjectId', 'cosmeticId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/designer/submit-for-review', args),
+    },
+    {
+        name: 'materialise_cosm_copy',
+        description: 'Lock a copy and return an UNSIGNED mint transaction for the holder to sign. This does '
+            + 'NOT take the copy on chain and does NOT void it — the holder still has to sign, and '
+            + 'you must then call confirm_cosm_materialisation once the chain reaches FINALIZED '
+            + 'commitment, or release_cosm_materialisation if they closed the prompt. The lock '
+            + 'expires on its own, so an abandoned request is not a copy held hostage. '
+            + 'destinationOwner must be the HOLDER\'S OWN wallet — the platform never custodies '
+            + 'the NFT.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: { type: 'string', description: 'The holder, as a CBX subject.' },
+                ownershipId: { type: 'string', description: 'The specific copy to take on chain.' },
+                destinationOwner: {
+                    type: 'string',
+                    description: "The holder's own Solana wallet address. Never a platform wallet.",
+                },
+            },
+            required: ['subjectId', 'ownershipId', 'destinationOwner'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/designer/materialise', args),
+    },
+    {
+        name: 'confirm_cosm_materialisation',
+        description: 'Record a confirmed mint and RETIRE the in-world copy, in one transaction. Only call '
+            + 'this after verifying the transaction at FINALIZED commitment — an NFT recorded '
+            + 'against a transaction that never landed cannot be recalled, and the copy it retired '
+            + 'is gone. Idempotent on an already-confirmed request, so a retry after a timeout is '
+            + 'safe.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                mintRequestId: { type: 'string', description: 'From materialise_cosm_copy.' },
+                mintAddress: { type: 'string', description: 'The minted asset address.' },
+                txSig: { type: 'string', description: 'The finalized transaction signature.' },
+            },
+            required: ['mintRequestId', 'mintAddress', 'txSig'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/designer/materialise/confirm', args),
+    },
+    {
+        name: 'release_cosm_materialisation',
+        description: 'Release a mint lock that was never signed. The ordinary outcome of somebody closing a '
+            + 'wallet prompt, and it leaves the copy EXACTLY as it was — nothing is lost and it can '
+            + 'be retried. Refuses a request that has already minted, because releasing one would '
+            + 'unlock a copy that is on chain.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                mintRequestId: { type: 'string', description: 'The request to release.' },
+                reason: { type: 'string', description: 'Why, for the audit trail. 1-200 characters.' },
+            },
+            required: ['mintRequestId', 'reason'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiPost('/v1/cosm/designer/materialise/release', args),
+    },
+    {
+        name: 'get_cosm_copy_state',
+        description: 'Where a copy currently is: "held" (in-world, wearable, listable for COSM), "minting" '
+            + '(locked while a mint is in flight) or "materialised" (an NFT in the holder wallet). '
+            + 'A copy is in exactly ONE of these, never two — both at once would mean one edition '
+            + 'with two owners who can each prove it. Check this before offering to list or wear an '
+            + 'item.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                ownershipId: { type: 'string', description: 'The copy to locate.' },
+            },
+            required: ['ownershipId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet('/v1/cosm/designer/copy-state', { ownershipId: String(args.ownershipId) }),
+    },
+    {
+        name: 'get_cosm_designer_earnings',
+        description: 'What a designer has earned, in BOTH denominations. COSM royalties come from '
+            + 'COSM-priced sales; cash earnings come from cash-priced sales and are funded by the '
+            + 'buyer payment itself. The two are never converted into one another and COSM is never '
+            + 'cashed out — so report them as two separate figures and never add them together or '
+            + 'quote a dollar value for the COSM half.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                subjectId: { type: 'string', description: 'The designer, as a CBX subject.' },
+            },
+            required: ['subjectId'],
+            additionalProperties: false,
+        },
+        handler: (args) => apiGet('/v1/cosm/designer/earnings', { subjectId: String(args.subjectId) }),
+    },
+];
+//# sourceMappingURL=designer.js.map