@elisym/mcp 0.24.0 → 0.25.0

package/README.md

@@ -112,12 +112,12 @@ The bootstrap step is unchanged - the wizard collects the passphrase interactive
 | `ELISYM_AGENT`              | Load agent from `~/.elisym/<name>/` (or a project-local `.elisym/<name>/`)                                                                                                                                     |
 | `ELISYM_NOSTR_SECRET`       | Nostr secret key (hex or nsec) for ephemeral mode                                                                                                                                                              |
 | `ELISYM_AGENT_NAME`         | Agent display name (default: mcp-agent)                                                                                                                                                                        |
-| `ELISYM_NETWORK`            | Solana network for ephemeral/auto-created identities: `devnet` (default) or `mainnet`. It cannot override a disk-loaded agent - an agent's network is fixed at creation, and a conflicting value fails startup |
+| `ELISYM_NETWORK`            | Solana network for ephemeral/auto-created identities: `mainnet` (default) or `devnet`. It cannot override a disk-loaded agent - an agent's network is fixed at creation, and a conflicting value fails startup |
 | `ELISYM_PASSPHRASE`         | Passphrase for encrypted agent configs (optional)                                                                                                                                                              |
 | `ELISYM_ALLOW_WITHDRAWAL`   | Set to `1` to override per-agent `security.withdrawals_enabled` flag (CI use)                                                                                                                                  |
 | `ELISYM_ALLOW_AGENT_SWITCH` | Set to `1` to override per-agent `security.agent_switch_enabled` flag                                                                                                                                          |
 
-The RPC endpoint is always the public one for each agent's network (`api.devnet.solana.com` / `api.mainnet-beta.solana.com`). The MCP server deliberately does **not** honor `SOLANA_RPC_URL`: one process can host agents on both networks, and a process-wide override could point a devnet agent's payment path at mainnet. Creating a mainnet agent: `npx @elisym/mcp init <name> --network mainnet` (or the `create_agent` tool's `network` parameter); the network is fixed at creation, and `switch_agent` to a mainnet-bound agent is how a session changes network.
+The RPC endpoint is always the public one for each agent's network (`api.devnet.solana.com` / `api.mainnet-beta.solana.com`). The MCP server deliberately does **not** honor `SOLANA_RPC_URL`: one process can host agents on both networks, and a process-wide override could point a devnet agent's payment path at mainnet. New agents are mainnet by default and move real funds. Creating a devnet agent to experiment with: `npx @elisym/mcp init <name> --network devnet` (or the `create_agent` tool's `network` parameter); the network is fixed at creation, and `switch_agent` to an agent on the other network is how a session changes network. An agent created before this default flipped keeps the network its YAML records - an upgrade never re-points an existing agent at mainnet.
 
 ## Usage Examples
 

package/dist/index.js

@@ -22,81 +22,7 @@ import { fileURLToPath } from 'node:url';
 import { getTransferSolInstruction } from '@solana-program/system';
 import { findAssociatedTokenPda, TOKEN_PROGRAM_ADDRESS, getCreateAssociatedTokenIdempotentInstruction, ASSOCIATED_TOKEN_PROGRAM_ADDRESS, getTransferCheckedInstruction } from '@solana-program/token';
 
-function coerceNetwork(raw, name) {
-  if (raw === void 0 || raw === "devnet") {
-    return "devnet";
-  }
-  if (raw === "mainnet") {
-    return "mainnet";
-  }
-  throw new Error(
-    `Agent "${name}" has unsupported network "${raw}". Expected "devnet" or "mainnet".`
-  );
-}
-async function loadAgentConfig(name, passphrase) {
-  validateAgentName(name);
-  const loaded = await loadAgent(name, process.cwd(), passphrase);
-  const solPayment = loaded.yaml.payments.find((entry) => entry.chain === "solana");
-  const network = coerceNetwork(solPayment?.network, name);
-  return {
-    nostrSecretKey: loaded.secrets.nostr_secret_key,
-    solanaSecretKey: loaded.secrets.solana_secret_key,
-    relays: loaded.yaml.relays.length > 0 ? loaded.yaml.relays : void 0,
-    network,
-    payments: loaded.yaml.payments.length > 0 ? loaded.yaml.payments.map((payment2) => ({
-      chain: payment2.chain,
-      network: payment2.network,
-      address: payment2.address
-    })) : void 0,
-    security: {
-      withdrawals_enabled: loaded.yaml.security.withdrawals_enabled,
-      agent_switch_enabled: loaded.yaml.security.agent_switch_enabled
-    },
-    encrypted: loaded.encrypted
-  };
-}
-async function saveAgentConfig(name, input) {
-  validateAgentName(name);
-  const created = await createAgentDir({ target: "home", name, cwd: process.cwd() });
-  const network = input.network ?? "devnet";
-  try {
-    await writeFile(created.paths.yaml, "", { flag: "wx", mode: 420 });
-  } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "EEXIST") {
-      throw new Error(`Agent "${name}" already exists.`);
-    }
-    throw error;
-  }
-  await writeYamlInitial(created.dir, {
-    display_name: void 0,
-    description: input.description,
-    picture: void 0,
-    banner: void 0,
-    relays: input.relays,
-    payments: input.solanaAddress ? [{ chain: "solana", network, address: input.solanaAddress }] : [],
-    llm: void 0,
-    security: input.security ?? {}
-  });
-  await writeExampleSkillTemplate(created.dir);
-  await writeSecrets(
-    created.dir,
-    {
-      nostr_secret_key: input.nostrSecretKey,
-      solana_secret_key: input.solanaSecretKey
-    },
-    input.passphrase
-  );
-}
-async function updateAgentSecurity(name, patch, passphrase) {
-  const loaded = await loadAgent(name, process.cwd(), passphrase);
-  const merged = { ...loaded.yaml.security, ...patch };
-  await writeYaml(loaded.dir, { ...loaded.yaml, security: merged });
-  return merged;
-}
-async function listAgentNames() {
-  const agents = await listAgents(process.cwd());
-  return agents.map((agent) => agent.name);
-}
+var DEFAULT_NETWORK = "mainnet";
 function rpcUrlFor(network) {
   return network === "mainnet" ? "https://api.mainnet-beta.solana.com" : "https://api.devnet.solana.com";
 }
@@ -309,6 +235,83 @@ function takeSpendWarnings(ctx, asset) {
   ctx.sessionSpendWarnings.set(key, fired);
   return lines;
 }
+
+// src/config.ts
+function coerceNetwork(raw, name) {
+  if (raw === void 0 || raw === "devnet") {
+    return "devnet";
+  }
+  if (raw === "mainnet") {
+    return "mainnet";
+  }
+  throw new Error(
+    `Agent "${name}" has unsupported network "${raw}". Expected "devnet" or "mainnet".`
+  );
+}
+async function loadAgentConfig(name, passphrase) {
+  validateAgentName(name);
+  const loaded = await loadAgent(name, process.cwd(), passphrase);
+  const solPayment = loaded.yaml.payments.find((entry) => entry.chain === "solana");
+  const network = coerceNetwork(solPayment?.network, name);
+  return {
+    nostrSecretKey: loaded.secrets.nostr_secret_key,
+    solanaSecretKey: loaded.secrets.solana_secret_key,
+    relays: loaded.yaml.relays.length > 0 ? loaded.yaml.relays : void 0,
+    network,
+    payments: loaded.yaml.payments.length > 0 ? loaded.yaml.payments.map((payment2) => ({
+      chain: payment2.chain,
+      network: payment2.network,
+      address: payment2.address
+    })) : void 0,
+    security: {
+      withdrawals_enabled: loaded.yaml.security.withdrawals_enabled,
+      agent_switch_enabled: loaded.yaml.security.agent_switch_enabled
+    },
+    encrypted: loaded.encrypted
+  };
+}
+async function saveAgentConfig(name, input) {
+  validateAgentName(name);
+  const created = await createAgentDir({ target: "home", name, cwd: process.cwd() });
+  const network = input.network ?? DEFAULT_NETWORK;
+  try {
+    await writeFile(created.paths.yaml, "", { flag: "wx", mode: 420 });
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "EEXIST") {
+      throw new Error(`Agent "${name}" already exists.`);
+    }
+    throw error;
+  }
+  await writeYamlInitial(created.dir, {
+    display_name: void 0,
+    description: input.description,
+    picture: void 0,
+    banner: void 0,
+    relays: input.relays,
+    payments: input.solanaAddress ? [{ chain: "solana", network, address: input.solanaAddress }] : [],
+    llm: void 0,
+    security: input.security ?? {}
+  });
+  await writeExampleSkillTemplate(created.dir);
+  await writeSecrets(
+    created.dir,
+    {
+      nostr_secret_key: input.nostrSecretKey,
+      solana_secret_key: input.solanaSecretKey
+    },
+    input.passphrase
+  );
+}
+async function updateAgentSecurity(name, patch, passphrase) {
+  const loaded = await loadAgent(name, process.cwd(), passphrase);
+  const merged = { ...loaded.yaml.security, ...patch };
+  await writeYaml(loaded.dir, { ...loaded.yaml, security: merged });
+  return merged;
+}
+async function listAgentNames() {
+  const agents = await listAgents(process.cwd());
+  return agents.map((agent) => agent.name);
+}
 async function writeFileAtomic(path, content, mode = 384) {
   const tmpPath = `${path}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}.tmp`;
   try {
@@ -1261,8 +1264,8 @@ var CreateAgentSchema = z.object({
   // customer-mode in 0.1.x and never publishes a NIP-89 capability card,
   // so an advertised capability list would be misleading. Provider-mode
   // (0.2.0) will reintroduce this field.
-  network: z.enum(["devnet", "mainnet"]).default("devnet").describe(
-    "Solana network this agent is bound to. FIXED AT CREATION: an agent can never change networks - switching networks means creating (or switch_agent-ing to) another agent bound to the other network. Default devnet; mainnet payments move real funds."
+  network: z.enum(["devnet", "mainnet"]).default(DEFAULT_NETWORK).describe(
+    `Solana network this agent is bound to. FIXED AT CREATION: an agent can never change networks - switching networks means creating (or switch_agent-ing to) another agent bound to the other network. Defaults to ${DEFAULT_NETWORK}, where payments move REAL funds; pass "devnet" for an agent to experiment with.`
   ),
   passphrase: z.string().optional().describe("Optional passphrase; if set, secret keys are encrypted at rest."),
   activate: z.boolean().default(true)
@@ -7205,7 +7208,7 @@ program.action(
       }
       const client = new ElisymClient({ relays: RELAYS });
       const name = process.env.ELISYM_AGENT_NAME ?? "mcp-agent";
-      const network = envNetwork ?? "devnet";
+      const network = envNetwork ?? DEFAULT_NETWORK;
       ctx.register({ client, identity, name, network, security: {} });
       console.error(`Ephemeral agent: ${name} (${network})`);
     } else {
@@ -7225,7 +7228,7 @@ program.action(
       } else {
         const identity = ElisymIdentity.generate();
         const client = new ElisymClient({ relays: RELAYS });
-        const network = envNetwork ?? "devnet";
+        const network = envNetwork ?? DEFAULT_NETWORK;
         ctx.register({ client, identity, name: "mcp-agent", network, security: {} });
         console.error(`Created ephemeral agent (no persistent identity, ${network}).`);
       }
@@ -7235,8 +7238,8 @@ program.action(
 );
 program.command("init [name]").description("Create a new agent identity").option("-d, --description <desc>", "Agent description", "Elisym MCP agent").option(
   "-n, --network <network>",
-  "Solana network (devnet or mainnet). Fixed at creation: to change networks later, create a new agent. Mainnet payments move real funds.",
-  "devnet"
+  `Solana network (devnet or mainnet). Fixed at creation: to change networks later, create a new agent. Defaults to ${DEFAULT_NETWORK}; mainnet payments move real funds.`,
+  DEFAULT_NETWORK
 ).option("--install", "Also install into MCP clients").option(
   "--passphrase <value>",
   'Passphrase to encrypt secret keys at rest. Empty string ("") skips encryption. Also reads ELISYM_PASSPHRASE env var. When neither is provided, prompts interactively.'
@@ -7262,7 +7265,7 @@ program.command("init [name]").description("Create a new agent identity").option
           name: "network",
           message: "Solana network (fixed at creation - create a new agent to change it):",
           choices: ["devnet", "mainnet"],
-          default: "devnet"
+          default: DEFAULT_NETWORK
         }
       ]);
       name = answers.name;