@fidacy/mcp 0.1.8 → 0.1.9

package/dist/lib.js

@@ -146,13 +146,34 @@ var ReferenceRail = class {
     return { railRef };
   }
 };
+function httpRedeem(coreUrl, apiKey) {
+  const base = String(coreUrl ?? "").replace(/\/+$/, "");
+  const u = new URL(base);
+  if (u.protocol !== "https:" && !(u.protocol === "http:" && (u.hostname === "localhost" || u.hostname === "127.0.0.1"))) {
+    throw new Error("core URL must be https:// (the API key is sent to it)");
+  }
+  return async (grant) => {
+    const res = await fetch(`${base}/v1/grant/redeem`, {
+      method: "POST",
+      headers: { "content-type": "application/json", authorization: `Bearer ${apiKey}` },
+      body: JSON.stringify({ grant })
+    });
+    if (res.status === 200)
+      return true;
+    if (res.status === 409)
+      return false;
+    throw new Error(`redeem -> ${res.status}`);
+  };
+}
 var GrantEnforcingExecutor = class {
   rail;
   used = /* @__PURE__ */ new Set();
   pub;
-  constructor(publicKeyPem2, rail) {
+  redeem;
+  constructor(publicKeyPem2, rail, opts) {
     this.rail = rail;
     this.pub = createPublicKey(publicKeyPem2);
+    this.redeem = opts?.redeem;
   }
   async execute(req, grant) {
     if (!grant)
@@ -183,6 +204,16 @@ var GrantEnforcingExecutor = class {
     if (req.invoiceRef != null && req.invoiceRef !== (p.invoiceRef ?? null)) {
       return { status: "REFUSED", reason: "invoice_mismatch" };
     }
+    if (this.redeem) {
+      let first;
+      try {
+        first = await this.redeem(grant);
+      } catch {
+        return { status: "REFUSED", reason: "redeem_unavailable" };
+      }
+      if (!first)
+        return { status: "REFUSED", reason: "grant_replayed" };
+    }
     this.used.add(p.decisionId);
     const { railRef } = await this.rail.execute(req);
     return { status: "EXECUTED", railRef, decisionId: p.decisionId };
@@ -562,6 +593,7 @@ export {
   ReferenceRail,
   canonInvoice,
   evaluate,
+  httpRedeem,
   loadOrGenerateKeyPair,
   lookalikePayee,
   makeCore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -54,5 +54,10 @@
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2"
+  },
+  "mcpName": "com.fidacy/mcp",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lucaslubi/fidacy-mcp.git"
   }
 }