@forestrie/mcp-register 0.0.0-stage → 0.1.1

package/dist/node/payer.d.ts

@@ -0,0 +1,48 @@
+import { type PaymentCaps, type PaymentOption, type PaymentRequired } from "../core/x402.js";
+export interface PayerBackend {
+    /** The paying account, `0x…`: public, safe to report. */
+    readonly address: string;
+    /** Where the key lives, for humans: never key material. */
+    readonly description: string;
+    /**
+     * Sign a payment for exactly `option` (already checked against the caps)
+     * and return the `X-PAYMENT` header value: base64 of the x402 v2 payment
+     * payload. The authorisation MUST carry `nonce`; register_grant refuses
+     * to send one that does not.
+     */
+    pay(request: PayRequest): Promise<string>;
+}
+export interface PayRequest {
+    required: PaymentRequired;
+    option: PaymentOption;
+    /** The EIP-3009 nonce, `0x` + 64 hex, derived from the grant. */
+    nonce: string;
+    /** Seconds since the epoch; validBefore is this plus maxTimeoutSeconds. */
+    nowSeconds: number;
+}
+export declare class PayerError extends Error {
+    readonly code: "payer_unavailable" | "payer_misconfigured";
+    constructor(code: "payer_unavailable" | "payer_misconfigured", message: string);
+}
+/**
+ * Load an EVM private key (`0x` + 64 hex, one line) from `path`. Refused,
+ * as the log key is, when the path is a symlink or the file is accessible to
+ * group or others.
+ */
+export declare function openKeyFilePayer(path: string): PayerBackend;
+/** An EIP-3009 "exact" payer over a viem account. */
+export declare function evmPayer(privateKey: `0x${string}`, description: string): PayerBackend;
+/**
+ * The caps, from configuration. Both amount caps are required once a payer
+ * is configured: a payer with no cap is refused, never defaulted.
+ *
+ *  - `MCP_REGISTER_PAY_MAX_PER_CALL`, `MCP_REGISTER_PAY_MAX_PER_DAY`: atomic
+ *    units of the asset (USDC has 6 decimals: 10000 is $0.01);
+ *  - `MCP_REGISTER_PAY_NETWORK` (default Base Sepolia, `eip155:84532`) and
+ *    `MCP_REGISTER_PAY_ASSET` (default Circle's USDC on Base Sepolia);
+ *  - `MCP_REGISTER_PAY_TO`: optional, the only payee;
+ *  - `MCP_REGISTER_PAY_ALLOW_MAINNET=1`: pay on a network that is not a
+ *    testnet. Off by default.
+ */
+export declare function readPaymentCaps(env: Record<string, string | undefined>): PaymentCaps;
+//# sourceMappingURL=payer.d.ts.map

package/dist/node/payer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payer.d.ts","sourceRoot":"","sources":["../../src/node/payer.ts"],"names":[],"mappings":"AA0BA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,UAAW,SAAQ,KAAK;IAEjC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,qBAAqB;gBAAjD,IAAI,EAAE,mBAAmB,GAAG,qBAAqB,EAC1D,OAAO,EAAE,MAAM;CAIlB;AAMD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA2B3D;AAaD,qDAAqD;AACrD,wBAAgB,QAAQ,CACtB,UAAU,EAAE,KAAK,MAAM,EAAE,EACzB,WAAW,EAAE,MAAM,GAClB,YAAY,CAuDd;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,WAAW,CAkDb"}

package/dist/node/payer.js

@@ -0,0 +1,170 @@
+/**
+ * The payer backend: what pays canopy's 402 when register_grant meets one.
+ *
+ * Separate from the log key and the authority key (D6): those are ES256 and
+ * hold no funds; the payer is an EVM account that holds testnet USDC and
+ * signs only standard x402 authorisations (EIP-3009
+ * `transferWithAuthorization`, the "exact" scheme). The default backend is
+ * a viem account loaded from a local key file. An embedder passes its own
+ * `PayerBackend` (a hosted wallet) to `createServer({ payer })`.
+ *
+ * The default backend builds the x402 v2 payment payload exactly as the
+ * upstream client does (`@x402/evm`'s `createEIP3009Payload`), with one
+ * difference: the nonce is the one register_grant derives from the grant
+ * (`grantPaymentNonce`), where upstream draws a random one and offers no way
+ * to supply it. A derived nonce is what makes paying twice for one grant
+ * impossible rather than merely avoided. `test/node/payer.test.ts` checks
+ * the payload against the upstream client's, field for field.
+ *
+ * The payer key never crosses the MCP boundary: no tool takes or returns it,
+ * the file is refused if it is a symlink or readable by others, and no
+ * `{path}` input may read it. The caps are configuration
+ * (`readPaymentCaps`), never tool arguments.
+ */
+import { lstatSync, readFileSync } from "node:fs";
+import { getAddress } from "viem";
+import { privateKeyToAccount } from "viem/accounts";
+import { DEFAULT_PAY_ASSET, DEFAULT_PAY_NETWORK, } from "../core/x402.js";
+export class PayerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+const PRIVATE_KEY = /^0x[0-9a-fA-F]{64}$/;
+const ATOMIC = /^[0-9]{1,78}$/;
+const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+/**
+ * Load an EVM private key (`0x` + 64 hex, one line) from `path`. Refused,
+ * as the log key is, when the path is a symlink or the file is accessible to
+ * group or others.
+ */
+export function openKeyFilePayer(path) {
+    let stat;
+    try {
+        stat = lstatSync(path);
+    }
+    catch (err) {
+        throw new PayerError("payer_unavailable", `cannot open the payer key file ${path}: ${err.message}`);
+    }
+    if (stat.isSymbolicLink() || !stat.isFile())
+        throw new PayerError("payer_unavailable", `the payer key path ${path} is not a regular file (a symlink or directory is refused)`);
+    if ((stat.mode & 0o077) !== 0)
+        throw new PayerError("payer_unavailable", `the payer key file ${path} is accessible to other users (mode ${(stat.mode & 0o777).toString(8)}); chmod 600 it`);
+    const text = readFileSync(path, "utf8").trim();
+    if (!PRIVATE_KEY.test(text))
+        throw new PayerError("payer_unavailable", `the payer key file ${path} must hold one EVM private key: 0x followed by 64 hex digits`);
+    return evmPayer(text, `local payer key file ${path}`);
+}
+const TRANSFER_WITH_AUTHORIZATION = {
+    TransferWithAuthorization: [
+        { name: "from", type: "address" },
+        { name: "to", type: "address" },
+        { name: "value", type: "uint256" },
+        { name: "validAfter", type: "uint256" },
+        { name: "validBefore", type: "uint256" },
+        { name: "nonce", type: "bytes32" },
+    ],
+};
+/** An EIP-3009 "exact" payer over a viem account. */
+export function evmPayer(privateKey, description) {
+    const account = privateKeyToAccount(privateKey);
+    return {
+        address: account.address,
+        description,
+        pay: async ({ required, option, nonce, nowSeconds }) => {
+            const chainId = Number(option.network.split(":")[1]);
+            const name = option.extra?.["name"];
+            const version = option.extra?.["version"];
+            if (!/^eip155:[0-9]+$/.test(option.network))
+                throw new Error(`not an EVM network: ${option.network}`);
+            if (typeof name !== "string" || typeof version !== "string")
+                throw new Error(`the payment requirements lack the EIP-712 domain (extra.name, extra.version) for asset ${option.asset}`);
+            if (!/^0x[0-9a-f]{64}$/.test(nonce))
+                throw new Error(`nonce must be 0x + 64 lowercase hex`);
+            const authorization = {
+                from: account.address,
+                to: getAddress(option.payTo),
+                value: option.amount,
+                validAfter: "0",
+                validBefore: String(nowSeconds + (option.maxTimeoutSeconds ?? 300)),
+                nonce,
+            };
+            const signature = await account.signTypedData({
+                domain: {
+                    name,
+                    version,
+                    chainId,
+                    verifyingContract: getAddress(option.asset),
+                },
+                types: TRANSFER_WITH_AUTHORIZATION,
+                primaryType: "TransferWithAuthorization",
+                message: {
+                    from: authorization.from,
+                    to: authorization.to,
+                    value: BigInt(authorization.value),
+                    validAfter: 0n,
+                    validBefore: BigInt(authorization.validBefore),
+                    nonce: nonce,
+                },
+            });
+            // The x402 v2 PaymentPayload, in the upstream client's field order.
+            const payload = {
+                x402Version: 2,
+                payload: { authorization, signature },
+                ...(required.resource !== undefined
+                    ? { resource: required.resource }
+                    : {}),
+                accepted: option,
+            };
+            return Buffer.from(JSON.stringify(payload), "utf8").toString("base64");
+        },
+    };
+}
+/**
+ * The caps, from configuration. Both amount caps are required once a payer
+ * is configured: a payer with no cap is refused, never defaulted.
+ *
+ *  - `MCP_REGISTER_PAY_MAX_PER_CALL`, `MCP_REGISTER_PAY_MAX_PER_DAY`: atomic
+ *    units of the asset (USDC has 6 decimals: 10000 is $0.01);
+ *  - `MCP_REGISTER_PAY_NETWORK` (default Base Sepolia, `eip155:84532`) and
+ *    `MCP_REGISTER_PAY_ASSET` (default Circle's USDC on Base Sepolia);
+ *  - `MCP_REGISTER_PAY_TO`: optional, the only payee;
+ *  - `MCP_REGISTER_PAY_ALLOW_MAINNET=1`: pay on a network that is not a
+ *    testnet. Off by default.
+ */
+export function readPaymentCaps(env) {
+    const misconfigured = (message) => new PayerError("payer_misconfigured", message);
+    const amount = (name) => {
+        const raw = env[name]?.trim();
+        if (!raw)
+            throw misconfigured(`${name} is required when a payer is configured: the server pays nothing without a cap`);
+        if (!ATOMIC.test(raw))
+            throw misconfigured(`${name} must be a whole number of atomic units (got ${raw})`);
+        return BigInt(raw);
+    };
+    const maxPerCallAtomic = amount("MCP_REGISTER_PAY_MAX_PER_CALL");
+    const maxPerDayAtomic = amount("MCP_REGISTER_PAY_MAX_PER_DAY");
+    const network = env["MCP_REGISTER_PAY_NETWORK"]?.trim() || DEFAULT_PAY_NETWORK;
+    if (!/^eip155:[0-9]+$/.test(network))
+        throw misconfigured(`MCP_REGISTER_PAY_NETWORK must be an EVM CAIP-2 id such as eip155:84532 (got ${network})`);
+    const asset = (env["MCP_REGISTER_PAY_ASSET"]?.trim() || DEFAULT_PAY_ASSET).toLowerCase();
+    if (!ADDRESS.test(asset))
+        throw misconfigured(`MCP_REGISTER_PAY_ASSET must be a 0x-prefixed 20-byte address (got ${asset})`);
+    if (env["MCP_REGISTER_PAY_ASSET"] === undefined &&
+        network !== DEFAULT_PAY_NETWORK)
+        throw misconfigured(`MCP_REGISTER_PAY_ASSET is required with MCP_REGISTER_PAY_NETWORK=${network}: the default asset is USDC on ${DEFAULT_PAY_NETWORK} only`);
+    const payTo = env["MCP_REGISTER_PAY_TO"]?.trim();
+    if (payTo && !ADDRESS.test(payTo))
+        throw misconfigured(`MCP_REGISTER_PAY_TO must be a 0x-prefixed 20-byte address (got ${payTo})`);
+    return {
+        network,
+        asset,
+        maxPerCallAtomic,
+        maxPerDayAtomic,
+        ...(payTo ? { payTo } : {}),
+        allowMainnet: env["MCP_REGISTER_PAY_ALLOW_MAINNET"] === "1",
+    };
+}
+//# sourceMappingURL=payer.js.map

package/dist/node/payer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payer.js","sourceRoot":"","sources":["../../src/node/payer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAIpB,MAAM,iBAAiB,CAAC;AAyBzB,MAAM,OAAO,UAAW,SAAQ,KAAK;IAExB;IADX,YACW,IAAiD,EAC1D,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAA6C;IAI5D,CAAC;CACF;AAED,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAC1C,MAAM,MAAM,GAAG,eAAe,CAAC;AAC/B,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,kCAAkC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QACzC,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,sBAAsB,IAAI,4DAA4D,CACvF,CAAC;IACJ,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,sBAAsB,IAAI,uCAAuC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAClH,CAAC;IACJ,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,sBAAsB,IAAI,8DAA8D,CACzF,CAAC;IACJ,OAAO,QAAQ,CAAC,IAAqB,EAAE,wBAAwB,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,2BAA2B,GAAG;IAClC,yBAAyB,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AAEX,qDAAqD;AACrD,MAAM,UAAU,QAAQ,CACtB,UAAyB,EACzB,WAAmB;IAEnB,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW;QACX,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ;gBACzD,MAAM,IAAI,KAAK,CACb,0FAA0F,MAAM,CAAC,KAAK,EAAE,CACzG,CAAC;YACJ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,MAAM,aAAa,GAAG;gBACpB,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC5B,KAAK,EAAE,MAAM,CAAC,MAAM;gBACpB,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;gBACnE,KAAK;aACN,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC5C,MAAM,EAAE;oBACN,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,iBAAiB,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5C;gBACD,KAAK,EAAE,2BAA2B;gBAClC,WAAW,EAAE,2BAA2B;gBACxC,OAAO,EAAE;oBACP,IAAI,EAAE,aAAa,CAAC,IAAI;oBACxB,EAAE,EAAE,aAAa,CAAC,EAAE;oBACpB,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;oBAClC,UAAU,EAAE,EAAE;oBACd,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;oBAC9C,KAAK,EAAE,KAAsB;iBAC9B;aACF,CAAC,CAAC;YACH,oEAAoE;YACpE,MAAM,OAAO,GAAG;gBACd,WAAW,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE;gBACrC,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;oBACjC,CAAC,CAAC,EAAE,CAAC;gBACP,QAAQ,EAAE,MAAM;aACjB,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAuC;IAEvC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,EAAE,CACxC,IAAI,UAAU,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;QACtC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG;YACN,MAAM,aAAa,CACjB,GAAG,IAAI,gFAAgF,CACxF,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACnB,MAAM,aAAa,CACjB,GAAG,IAAI,gDAAgD,GAAG,GAAG,CAC9D,CAAC;QACJ,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,+BAA+B,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC/D,MAAM,OAAO,GACX,GAAG,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC;IACjE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,MAAM,aAAa,CACjB,+EAA+E,OAAO,GAAG,CAC1F,CAAC;IACJ,MAAM,KAAK,GAAG,CACZ,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,iBAAiB,CAC3D,CAAC,WAAW,EAAE,CAAC;IAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACtB,MAAM,aAAa,CACjB,qEAAqE,KAAK,GAAG,CAC9E,CAAC;IACJ,IACE,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS;QAC3C,OAAO,KAAK,mBAAmB;QAE/B,MAAM,aAAa,CACjB,oEAAoE,OAAO,kCAAkC,mBAAmB,OAAO,CACxI,CAAC;IACJ,MAAM,KAAK,GAAG,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,MAAM,aAAa,CACjB,kEAAkE,KAAK,GAAG,CAC3E,CAAC;IACJ,OAAO;QACL,OAAO;QACP,KAAK;QACL,gBAAgB;QAChB,eAAe;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,YAAY,EAAE,GAAG,CAAC,gCAAgC,CAAC,KAAK,GAAG;KAC5D,CAAC;AACJ,CAAC"}

package/dist/node/resolve-input.d.ts

@@ -0,0 +1,19 @@
+export declare class InputError extends Error {
+    readonly code: "invalid_input";
+    constructor(message: string);
+}
+/** Bytes cross the MCP boundary as base64 — `b64` (the verifier's name) or
+ *  its alias `base64` — and stdio additionally accepts a path. */
+export type BytesInput = {
+    b64: string;
+} | {
+    base64: string;
+} | {
+    path: string;
+};
+/** Resolve one `{ b64 } | { base64 } | { path }` input to bytes. Throws `InputError`
+ *  — never a bare `Error` — so a caller can tell "your input was malformed"
+ *  from a programming error and turn it into a `structuredContent.problem`
+ *  rather than an uncaught exception. */
+export declare function resolveBytes(input: BytesInput, what?: string): Uint8Array;
+//# sourceMappingURL=resolve-input.d.ts.map

package/dist/node/resolve-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-input.d.ts","sourceRoot":"","sources":["../../src/node/resolve-input.ts"],"names":[],"mappings":"AAoBA,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAG,eAAe,CAAU;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED;kEACkE;AAClE,MAAM,MAAM,UAAU,GACpB;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAoC1D;;;yCAGyC;AACzC,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,SAAU,GAAG,UAAU,CAwB1E"}

package/dist/node/resolve-input.js

@@ -0,0 +1,76 @@
+/**
+ * The `node:fs` boundary. Base64 in, or a path read from disk — nothing
+ * else in `src/node` reads a file. Every core and net call in this package
+ * takes `Uint8Array`, never a path and never a base64 string; this module
+ * is where the MCP wire form of "bytes" (`{ base64 } | { path }`) becomes
+ * one, for `tools.ts` to pass on.
+ *
+ * Validates aggressively rather than trusting a malformed input to fail
+ * cleanly downstream: a bad base64 string that `Buffer.from` decodes
+ * anyway (silently dropping what it does not understand) would otherwise
+ * surface many calls later as a confusing "genesis document malformed" or
+ * "receipt malformed" — a typo dressed up as a verification failure.
+ * Mirrors `@forestrie/mcp-verify`'s `src/node/resolve-input.ts`. The wire
+ * field is `b64`, as the verifier names it; `base64` is accepted as an
+ * alias, permanently, because this package documented that name first
+ * and a caller who learned either server's shape must not be turned away
+ * by the other (plan-2609-08 U2).
+ */
+import { readFileSync } from "node:fs";
+export class InputError extends Error {
+    code = "invalid_input";
+    constructor(message) {
+        super(message);
+        this.name = "InputError";
+    }
+}
+/**
+ * Strict base64. `Buffer.from(s, "base64")` silently ignores anything it
+ * does not understand, so a plainly wrong string decodes to a few
+ * plausible bytes rather than failing here, where the message can still
+ * say which field was wrong.
+ */
+function decodeBase64(value, what, key) {
+    const trimmed = value.trim();
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(trimmed) || trimmed.length === 0) {
+        throw new InputError(`${what}.${key} is not valid base64 (standard alphabet, optional '=' padding)`);
+    }
+    const bytes = new Uint8Array(Buffer.from(trimmed, "base64"));
+    if (bytes.length === 0) {
+        throw new InputError(`${what}.${key} decoded to 0 bytes`);
+    }
+    // Round-trip guard: catches truncated / mis-padded input that Buffer would
+    // otherwise accept by discarding the incomplete trailing group.
+    if (Buffer.from(bytes).toString("base64").replace(/=+$/, "") !==
+        trimmed.replace(/=+$/, "")) {
+        throw new InputError(`${what}.${key} is not canonical base64 (it does not round-trip)`);
+    }
+    return bytes;
+}
+/** Resolve one `{ b64 } | { base64 } | { path }` input to bytes. Throws `InputError`
+ *  — never a bare `Error` — so a caller can tell "your input was malformed"
+ *  from a programming error and turn it into a `structuredContent.problem`
+ *  rather than an uncaught exception. */
+export function resolveBytes(input, what = "input") {
+    if ("b64" in input) {
+        return decodeBase64(input.b64, what, "b64");
+    }
+    if ("base64" in input) {
+        return decodeBase64(input.base64, what, "base64");
+    }
+    if (input.path.trim() === "") {
+        throw new InputError(`${what}.path is empty`);
+    }
+    let bytes;
+    try {
+        bytes = new Uint8Array(readFileSync(input.path));
+    }
+    catch (err) {
+        throw new InputError(`cannot read ${what}.path '${input.path}': ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (bytes.length === 0) {
+        throw new InputError(`${what}.path '${input.path}' is empty (0 bytes)`);
+    }
+    return bytes;
+}
+//# sourceMappingURL=resolve-input.js.map

package/dist/node/resolve-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-input.js","sourceRoot":"","sources":["../../src/node/resolve-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,GAAG,eAAwB,CAAC;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAOD;;;;;GAKG;AACH,SAAS,YAAY,CACnB,KAAa,EACb,IAAY,EACZ,GAAqB;IAErB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,IAAI,GAAG,gEAAgE,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,GAAG,qBAAqB,CAAC,CAAC;IAC5D,CAAC;IACD,2EAA2E;IAC3E,gEAAgE;IAChE,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACxD,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAC1B,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,IAAI,GAAG,mDAAmD,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;yCAGyC;AACzC,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,IAAI,GAAG,OAAO;IAC5D,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;QACnB,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,gBAAgB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAClB,eAAe,IAAI,UAAU,KAAK,CAAC,IAAI,MACrC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,UAAU,KAAK,CAAC,IAAI,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/node/server.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `createServer(deps?)` — the MCP adapter. No transport: the caller connects
+ * one (stdio from `cli.ts`, `InMemoryTransport` from the smoke test), which
+ * is also what lets an embedder mount tools on their own transport without
+ * the CLI.
+ *
+ * Tools register from `TOOL_NAMES` and prompts from `PROMPT_NAMES`
+ * (`text.ts`), in that order.
+ *
+ * The signers are seams: pass `deps.signer` (the log key) or
+ * `deps.authoritySigner` (the requester's authority key) to use a KMS or a
+ * remote signer. Without them, the defaults open local key files
+ * (`MCP_REGISTER_KEY_FILE`, else `log-key.jwk` in the home;
+ * `MCP_REGISTER_AUTHORITY_KEY_FILE`, else `authority-key.jwk`) at the first
+ * tool call that needs each, creating it then if it does not exist.
+ *
+ * The payer is a seam too: pass `deps.payer` for a hosted wallet. Without
+ * it, `MCP_REGISTER_PAYER_KEY_FILE` names a local EVM key file; with
+ * neither, register_grant runs in relay mode. The payer is never created.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Es256Signer } from "../core/signer.js";
+import { type PayerBackend } from "./payer.js";
+export declare const SERVER_NAME = "forestrie-mcp-register";
+export type { Es256Signer } from "../core/signer.js";
+export { openKeyFileSigner, publicKeyPem } from "./signer-file.js";
+export { evmPayer, openKeyFilePayer, readPaymentCaps } from "./payer.js";
+export type { PayerBackend } from "./payer.js";
+/** Every field optional; defaults to `process.env` / `globalThis.fetch` /
+ *  `() => new Date()` / the local key file, so tests can inject fakes
+ *  without touching the real network, environment or home directory. */
+export type Deps = {
+    fetchImpl?: typeof fetch;
+    env?: Record<string, string | undefined>;
+    now?: () => Date;
+    signer?: Es256Signer;
+    /** The requester's authority key; defaults to a local key file. */
+    authoritySigner?: Es256Signer;
+    /** Pays canopy's 402; defaults to MCP_REGISTER_PAYER_KEY_FILE, else none
+     *  (relay mode). */
+    payer?: PayerBackend;
+    /** Where registrations are kept; defaults to MCP_REGISTER_HOME. */
+    home?: string;
+    sleep?: (ms: number) => Promise<void>;
+};
+export declare function createServer(deps?: Deps): McpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/node/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/node/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAUrD,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAiCjE,eAAO,MAAM,WAAW,2BAA2B,CAAC;AAEpD,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACzE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;wEAEwE;AACxE,MAAM,MAAM,IAAI,GAAG;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mEAAmE;IACnE,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B;wBACoB;IACpB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,CAAC;AAUF,wBAAgB,YAAY,CAAC,IAAI,GAAE,IAAS,GAAG,SAAS,CAwOvD"}

package/dist/node/server.js

@@ -0,0 +1,212 @@
+/**
+ * `createServer(deps?)` — the MCP adapter. No transport: the caller connects
+ * one (stdio from `cli.ts`, `InMemoryTransport` from the smoke test), which
+ * is also what lets an embedder mount tools on their own transport without
+ * the CLI.
+ *
+ * Tools register from `TOOL_NAMES` and prompts from `PROMPT_NAMES`
+ * (`text.ts`), in that order.
+ *
+ * The signers are seams: pass `deps.signer` (the log key) or
+ * `deps.authoritySigner` (the requester's authority key) to use a KMS or a
+ * remote signer. Without them, the defaults open local key files
+ * (`MCP_REGISTER_KEY_FILE`, else `log-key.jwk` in the home;
+ * `MCP_REGISTER_AUTHORITY_KEY_FILE`, else `authority-key.jwk`) at the first
+ * tool call that needs each, creating it then if it does not exist.
+ *
+ * The payer is a seam too: pass `deps.payer` for a hosted wallet. Without
+ * it, `MCP_REGISTER_PAYER_KEY_FILE` names a local EVM key file; with
+ * neither, register_grant runs in relay mode. The payer is never created.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { PACKAGE_VERSION } from "../core/index.js";
+import { join } from "node:path";
+import { GrantStore } from "./grant-store.js";
+import { issueGrantInputShape, makeIssueGrantTool, makeRegisterGrantTool, registerGrantInputShape, } from "./grant-tools.js";
+import { SpendLedger } from "./ledger.js";
+import { openKeyFilePayer } from "./payer.js";
+import { openKeyFileSigner, registerHome, } from "./signer-file.js";
+import { RegistrationStore } from "./store.js";
+import { INSTRUCTIONS, PROMPT_DESCRIPTIONS, PROMPT_NAMES, PROMPT_TITLES, TOOL_DESCRIPTIONS, TOOL_NAMES, TOOL_TITLES, auditPromptText, issueAndPayPromptText, registerPromptText, } from "./text.js";
+import { checkRegistrationInputShape, delegateSealingInputShape, getLogKeyInputShape, makeCheckRegistrationTool, makeDelegateSealingTool, makeGetLogKeyTool, makeRegisterStatementTool, makeVerifyRegistrationTool, registerStatementInputShape, verifyRegistrationInputShape, } from "./tools.js";
+export const SERVER_NAME = "forestrie-mcp-register";
+export { openKeyFileSigner, publicKeyPem } from "./signer-file.js";
+export { evmPayer, openKeyFilePayer, readPaymentCaps } from "./payer.js";
+/** Writes to the operator's log and to the local store; never destroys. */
+const WRITE = {
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: false,
+    openWorldHint: true,
+};
+export function createServer(deps = {}) {
+    const env = deps.env ?? process.env;
+    const home = deps.home ?? registerHome(env);
+    const keyFile = env["MCP_REGISTER_KEY_FILE"] ?? join(home, "log-key.jwk");
+    const authorityKeyFile = env["MCP_REGISTER_AUTHORITY_KEY_FILE"] ?? join(home, "authority-key.jwk");
+    const payerKeyFile = env["MCP_REGISTER_PAYER_KEY_FILE"];
+    /** A lazily opened key-file signer, unless the embedder passed one. */
+    const lazySigner = (path, role, given) => {
+        let opened;
+        const open = (create) => openKeyFileSigner(path, { create, role }).catch((err) => {
+            opened = undefined;
+            throw err;
+        });
+        return (options) => {
+            if (given !== undefined)
+                return Promise.resolve(given);
+            if (opened !== undefined)
+                return opened;
+            // A no-create open is not remembered: a later call may create.
+            if (options?.create === false)
+                return open(false);
+            return (opened = open(true));
+        };
+    };
+    let payer = deps.payer;
+    const resolved = {
+        fetchImpl: deps.fetchImpl ?? ((...a) => globalThis.fetch(...a)),
+        env,
+        now: deps.now ?? (() => new Date()),
+        signer: lazySigner(keyFile, "log", deps.signer),
+        authoritySigner: lazySigner(authorityKeyFile, "authority", deps.authoritySigner),
+        payer: () => {
+            if (payer === undefined && payerKeyFile)
+                payer = openKeyFilePayer(payerKeyFile);
+            return payer;
+        },
+        protectedPaths: [
+            keyFile,
+            authorityKeyFile,
+            ...(payerKeyFile ? [payerKeyFile] : []),
+            home,
+        ],
+        store: new RegistrationStore(home),
+        grants: new GrantStore(home),
+        ledger: new SpendLedger(home),
+        ...(deps.sleep !== undefined ? { sleep: deps.sleep } : {}),
+    };
+    const server = new McpServer({ name: SERVER_NAME, version: PACKAGE_VERSION }, { instructions: INSTRUCTIONS });
+    server.registerTool(TOOL_NAMES[0], {
+        title: TOOL_TITLES.get_log_key,
+        description: TOOL_DESCRIPTIONS.get_log_key,
+        inputSchema: getLogKeyInputShape,
+        // May create the key file on first use; otherwise reads it.
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, makeGetLogKeyTool(resolved));
+    server.registerTool(TOOL_NAMES[1], {
+        title: TOOL_TITLES.register_statement,
+        description: TOOL_DESCRIPTIONS.register_statement,
+        inputSchema: registerStatementInputShape,
+        annotations: WRITE,
+    }, makeRegisterStatementTool(resolved));
+    server.registerTool(TOOL_NAMES[2], {
+        title: TOOL_TITLES.check_registration,
+        description: TOOL_DESCRIPTIONS.check_registration,
+        inputSchema: checkRegistrationInputShape,
+        // Reads canopy; saves the receipt locally once sealed.
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+    }, makeCheckRegistrationTool(resolved));
+    server.registerTool(TOOL_NAMES[3], {
+        title: TOOL_TITLES.verify_registration,
+        description: TOOL_DESCRIPTIONS.verify_registration,
+        inputSchema: verifyRegistrationInputShape,
+        // Offline: reads the local store and the key's public half only; never
+        // creates a key.
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, makeVerifyRegistrationTool(resolved));
+    server.registerTool(TOOL_NAMES[4], {
+        title: TOOL_TITLES.delegate_sealing,
+        description: TOOL_DESCRIPTIONS.delegate_sealing,
+        inputSchema: delegateSealingInputShape,
+        annotations: WRITE,
+    }, makeDelegateSealingTool(resolved));
+    server.registerTool(TOOL_NAMES[5], {
+        title: TOOL_TITLES.issue_grant,
+        description: TOOL_DESCRIPTIONS.issue_grant,
+        inputSchema: issueGrantInputShape,
+        // Signs and saves locally; sends nothing.
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
+    }, makeIssueGrantTool(resolved));
+    server.registerTool(TOOL_NAMES[6], {
+        title: TOOL_TITLES.register_grant,
+        description: TOOL_DESCRIPTIONS.register_grant,
+        inputSchema: registerGrantInputShape,
+        // Writes to the operator's log, and may spend from the payer.
+        annotations: WRITE,
+    }, makeRegisterGrantTool(resolved));
+    server.registerPrompt(PROMPT_NAMES[0], {
+        title: PROMPT_TITLES.register,
+        description: PROMPT_DESCRIPTIONS.register,
+        argsSchema: {
+            what: z
+                .string()
+                .optional()
+                .describe("what to register, in a few words (optional)"),
+        },
+    }, (args) => ({
+        messages: [
+            {
+                role: "user",
+                content: { type: "text", text: registerPromptText(args) },
+            },
+        ],
+    }));
+    server.registerPrompt(PROMPT_NAMES[1], {
+        title: PROMPT_TITLES.audit,
+        description: PROMPT_DESCRIPTIONS.audit,
+        argsSchema: {
+            contentHash: z
+                .string()
+                .optional()
+                .describe("the registration to audit (optional)"),
+        },
+    }, (args) => ({
+        messages: [
+            {
+                role: "user",
+                content: { type: "text", text: auditPromptText(args) },
+            },
+        ],
+    }));
+    server.registerPrompt(PROMPT_NAMES[2], {
+        title: PROMPT_TITLES["issue-and-pay"],
+        description: PROMPT_DESCRIPTIONS["issue-and-pay"],
+        argsSchema: {
+            purpose: z
+                .string()
+                .optional()
+                .describe("what the grant is for, in a few words (optional)"),
+        },
+    }, (args) => ({
+        messages: [
+            {
+                role: "user",
+                content: { type: "text", text: issueAndPayPromptText(args) },
+            },
+        ],
+    }));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/node/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/node/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAqB,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,iBAAiB,EACjB,YAAY,GAEb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,GAE7B,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAGpD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAqBzE,2EAA2E;AAC3E,MAAM,KAAK,GAAG;IACZ,YAAY,EAAE,KAAK;IACnB,eAAe,EAAE,KAAK;IACtB,cAAc,EAAE,KAAK;IACrB,aAAa,EAAE,IAAI;CACX,CAAC;AAEX,MAAM,UAAU,YAAY,CAAC,OAAa,EAAE;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GACpB,GAAG,CAAC,iCAAiC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAExD,uEAAuE;IACvE,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,IAAa,EACb,KAA8B,EACN,EAAE;QAC1B,IAAI,MAAgE,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC,MAAe,EAAE,EAAE,CAC/B,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC/D,MAAM,GAAG,SAAS,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACL,OAAO,CAAC,OAAO,EAAE,EAAE;YACjB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC;YACxC,+DAA+D;YAC/D,IAAI,OAAO,EAAE,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,KAAK,GAA6B,IAAI,CAAC,KAAK,CAAC;IACjD,MAAM,QAAQ,GAAiB;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,GAAG;QACH,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QAC/C,eAAe,EAAE,UAAU,CACzB,gBAAgB,EAChB,WAAW,EACX,IAAI,CAAC,eAAe,CACrB;QACD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,KAAK,KAAK,SAAS,IAAI,YAAY;gBACrC,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,cAAc,EAAE;YACd,OAAO;YACP,gBAAgB;YAChB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI;SACL;QACD,KAAK,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,EAC/C,EAAE,YAAY,EAAE,YAAY,EAAE,CAC/B,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,CAAC,CAAC,EACb;QACE,KAAK,EAAE,WAAW,CAAC,WAAW;QAC9B,WAAW,EAAE,iBAAiB,CAAC,WAAW;QAC1C,WAAW,EAAE,mBAAmB;QAChC,4DAA4D;QAC5D,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,iBAAiB,CAAC,QAAQ,CAAC,CAC5B,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,CAAC,CAAC,EACb;QACE,KAAK,EAAE,WAAW,CAAC,kBAAkB;QACrC,WAAW,EAAE,iBAAiB,CAAC,kBAAkB;QACjD,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,KAAK;KACnB,EACD,yBAAyB,CAAC,QAAQ,CAAC,CACpC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,CAAC,CAAC,EACb;QACE,KAAK,EAAE,WAAW,CAAC,kBAAkB;QACrC,WAAW,EAAE,iBAAiB,CAAC,kBAAkB;QACjD,WAAW,EAAE,2BAA2B;QACxC,uDAAuD;QACvD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,yBAAyB,CAAC,QAAQ,CAAC,CACpC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,CAAC,CAAC,EACb;QACE,KAAK,EAAE,WAAW,CAAC,mBAAmB;QACtC,WAAW,EAAE,iBAAiB,CAAC,mBAAmB;QAClD,WAAW,EAAE,4BAA4B;QACzC,uEAAuE;QACvE,iBAAiB;QACjB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,0BAA0B,CAAC,QAAQ,CAAC,CACrC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,CAAC,CAAC,EACb;QACE,KAAK,EAAE,WAAW,CAAC,gBAAgB;QACnC,WAAW,EAAE,iBAAiB,CAAC,gBAAgB;QAC/C,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,KAAK;KACnB,EACD,uBAAuB,CAAC,QAAQ,CAAC,CAClC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,CAAC,CAAC,EACb;QACE,KAAK,EAAE,WAAW,CAAC,WAAW;QAC9B,WAAW,EAAE,iBAAiB,CAAC,WAAW;QAC1C,WAAW,EAAE,oBAAoB;QACjC,0CAA0C;QAC1C,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,kBAAkB,CAAC,QAAQ,CAAC,CAC7B,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,CAAC,CAAC,EACb;QACE,KAAK,EAAE,WAAW,CAAC,cAAc;QACjC,WAAW,EAAE,iBAAiB,CAAC,cAAc;QAC7C,WAAW,EAAE,uBAAuB;QACpC,8DAA8D;QAC9D,WAAW,EAAE,KAAK;KACnB,EACD,qBAAqB,CAAC,QAAQ,CAAC,CAChC,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,YAAY,CAAC,CAAC,CAAC,EACf;QACE,KAAK,EAAE,aAAa,CAAC,QAAQ;QAC7B,WAAW,EAAE,mBAAmB,CAAC,QAAQ;QACzC,UAAU,EAAE;YACV,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;SAC3D;KACF,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACT,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE;aAC1D;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,YAAY,CAAC,CAAC,CAAC,EACf;QACE,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,WAAW,EAAE,mBAAmB,CAAC,KAAK;QACtC,UAAU,EAAE;YACV,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,sCAAsC,CAAC;SACpD;KACF,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACT,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE;aACvD;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,YAAY,CAAC,CAAC,CAAC,EACf;QACE,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC;QACrC,WAAW,EAAE,mBAAmB,CAAC,eAAe,CAAC;QACjD,UAAU,EAAE;YACV,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;SAChE;KACF,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACT,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE;aAC7D;SACF;KACF,CAAC,CACH,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/node/signer-file.d.ts

@@ -0,0 +1,34 @@
+import type { Es256Signer } from "../core/signer.js";
+export declare class KeyFileError extends Error {
+    readonly code: "signer_unavailable";
+}
+/** `$MCP_REGISTER_HOME`, else `$XDG_CONFIG_HOME/forestrie/mcp-register`, else `~/.config/…`. */
+export declare function registerHome(env: Record<string, string | undefined>): string;
+/**
+ * The two ES256 keys this server can hold. The log key owns the performer's
+ * data log; the authority key owns the requester's authority log and signs
+ * the child grants issue_grant makes. They are separate files so that
+ * whoever can write to one log cannot issue grants under the other.
+ */
+export type KeyRole = "log" | "authority";
+export interface KeyFileSigner extends Es256Signer {
+    readonly path: string;
+    /** True when this process created the key file. */
+    readonly created: boolean;
+}
+/**
+ * Load the key at `path`. Lazy by design: the server opens the signer at the
+ * first tool call that needs it, so starting the server never writes a
+ * file. With `create` (the default) a missing key is created; without it a
+ * missing key is a `KeyFileError`, so a read-only tool never makes one.
+ *
+ * Refused, like ssh refuses a loose private key: a key path that is a
+ * symlink, or a key file readable or writable by group or others.
+ */
+export declare function openKeyFileSigner(path: string, options?: {
+    create?: boolean;
+    role?: KeyRole;
+}): Promise<KeyFileSigner>;
+/** The public key as an SPKI PEM, the form forestrie-cli's `--signer-pem` reads. */
+export declare function publicKeyPem(xy: Uint8Array): string;
+//# sourceMappingURL=signer-file.d.ts.map