@hopivia/mcp 0.2.0 → 0.3.0

package/README.md

@@ -43,6 +43,7 @@ Claude Desktop, Cursor, Windsurf — add to the client's MCP config (`claude_des
 | `get_balances` | native + token balances of an address |
 | `get_delegation` | delegated access: tokens, daily caps, what is left today, expiry and allowance an owner granted the agent on the Hopivia delegation contract (BNB Chain) |
 | `api_key_info` | tier, limit and usage of the configured key |
+| `list_wallets`, `send_tokens`, `swap_tokens` | sign and send from local agent wallets — see below |
 
 Resource `hopivia://docs` — the full API guide as Markdown (same as <https://hopivia.com/docs.md>).
 
@@ -52,6 +53,79 @@ Recipients: `build_swap_transactions`, `get_bridge_quote` and `build_bridge_tran
 
 Refusals of the API (HTTP 422: `simulation_reverted`, `price_impact_too_high`, `token_risk_high`, `insufficient_balance`, `delegation_not_allowed`, `delegation_cap_exceeded`, `delegation_expired`, `delegation_token_out_not_allowed`, `delegation_allowance_low`) come back as tool errors with the API's `error` and `message`, so the agent can explain and fix the request.
 
+## Local wallets: transfers and swaps the agent sends itself
+
+Besides building unsigned transactions, the server can sign with **a separate wallet you fund for the agent** ("wallet B"): put a few dollars and some gas on it, give it a name, and ask in plain language: *"send 100 USDT from work to mom on BSC"*.
+
+Easiest: run the setup and answer the questions — it creates the wallet, the limits and contacts, writes the file with owner-only permissions and connects Claude Desktop:
+
+```bash
+npx -y @hopivia/mcp setup
+```
+
+Or create `~/.hopivia/wallets.json` (or point `HOPIVIA_WALLETS_FILE` elsewhere) by hand and make it readable only by you (`chmod 600`):
+
+```json
+{
+  "wallets":  { "work": "0x<private key of the agent wallet>" },
+  "contacts": { "mom": "0x…", "exchange": "0x…" },
+  "limits":   { "perTransferUsd": 100, "dailyUsd": 200 },
+  "confirm":  "new",
+  "language": "en",
+  "defaultChain": "bsc"
+}
+```
+
+On macOS `setup` can keep the key in the **Keychain** instead of the file (`"work": { "address": "0x…", "keychain": true }`): the item trusts no application, so every transfer shows the macOS prompt and nothing reads the key silently. The key is loaded only when the wallet signs.
+
+| Tool | What it does |
+|---|---|
+| `list_wallets` | wallet names and addresses (never keys), contacts, limits, USD spent in the last 24 h; balances with `chain` |
+| `send_tokens` | sends a token from a named wallet to a contact name, the name of another of your wallets (*"send 50 USDT from 1 to a"*) or a 0x address, signs and waits for confirmation on-chain |
+| `send_tokens_batch` | pays up to 50 recipients from one wallet (e.g. a list from a file): the whole list is validated first (addresses, duplicates, balance with fees, limits), one approval window shows every row, then payments go out one by one and stop at the first failure |
+| `swap_tokens` | swaps inside a named wallet at the best price; the output stays in the wallet (e.g. to get the chain coin for gas) |
+
+Rules the server enforces, whatever the model is told:
+
+- **Fees included or on top.** By default the recipient gets exactly the amount and the fees come on top. Say "including fees" and the wallet spends exactly the amount; the recipient gets it minus the fees. Every result and confirmation states the total fees (network + service) in USD.
+- **New addresses need you.** Your contacts and your own wallets count as known (a contact wins when a contact and a wallet share a name). A recipient that is not one of them is confirmed by you directly: the MCP client shows a form (MCP elicitation) or, on macOS, a system dialog. Decline, or no way to ask, and nothing is sent. `"confirm"`: `"always"` asks for every transfer, `"new"` (default) only for addresses outside the contacts, `"never"` lets the agent act alone within the limits (a token without a USD price is still confirmed). The window shows the wallet, the recipient, what the recipient gets, what leaves the wallet and the total fees, in `"language"` (`ru` or `en`).
+- **Limits.** Per transfer and per rolling 24 hours, in USD, checked before signing.
+- **Fee.** Every transfer pays a visible Hopivia fee of **$0.01**. On chains with the Hopivia transfer contract the amount and the fee go in **one transaction**: the wallet signs a Permit2 permit that names the recipient, the amount and a fee ceiling, and the contract sends both. The first transfer of each token adds a one-time approval to Permit2. Elsewhere the fee is a second, separate transfer. Swaps pay the usual 0.15 % aggregator fee.
+- **The API is not trusted with your funds.** Before signing, the server decodes every transaction the API prepared and checks the recipient, the amount (decimals read from the chain), the fee wallet, a fee ceiling of 2 % and the contract addresses pinned in this package. Anything else is refused with `plan_rejected` and nothing is signed. Swaps must go through the pinned Hopivia aggregator and pay out to the same wallet.
+- **No gas, no transfer.** If the wallet lacks the chain coin, the tool says exactly how much to send. Swapping a token into the coin also needs gas, so it only helps while some is left.
+- **Keys stay local.** They are read from the file, used to sign, and never printed, sent to the API or returned by a tool.
+
+What can still go wrong: anyone or anything that can read the file (malware on the machine) can use the wallet, so keep on it only what you are ready to lose; and a new address you confirm without checking is still sent.
+
+## Claude on the phone (remote connector)
+
+The Claude mobile app cannot start a local MCP server; it uses connectors that run on a server. Hopivia hosts one:
+
+```
+https://hopivia.com/api/v1/mcp
+```
+
+Streamable HTTP, stateless (every POST is answered with plain JSON; GET and DELETE return 405), no sign-in. Add it once on claude.ai in a browser: **Settings → Connectors → Add custom connector**, name `Hopivia`, the URL above. The connector then shows up in the Claude apps on the phone and the desktop under the same account. Claude Code can use it too: `claude mcp add --transport http hopivia https://hopivia.com/api/v1/mcp`.
+
+No keys ever reach this server, so it has no wallet tools. Tools in remote mode: `list_chains`, `list_tokens`, `get_quote`, `get_bridge_quote`, `get_bridge_status`, `check_token`, `get_balances`, `get_delegation` and `transfer_link`. The unsigned-transaction builders (`build_swap_transactions`, `build_bridge_transactions`) are left out: a chat on the phone has nothing to sign them with.
+
+How a transfer works:
+
+1. The user writes *"send 50 USDT to mom on BSC, her address is 0x…"*.
+2. Claude calls `transfer_link` with the network, the token, the address the user typed, the amount and, if the user said so, "including fees". The tool checks the address (not zero, not the token contract, a mixed-case address must match its checksum), the network, the token and the amount, and asks the API for the fees: `GET /api/v1/transfer/estimate`.
+3. Claude answers with a link and what will happen, in the user's language:
+   ```
+   Ссылка для перевода: https://hopivia.com/pay?chain=bsc&token=USDT&to=0x…&amount=50&fees=ontop&lang=ru&label=%D0%9C%D0%B0%D0%BC%D0%B0
+   Получатель получит: 50 USDT
+   С кошелька уйдёт: 50.01 USDT
+   Комиссия: ≈ $0.015
+   ```
+4. The user opens the link on hopivia.com, connects their own wallet (MetaMask, Trust Wallet, WalletConnect), checks the recipient, the amount and the fees, and signs. Nothing moves before that signature; Claude cannot see whether the user signed.
+
+The link: `<site>/pay?chain=<bsc|ethereum|polygon|arbitrum|base|optimism|avalanche>&token=<symbol or 0x address>&to=<checksummed 0x address>&amount=<decimal>&fees=<ontop|included>&lang=<ru|en>[&label=<recipient name, at most 40 characters>]`. The fee figure is an estimate without the sender's wallet (typical gas for the network + the $0.01 service fee); the page shows the exact one. Lists of recipients (a batch link) are not supported yet.
+
+Self-hosting: the endpoint is part of the API (`services/api`, route `/api/v1/mcp`); it runs `createServer({ mode: 'remote' })` in process and calls the API's own handlers. Its rate limit is per address or key, `RATE_MCP` requests per minute (default 300), since connector traffic arrives from the client provider's servers.
+
 ## Environment
 
 | Variable | Default | Meaning |
@@ -59,6 +133,8 @@ Refusals of the API (HTTP 422: `simulation_reverted`, `price_impact_too_high`, `
 | `HOPIVIA_API_KEY` | — | `X-API-Key` for higher limits |
 | `HOPIVIA_API_URL` | `https://hopivia.com/api/v1` | API base (point it at a local API for development) |
 | `HOPIVIA_SITE_URL` | `https://hopivia.com` | site base for docs links and the docs resource |
+| `HOPIVIA_WALLETS_FILE` | `~/.hopivia/wallets.json` | local wallets, contacts and limits |
+| `RPC_<chainId>` | public nodes | RPC used to send from local wallets, e.g. `RPC_56` |
 
 ## Programmatic use
 
@@ -70,6 +146,8 @@ const server = createServer({ apiKey: process.env.HOPIVIA_API_KEY });
 await server.connect(new StdioServerTransport());
 ```
 
+Remote (HTTP) mode: `handleRemoteRequest(request, { baseUrl, siteUrl, parsedBody })` takes a web `Request` and returns a `Response`; it builds a fresh `createServer({ mode: 'remote' })` per request.
+
 ## Development
 
 ```bash

package/dist/cli.js

@@ -6,6 +6,11 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { createServer } from './server.js';
 import { VERSION } from './version.js';
 const arg = process.argv[2];
+if (arg === 'setup') {
+    const { runSetup } = await import('./setup.js');
+    await runSetup();
+    process.exit(0);
+}
 if (arg === '--version' || arg === '-v') {
     console.log(VERSION);
     process.exit(0);
@@ -14,12 +19,14 @@ if (arg === '--help' || arg === '-h') {
     console.log(`@hopivia/mcp ${VERSION} — MCP server for the Hopivia API (https://hopivia.com/docs)
 
 Usage: hopivia-mcp            start the stdio server (what MCP clients run)
+       hopivia-mcp setup      create the local agent wallet, limits and contacts, connect Claude Desktop
        hopivia-mcp --version
 
 Environment:
   HOPIVIA_API_KEY   optional X-API-Key; free keys at https://hopivia.com/agents
   HOPIVIA_API_URL   API base, default https://hopivia.com/api/v1
   HOPIVIA_SITE_URL  site base for docs links, default https://hopivia.com
+  HOPIVIA_WALLETS_FILE  local agent wallets, default ~/.hopivia/wallets.json
 
 Claude Code:   claude mcp add hopivia -- npx -y @hopivia/mcp
 Claude Desktop / Cursor: {"mcpServers":{"hopivia":{"command":"npx","args":["-y","@hopivia/mcp"]}}}`);

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,0GAA0G;AAC1G,uGAAuG;AACvG,kDAAkD;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5B,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO;;;;;;;;;;;mGAW8D,CAAC,CAAC;IACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;IACnC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;IACpC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;IACrC,SAAS,EAAE,eAAe,OAAO,EAAE;CACpC,CAAC,CAAC;AACH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,0GAA0G;AAC1G,uGAAuG;AACvG,kDAAkD;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5B,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IACpB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,QAAQ,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO;;;;;;;;;;;;;mGAa8D,CAAC,CAAC;IACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;IACnC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;IACpC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;IACrC,SAAS,EAAE,eAAe,OAAO,EAAE;CACpC,CAAC,CAAC;AACH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC"}

package/dist/confirm.d.ts

@@ -0,0 +1,8 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export type ConfirmResult = {
+    ok: boolean;
+    via: 'elicitation' | 'dialog' | 'none';
+    reason?: string;
+};
+export type Confirmer = (server: McpServer, text: string) => Promise<ConfirmResult>;
+export declare const defaultConfirmer: Confirmer;

package/dist/confirm.js

@@ -0,0 +1,34 @@
+// Asking the USER (not the model) to approve a transfer. The model can be talked into a wrong
+// recipient by text it reads, so for addresses outside the contacts the approval must come from a
+// channel the model cannot answer: MCP elicitation (the client shows a form to the user) or, on
+// macOS when the client lacks it, a native dialog. Without either, the transfer is refused.
+import { execFile } from 'node:child_process';
+function macDialog(text) {
+    // AppleScript string literal: escape backslashes and quotes; no other interpolation
+    const esc = text.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+    const script = `display dialog "${esc}" with title "Hopivia — confirm transfer" buttons {"Cancel", "Send"} default button "Cancel" cancel button "Cancel" with icon caution giving up after 120`;
+    return new Promise((resolve) => {
+        execFile('osascript', ['-e', script], { timeout: 130_000 }, (err, stdout) => resolve(!err && /button returned:Send/.test(stdout) && !/gave up:true/.test(stdout)));
+    });
+}
+export const defaultConfirmer = async (server, text) => {
+    const caps = server.server.getClientCapabilities();
+    if (caps?.elicitation) {
+        try {
+            const r = await server.server.elicitInput({
+                mode: 'form',
+                message: text,
+                requestedSchema: { type: 'object', properties: { send: { type: 'boolean', title: 'Send this transfer', default: false } }, required: ['send'] },
+            });
+            return { ok: r.action === 'accept' && r.content?.send === true, via: 'elicitation', ...(r.action !== 'accept' ? { reason: `user chose ${r.action}` } : {}) };
+        }
+        catch (e) {
+            if (process.platform !== 'darwin')
+                return { ok: false, via: 'none', reason: `confirmation failed: ${e.message}` };
+        }
+    }
+    if (process.platform === 'darwin')
+        return { ok: await macDialog(text), via: 'dialog' };
+    return { ok: false, via: 'none', reason: 'this MCP client cannot ask the user for confirmation' };
+};
+//# sourceMappingURL=confirm.js.map

package/dist/confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../src/confirm.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,kGAAkG;AAClG,gGAAgG;AAChG,4FAA4F;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAM9C,SAAS,SAAS,CAAC,IAAY;IAC7B,oFAAoF;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,mBAAmB,GAAG,2JAA2J,CAAC;IACjM,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrK,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAc,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;IACnD,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;gBACxC,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,IAAI;gBACb,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;aAChJ,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAK,CAAC,CAAC,OAA0C,EAAE,IAAI,KAAK,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnM,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAyB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/H,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;AACpG,CAAC,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,5 @@
+import { type ServerOptions } from './server.js';
+export type RemoteOptions = Omit<ServerOptions, 'mode' | 'wallets' | 'signer' | 'confirmer' | 'spendLog'>;
+export declare function handleRemoteRequest(req: Request, opts: RemoteOptions & {
+    parsedBody?: unknown;
+}): Promise<Response>;

package/dist/http.js

@@ -0,0 +1,26 @@
+// The hosted (remote) MCP endpoint over Streamable HTTP, stateless: every POST gets a fresh server
+// and transport and the answer is plain JSON, so any number of API instances can serve it and
+// nothing outlives the request. Framework-neutral (web Request in, Response out); the API mounts
+// it at POST /api/v1/mcp.
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { createServer } from './server.js';
+export async function handleRemoteRequest(req, opts) {
+    // Stateless: no session to resume (GET would open a server-to-client stream) or to end (DELETE)
+    if (req.method !== 'POST') {
+        return new Response(JSON.stringify({ jsonrpc: '2.0', error: { code: -32000, message: 'Method not allowed: this MCP endpoint is stateless, send JSON-RPC with POST' }, id: null }), {
+            status: 405, headers: { 'content-type': 'application/json', allow: 'POST' },
+        });
+    }
+    const { parsedBody, ...serverOpts } = opts;
+    const server = createServer({ ...serverOpts, mode: 'remote' });
+    const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined, enableJsonResponse: true });
+    await server.connect(transport);
+    try {
+        return await transport.handleRequest(req, parsedBody !== undefined ? { parsedBody } : undefined);
+    }
+    finally {
+        await transport.close().catch(() => undefined);
+        await server.close().catch(() => undefined);
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,8FAA8F;AAC9F,iGAAiG;AACjG,0BAA0B;AAC1B,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAI/D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,IAA8C;IACpG,gGAAgG;IAChG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,6EAA6E,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;YACjL,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5H,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnG,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,5 @@
 export { createServer, type ServerOptions } from './server.js';
+export { handleRemoteRequest, type RemoteOptions } from './http.js';
+export { payLink, PAY_CHAINS } from './transferLink.js';
 export { HopiviaClient, ApiError, type ClientOptions } from './client.js';
 export { VERSION } from './version.js';

package/dist/index.js

@@ -1,4 +1,6 @@
 export { createServer } from './server.js';
+export { handleRemoteRequest } from './http.js';
+export { payLink, PAY_CHAINS } from './transferLink.js';
 export { HopiviaClient, ApiError } from './client.js';
 export { VERSION } from './version.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAsB,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAsB,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAsB,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/dist/keychain.d.ts

@@ -0,0 +1,5 @@
+export declare const KEYCHAIN_SERVICE = "hopivia-agent-wallet";
+export declare const keychainAvailable: () => boolean;
+export declare function keychainStore(account: string, privateKey: string, keychain?: string): void;
+export declare function keychainRead(account: string, keychain?: string): Promise<string>;
+export declare function keychainDelete(account: string, keychain?: string): void;

package/dist/keychain.js

@@ -0,0 +1,29 @@
+// macOS Keychain storage for agent wallet keys (the `security` tool that ships with macOS).
+// Items are created with an EMPTY list of trusted applications (-T ""), so every read shows the
+// system dialog "… wants to use your confidential information" and needs the user's approval:
+// a program that merely runs as the user cannot read the key silently, unlike a plain file.
+import { execFile, execFileSync } from 'node:child_process';
+export const KEYCHAIN_SERVICE = 'hopivia-agent-wallet';
+export const keychainAvailable = () => process.platform === 'darwin';
+export function keychainStore(account, privateKey, keychain) {
+    // -U updates an existing item. The key passes through argv for the duration of this call only.
+    execFileSync('security', ['add-generic-password', '-U', '-s', KEYCHAIN_SERVICE, '-a', account, '-T', '', '-w', privateKey, ...(keychain ? [keychain] : [])], { stdio: 'ignore' });
+}
+// Asynchronous: the approval dialog may stay open while the user decides
+export function keychainRead(account, keychain) {
+    return new Promise((resolve, reject) => {
+        execFile('security', ['find-generic-password', '-s', KEYCHAIN_SERVICE, '-a', account, '-w', ...(keychain ? [keychain] : [])], { timeout: 180_000 }, (err, stdout) => {
+            if (err)
+                reject(new Error(`the key of "${account}" was not released by the macOS Keychain (denied, timed out or missing)`));
+            else
+                resolve(stdout.trim());
+        });
+    });
+}
+export function keychainDelete(account, keychain) {
+    try {
+        execFileSync('security', ['delete-generic-password', '-s', KEYCHAIN_SERVICE, '-a', account, ...(keychain ? [keychain] : [])], { stdio: 'ignore' });
+    }
+    catch { /* not there */ }
+}
+//# sourceMappingURL=keychain.js.map

package/dist/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAC9F,4FAA4F;AAC5F,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AACvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAErE,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,UAAkB,EAAE,QAAiB;IAClF,+FAA+F;IAC/F,YAAY,CAAC,UAAU,EAAE,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACpL,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,QAAiB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAClK,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,OAAO,yEAAyE,CAAC,CAAC,CAAC;;gBACvH,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAAiB;IAC/D,IAAI,CAAC;QAAC,YAAY,CAAC,UAAU,EAAE,CAAC,yBAAyB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;AACvL,CAAC"}

package/dist/messages.d.ts

@@ -0,0 +1,46 @@
+export type Lang = 'ru' | 'en';
+export declare function detectLang(configured?: unknown): Lang;
+export type ConfirmFacts = {
+    wallet: string;
+    walletAddress: string;
+    recipient: string;
+    recipientName?: string;
+    knownRecipient: boolean;
+    chain: string;
+    symbol: string;
+    received: string;
+    spent?: string;
+    feesUsd?: number;
+    gasSymbol: string;
+    gasMax: string;
+    feesIncluded: boolean;
+};
+export declare function confirmText(f: ConfirmFacts, lang: Lang): string;
+export type BatchFacts = {
+    wallet: string;
+    walletAddress: string;
+    chain: string;
+    symbol: string;
+    rows: {
+        name?: string;
+        address: string;
+        amount: string;
+        known: boolean;
+    }[];
+    total: string;
+    feesUsd?: number;
+    feesIncluded: boolean;
+};
+export declare function batchConfirmText(f: BatchFacts, lang: Lang): string;
+export type LinkFacts = {
+    link: string;
+    chain: string;
+    symbol: string;
+    recipient: string;
+    label?: string;
+    received?: string;
+    spent?: string;
+    feesUsd?: number;
+    serviceUsd: number;
+};
+export declare function transferLinkText(f: LinkFacts, lang: Lang): string;

package/dist/messages.js

@@ -0,0 +1,82 @@
+export function detectLang(configured) {
+    if (configured === 'ru' || configured === 'en')
+        return configured;
+    return /^ru/i.test(process.env.LANG ?? process.env.LC_ALL ?? '') ? 'ru' : 'en';
+}
+const usd = (x) => (x >= 0.1 ? x.toFixed(2) : x >= 0.01 ? x.toFixed(3) : x.toFixed(4));
+export function confirmText(f, lang) {
+    const who = f.recipientName ? `«${f.recipientName}» ${f.recipient}` : f.recipient;
+    if (lang === 'ru') {
+        return [
+            `Перевести ${f.symbol} в сети ${f.chain}`,
+            `С кошелька: «${f.wallet}» ${f.walletAddress}`,
+            `Кому: ${who}`,
+            f.knownRecipient ? '' : '⚠ Этого адреса нет в ваших контактах. Сверьте его до последнего символа.',
+            `Получатель получит: ${f.received} ${f.symbol}`,
+            f.spent ? `С кошелька уйдёт: ${f.spent} ${f.symbol}${f.feesIncluded ? ' (комиссия включена)' : ''}` : '',
+            f.feesUsd !== undefined ? `Комиссия: ≈ $${usd(f.feesUsd)}` : `Комиссия: газ до ${f.gasMax} ${f.gasSymbol} и $0.01`,
+            'Подтвердить перевод?',
+        ].filter(Boolean).join('\n');
+    }
+    return [
+        `Send ${f.symbol} on ${f.chain}`,
+        `From: "${f.wallet}" ${f.walletAddress}`,
+        `To: ${who}`,
+        f.knownRecipient ? '' : '⚠ This address is NOT in your contacts. Check it character by character.',
+        `Recipient gets: ${f.received} ${f.symbol}`,
+        f.spent ? `Leaves the wallet: ${f.spent} ${f.symbol}${f.feesIncluded ? ' (fees included)' : ''}` : '',
+        f.feesUsd !== undefined ? `Fees: ≈ $${usd(f.feesUsd)}` : `Fees: gas up to ${f.gasMax} ${f.gasSymbol} and $0.01`,
+        'Confirm this transfer?',
+    ].filter(Boolean).join('\n');
+}
+const SHOWN = 20;
+export function batchConfirmText(f, lang) {
+    const unknown = f.rows.filter((r) => !r.known).length;
+    const row = (r) => `${r.known ? '' : '⚠ '}${r.name ? `«${r.name}» ` : ''}${r.address} — ${r.amount} ${f.symbol}`;
+    const rows = f.rows.slice(0, SHOWN).map(row);
+    const more = f.rows.length - SHOWN;
+    if (lang === 'ru') {
+        return [
+            `Перевести ${f.symbol} ${f.rows.length} получателям в сети ${f.chain}`,
+            `С кошелька: «${f.wallet}» ${f.walletAddress}`,
+            ...rows, more > 0 ? `…и ещё ${more}` : '',
+            unknown ? `⚠ ${unknown} адрес(ов) нет в ваших контактах. Сверьте их.` : '',
+            `Всего получателям: ${f.total} ${f.symbol}${f.feesIncluded ? ' (комиссия включена)' : ''}`,
+            f.feesUsd !== undefined ? `Комиссия: ≈ $${usd(f.feesUsd)}` : '',
+            'Подтвердить все переводы?',
+        ].filter(Boolean).join('\n');
+    }
+    return [
+        `Send ${f.symbol} to ${f.rows.length} recipients on ${f.chain}`,
+        `From: "${f.wallet}" ${f.walletAddress}`,
+        ...rows, more > 0 ? `…and ${more} more` : '',
+        unknown ? `⚠ ${unknown} address(es) are NOT in your contacts. Check them.` : '',
+        `Total to recipients: ${f.total} ${f.symbol}${f.feesIncluded ? ' (fees included)' : ''}`,
+        f.feesUsd !== undefined ? `Fees: ≈ $${usd(f.feesUsd)}` : '',
+        'Confirm all transfers?',
+    ].filter(Boolean).join('\n');
+}
+export function transferLinkText(f, lang) {
+    const who = f.label ? `«${f.label}» ${f.recipient}` : f.recipient;
+    if (lang === 'ru') {
+        return [
+            `Ссылка для перевода: ${f.link}`,
+            `Сеть: ${f.chain}`,
+            `Кому: ${who}`,
+            f.received ? `Получатель получит: ${f.received} ${f.symbol}` : '',
+            f.spent ? `С кошелька уйдёт: ${f.spent} ${f.symbol}` : '',
+            f.feesUsd !== undefined ? `Комиссия: ≈ $${usd(f.feesUsd)}` : `Комиссия: газ сети и $${f.serviceUsd}, точная сумма будет на странице`,
+            'Откройте ссылку, подключите свой кошелёк, сверьте адрес получателя на странице и в кошельке и подпишите перевод. Без вашей подписи ничего не отправится.',
+        ].filter(Boolean).join('\n');
+    }
+    return [
+        `Transfer link: ${f.link}`,
+        `Network: ${f.chain}`,
+        `To: ${who}`,
+        f.received ? `Recipient gets: ${f.received} ${f.symbol}` : '',
+        f.spent ? `Leaves your wallet: ${f.spent} ${f.symbol}` : '',
+        f.feesUsd !== undefined ? `Fees: ≈ $${usd(f.feesUsd)}` : `Fees: network gas and $${f.serviceUsd}, the exact amount is shown on the page`,
+        'Open the link, connect your own wallet, check the recipient address on the page and in your wallet, then sign. Nothing is sent without your signature.',
+    ].filter(Boolean).join('\n');
+}
+//# sourceMappingURL=messages.js.map

package/dist/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,UAAU,CAAC,UAAoB;IAC7C,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAaD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/F,MAAM,UAAU,WAAW,CAAC,CAAe,EAAE,IAAU;IACrD,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,aAAa,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,KAAK,EAAE;YACzC,gBAAgB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,aAAa,EAAE;YAC9C,SAAS,GAAG,EAAE;YACd,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0EAA0E;YAClG,uBAAuB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE;YAC/C,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;YACxG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,UAAU;YAClH,sBAAsB;SACvB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,QAAQ,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,KAAK,EAAE;QAChC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,aAAa,EAAE;QACxC,OAAO,GAAG,EAAE;QACZ,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0EAA0E;QAClG,mBAAmB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE;QAC3C,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;QACrG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,YAAY;QAC/G,wBAAwB;KACzB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAGD,MAAM,KAAK,GAAG,EAAE,CAAC;AAEjB,MAAM,UAAU,gBAAgB,CAAC,CAAa,EAAE,IAAU;IACxD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,CAA6B,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7I,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,aAAa,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,uBAAuB,CAAC,CAAC,KAAK,EAAE;YACtE,gBAAgB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,aAAa,EAAE;YAC9C,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YACzC,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,+CAA+C,CAAC,CAAC,CAAC,EAAE;YAC1E,sBAAsB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1F,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YAC/D,2BAA2B;SAC5B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,QAAQ,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,CAAC,KAAK,EAAE;QAC/D,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,aAAa,EAAE;QACxC,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE;QAC5C,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,oDAAoD,CAAC,CAAC,CAAC,EAAE;QAC/E,wBAAwB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;QACxF,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAC3D,wBAAwB;KACzB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAaD,MAAM,UAAU,gBAAgB,CAAC,CAAY,EAAE,IAAU;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,wBAAwB,CAAC,CAAC,IAAI,EAAE;YAChC,SAAS,CAAC,CAAC,KAAK,EAAE;YAClB,SAAS,GAAG,EAAE;YACd,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;YACjE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;YACzD,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,UAAU,kCAAkC;YACpI,0JAA0J;SAC3J,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,kBAAkB,CAAC,CAAC,IAAI,EAAE;QAC1B,YAAY,CAAC,CAAC,KAAK,EAAE;QACrB,OAAO,GAAG,EAAE;QACZ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QAC7D,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QAC3D,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,UAAU,yCAAyC;QACxI,wJAAwJ;KACzJ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/pinned.d.ts

@@ -0,0 +1,6 @@
+export declare const PERMIT2: "0x000000000022D473030F116dDEE9F6B43aC78BA3";
+export declare const FEE_WALLET: "0x0A6934D941ee8EaeB41fa68c0245cd959F930ee3";
+export declare const AGGREGATORS: Record<number, `0x${string}`>;
+export declare const TRANSFER_CONTRACTS: Record<number, `0x${string}`>;
+export declare const transferContractPinned: (chainId: number) => string | undefined;
+export declare const feeWalletPinned: () => string;

package/dist/pinned.js

@@ -0,0 +1,23 @@
+// Addresses the MCP server trusts on its own, without asking the API. Everything the API returns
+// for a local wallet is checked against these and against what the user asked for before the
+// wallet signs: a compromised or spoofed API must not be able to redirect funds.
+// Update together with the site repo's deployed*.json (npm run deploy:* writes them).
+export const PERMIT2 = '0x000000000022D473030F116dDEE9F6B43aC78BA3';
+// Hopivia fee wallet (aggregator feeRecipient on every chain)
+export const FEE_WALLET = '0x0A6934D941ee8EaeB41fa68c0245cd959F930ee3';
+// HopiviaAggregator per chain (deployed.json)
+export const AGGREGATORS = {
+    56: '0x1914264e39A80B32c39BE63e0Ae0808bbD837245',
+    1: '0x68F831FFDc96029f04A6E0C1704bCef7fAD0F961',
+    10: '0x68F831FFDc96029f04A6E0C1704bCef7fAD0F961',
+    137: '0x68F831FFDc96029f04A6E0C1704bCef7fAD0F961',
+    8453: '0x68F831FFDc96029f04A6E0C1704bCef7fAD0F961',
+    42161: '0x68F831FFDc96029f04A6E0C1704bCef7fAD0F961',
+    43114: '0x68F831FFDc96029f04A6E0C1704bCef7fAD0F961',
+};
+// HopiviaTransfer per chain (deployed-transfer.json); empty until deployed
+export const TRANSFER_CONTRACTS = {};
+// Tests and forks can pin other addresses: HOPIVIA_PIN_TRANSFER_<chainId>, HOPIVIA_PIN_FEE_WALLET
+export const transferContractPinned = (chainId) => process.env[`HOPIVIA_PIN_TRANSFER_${chainId}`] ?? TRANSFER_CONTRACTS[chainId];
+export const feeWalletPinned = () => process.env.HOPIVIA_PIN_FEE_WALLET ?? FEE_WALLET;
+//# sourceMappingURL=pinned.js.map

package/dist/pinned.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned.js","sourceRoot":"","sources":["../src/pinned.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,6FAA6F;AAC7F,iFAAiF;AACjF,sFAAsF;AACtF,MAAM,CAAC,MAAM,OAAO,GAAG,4CAAqD,CAAC;AAC7E,8DAA8D;AAC9D,MAAM,CAAC,MAAM,UAAU,GAAG,4CAAqD,CAAC;AAChF,8CAA8C;AAC9C,MAAM,CAAC,MAAM,WAAW,GAAkC;IACxD,EAAE,EAAE,4CAA4C;IAChD,CAAC,EAAE,4CAA4C;IAC/C,EAAE,EAAE,4CAA4C;IAChD,GAAG,EAAE,4CAA4C;IACjD,IAAI,EAAE,4CAA4C;IAClD,KAAK,EAAE,4CAA4C;IACnD,KAAK,EAAE,4CAA4C;CACpD,CAAC;AACF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAkC,EAAE,CAAC;AAEpE,kGAAkG;AAClG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAe,EAAsB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,EAAE,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC7J,MAAM,CAAC,MAAM,eAAe,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,UAAU,CAAC"}

package/dist/server.d.ts

@@ -1,5 +1,8 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { type ClientOptions } from './client.js';
+import { type Confirmer } from './confirm.js';
+import { type Signer } from './signer.js';
+import { type SpendLog, type WalletConfig } from './wallets.js';
 export declare function recipientNotice(p: {
     recipient?: string;
     sender?: string;
@@ -8,5 +11,10 @@ export declare function recipientNotice(p: {
 }): string | undefined;
 export type ServerOptions = ClientOptions & {
     siteUrl?: string;
+    mode?: 'local' | 'remote';
+    wallets?: WalletConfig;
+    signer?: Signer;
+    confirmer?: Confirmer;
+    spendLog?: SpendLog;
 };
 export declare function createServer(opts?: ServerOptions): McpServer;