@ironwallet/mcp-server 1.0.0-preprod.0

package/dist/log.js

@@ -0,0 +1,323 @@
+/**
+ * Append-only JSONL file logger for diagnosing relay/network instability.
+ *
+ * Writes ONLY to a file (never stdout — that carries MCP JSON-RPC). Optionally
+ * mirrors to stderr when IW_LOG_STDERR=1.
+ *
+ * Secrets (Authorization, x-api-key, mnemonics, private keys, full signatures)
+ * are redacted. Bodies are summarized by default; set IW_LOG_BODIES=1 to include
+ * truncated request/response bodies (still redacted for known secret fields).
+ */
+import { appendFileSync, mkdirSync, existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { getConfig } from "./config.js";
+const LEVEL_RANK = {
+    debug: 10,
+    info: 20,
+    warn: 30,
+    error: 40,
+};
+const SENSITIVE_HEADER = /^(authorization|x-api-key|cookie|set-cookie|proxy-authorization)$/i;
+const SENSITIVE_KEY = /^(authorization|accessToken|token|password|passphrase|mnemonic|seed|privateKey|secret|x-api-key|signature|TxnSignature)$/i;
+let resolvedPath;
+let minLevel;
+let bodiesEnabled;
+let stderrMirror;
+let warnedOnce = false;
+function envFlag(name, fallback) {
+    const v = process.env[name];
+    if (v === undefined || v === "")
+        return fallback;
+    return !/^(0|false|off|no)$/i.test(v);
+}
+function resolveMinLevel() {
+    if (minLevel)
+        return minLevel;
+    const raw = (process.env.IW_LOG_LEVEL ?? "info").toLowerCase();
+    minLevel =
+        raw === "info" || raw === "warn" || raw === "error" || raw === "debug"
+            ? raw
+            : "info";
+    return minLevel;
+}
+/** Empty string / IW_LOG_ENABLED=0 disables file logging. */
+export function isLogEnabled() {
+    if (!envFlag("IW_LOG_ENABLED", true))
+        return false;
+    if (process.env.IW_LOG_FILE === "")
+        return false;
+    return true;
+}
+export function getLogFilePath() {
+    if (resolvedPath !== undefined)
+        return resolvedPath;
+    if (!isLogEnabled()) {
+        resolvedPath = null;
+        return null;
+    }
+    const override = process.env.IW_LOG_FILE?.trim();
+    if (override) {
+        resolvedPath = override;
+        return resolvedPath;
+    }
+    try {
+        const cfg = getConfig();
+        const day = new Date().toISOString().slice(0, 10); // YYYY-MM-DD
+        resolvedPath = join(cfg.keystoreDir, "logs", `iw-mcp-${day}.jsonl`);
+    }
+    catch {
+        resolvedPath = join(".", "iw-mcp-logs", `iw-mcp-${new Date().toISOString().slice(0, 10)}.jsonl`);
+    }
+    return resolvedPath;
+}
+function ensureDir(filePath) {
+    const dir = dirname(filePath);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+}
+export function newCorrelationId(prefix = "req") {
+    return `${prefix}_${randomUUID().replace(/-/g, "").slice(0, 16)}`;
+}
+/** Walk Error.cause chains (undici nests codes here). */
+export function errorDetails(err, depth = 0) {
+    if (err == null)
+        return { value: err };
+    if (!(err instanceof Error))
+        return { value: String(err) };
+    const out = {
+        name: err.name,
+        message: err.message,
+    };
+    const any = err;
+    if (any.code)
+        out.code = any.code;
+    if (any.status != null)
+        out.status = any.status;
+    if (any.errno != null)
+        out.errno = any.errno;
+    if (any.syscall)
+        out.syscall = any.syscall;
+    if (any.address)
+        out.address = any.address;
+    if (any.port != null)
+        out.port = any.port;
+    if (typeof any.body === "string")
+        out.bodyPreview = truncate(any.body, 800);
+    if (any.cause != null && depth < 6)
+        out.cause = errorDetails(any.cause, depth + 1);
+    if (err.stack)
+        out.stack = err.stack.split("\n").slice(0, 12);
+    return out;
+}
+export function truncate(s, max = 2000) {
+    if (s.length <= max)
+        return s;
+    return `${s.slice(0, max)}…(+${s.length - max} chars)`;
+}
+export function redactHeaders(headers) {
+    if (!headers)
+        return undefined;
+    const out = {};
+    const entries = headers instanceof Headers
+        ? [...headers.entries()]
+        : Array.isArray(headers)
+            ? headers
+            : Object.entries(headers);
+    for (const [k, v] of entries) {
+        out[k] = SENSITIVE_HEADER.test(k) ? redactValue(String(v)) : String(v);
+    }
+    return out;
+}
+function redactValue(v) {
+    if (!v)
+        return "<empty>";
+    if (v.length <= 12)
+        return "<redacted>";
+    return `${v.slice(0, 6)}…${v.slice(-4)} (len=${v.length})`;
+}
+/** Deep-redact known secret keys; truncate long strings. */
+export function sanitize(value, depth = 0) {
+    if (value == null)
+        return value;
+    if (depth > 8)
+        return "<max-depth>";
+    if (typeof value === "string") {
+        if (value.length > 400)
+            return truncate(value, 400);
+        return value;
+    }
+    if (typeof value === "number" || typeof value === "boolean")
+        return value;
+    if (typeof value === "bigint")
+        return value.toString();
+    if (Array.isArray(value)) {
+        if (value.length > 40) {
+            return [
+                ...value.slice(0, 20).map((v) => sanitize(v, depth + 1)),
+                `<…${value.length - 20} more>`,
+            ];
+        }
+        return value.map((v) => sanitize(v, depth + 1));
+    }
+    if (typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            if (SENSITIVE_KEY.test(k)) {
+                out[k] =
+                    typeof v === "string"
+                        ? redactValue(v)
+                        : v == null
+                            ? v
+                            : `<redacted ${typeof v}>`;
+            }
+            else {
+                out[k] = sanitize(v, depth + 1);
+            }
+        }
+        return out;
+    }
+    return String(value);
+}
+/** Compact summary of a JSON/text body for logs (sizes + key fields). */
+export function summarizeBody(body) {
+    if (body == null || body === "")
+        return undefined;
+    const text = typeof body === "string" ? body : safeJson(body);
+    const out = {
+        bytes: Buffer.byteLength(text, "utf8"),
+        chars: text.length,
+    };
+    try {
+        const parsed = typeof body === "string" ? JSON.parse(body) : body;
+        if (parsed && typeof parsed === "object") {
+            out.keys = Object.keys(parsed);
+            const p = parsed;
+            if (p.fromAddress)
+                out.fromAddress = p.fromAddress;
+            if (p.toAddress)
+                out.toAddress = p.toAddress;
+            if (p.amount != null)
+                out.amount = p.amount;
+            if (p.tokenAddress)
+                out.tokenAddress = p.tokenAddress;
+            if (p.network)
+                out.network = p.network;
+            if (Array.isArray(p.signedTransactions)) {
+                out.signedTransactions = p.signedTransactions.map((t, i) => {
+                    const tx = t;
+                    return {
+                        i,
+                        transactionId: tx.transactionId,
+                        txID: tx.txID,
+                        signatureLen: typeof tx.signature === "string" ? tx.signature.length : undefined,
+                        txDataLen: typeof tx.txData === "string" ? tx.txData.length : undefined,
+                    };
+                });
+            }
+            if (p.signedEstimateResult && typeof p.signedEstimateResult === "object") {
+                const se = p.signedEstimateResult;
+                const er = se.estimateResult;
+                out.signedEstimateResult = {
+                    hasSignature: typeof se.signature === "string",
+                    signatureLen: typeof se.signature === "string" ? se.signature.length : undefined,
+                    traceId: se.traceId,
+                    amount: er?.amount,
+                    coinFee: er?.coinFee,
+                    tokenFee: er?.tokenFee,
+                    txsToSign: Array.isArray(er?.transactionsToSign)
+                        ? er.transactionsToSign.length
+                        : undefined,
+                    timeout: er?.timeout,
+                };
+            }
+            if (p.txHash)
+                out.txHash = p.txHash;
+            if (p.operationId)
+                out.operationId = p.operationId;
+        }
+    }
+    catch {
+        out.preview = truncate(text, 300);
+    }
+    if (bodiesEnabled ?? (bodiesEnabled = envFlag("IW_LOG_BODIES", false))) {
+        out.body = sanitize(typeof body === "string" ? tryParse(body) : body);
+    }
+    return out;
+}
+function tryParse(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return s;
+    }
+}
+function safeJson(v) {
+    try {
+        return JSON.stringify(v);
+    }
+    catch {
+        return String(v);
+    }
+}
+export function log(level, event, data) {
+    if (!isLogEnabled())
+        return;
+    if (LEVEL_RANK[level] < LEVEL_RANK[resolveMinLevel()])
+        return;
+    const file = getLogFilePath();
+    if (!file)
+        return;
+    const safeData = sanitize(data ?? {}) ?? {};
+    const line = JSON.stringify({
+        ts: new Date().toISOString(),
+        level,
+        event,
+        pid: process.pid,
+        ...safeData,
+    });
+    try {
+        ensureDir(file);
+        appendFileSync(file, line + "\n", "utf8");
+    }
+    catch (e) {
+        if (!warnedOnce) {
+            warnedOnce = true;
+            process.stderr.write(`[ironwallet-mcp] failed to write log file ${file}: ${e instanceof Error ? e.message : String(e)}\n`);
+        }
+    }
+    if (stderrMirror ?? (stderrMirror = envFlag("IW_LOG_STDERR", false))) {
+        process.stderr.write(line + "\n");
+    }
+}
+export function logInfo(event, data) {
+    log("info", event, data);
+}
+export function logDebug(event, data) {
+    log("debug", event, data);
+}
+export function logWarn(event, data) {
+    log("warn", event, data);
+}
+export function logError(event, err, data) {
+    log("error", event, { ...data, error: errorDetails(err) });
+}
+/** One-shot banner so operators know where logs go. */
+export function logStartupBanner(extra) {
+    const file = getLogFilePath();
+    if (!file) {
+        process.stderr.write("[ironwallet-mcp] file logging disabled\n");
+        return;
+    }
+    logInfo("process.start", {
+        logFile: file,
+        logLevel: resolveMinLevel(),
+        logBodies: envFlag("IW_LOG_BODIES", false),
+        node: process.version,
+        platform: process.platform,
+        ...extra,
+    });
+    process.stderr.write(`[ironwallet-mcp] logging to ${file}\n`);
+}
+//# sourceMappingURL=log.js.map

package/dist/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIxC,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,MAAM,gBAAgB,GAAG,oEAAoE,CAAC;AAC9F,MAAM,aAAa,GACjB,2HAA2H,CAAC;AAE9H,IAAI,YAAuC,CAAC;AAC5C,IAAI,QAA8B,CAAC;AACnC,IAAI,aAAkC,CAAC;AACvC,IAAI,YAAiC,CAAC;AACtC,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,SAAS,OAAO,CAAC,IAAY,EAAE,QAAiB;IAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,QAAQ;QACN,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO;YACpE,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,MAAM,CAAC;IACb,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACpB,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,YAAY,GAAG,QAAQ,CAAC;QACxB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;QAChE,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAM,GAAG,KAAK;IAC7C,OAAO,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IAClD,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACvC,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3D,MAAM,GAAG,GAA4B;QACnC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IACF,MAAM,GAAG,GAAG,GASX,CAAC;IACF,IAAI,GAAG,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAClC,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI;QAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAChD,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI;QAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAC7C,IAAI,GAAG,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3C,IAAI,GAAG,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3C,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;QAAE,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACnF,IAAI,GAAG,CAAC,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAS,EAAE,GAAG,GAAG,IAAI;IAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAA+D;IAE/D,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,OAAO,GACX,OAAO,YAAY,OAAO;QACxB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,YAAY,CAAC;IACxC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;AAC7D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAChD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtB,OAAO;gBACL,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACxD,KAAK,KAAK,CAAC,MAAM,GAAG,EAAE,QAAQ;aAC/B,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,CAAC,CAAC;oBACJ,OAAO,CAAC,KAAK,QAAQ;wBACnB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;wBAChB,CAAC,CAAC,CAAC,IAAI,IAAI;4BACT,CAAC,CAAC,CAAC;4BACH,CAAC,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,GAAG,GAA4B;QACnC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QACtC,KAAK,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,MAAiC,CAAC;YAC5C,IAAI,CAAC,CAAC,WAAW;gBAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;YACnD,IAAI,CAAC,CAAC,SAAS;gBAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;YAC7C,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI;gBAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YAC5C,IAAI,CAAC,CAAC,YAAY;gBAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;YACtD,IAAI,CAAC,CAAC,OAAO;gBAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACvC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACzD,MAAM,EAAE,GAAG,CAA4B,CAAC;oBACxC,OAAO;wBACL,CAAC;wBACD,aAAa,EAAE,EAAE,CAAC,aAAa;wBAC/B,IAAI,EAAE,EAAE,CAAC,IAAI;wBACb,YAAY,EAAE,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBAChF,SAAS,EAAE,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;qBACxE,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,CAAC,oBAAoB,IAAI,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;gBACzE,MAAM,EAAE,GAAG,CAAC,CAAC,oBAA+C,CAAC;gBAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,cAAqD,CAAC;gBACpE,GAAG,CAAC,oBAAoB,GAAG;oBACzB,YAAY,EAAE,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ;oBAC9C,YAAY,EAAE,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oBAChF,OAAO,EAAE,EAAE,CAAC,OAAO;oBACnB,MAAM,EAAE,EAAE,EAAE,MAAM;oBAClB,OAAO,EAAE,EAAE,EAAE,OAAO;oBACpB,QAAQ,EAAE,EAAE,EAAE,QAAQ;oBACtB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,kBAAkB,CAAC;wBAC9C,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM;wBAC9B,CAAC,CAAC,SAAS;oBACb,OAAO,EAAE,EAAE,EAAE,OAAO;iBACrB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,MAAM;gBAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACpC,IAAI,CAAC,CAAC,WAAW;gBAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,aAAa,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CACjB,KAAe,EACf,KAAa,EACb,IAA8B;IAE9B,IAAI,CAAC,YAAY,EAAE;QAAE,OAAO;IAC5B,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,eAAe,EAAE,CAAC;QAAE,OAAO;IAE9D,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,MAAM,QAAQ,GACX,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAoC,IAAI,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,KAAK;QACL,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,QAAQ;KACZ,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6CAA6C,IAAI,KAC/C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAC3C,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,YAAY,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAa,EAAE,IAA8B;IACnE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,IAA8B;IACpE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAa,EAAE,IAA8B;IACnE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,KAAa,EACb,GAAY,EACZ,IAA8B;IAE9B,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,KAA+B;IAC9D,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,OAAO,CAAC,eAAe,EAAE;QACvB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,eAAe,EAAE;QAC3B,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC;QAC1C,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,KAAK;KACT,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,IAAI,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/dist/passphrase.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Keystore wrapping secret. Generated on first use and stored under
+ * ~/.ironwallet-mcp/. IW_PASSPHRASE overrides when set to a real value.
+ */
+/** Env override, else local file, else generate. */
+export declare function requirePassphrase(): string;

package/dist/passphrase.js

@@ -0,0 +1,10 @@
+/**
+ * Keystore wrapping secret. Generated on first use and stored under
+ * ~/.ironwallet-mcp/. IW_PASSPHRASE overrides when set to a real value.
+ */
+import { resolveKeystorePassphrase } from "./local-secrets.js";
+/** Env override, else local file, else generate. */
+export function requirePassphrase() {
+    return resolveKeystorePassphrase();
+}
+//# sourceMappingURL=passphrase.js.map

package/dist/passphrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passphrase.js","sourceRoot":"","sources":["../src/passphrase.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,oDAAoD;AACpD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,yBAAyB,EAAE,CAAC;AACrC,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Optional per-wallet spending policy. Disabled by default (sends autonomously).
+ * When `policy.enabled` is set, both `send_transfer` and `execute_swap` check it
+ * before signing.
+ */
+import type { WalletEntry } from "./keystore/types.js";
+import type { NetworkId } from "./config.js";
+export interface PolicyCheck {
+    kind: "transfer" | "swap";
+    network: NetworkId;
+    /** Decimal string in asset units. Required to enforce `maxPerTx`. */
+    amount?: string;
+    /** Transfer destination. Ignored for swaps. */
+    toAddress?: string;
+}
+/**
+ * Compare two non-negative decimal strings without floating point.
+ * Returns < 0 if a < b, 0 if equal, > 0 if a > b.
+ */
+export declare function compareDecimalAmount(a: string, b: string): number;
+/** Throws with a clear message if the operation violates the wallet policy. */
+export declare function enforcePolicy(entry: WalletEntry, check: PolicyCheck): void;

package/dist/policy.js

@@ -0,0 +1,108 @@
+/**
+ * Optional per-wallet spending policy. Disabled by default (sends autonomously).
+ * When `policy.enabled` is set, both `send_transfer` and `execute_swap` check it
+ * before signing.
+ */
+import { normalizeAddress } from "./wallet/derive.js";
+import { logInfo, logWarn } from "./log.js";
+/**
+ * Compare two non-negative decimal strings without floating point.
+ * Returns < 0 if a < b, 0 if equal, > 0 if a > b.
+ */
+export function compareDecimalAmount(a, b) {
+    const pa = parseNonNegativeDecimal(a);
+    const pb = parseNonNegativeDecimal(b);
+    if (pa.int !== pb.int)
+        return pa.int < pb.int ? -1 : 1;
+    const len = Math.max(pa.frac.length, pb.frac.length);
+    const fa = pa.frac.padEnd(len, "0");
+    const fb = pb.frac.padEnd(len, "0");
+    if (fa === fb)
+        return 0;
+    return fa < fb ? -1 : 1;
+}
+function parseNonNegativeDecimal(raw) {
+    const t = raw.trim();
+    if (!/^\d+(\.\d+)?$/.test(t)) {
+        throw new Error(`Invalid decimal amount "${raw}".`);
+    }
+    const [intPart, fracPart = ""] = t.split(".");
+    return { int: BigInt(intPart), frac: fracPart };
+}
+/** Throws with a clear message if the operation violates the wallet policy. */
+export function enforcePolicy(entry, check) {
+    const policy = entry.policy;
+    if (!policy || !policy.enabled) {
+        logInfo("policy.skip", { wallet: entry.name, reason: "disabled_or_absent" });
+        return;
+    }
+    logInfo("policy.check", {
+        wallet: entry.name,
+        kind: check.kind,
+        network: check.network,
+        toAddress: check.toAddress,
+        amount: check.amount,
+        readOnly: policy.readOnly,
+        maxPerTx: policy.maxPerTx,
+        allowedRecipients: policy.allowedRecipients?.length ?? 0,
+    });
+    if (policy.readOnly) {
+        logWarn("policy.reject", {
+            wallet: entry.name,
+            kind: check.kind,
+            reason: "read_only",
+        });
+        throw new Error(check.kind === "swap"
+            ? `Wallet "${entry.name}" is read-only; swaps are disabled by policy.`
+            : `Wallet "${entry.name}" is read-only; sending is disabled by policy.`);
+    }
+    if (check.amount !== undefined && policy.maxPerTx !== undefined && policy.maxPerTx !== "") {
+        let cmp;
+        try {
+            cmp = compareDecimalAmount(check.amount, policy.maxPerTx);
+        }
+        catch {
+            throw new Error(`Cannot enforce maxPerTx for wallet "${entry.name}": amounts must be non-negative decimals (got amount=${check.amount}, maxPerTx=${policy.maxPerTx}).`);
+        }
+        if (cmp > 0) {
+            logWarn("policy.reject", {
+                wallet: entry.name,
+                kind: check.kind,
+                reason: "max_per_tx",
+                amount: check.amount,
+                maxPerTx: policy.maxPerTx,
+            });
+            throw new Error(`Amount ${check.amount} exceeds per-transaction limit ${policy.maxPerTx} for wallet "${entry.name}".`);
+        }
+    }
+    if (policy.allowedRecipients && policy.allowedRecipients.length > 0) {
+        if (check.kind === "swap") {
+            logWarn("policy.reject", {
+                wallet: entry.name,
+                kind: "swap",
+                reason: "recipient_allow_list_blocks_swap",
+            });
+            throw new Error(`Wallet "${entry.name}" has a recipient allow-list; swaps are disabled by policy because the swap router is not a whitelisted transfer recipient.`);
+        }
+        if (!check.toAddress) {
+            throw new Error(`Wallet "${entry.name}" has a recipient allow-list; a destination address is required.`);
+        }
+        const target = normalizeAddress(check.network, check.toAddress);
+        const allowed = policy.allowedRecipients.some((a) => normalizeAddress(check.network, a) === target);
+        if (!allowed) {
+            logWarn("policy.reject", {
+                wallet: entry.name,
+                kind: "transfer",
+                reason: "recipient_not_whitelisted",
+                toAddress: check.toAddress,
+            });
+            throw new Error(`Recipient ${check.toAddress} is not in the whitelist for wallet "${entry.name}".`);
+        }
+    }
+    logInfo("policy.ok", {
+        wallet: entry.name,
+        kind: check.kind,
+        network: check.network,
+    });
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAW5C;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAS,EAAE,CAAS;IACvD,MAAM,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,KAAkB,EAAE,KAAkB;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IAED,OAAO,CAAC,cAAc,EAAE;QACtB,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,IAAI,CAAC;KACzD,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,eAAe,EAAE;YACvB,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,KAAK,CAAC,IAAI,KAAK,MAAM;YACnB,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,+CAA+C;YACtE,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,gDAAgD,CAC1E,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC1F,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,CAAC,IAAI,wDAAwD,KAAK,CAAC,MAAM,cAAc,MAAM,CAAC,QAAQ,IAAI,CACvJ,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,OAAO,CAAC,eAAe,EAAE;gBACvB,MAAM,EAAE,KAAK,CAAC,IAAI;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,MAAM,kCAAkC,MAAM,CAAC,QAAQ,gBAAgB,KAAK,CAAC,IAAI,IAAI,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,eAAe,EAAE;gBACvB,MAAM,EAAE,KAAK,CAAC,IAAI;gBAClB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,kCAAkC;aAC3C,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,CAAC,IAAI,6HAA6H,CACnJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,CAAC,IAAI,kEAAkE,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,MAAM,CACrD,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,eAAe,EAAE;gBACvB,MAAM,EAAE,KAAK,CAAC,IAAI;gBAClB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,2BAA2B;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,CAAC,SAAS,wCAAwC,KAAK,CAAC,IAAI,IAAI,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,WAAW,EAAE;QACnB,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,6 @@
+/**
+ * MCP stdio server. Launched by the MCP client (Cursor / Claude Desktop) per
+ * the mcp.json entry. Keystore passphrase and relay API key are created on
+ * first launch under ~/.ironwallet-mcp/ unless overridden by env.
+ */
+export declare function serve(): Promise<void>;

package/dist/server.js

@@ -0,0 +1,38 @@
+/**
+ * MCP stdio server. Launched by the MCP client (Cursor / Claude Desktop) per
+ * the mcp.json entry. Keystore passphrase and relay API key are created on
+ * first launch under ~/.ironwallet-mcp/ unless overridden by env.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { registerTools } from "./tools/index.js";
+import { getConfig, packageVersion } from "./config.js";
+import { logStartupBanner } from "./log.js";
+export async function serve() {
+    const cfg = getConfig();
+    const server = new McpServer({
+        name: "ironwallet",
+        version: packageVersion(),
+    }, {
+        instructions: [
+            "Local Ironwallet hot wallet. Keys never leave this machine. There is no extra confirmation UI. Prefer a dedicated wallet with limited balance.",
+            "Never print, request, or invent recovery phrases or private keys. No tool accepts or returns a seed. Create/import/backup only via create_wallets backup_url or open_wallet_manager in the local browser.",
+            "If there is no wallet yet, create_wallets or open_wallet_manager first.",
+            "Transfer: list_wallets / get_balance → estimate_transfer (optional) → send_transfer. On timeout poll get_operation_status; do not resubmit blindly. send_transfer may reduce the amount so the fee fits.",
+            "Swap: list_swap_networks → list_swap_assets (copy network/symbol/address/decimals from the catalog; do not invent token addresses; omit address only for native coins) → estimate_swap or execute_swap. Quotes expire. maxMode: true sells as much as the service allows. After execute, poll get_swap_status; if execute times out, poll before retrying.",
+        ].join("\n"),
+    });
+    registerTools(server);
+    // Never write logs to stdout — that stream carries the JSON-RPC protocol.
+    process.stderr.write(`[ironwallet-mcp] starting (relay=${cfg.relayUrl})\n`);
+    logStartupBanner({
+        relayUrl: cfg.relayUrl,
+        httpTimeoutMs: cfg.httpTimeoutMs,
+        httpForwardTimeoutMs: cfg.httpForwardTimeoutMs,
+        httpRetries: cfg.httpRetries,
+        keystoreDir: cfg.keystoreDir,
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,cAAc,EAAE;KAC1B,EACD;QACE,YAAY,EAAE;YACZ,gJAAgJ;YAChJ,2MAA2M;YAC3M,yEAAyE;YACzE,0MAA0M;YAC1M,4VAA4V;SAC7V,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CACF,CAAC;IAEF,aAAa,CAAC,MAAM,CAAC,CAAC;IAEtB,0EAA0E;IAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oCAAoC,GAAG,CAAC,QAAQ,KAAK,CACtD,CAAC;IACF,gBAAgB,CAAC;QACf,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;QAC9C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/signing/bitcoin.d.ts

@@ -0,0 +1,18 @@
+/**
+ * UTXO forward signing for Bitcoin / Litecoin / Dogecoin, matching the shared
+ * hd-wallet-service relay contract (and mobile BitcoinTransactionSigner):
+ *
+ *   - `txData`    = unsigned raw tx, lowercase hex.
+ *   - `extraData` = JSON array of per-input UTXO info; utxos[0].scriptPubKey (hex)
+ *                   and utxos[0].value (sats / litoshis / koinu) drive the sighash.
+ *   - SegWit P2WPKH (BTC BIP-84, LTC BIP-84): BIP-143 witness, SIGHASH_ALL.
+ *   - Legacy P2PKH (DOGE BIP-44): classic sighash + scriptSig. Signed via
+ *     `allowLegacyWitnessUtxo` using scriptPubKey+value from extraData (relay
+ *     does not provide full prev txs).
+ *   - Forward payload: `signature` = full signed raw tx hex, original `txData`,
+ *     computed `txID`.
+ */
+import type { SignContext, SignedTransaction, TransactionToSign } from "./types.js";
+export declare function signBitcoin(ctx: SignContext, txs: TransactionToSign[]): SignedTransaction[];
+export declare function signLitecoin(ctx: SignContext, txs: TransactionToSign[]): SignedTransaction[];
+export declare function signDoge(ctx: SignContext, txs: TransactionToSign[]): SignedTransaction[];

package/dist/signing/bitcoin.js

@@ -0,0 +1,84 @@
+/**
+ * UTXO forward signing for Bitcoin / Litecoin / Dogecoin, matching the shared
+ * hd-wallet-service relay contract (and mobile BitcoinTransactionSigner):
+ *
+ *   - `txData`    = unsigned raw tx, lowercase hex.
+ *   - `extraData` = JSON array of per-input UTXO info; utxos[0].scriptPubKey (hex)
+ *                   and utxos[0].value (sats / litoshis / koinu) drive the sighash.
+ *   - SegWit P2WPKH (BTC BIP-84, LTC BIP-84): BIP-143 witness, SIGHASH_ALL.
+ *   - Legacy P2PKH (DOGE BIP-44): classic sighash + scriptSig. Signed via
+ *     `allowLegacyWitnessUtxo` using scriptPubKey+value from extraData (relay
+ *     does not provide full prev txs).
+ *   - Forward payload: `signature` = full signed raw tx hex, original `txData`,
+ *     computed `txID`.
+ */
+import * as btc from "@scure/btc-signer";
+import { hex } from "@scure/base";
+import { logInfo } from "../log.js";
+function hexToBytes(h) {
+    return hex.decode(h.replace(/^0x/, "").toLowerCase());
+}
+export function signBitcoin(ctx, txs) {
+    return signUtxo(ctx, txs, "bitcoin");
+}
+export function signLitecoin(ctx, txs) {
+    return signUtxo(ctx, txs, "litecoin");
+}
+export function signDoge(ctx, txs) {
+    return signUtxo(ctx, txs, "doge");
+}
+function signUtxo(ctx, txs, network) {
+    const priv = hexToBytes(ctx.privateKey);
+    const signed = [];
+    logInfo(`sign.${network}.start`, { address: ctx.address, txCount: txs.length });
+    for (const item of txs) {
+        if (!item.txData)
+            throw new Error(`${network} transactionToSign has no txData.`);
+        if (!item.extraData) {
+            throw new Error(`${network} transactionToSign has no extraData (UTXO info).`);
+        }
+        const tx = btc.Transaction.fromRaw(hexToBytes(item.txData), {
+            allowUnknownInputs: true,
+            allowUnknownOutputs: true,
+            disableScriptCheck: true,
+            // DOGE (and any legacy P2PKH input) signs from scriptPubKey+value alone.
+            allowLegacyWitnessUtxo: true,
+            lowR: true,
+        });
+        const extra = JSON.parse(item.extraData);
+        const byIndex = new Map();
+        extra.forEach((e, i) => {
+            const utxo = e.utxos?.[0];
+            if (utxo)
+                byIndex.set(e.index ?? i, utxo);
+        });
+        for (let i = 0; i < tx.inputsLength; i++) {
+            const utxo = byIndex.get(i);
+            if (!utxo)
+                throw new Error(`No UTXO info for ${network} input ${i}.`);
+            tx.updateInput(i, {
+                witnessUtxo: {
+                    script: hexToBytes(utxo.scriptPubKey),
+                    amount: BigInt(utxo.value),
+                },
+            });
+        }
+        tx.sign(priv);
+        tx.finalize();
+        logInfo(`sign.${network}.tx`, {
+            transactionId: item.transactionId,
+            txID: tx.id,
+            inputs: tx.inputsLength,
+            outputs: tx.outputsLength,
+            signedLen: tx.hex.length,
+        });
+        signed.push({
+            signature: tx.hex,
+            txData: item.txData,
+            txID: tx.id,
+            transactionId: item.transactionId,
+        });
+    }
+    return signed;
+}
+//# sourceMappingURL=bitcoin.js.map