@leashmarket/mcp 0.1.0

package/README.md

@@ -0,0 +1,157 @@
+# @leashmarket/mcp
+
+Standalone Leash MCP server. Lets any AI agent in any MCP host
+(Cursor, Claude Desktop, Cline, Continue, ChatGPT-MCP, …) sign
+on-chain Solana transactions, pay x402 paywalls, and check its
+treasury balance — without a browser in the loop.
+
+## Install
+
+```jsonc
+// In Cursor → Settings → MCP, or your MCP host's equivalent:
+{
+  "mcpServers": {
+    "leash": {
+      "command": "npx",
+      "args": ["-y", "@leashmarket/mcp"],
+    },
+  },
+}
+```
+
+Most MCP hosts support an `env` map on each server — use it to override
+the default public RPC (slow / rate-limited). Swap in your own URL:
+
+```jsonc
+{
+  "mcpServers": {
+    "leash": {
+      "command": "npx",
+      "args": ["-y", "@leashmarket/mcp"],
+      "env": {
+        "LEASH_RPC_URL": "https://devnet.helius-rpc.com/?api-key=YOUR_KEY",
+        // optional — match mainnet if your agent + links are on mainnet:
+        // "LEASH_NETWORK": "solana-mainnet",
+        // "LEASH_RPC_URL": "https://mainnet.helius-rpc.com/?api-key=YOUR_KEY",
+      },
+    },
+  },
+}
+```
+
+You can set any other overrides the same way (`LEASH_AGENT_MINT`,
+`LEASH_EXECUTIVE_KEY`, `LEASH_API_URL`, `LEASH_EXPLORER_URL`, …).
+Alternatively, put `rpc_url` in `~/.config/leash/agent.json` — env wins
+over the file when both are set.
+
+## Configure
+
+The server looks at, in order:
+
+1. `~/.config/leash/agent.json` (chmod 600). Same posture as
+   `gcloud`/`gh`/`aws`.
+2. Environment variables (override the file when set):
+
+   | env                   | required                 | example                                       |
+   | --------------------- | ------------------------ | --------------------------------------------- |
+   | `LEASH_AGENT_MINT`    | yes                      | `Agnt7XQ...`                                  |
+   | `LEASH_EXECUTIVE_KEY` | yes                      | `5Jz...` (base58) or `[12,34,...]` (JSON arr) |
+   | `LEASH_NETWORK`       | no                       | `solana-mainnet` (default) / `solana-devnet`  |
+   | `LEASH_API_URL`       | no                       | `https://api.leash.market` (default)          |
+   | `LEASH_RPC_URL`       | **strongly recommended** | bring your own — see below                    |
+   | `LEASH_EXPLORER_URL`  | no                       | `https://explorer.leash.market` (default)     |
+   | `LEASH_API_KEY`       | no                       | legacy bearer for `/v1/payment-links`         |
+   | `LEASH_PER_CALL_USDC` | no                       | per-call spend cap (default `1`)              |
+   | `LEASH_PER_DAY_USDC`  | no                       | per-day spend cap (default `10`)              |
+
+> **Bring your own RPC.** The default endpoints
+> (`api.devnet.solana.com`, `api.mainnet-beta.solana.com`) are public,
+> rate-limited, and slow. Each `leash_pay_payment_link` makes 3-5
+> RPC calls — on a public endpoint that's a 4-8s settlement, sometimes
+> a 429. Set `LEASH_RPC_URL` (or `rpc_url` in `agent.json`) to a
+> Helius / Triton / QuickNode / Alchemy / self-hosted endpoint and
+> settlement drops under one second.
+
+The server **starts without** an agent configured — `tools/list`
+still works, but every tool short-circuits with a `no_agent` JSON
+blob asking the LLM to onboard the user. (The frictionless
+`leash_register_agent` tool ships in the next release.)
+
+`agent.json` example:
+
+```jsonc
+{
+  "version": 1,
+  "agent_mint": "Agnt7XQ...",
+  "executive_keypair": "5Jz...", // base58 OR a 64-element JSON array
+  "network": "solana-devnet",
+  "rpc_url": "https://devnet.helius-rpc.com/?api-key=YOUR_KEY",
+  "explorer_url": "https://explorer.leash.market",
+  "created_at": "2026-04-30T...",
+}
+```
+
+## Tools (v0.1 — 14 canonical)
+
+| Tool                           | What it does                                                                                                                                                                                                                                                                                                                                                                                                                                       |
+| ------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `leash_register_agent`         | Two-step onboarding (call this tool TWICE). Step 1: collect agent name + description + image_url + EIP-8004 `services[]` from the user, persist them alongside a generated/imported executive keypair, return `funding_required`. Step 2: after the user funds the executive with SOL, mint MPL Core agent, set unlimited USDC delegation, record on the API, and HOT-SWAP the in-memory MCP host so subsequent tool calls work without a restart. |
+| `leash_get_identity`           | Self-introspection — what agent am I, on which network, what's my treasury PDA.                                                                                                                                                                                                                                                                                                                                                                    |
+| `leash_check_treasury_balance` | Read SOL + USDC/USDG/USDT balances on the agent treasury PDA.                                                                                                                                                                                                                                                                                                                                                                                      |
+| `leash_pay_payment_link`       | Probe an x402 link, sign + settle the SPL transfer locally, return the receipt.                                                                                                                                                                                                                                                                                                                                                                    |
+| `leash_create_payment_link`    | Mint an x402 paywall the user can share. Requires `LEASH_API_KEY` until X-Leash-Sig auth lands.                                                                                                                                                                                                                                                                                                                                                    |
+| `leash_withdraw_treasury`      | Owner-driven withdrawal of SOL or an SPL stable to any wallet (mpl-core::Execute).                                                                                                                                                                                                                                                                                                                                                                 |
+| `leash_set_spend_limit`        | Owner-driven update of the SPL `Approve` delegation that lets the executive spend stables from the treasury. `mode: 'unlimited' \| 'revoke' \| 'amount'` — tighten, pause, or restore the cap.                                                                                                                                                                                                                                                     |
+| `leash_get_spend_limit`        | Read the current SPL delegation + treasury balance for a stable. Reports delegate, remaining cap (atomic + decimal), and balance.                                                                                                                                                                                                                                                                                                                  |
+| `leash_receipts`               | Paginated receipts feed for the active agent. Requires `LEASH_API_KEY` until X-Leash-Sig auth lands.                                                                                                                                                                                                                                                                                                                                               |
+| `leash_get_receipt`            | Fetch a single ReceiptV1 by `receipt_hash` — same canonical JSON the explorer renders at `/receipt/{hash}` (full price legs, request URL, decision, tx_sig, prev/current chain).                                                                                                                                                                                                                                                                   |
+| `leash_transaction_history`    | List every earn + spend receipt in the last N days (default 7) plus running USD totals (`total_sent_usd`, `total_received_usd`, `net_usd`). Stables (USDC/USDG/USDT) summed at 1:1.                                                                                                                                                                                                                                                                |
+| `leash_daily_transactions`     | Bin the same window into per-day buckets `[{ date, sent_usd, received_usd, net_usd, sent_count, received_count }]` plus grand totals — structured P&L view.                                                                                                                                                                                                                                                                                        |
+| `leash_discover`               | Search the Leash marketplace for paid services by capability + price. Public read — works without an agent.                                                                                                                                                                                                                                                                                                                                        |
+| `leash_reputation`             | Live reputation snapshot for any on-chain agent — settled-call volume, dispute rate, distinct counterparties. Public read.                                                                                                                                                                                                                                                                                                                         |
+
+## Subcommands (cross-interface portability)
+
+The CLI is more than the STDIO server — `leash-mcp` has a small set
+of subcommands so an agent can move freely between hosts:
+
+```bash
+leash-mcp                  # default — run the STDIO MCP server
+leash-mcp export           # print active agent.json to stdout
+leash-mcp export --out a.json   # save instead
+leash-mcp import path/to/agent.json  # install into ~/.config/leash/
+leash-mcp doctor           # config + RPC + API reachability check
+leash-mcp help             # full help
+```
+
+Use `export` + `import` to roam: an agent minted from Cursor's MCP
+can be `export`ed, dropped into Claude Desktop, and `import`ed into
+its config — same on-chain identity, same treasury, same reputation.
+Same JSON also pastes cleanly into the chat product's
+_Profile → Agent → Import_ page (forthcoming).
+
+## Try the read path
+
+After provisioning an agent with `leash_register_agent` (or `leash agent create`),
+poke balances through the MCP protocol directly:
+
+```bash
+LEASH_AGENT_MINT=<mint> \
+LEASH_EXECUTIVE_KEY=<base58 secret> \
+LEASH_NETWORK=solana-mainnet \
+pnpm --filter @leashmarket/mcp dev:demo-balance
+```
+
+That bypasses STDIO and uses an in-memory transport — fastest way
+to verify the path before recording a real demo.
+
+## Develop
+
+```bash
+pnpm --filter @leashmarket/mcp typecheck
+pnpm --filter @leashmarket/mcp test
+pnpm --filter @leashmarket/mcp build
+```
+
+The compiled `dist/cli.js` is set executable (`chmod +x`) by the
+build script so `npx -y @leashmarket/mcp` works without an extra step.

package/dist/cli.d.ts

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+/**
+ * `@leashmarket/mcp` CLI entry point.
+ *
+ * Subcommands:
+ *
+ *   leash-mcp                       Default — run the STDIO MCP server.
+ *                                   Hosts (Cursor, Claude Desktop, Cline,
+ *                                   Continue, ChatGPT-MCP) wire this up
+ *                                   via:
+ *
+ *                                     {
+ *                                       "mcpServers": {
+ *                                         "leash": {
+ *                                           "command": "npx",
+ *                                           "args": ["-y", "@leashmarket/mcp"]
+ *                                         }
+ *                                       }
+ *                                     }
+ *
+ *   leash-mcp export [--out <path>] Print or save the active agent.json
+ *                                   so the same identity can be moved
+ *                                   into another host (or the chat product
+ *                                   via Profile → Agent → Import).
+ *
+ *   leash-mcp import <path>         Copy a JSON agent config into the
+ *                                   default location (~/.config/leash/agent.json).
+ *                                   This is how an agent minted in the
+ *                                   chat product (or downloaded from
+ *                                   another machine) becomes the local
+ *                                   default.
+ *
+ *   leash-mcp doctor                Print a quick diagnostic — config
+ *                                   path, agent mint, executive pubkey,
+ *                                   network, RPC reachability, API
+ *                                   reachability. Useful for the demo
+ *                                   sanity check.
+ *
+ * On any boot path we never throw — the goal is the LLM never sees a
+ * tool exception. STDIO server logs go to stderr; subcommands print
+ * to stdout.
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG"}

package/dist/cli.js

@@ -0,0 +1,314 @@
+#!/usr/bin/env node
+/**
+ * `@leashmarket/mcp` CLI entry point.
+ *
+ * Subcommands:
+ *
+ *   leash-mcp                       Default — run the STDIO MCP server.
+ *                                   Hosts (Cursor, Claude Desktop, Cline,
+ *                                   Continue, ChatGPT-MCP) wire this up
+ *                                   via:
+ *
+ *                                     {
+ *                                       "mcpServers": {
+ *                                         "leash": {
+ *                                           "command": "npx",
+ *                                           "args": ["-y", "@leashmarket/mcp"]
+ *                                         }
+ *                                       }
+ *                                     }
+ *
+ *   leash-mcp export [--out <path>] Print or save the active agent.json
+ *                                   so the same identity can be moved
+ *                                   into another host (or the chat product
+ *                                   via Profile → Agent → Import).
+ *
+ *   leash-mcp import <path>         Copy a JSON agent config into the
+ *                                   default location (~/.config/leash/agent.json).
+ *                                   This is how an agent minted in the
+ *                                   chat product (or downloaded from
+ *                                   another machine) becomes the local
+ *                                   default.
+ *
+ *   leash-mcp doctor                Print a quick diagnostic — config
+ *                                   path, agent mint, executive pubkey,
+ *                                   network, RPC reachability, API
+ *                                   reachability. Useful for the demo
+ *                                   sanity check.
+ *
+ * On any boot path we never throw — the goal is the LLM never sees a
+ * tool exception. STDIO server logs go to stderr; subcommands print
+ * to stdout.
+ */
+import { readFileSync, statSync } from 'node:fs';
+import { mkdir, copyFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { defaultConfigPath, loadAgentConfig } from './config.js';
+import { writeAgentConfig } from './config-write.js';
+import { runStdioServer } from './server.js';
+import { loadSigner } from './signer.js';
+async function main() {
+    const argv = process.argv.slice(2);
+    const cmd = argv[0];
+    switch (cmd) {
+        case undefined:
+        case 'serve':
+        case 'run':
+            await runStdioServer();
+            return;
+        case 'export':
+            await runExport(argv.slice(1));
+            return;
+        case 'import':
+            await runImport(argv.slice(1));
+            return;
+        case 'doctor':
+            await runDoctor();
+            return;
+        case '-h':
+        case '--help':
+        case 'help':
+            printHelp();
+            return;
+        case '-v':
+        case '--version':
+            printVersion();
+            return;
+        default:
+            process.stderr.write(`unknown command: ${cmd}\n\n`);
+            printHelp();
+            process.exit(2);
+    }
+}
+main().catch((err) => {
+    const msg = err instanceof Error ? (err.stack ?? err.message) : String(err);
+    process.stderr.write(`[leash-mcp] fatal: ${msg}\n`);
+    process.exit(1);
+});
+// ────────────────────────────────────────────────────────────────────────────
+// export
+// ────────────────────────────────────────────────────────────────────────────
+async function runExport(args) {
+    const config = loadAgentConfig();
+    if (!config) {
+        process.stderr.write('no agent configured. Run `leash-mcp` and call `leash_register_agent`, or set LEASH_AGENT_MINT + LEASH_EXECUTIVE_KEY first.\n');
+        process.exit(1);
+    }
+    const file = {
+        version: 1,
+        agent_mint: config.agentMint,
+        executive_keypair: config.executiveSecretBase58,
+        network: config.network,
+        api_url: config.apiBaseUrl,
+        rpc_url: config.rpcUrl,
+        ...(config.apiKey ? { api_key: config.apiKey } : {}),
+        exported_at: new Date().toISOString(),
+    };
+    const body = `${JSON.stringify(file, null, 2)}\n`;
+    const outFlag = args.indexOf('--out');
+    if (outFlag !== -1 && args[outFlag + 1]) {
+        const outPath = args[outFlag + 1];
+        await mkdir(dirname(outPath), { recursive: true, mode: 0o700 });
+        const { writeFile } = await import('node:fs/promises');
+        await writeFile(outPath, body, { mode: 0o600 });
+        process.stderr.write(`exported to ${outPath} (chmod 600)\n`);
+        return;
+    }
+    process.stdout.write(body);
+}
+// ────────────────────────────────────────────────────────────────────────────
+// import
+// ────────────────────────────────────────────────────────────────────────────
+async function runImport(args) {
+    const src = args[0];
+    if (!src) {
+        process.stderr.write('usage: leash-mcp import <path-to-agent.json>\n');
+        process.exit(2);
+    }
+    let stat;
+    try {
+        stat = statSync(src);
+    }
+    catch {
+        process.stderr.write(`cannot read ${src}\n`);
+        process.exit(1);
+    }
+    if (!stat.isFile()) {
+        process.stderr.write(`${src} is not a regular file\n`);
+        process.exit(1);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(src, 'utf8'));
+    }
+    catch (err) {
+        process.stderr.write(`${src} is not valid JSON: ${err.message}\n`);
+        process.exit(1);
+    }
+    if (!parsed || typeof parsed !== 'object') {
+        process.stderr.write(`${src} is not an object\n`);
+        process.exit(1);
+    }
+    const f = parsed;
+    const agentMint = typeof f.agent_mint === 'string' ? f.agent_mint : undefined;
+    const executiveKey = typeof f.executive_keypair === 'string' ? f.executive_keypair : undefined;
+    if (!agentMint || !executiveKey) {
+        process.stderr.write('config missing required fields: agent_mint, executive_keypair\n');
+        process.exit(1);
+    }
+    // Validate the executive secret decodes to a real ed25519 keypair
+    // before clobbering the on-disk config — otherwise we'd silently
+    // brick the user's setup.
+    try {
+        loadSigner(executiveKey);
+    }
+    catch (err) {
+        process.stderr.write(`executive_keypair invalid: ${err.message}\n`);
+        process.exit(1);
+    }
+    const network = f.network === 'solana-devnet' ? 'solana-devnet' : 'solana-mainnet';
+    const apiBaseUrl = typeof f.api_url === 'string' && f.api_url.length > 0 ? f.api_url : 'https://api.leash.market';
+    const rpcUrl = typeof f.rpc_url === 'string' && f.rpc_url.length > 0
+        ? f.rpc_url
+        : network === 'solana-mainnet'
+            ? 'https://api.mainnet-beta.solana.com'
+            : 'https://api.devnet.solana.com';
+    const explorerBaseUrl = typeof f.explorer_url === 'string' && f.explorer_url.length > 0
+        ? f.explorer_url
+        : 'https://explorer.leash.market';
+    const apiKey = typeof f.api_key === 'string' ? f.api_key : null;
+    const target = defaultConfigPath();
+    await writeAgentConfig({
+        config: {
+            agentMint,
+            executiveSecretBase58: executiveKey,
+            network,
+            apiBaseUrl,
+            rpcUrl,
+            explorerBaseUrl,
+            apiKey,
+        },
+        path: target,
+    });
+    // Also copy as a backup so the user has the original.
+    try {
+        await mkdir(dirname(`${target}.backup`), { recursive: true, mode: 0o700 });
+        await copyFile(src, `${target}.backup`);
+    }
+    catch {
+        /* best-effort backup */
+    }
+    process.stdout.write(`imported ${agentMint} (network=${network}) → ${target}\n`);
+}
+// ────────────────────────────────────────────────────────────────────────────
+// doctor
+// ────────────────────────────────────────────────────────────────────────────
+async function runDoctor() {
+    const path = defaultConfigPath();
+    const config = loadAgentConfig();
+    const lines = [];
+    lines.push(`config_path: ${path}`);
+    if (!config) {
+        lines.push(`status: no_agent (call \`leash_register_agent\` from any MCP host)`);
+        process.stdout.write(`${lines.join('\n')}\n`);
+        return;
+    }
+    let executivePubkey = '<unknown>';
+    try {
+        executivePubkey = loadSigner(config.executiveSecretBase58).pubkey;
+    }
+    catch (err) {
+        lines.push(`status: error — executive secret invalid: ${err.message}`);
+        process.stdout.write(`${lines.join('\n')}\n`);
+        return;
+    }
+    lines.push(`agent_mint: ${config.agentMint}`);
+    lines.push(`executive_pubkey: ${executivePubkey}`);
+    lines.push(`network: ${config.network}`);
+    lines.push(`api_base_url: ${config.apiBaseUrl}`);
+    lines.push(`rpc_url: ${config.rpcUrl}`);
+    lines.push(`explorer_url: ${config.explorerBaseUrl}`);
+    lines.push(`api_key: ${config.apiKey ? `set (${config.apiKey.slice(0, 8)}…)` : 'unset'}`);
+    // RPC reachability — best-effort getVersion JSON-RPC ping.
+    lines.push(`rpc_check: ${await pingRpc(config.rpcUrl)}`);
+    // API reachability — GET /v1/discover (public, cheap).
+    lines.push(`api_check: ${await pingApi(config.apiBaseUrl)}`);
+    if (isPublicRpc(config.rpcUrl)) {
+        lines.push('');
+        lines.push('⚠  rpc_url points at the public Solana RPC. Settlement (`leash_pay_payment_link`)');
+        lines.push('   makes 3-5 RPC calls and the public endpoint is rate-limited (429s) and slow');
+        lines.push('   (4-8s per pay). Set LEASH_RPC_URL or `rpc_url` in agent.json to a Helius /');
+        lines.push('   Triton / QuickNode / Alchemy / self-hosted endpoint. See:');
+        lines.push('     https://docs.leash.market/agents/mcp#bring-your-own-rpc');
+    }
+    process.stdout.write(`${lines.join('\n')}\n`);
+}
+/**
+ * Returns true when the configured RPC is one of the public Solana
+ * defaults baked into `config.ts`. Used by `doctor` to surface a
+ * latency warning. Matches host-only — query strings are stripped so
+ * `?api-key=…` overrides are correctly recognised as private.
+ */
+function isPublicRpc(rpcUrl) {
+    try {
+        const u = new URL(rpcUrl);
+        const host = u.host.toLowerCase();
+        return host === 'api.devnet.solana.com' || host === 'api.mainnet-beta.solana.com';
+    }
+    catch {
+        return false;
+    }
+}
+async function pingRpc(rpcUrl) {
+    try {
+        const res = await fetch(rpcUrl, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'getVersion' }),
+        });
+        if (!res.ok)
+            return `error (HTTP ${res.status})`;
+        const json = (await res.json());
+        return `ok (solana-core=${json.result?.['solana-core'] ?? 'unknown'})`;
+    }
+    catch (err) {
+        return `error (${err.message})`;
+    }
+}
+async function pingApi(apiBaseUrl) {
+    try {
+        const url = `${apiBaseUrl.replace(/\/+$/, '')}/v1/discover?limit=1`;
+        const res = await fetch(url);
+        return `ok (HTTP ${res.status})`;
+    }
+    catch (err) {
+        return `error (${err.message})`;
+    }
+}
+// ────────────────────────────────────────────────────────────────────────────
+// help / version
+// ────────────────────────────────────────────────────────────────────────────
+function printHelp() {
+    process.stdout.write([
+        'usage: leash-mcp [command] [options]',
+        '',
+        'commands:',
+        '  (default)         run the STDIO MCP server (alias: serve, run)',
+        '  export            print active agent.json to stdout (or --out <path>)',
+        '  import <path>     install a downloaded agent.json into ~/.config/leash/',
+        '  doctor            diagnostic — config + RPC + API reachability',
+        '  help, -h          show this message',
+        '  version, -v       show installed version',
+        '',
+        'environment overrides:',
+        '  LEASH_AGENT_MINT, LEASH_EXECUTIVE_KEY, LEASH_NETWORK,',
+        '  LEASH_API_URL, LEASH_RPC_URL, LEASH_API_KEY',
+        '',
+        'see https://leash.market/docs/mcp for setup details.',
+        '',
+    ].join('\n'));
+}
+function printVersion() {
+    process.stdout.write('@leashmarket/mcp 0.1.0\n');
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEpB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,OAAO,CAAC;QACb,KAAK,KAAK;YACR,MAAM,cAAc,EAAE,CAAC;YACvB,OAAO;QAET,KAAK,QAAQ;YACX,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO;QAET,KAAK,QAAQ;YACX,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO;QAET,KAAK,QAAQ;YACX,MAAM,SAAS,EAAE,CAAC;YAClB,OAAO;QAET,KAAK,IAAI,CAAC;QACV,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM;YACT,SAAS,EAAE,CAAC;YACZ,OAAO;QAET,KAAK,IAAI,CAAC;QACV,KAAK,WAAW;YACd,YAAY,EAAE,CAAC;YACf,OAAO;QAET;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,MAAM,CAAC,CAAC;YACpD,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8HAA8H,CAC/H,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,CAAU;QACnB,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,iBAAiB,EAAE,MAAM,CAAC,qBAAqB;QAC/C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,UAAU;QAC1B,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAElD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAE,CAAC;QACnC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,gBAAgB,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,0BAA0B,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,uBAAwB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,kEAAkE;IAClE,iEAAiE;IACjE,0BAA0B;IAC1B,IAAI,CAAC;QACH,UAAU,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA+B,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAE,gBAA0B,CAAC;IAC9F,MAAM,UAAU,GACd,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACjG,MAAM,MAAM,GACV,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACnD,CAAC,CAAC,CAAC,CAAC,OAAO;QACX,CAAC,CAAC,OAAO,KAAK,gBAAgB;YAC5B,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,+BAA+B,CAAC;IACxC,MAAM,eAAe,GACnB,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC,CAAC,CAAC,YAAY;QAChB,CAAC,CAAC,+BAA+B,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhE,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,gBAAgB,CAAC;QACrB,MAAM,EAAE;YACN,SAAS;YACT,qBAAqB,EAAE,YAAY;YACnC,OAAO;YACP,UAAU;YACV,MAAM;YACN,eAAe;YACf,MAAM;SACP;QACD,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,SAAS,aAAa,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,KAAK,UAAU,SAAS;IACtB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,IAAI,eAAe,GAAG,WAAW,CAAC;IAClC,IAAI,CAAC;QACH,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,6CAA8C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,qBAAqB,eAAe,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAE1F,2DAA2D;IAC3D,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,uDAAuD;IACvD,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAE7D,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;QAC7F,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;QAC5F,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,KAAK,uBAAuB,IAAI,IAAI,KAAK,6BAA6B,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAc;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,eAAe,GAAG,CAAC,MAAM,GAAG,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;QAC3E,OAAO,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,SAAS,GAAG,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAW,GAAa,CAAC,OAAO,GAAG,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,UAAkB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAW,GAAa,CAAC,OAAO,GAAG,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,SAAS,SAAS;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;QACE,sCAAsC;QACtC,EAAE;QACF,WAAW;QACX,kEAAkE;QAClE,yEAAyE;QACzE,2EAA2E;QAC3E,kEAAkE;QAClE,uCAAuC;QACvC,4CAA4C;QAC5C,EAAE;QACF,wBAAwB;QACxB,yDAAyD;QACzD,+CAA+C;QAC/C,EAAE;QACF,sDAAsD;QACtD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACnD,CAAC"}

package/dist/config-write.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Persist a freshly-registered agent (or a pending-register block) to
+ * `~/.config/leash/agent.json` with `chmod 600` so subsequent
+ * `leash-mcp` / `leash` CLI launches pick up the new identity
+ * automatically.
+ *
+ * Lives in its own module (separate from `./config.ts`) because the
+ * read path is browser-safe — `loadAgentConfig` only depends on
+ * `node:fs` types — while writing requires `node:fs/promises` and
+ * `node:os`. Keeping the boundaries clean lets the SDK reuse the
+ * read path in non-Node runtimes (Bun, Deno, edge) without dragging
+ * in the file-system writer.
+ */
+import type { LeashAgentConfig, LeashHostDefaults, PendingRegister } from './config.js';
+/**
+ * Write a fully-registered `LeashAgentConfig` to disk. Creates parent
+ * directories with mode 0700, writes the file with mode 0600.
+ * Idempotent: overwrites in-place. Clears any `pending_register`
+ * block left over from the two-step registration flow.
+ */
+export declare function writeAgentConfig(args: {
+    config: LeashAgentConfig;
+    path?: string;
+    pretty?: boolean;
+}): Promise<string>;
+/**
+ * Persist a pending executive keypair while the user funds it with
+ * SOL. Subsequent `leash_register_agent` calls (or a fresh MCP boot)
+ * will pick this up via `loadAgentSession().pending`. The block is
+ * cleared once `writeAgentConfig` lands the registered config.
+ */
+export declare function writePendingRegister(args: {
+    pending: PendingRegister;
+    defaults: LeashHostDefaults;
+    path?: string;
+    pretty?: boolean;
+}): Promise<string>;
+//# sourceMappingURL=config-write.d.ts.map

package/dist/config-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-write.d.ts","sourceRoot":"","sources":["../src/config-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGxF;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAclB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BlB"}