@leashmarket/mcp 0.1.0

package/dist/config-write.js

@@ -0,0 +1,80 @@
+/**
+ * Persist a freshly-registered agent (or a pending-register block) to
+ * `~/.config/leash/agent.json` with `chmod 600` so subsequent
+ * `leash-mcp` / `leash` CLI launches pick up the new identity
+ * automatically.
+ *
+ * Lives in its own module (separate from `./config.ts`) because the
+ * read path is browser-safe — `loadAgentConfig` only depends on
+ * `node:fs` types — while writing requires `node:fs/promises` and
+ * `node:os`. Keeping the boundaries clean lets the SDK reuse the
+ * read path in non-Node runtimes (Bun, Deno, edge) without dragging
+ * in the file-system writer.
+ */
+import { mkdir, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { defaultConfigPath } from './config.js';
+/**
+ * Write a fully-registered `LeashAgentConfig` to disk. Creates parent
+ * directories with mode 0700, writes the file with mode 0600.
+ * Idempotent: overwrites in-place. Clears any `pending_register`
+ * block left over from the two-step registration flow.
+ */
+export async function writeAgentConfig(args) {
+    const path = args.path ?? defaultConfigPath();
+    const file = {
+        version: 1,
+        agent_mint: args.config.agentMint,
+        executive_keypair: args.config.executiveSecretBase58,
+        network: args.config.network,
+        api_url: args.config.apiBaseUrl,
+        rpc_url: args.config.rpcUrl,
+        ...(args.config.explorerBaseUrl ? { explorer_url: args.config.explorerBaseUrl } : {}),
+        ...(args.config.apiKey ? { api_key: args.config.apiKey } : {}),
+        created_at: new Date().toISOString(),
+    };
+    return writeJson(path, file, args.pretty ?? true);
+}
+/**
+ * Persist a pending executive keypair while the user funds it with
+ * SOL. Subsequent `leash_register_agent` calls (or a fresh MCP boot)
+ * will pick this up via `loadAgentSession().pending`. The block is
+ * cleared once `writeAgentConfig` lands the registered config.
+ */
+export async function writePendingRegister(args) {
+    const path = args.path ?? defaultConfigPath();
+    const meta = args.pending.meta;
+    const metaJson = meta &&
+        (meta.name || meta.description || meta.imageUrl || (meta.services && meta.services.length > 0))
+        ? {
+            ...(meta.name ? { name: meta.name } : {}),
+            ...(meta.description ? { description: meta.description } : {}),
+            ...(meta.imageUrl ? { image_url: meta.imageUrl } : {}),
+            ...(meta.services && meta.services.length > 0 ? { services: meta.services } : {}),
+        }
+        : null;
+    const file = {
+        version: 1,
+        network: args.defaults.network,
+        api_url: args.defaults.apiBaseUrl,
+        rpc_url: args.defaults.rpcUrl,
+        ...(args.defaults.explorerBaseUrl ? { explorer_url: args.defaults.explorerBaseUrl } : {}),
+        ...(args.defaults.apiKey ? { api_key: args.defaults.apiKey } : {}),
+        pending_register: {
+            executive_keypair: args.pending.executiveSecretBase58,
+            executive_pubkey: args.pending.executivePubkey,
+            network: args.pending.network,
+            created_at: args.pending.createdAt,
+            ...(metaJson ? { meta: metaJson } : {}),
+        },
+        created_at: new Date().toISOString(),
+    };
+    return writeJson(path, file, args.pretty ?? true);
+}
+async function writeJson(path, payload, pretty) {
+    const body = pretty ? `${JSON.stringify(payload, null, 2)}\n` : JSON.stringify(payload);
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    await writeFile(path, body, { mode: 0o600 });
+    return path;
+}
+//# sourceMappingURL=config-write.js.map

package/dist/config-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-write.js","sourceRoot":"","sources":["../src/config-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAItC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,CAAU;QACnB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;QACjC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;QACpD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;QAC5B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;QAC/B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QAC3B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAK1C;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,MAAM,QAAQ,GACZ,IAAI;QACJ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7F,CAAC,CAAC;YACE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF;QACH,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,CAAU;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;QAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;QACjC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC7B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,gBAAgB,EAAE;YAChB,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB;YACrD,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;YAC9C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC;QACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,OAAgB,EAAE,MAAe;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxF,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Local agent configuration for the standalone Leash MCP server.
+ *
+ * Source of truth is `~/.config/leash/agent.json` (chmod 600). Same
+ * posture as `gcloud`, `gh`, `aws`. Each field can be overridden via
+ * an environment variable, which makes the MCP CI/CD-friendly without
+ * needing a config file at all:
+ *
+ *   - LEASH_AGENT_MINT          → agent_mint
+ *   - LEASH_EXECUTIVE_KEY       → executive_keypair (base58 OR JSON array)
+ *   - LEASH_NETWORK             → network ('solana-mainnet' | 'solana-devnet'). Defaults to `solana-mainnet`.
+ *   - LEASH_API_URL             → apiBaseUrl
+ *   - LEASH_RPC_URL             → rpcUrl override (otherwise picked per network)
+ *   - LEASH_EXPLORER_URL        → explorerBaseUrl (default explorer.leash.market)
+ *   - LEASH_API_KEY             → bearer token for legacy API-key endpoints
+ *                                 (X-Leash-Sig auth is the long-term path)
+ *
+ * Loading rules:
+ *   1. Read `agent.json` if it exists.
+ *   2. Apply env-var overrides on top.
+ *   3. The host always boots — `loadAgentSession` returns a `defaults`
+ *      block (network/rpc/api/explorer) even when no agent is
+ *      provisioned, so `leash_register_agent` can run before the file
+ *      exists. `config` is `null` until a mint is recorded; `pending`
+ *      is set when the user has chosen a keypair but not yet funded
+ *      it (the gap between the two `leash_register_agent` calls).
+ */
+import type { SvmNetwork } from '@leashmarket/mcp-core';
+/** Always-available host defaults. Resolvable without any agent state. */
+export type LeashHostDefaults = {
+    network: SvmNetwork;
+    apiBaseUrl: string;
+    rpcUrl: string;
+    explorerBaseUrl: string;
+    apiKey: string | null;
+};
+/**
+ * Pending-register agent metadata persisted alongside the unfunded
+ * executive. Captured on the FIRST `leash_register_agent` call so the
+ * SECOND call (after funding) doesn't need the LLM to re-collect
+ * `name` / `description` / `image_url` / `services[]`.
+ */
+export type PendingRegisterMeta = {
+    name?: string;
+    description?: string;
+    imageUrl?: string;
+    services?: {
+        name: string;
+        endpoint: string;
+    }[];
+};
+/**
+ * Persisted-but-unfunded executive keypair + agent draft. Written to
+ * `agent.json` on the FIRST `leash_register_agent` call; consumed
+ * (and cleared) on the SECOND call after the user has funded the
+ * executive with SOL.
+ */
+export type PendingRegister = {
+    /** 64-byte ed25519 secret, base58. */
+    executiveSecretBase58: string;
+    /** Cached pubkey so doctor / status checks don't need to re-derive. */
+    executivePubkey: string;
+    network: SvmNetwork;
+    createdAt: string;
+    /**
+     * Agent metadata captured on Step 1 so the LLM doesn't need to
+     * repeat `name` / `services` / etc. on Step 2.
+     */
+    meta?: PendingRegisterMeta;
+};
+export type LeashAgentConfig = {
+    agentMint: string;
+    /** Raw base58 secret (length 64-byte ed25519 keypair). */
+    executiveSecretBase58: string;
+    network: SvmNetwork;
+    /** Base URL of the Leash API the host should talk to. */
+    apiBaseUrl: string;
+    /** Solana RPC URL used for direct chain reads + tx submission. */
+    rpcUrl: string;
+    /**
+     * Base URL of the Leash protocol explorer used to build
+     * `receipt_url` / `agent_url` deep-links. Defaults to
+     * `https://explorer.leash.market`.
+     */
+    explorerBaseUrl: string;
+    /** Optional legacy API-key bearer token. Goes away once X-Leash-Sig auth is in. */
+    apiKey: string | null;
+};
+/** Snapshot returned by {@link loadAgentSession}. */
+export type AgentSession = {
+    config: LeashAgentConfig | null;
+    pending: PendingRegister | null;
+    defaults: LeashHostDefaults;
+};
+export declare function defaultRpcFor(network: SvmNetwork): string;
+/** Path searched for the on-disk config. Exposed for tests. */
+export declare function defaultConfigPath(): string;
+/**
+ * Resolve the host's full session snapshot. Always returns `defaults`
+ * (so the host can boot and `leash_register_agent` is callable);
+ * `config` and `pending` are present only when previously persisted.
+ */
+export declare function loadAgentSession(opts?: {
+    path?: string;
+}): AgentSession;
+/**
+ * Backwards-compat shim — same return as the v0.1 build (config-only,
+ * `null` when no mint persisted). Used by the test suite and any
+ * external callers that imported it.
+ */
+export declare function loadAgentConfig(opts?: {
+    path?: string;
+}): LeashAgentConfig | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,0EAA0E;AAC1E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,sCAAsC;IACtC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uEAAuE;IACvE,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,UAAU,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,iBAAiB,CAAC;CAC7B,CAAC;AAwBF,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEzD;AAED,+DAA+D;AAC/D,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAsGD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAqBvE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,GAAG,IAAI,CAEjF"}

package/dist/config.js

@@ -0,0 +1,164 @@
+/**
+ * Local agent configuration for the standalone Leash MCP server.
+ *
+ * Source of truth is `~/.config/leash/agent.json` (chmod 600). Same
+ * posture as `gcloud`, `gh`, `aws`. Each field can be overridden via
+ * an environment variable, which makes the MCP CI/CD-friendly without
+ * needing a config file at all:
+ *
+ *   - LEASH_AGENT_MINT          → agent_mint
+ *   - LEASH_EXECUTIVE_KEY       → executive_keypair (base58 OR JSON array)
+ *   - LEASH_NETWORK             → network ('solana-mainnet' | 'solana-devnet'). Defaults to `solana-mainnet`.
+ *   - LEASH_API_URL             → apiBaseUrl
+ *   - LEASH_RPC_URL             → rpcUrl override (otherwise picked per network)
+ *   - LEASH_EXPLORER_URL        → explorerBaseUrl (default explorer.leash.market)
+ *   - LEASH_API_KEY             → bearer token for legacy API-key endpoints
+ *                                 (X-Leash-Sig auth is the long-term path)
+ *
+ * Loading rules:
+ *   1. Read `agent.json` if it exists.
+ *   2. Apply env-var overrides on top.
+ *   3. The host always boots — `loadAgentSession` returns a `defaults`
+ *      block (network/rpc/api/explorer) even when no agent is
+ *      provisioned, so `leash_register_agent` can run before the file
+ *      exists. `config` is `null` until a mint is recorded; `pending`
+ *      is set when the user has chosen a keypair but not yet funded
+ *      it (the gap between the two `leash_register_agent` calls).
+ */
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const DEFAULT_API_URL = 'https://api.leash.market';
+const DEFAULT_EXPLORER_URL = 'https://explorer.leash.market';
+/**
+ * Public Solana RPC fallbacks. Used only when `LEASH_RPC_URL` and
+ * `agent.json:rpc_url` are both unset.
+ *
+ * **These are slow.** They are public, heavily rate-limited
+ * (429s under load), and add 4-8s of latency to every
+ * `leash_pay_payment_link` call (each settlement makes 3-5 RPC
+ * round-trips). Production users should set `LEASH_RPC_URL` (or
+ * persist `rpc_url` in `~/.config/leash/agent.json`) to a Helius /
+ * Triton / QuickNode / Alchemy / self-hosted endpoint — settlement
+ * latency drops to sub-second and 429s disappear.
+ *
+ * The MCP and CLI docs surface this in a "Bring your own RPC"
+ * callout; keep this comment in sync if those move.
+ */
+const DEFAULT_RPC = {
+    'solana-devnet': 'https://api.devnet.solana.com',
+    'solana-mainnet': 'https://api.mainnet-beta.solana.com',
+};
+export function defaultRpcFor(network) {
+    return DEFAULT_RPC[network];
+}
+/** Path searched for the on-disk config. Exposed for tests. */
+export function defaultConfigPath() {
+    return join(homedir(), '.config', 'leash', 'agent.json');
+}
+/**
+ * Best-effort read of the on-disk config. Missing or malformed files
+ * yield `null`; we never throw because the MCP must boot regardless
+ * (so `tools/list` works and the LLM can call onboarding tools).
+ */
+function tryReadFile(path) {
+    try {
+        const raw = readFileSync(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === 'object' ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function pick(envVal, fileVal) {
+    const e = envVal?.trim();
+    if (e && e.length > 0)
+        return e;
+    const f = fileVal?.trim();
+    if (f && f.length > 0)
+        return f;
+    return undefined;
+}
+function normalizeNetwork(raw) {
+    const lower = raw?.toLowerCase().trim();
+    if (lower === 'solana-devnet' || lower === 'devnet')
+        return 'solana-devnet';
+    return 'solana-mainnet';
+}
+function resolveDefaults(file) {
+    const network = normalizeNetwork(process.env.LEASH_NETWORK ?? file?.network);
+    const apiBaseUrl = pick(process.env.LEASH_API_URL, file?.api_url) ?? DEFAULT_API_URL;
+    const rpcUrl = pick(process.env.LEASH_RPC_URL, file?.rpc_url) ?? DEFAULT_RPC[network];
+    const explorerBaseUrl = pick(process.env.LEASH_EXPLORER_URL, file?.explorer_url) ?? DEFAULT_EXPLORER_URL;
+    const apiKey = pick(process.env.LEASH_API_KEY, file?.api_key) ?? null;
+    return { network, apiBaseUrl, rpcUrl, explorerBaseUrl, apiKey };
+}
+function readPending(file, defaults) {
+    const block = file?.pending_register;
+    if (!block)
+        return null;
+    const secret = block.executive_keypair?.trim();
+    const pub = block.executive_pubkey?.trim();
+    if (!secret || !pub)
+        return null;
+    const meta = readPendingMeta(block.meta);
+    return {
+        executiveSecretBase58: secret,
+        executivePubkey: pub,
+        network: normalizeNetwork(block.network ?? defaults.network),
+        createdAt: block.created_at ?? new Date(0).toISOString(),
+        ...(meta ? { meta } : {}),
+    };
+}
+function readPendingMeta(raw) {
+    if (!raw)
+        return undefined;
+    const services = (raw.services ?? [])
+        .map((s) => ({ name: (s.name ?? '').trim(), endpoint: (s.endpoint ?? '').trim() }))
+        .filter((s) => s.name.length > 0 && s.endpoint.length > 0);
+    const meta = {};
+    if (raw.name?.trim())
+        meta.name = raw.name.trim();
+    if (raw.description?.trim())
+        meta.description = raw.description.trim();
+    if (raw.image_url?.trim())
+        meta.imageUrl = raw.image_url.trim();
+    if (services.length > 0)
+        meta.services = services;
+    return Object.keys(meta).length > 0 ? meta : undefined;
+}
+/**
+ * Resolve the host's full session snapshot. Always returns `defaults`
+ * (so the host can boot and `leash_register_agent` is callable);
+ * `config` and `pending` are present only when previously persisted.
+ */
+export function loadAgentSession(opts) {
+    const path = opts?.path ?? defaultConfigPath();
+    const file = tryReadFile(path);
+    const defaults = resolveDefaults(file);
+    const agentMint = pick(process.env.LEASH_AGENT_MINT, file?.agent_mint);
+    const executiveSecret = pick(process.env.LEASH_EXECUTIVE_KEY, file?.executive_keypair);
+    const config = agentMint && executiveSecret
+        ? {
+            agentMint,
+            executiveSecretBase58: executiveSecret,
+            network: defaults.network,
+            apiBaseUrl: defaults.apiBaseUrl,
+            rpcUrl: defaults.rpcUrl,
+            explorerBaseUrl: defaults.explorerBaseUrl,
+            apiKey: defaults.apiKey,
+        }
+        : null;
+    const pending = readPending(file, defaults);
+    return { config, pending, defaults };
+}
+/**
+ * Backwards-compat shim — same return as the v0.1 build (config-only,
+ * `null` when no mint persisted). Used by the test suite and any
+ * external callers that imported it.
+ */
+export function loadAgentConfig(opts) {
+    return loadAgentSession(opts).config;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwEjC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AACnD,MAAM,oBAAoB,GAAG,+BAA+B,CAAC;AAC7D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,GAA+B;IAC9C,eAAe,EAAE,+BAA+B;IAChD,gBAAgB,EAAE,qCAAqC;CACxD,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,OAAmB;IAC/C,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AAC3D,CAAC;AAkCD;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC5C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,MAA0B,EAAE,OAA2B;IACnE,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,MAAM,KAAK,GAAG,GAAG,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IAC5E,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,IAAsB;IAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,eAAe,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,eAAe,GACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,oBAAoB,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC;IACtE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,IAAsB,EAAE,QAA2B;IACtE,MAAM,KAAK,GAAG,IAAI,EAAE,gBAAgB,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO;QACL,qBAAqB,EAAE,MAAM;QAC7B,eAAe,EAAE,GAAG;QACpB,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;QAC5D,SAAS,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACxD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAwB;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAClF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAClD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAwB;IACvD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACvE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACvF,MAAM,MAAM,GACV,SAAS,IAAI,eAAe;QAC1B,CAAC,CAAC;YACE,SAAS;YACT,qBAAqB,EAAE,eAAe;YACtC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB;QACH,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAwB;IACtD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACvC,CAAC"}

package/dist/host-stdio.d.ts

@@ -0,0 +1,27 @@
+/**
+ * `LeashHost` implementation for the standalone STDIO MCP / CLI.
+ *
+ * Differs from the chat product in two important ways:
+ *
+ *   1. **Settlement happens in-process.** `pay` and `withdraw` actually
+ *      sign + submit on Solana using the local executive keypair —
+ *      no UI in the loop. The result blob carries a real `tx_signature`,
+ *      not a "review-the-card" artifact. This is the killer demo path.
+ *
+ *   2. **No platform DB / Privy session.** Off-chain calls to the
+ *      Leash API authenticate via a legacy `LEASH_API_KEY` bearer
+ *      token until the X-Leash-Sig auth path lands in batch 4.
+ *
+ * The four host methods all `try/catch` aggressively and return a
+ * structured `{ status: 'ok' | 'error' }` blob — never throw — so
+ * the LLM never sees a tool exception, only a recoverable JSON
+ * response with a `message` it can surface.
+ */
+import { type LeashHost } from '@leashmarket/mcp-core';
+import type { LeashAgentConfig } from './config.js';
+/**
+ * Build the standalone `LeashHost`. Captures the `LeashAgentConfig`
+ * + `LeashSigner` once so per-call methods can stay tight.
+ */
+export declare function createStdioHost(config: LeashAgentConfig): LeashHost;
+//# sourceMappingURL=host-stdio.d.ts.map

package/dist/host-stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-stdio.d.ts","sourceRoot":"","sources":["../src/host-stdio.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAaH,OAAO,EAgBL,KAAK,SAAS,EAYf,MAAM,uBAAuB,CAAC;AAa/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAgCpD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAGnE"}