@leashmarket/mcp 0.1.0

package/dist/signer.d.ts

@@ -0,0 +1,54 @@
+/**
+ * `LeashSigner` — the cryptographic primitive every standalone Leash
+ * surface (MCP, CLI, SDK) shares. It's just an ed25519 keypair, but
+ * we centralise loading + the few representations we need so the
+ * tool code can stay representation-agnostic.
+ *
+ * Three representations come out of one secret:
+ *
+ *   - `umi.identity()` (Metaplex `Signer`) — used for the MPL Core
+ *     `Execute` instruction during withdraws and the SPL `Approve`
+ *     during delegate rotation.
+ *
+ *   - `@solana/kit` `TransactionSigner` — used by `@leashmarket/buyer-kit`
+ *     when paying x402 links (the underlying x402 SVM scheme is
+ *     written against `@solana/kit`).
+ *
+ *   - The bare `Uint8Array` secret + base58 `pubkey` — used for
+ *     `X-Leash-Sig` HTTP signing in batch 4.
+ *
+ * Accepts either a base58 string OR the JSON-array shape that
+ * `solana-keygen` writes by default. Throws on malformed input
+ * because a misconfigured signer should fail loudly at boot, not
+ * silently on first tool call.
+ */
+import { type KeyPairSigner } from '@solana/kit';
+import { type PublicKey as UmiPublicKey, type Umi } from '@metaplex-foundation/umi';
+import type { SvmNetwork } from '@leashmarket/mcp-core';
+export type LeashSigner = {
+    /** Base58 ed25519 public key. */
+    pubkey: string;
+    /** 64-byte raw secret. Keep in memory only. */
+    secret: Uint8Array;
+    /**
+     * Build a Umi instance configured with `mplCore` + `mplToolbox` and
+     * this signer set as the identity. Memoised per Leash config so
+     * repeat calls within one MCP process reuse the same RPC client.
+     */
+    getUmi(rpcUrl: string): Umi;
+    /**
+     * Build a `@solana/kit` `KeyPairSigner` for buyer-kit. Memoised.
+     */
+    getKitSigner(): Promise<KeyPairSigner>;
+    /** Convenience: the executive's pubkey as a Umi PublicKey. */
+    umiPubkey: UmiPublicKey;
+};
+/**
+ * Build a `LeashSigner` from a raw secret string. Sets up the lazy
+ * Umi + kit-signer caches; nothing network-touching happens until a
+ * tool actually needs them.
+ */
+export declare function loadSigner(secretRaw: string): LeashSigner;
+/** Ergonomic helper for callers that have a network-friendly slug. */
+export declare function defaultRpcFor(network: SvmNetwork): string;
+//# sourceMappingURL=signer.d.ts.map

package/dist/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAgC,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAE/E,OAAO,EAIL,KAAK,SAAS,IAAI,YAAY,EAC9B,KAAK,GAAG,EACT,MAAM,0BAA0B,CAAC;AAKlC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,MAAM,WAAW,GAAG;IACxB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,MAAM,EAAE,UAAU,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC;IAC5B;;OAEG;IACH,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IACvC,8DAA8D;IAC9D,SAAS,EAAE,YAAY,CAAC;CACzB,CAAC;AAmCF;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAmCzD;AAED,sEAAsE;AACtE,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAIzD"}

package/dist/signer.js

@@ -0,0 +1,102 @@
+/**
+ * `LeashSigner` — the cryptographic primitive every standalone Leash
+ * surface (MCP, CLI, SDK) shares. It's just an ed25519 keypair, but
+ * we centralise loading + the few representations we need so the
+ * tool code can stay representation-agnostic.
+ *
+ * Three representations come out of one secret:
+ *
+ *   - `umi.identity()` (Metaplex `Signer`) — used for the MPL Core
+ *     `Execute` instruction during withdraws and the SPL `Approve`
+ *     during delegate rotation.
+ *
+ *   - `@solana/kit` `TransactionSigner` — used by `@leashmarket/buyer-kit`
+ *     when paying x402 links (the underlying x402 SVM scheme is
+ *     written against `@solana/kit`).
+ *
+ *   - The bare `Uint8Array` secret + base58 `pubkey` — used for
+ *     `X-Leash-Sig` HTTP signing in batch 4.
+ *
+ * Accepts either a base58 string OR the JSON-array shape that
+ * `solana-keygen` writes by default. Throws on malformed input
+ * because a misconfigured signer should fail loudly at boot, not
+ * silently on first tool call.
+ */
+import { createKeyPairSignerFromBytes } from '@solana/kit';
+import { createUmi } from '@metaplex-foundation/umi-bundle-defaults';
+import { keypairIdentity, publicKey as umiPublicKey, } from '@metaplex-foundation/umi';
+import { mplCore } from '@metaplex-foundation/mpl-core';
+import { mplToolbox } from '@metaplex-foundation/mpl-toolbox';
+import { base58 } from '@metaplex-foundation/umi/serializers';
+/** Decode the loose secret form into a 64-byte Uint8Array. */
+function decodeSecretBytes(secret) {
+    const trimmed = secret.trim();
+    // solana-keygen JSON shape.
+    if (trimmed.startsWith('[')) {
+        const parsed = JSON.parse(trimmed);
+        if (!Array.isArray(parsed) || parsed.length !== 64) {
+            throw new Error('executive secret JSON must be a 64-element byte array');
+        }
+        const bytes = Uint8Array.from(parsed.map((n) => Number(n)));
+        if (bytes.some((b) => Number.isNaN(b) || b < 0 || b > 255)) {
+            throw new Error('executive secret JSON contains non-byte values');
+        }
+        return bytes;
+    }
+    // base58.
+    try {
+        const bytes = base58.serialize(trimmed);
+        if (bytes.length !== 64) {
+            throw new Error(`executive secret must decode to 64 bytes (got ${bytes.length}). Use solana-keygen output verbatim.`);
+        }
+        return bytes;
+    }
+    catch (err) {
+        throw new Error(`executive secret is not a valid base58 string: ${err instanceof Error ? err.message : 'unknown'}`);
+    }
+}
+/**
+ * Build a `LeashSigner` from a raw secret string. Sets up the lazy
+ * Umi + kit-signer caches; nothing network-touching happens until a
+ * tool actually needs them.
+ */
+export function loadSigner(secretRaw) {
+    const secret = decodeSecretBytes(secretRaw);
+    // Derive pubkey via a temporary Umi so we don't carry an extra
+    // ed25519 lib just for this one call.
+    const probe = createUmi('https://invalid');
+    const umiKp = probe.eddsa.createKeypairFromSecretKey(secret);
+    const pubkeyStr = umiKp.publicKey.toString();
+    let umi = null;
+    let cachedRpcUrl = null;
+    let kitSigner = null;
+    const getUmi = (rpcUrl) => {
+        if (umi && cachedRpcUrl === rpcUrl)
+            return umi;
+        umi = createUmi(rpcUrl).use(mplCore()).use(mplToolbox());
+        const kp = umi.eddsa.createKeypairFromSecretKey(secret);
+        umi.use(keypairIdentity(kp));
+        cachedRpcUrl = rpcUrl;
+        return umi;
+    };
+    const getKitSigner = async () => {
+        if (kitSigner)
+            return kitSigner;
+        kitSigner = await createKeyPairSignerFromBytes(secret);
+        return kitSigner;
+    };
+    return {
+        pubkey: pubkeyStr,
+        secret,
+        getUmi,
+        getKitSigner,
+        umiPubkey: umiPublicKey(pubkeyStr),
+    };
+}
+/** Ergonomic helper for callers that have a network-friendly slug. */
+export function defaultRpcFor(network) {
+    return network === 'solana-mainnet'
+        ? 'https://api.mainnet-beta.solana.com'
+        : 'https://api.devnet.solana.com';
+}
+//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,4BAA4B,EAAsB,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AACrE,OAAO,EACL,eAAe,EACf,SAAS,IAAI,YAAY,GAI1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAuB9D,8DAA8D;AAC9D,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAE9B,4BAA4B;IAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,iDAAiD,KAAK,CAAC,MAAM,uCAAuC,CACrG,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kDAAkD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CACnG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAE5C,+DAA+D;IAC/D,sCAAsC;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAe,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IAE7C,IAAI,GAAG,GAAe,IAAI,CAAC;IAC3B,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,SAAS,GAAyB,IAAI,CAAC;IAE3C,MAAM,MAAM,GAAG,CAAC,MAAc,EAAO,EAAE;QACrC,IAAI,GAAG,IAAI,YAAY,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;QAC/C,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACzD,MAAM,EAAE,GAAe,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,YAAY,GAAG,MAAM,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,IAA4B,EAAE;QACtD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,SAAS,GAAG,MAAM,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,MAAM;QACN,MAAM;QACN,YAAY;QACZ,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,OAAmB;IAC/C,OAAO,OAAO,KAAK,gBAAgB;QACjC,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,+BAA+B,CAAC;AACtC,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "publishConfig": {
+    "access": "public"
+  },
+  "name": "@leashmarket/mcp",
+  "version": "0.1.0",
+  "description": "Standalone Leash MCP server. STDIO transport. Drop into Cursor / Claude Desktop / Cline / Continue / ChatGPT-MCP.",
+  "private": false,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "leash-mcp": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@metaplex-foundation/mpl-core": "^1.10.0",
+    "@metaplex-foundation/mpl-toolbox": "^0.10.0",
+    "@metaplex-foundation/umi": "^1.5.1",
+    "@metaplex-foundation/umi-bundle-defaults": "^1.5.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@solana/kit": "^5.5.0",
+    "zod": "^3.24.1",
+    "@leashmarket/mcp-core": "0.1.0",
+    "@leashmarket/registry-utils": "0.1.0",
+    "@leashmarket/core": "0.1.0",
+    "@leashmarket/buyer-kit": "0.1.0",
+    "@leashmarket/schemas": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "tsx": "^4.20.0",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && chmod +x ./dist/cli.js",
+    "typecheck": "tsc -p tsconfig.json",
+    "lint": "echo lint:mcp",
+    "test": "vitest run",
+    "dev": "node --import tsx ./src/cli.ts",
+    "dev:demo-balance": "node --import tsx ./scripts/demo-balance.ts",
+    "fix-delegation": "node --import tsx ./scripts/fix-delegation.ts",
+    "test:yc-demo-devnet": "node --import tsx ./scripts/test-yc-demo-devnet.ts"
+  }
+}