@muhaven/mcp 0.1.0 → 0.1.3

package/manifest.json

@@ -1,98 +1,98 @@
-{
-  "$comment": "MCPB v0.2 manifest for @muhaven/mcp. Per ADR-3 the JWT is acquired via the device-code ceremony and stored in the broker's keystore — it is NOT a user_config entry. Sensitive items declared here are limited to the broker session-key + IPC endpoint overrides.",
-  "manifest_version": "0.2",
-  "name": "muhaven-mcp",
-  "display_name": "MuHaven (RWA portfolio)",
-  "version": "0.1.0",
-  "description": "Confidential RWA portfolio management on Fhenix CoFHE. Read your encrypted balances, propose yield claims and policy changes — all signing happens in a sibling broker daemon, the LLM never sees your private key.",
-  "long_description": "MuHaven MCP exposes 22 tools across read.* / position.* / policy.* / issuer.* / governance.* groups for managing real-world asset (RWA) tokens with FHE-encrypted balances. Authentication uses a one-time device-code ceremony (run `muhaven-broker login`); subsequent tool calls fetch the JWT from the broker over a Unix socket. Position / governance tools return unsigned UserOps + broker signatures — they NEVER auto-submit to a bundler. The companion `muhaven-broker` daemon must be running before tools can be invoked. See README for setup.",
-  "author": {
-    "name": "MuHaven",
-    "email": "hello@muhaven.app",
-    "url": "https://muhaven.app"
-  },
-  "homepage": "https://muhaven.app",
-  "documentation": "https://github.com/hasToDev/muhaven/blob/master/packages/mcp/README.md",
-  "support": "https://github.com/hasToDev/muhaven/issues",
-  "license": "MIT",
-  "keywords": ["fhe", "fhenix", "rwa", "claude", "mcp", "muhaven"],
-  "compatibility": {
-    "platforms": ["darwin", "win32", "linux"],
-    "runtimes": {
-      "node": ">=20.0.0"
-    }
-  },
-  "server": {
-    "type": "node",
-    "entry_point": "dist/index.cjs",
-    "mcp_config": {
-      "command": "node",
-      "args": ["${__dirname}/dist/index.cjs"],
-      "env": {
-        "MUHAVEN_BACKEND_URL": "${user_config.backend_url}",
-        "MUHAVEN_DASHBOARD_URL": "${user_config.dashboard_url}",
-        "MUHAVEN_BROKER_ENDPOINT": "${user_config.broker_endpoint}",
-        "MUHAVEN_READ_ONLY": "${user_config.read_only}"
-      }
-    }
-  },
-  "tools": [
-    { "name": "muhaven.read.portfolio", "description": "Encrypted-balance portfolio summary; aggregates only.", "sensitive": false },
-    { "name": "muhaven.read.yields", "description": "Per-token yield history (cleartext aggregates).", "sensitive": false },
-    { "name": "muhaven.read.distribution", "description": "Distribution status for a (token, epoch).", "sensitive": false },
-    { "name": "muhaven.read.tokens", "description": "RWA tokens the user holds.", "sensitive": false },
-    { "name": "muhaven.read.audit", "description": "User's tiered-autonomy audit log.", "sensitive": false },
-    { "name": "muhaven.position.buy", "description": "Propose a Subscription buy. Returns unsigned UserOp.", "sensitive": true },
-    { "name": "muhaven.position.sell", "description": "Propose a redemption-queue sell. Returns unsigned UserOp.", "sensitive": true },
-    { "name": "muhaven.position.claim", "description": "Propose a yield claim. Returns unsigned UserOp.", "sensitive": true },
-    { "name": "muhaven.position.rebalance", "description": "Propose a multi-leg atomic rebalance.", "sensitive": true },
-    { "name": "muhaven.policy.set_tier", "description": "Request / commit a tiered-autonomy transition.", "sensitive": true },
-    { "name": "muhaven.policy.pause", "description": "Activate /pause kill-switch.", "sensitive": true },
-    { "name": "muhaven.policy.audit_export", "description": "Drain the audit log to JSON.", "sensitive": false },
-    { "name": "muhaven.policy.session_key_status", "description": "Inspect ZeroDev session-key state.", "sensitive": false },
-    { "name": "muhaven.issuer.distribute_yield", "description": "Propose a yield distribution. Issuer-only.", "sensitive": true },
-    { "name": "muhaven.issuer.kyc_add", "description": "Propose adding an investor to the ERC-3643 whitelist. Issuer-only.", "sensitive": true },
-    { "name": "muhaven.issuer.kyc_remove", "description": "Propose removing an investor from the ERC-3643 whitelist. Issuer-only.", "sensitive": true },
-    { "name": "muhaven.issuer.unpause_token", "description": "Propose set-NAV-and-unpause for a freshly-deployed token. Issuer-only.", "sensitive": true },
-    { "name": "muhaven.issuer.audit_query", "description": "Read your own tiered-autonomy audit log (issuer-self).", "sensitive": false },
-    { "name": "muhaven.read.protection_coverage", "description": "Read the on-chain DefaultProtection coverage state for a token (P11).", "sensitive": false },
-    { "name": "muhaven.read.kyc_attestation", "description": "Read the KYC attestation registry status for an investor (P11).", "sensitive": false },
-    { "name": "muhaven.governance.propose", "description": "Propose an EncryptedGovernance vote. Returns unsigned UserOp (P11).", "sensitive": true },
-    { "name": "muhaven.governance.cast_vote", "description": "Cast an encrypted vote on an open proposal. Returns unsigned UserOp (P11; runner deferred to Wave 5).", "sensitive": true }
-  ],
-  "user_config": [
-    {
-      "key": "backend_url",
-      "type": "string",
-      "title": "MuHaven backend URL",
-      "description": "Backend host. Default: https://api.muhaven.app (production). Use https://api-stage.muhaven.app for staging.",
-      "default": "https://api.muhaven.app",
-      "sensitive": false
-    },
-    {
-      "key": "dashboard_url",
-      "type": "string",
-      "title": "MuHaven dashboard URL",
-      "description": "Dashboard origin used by the device-code authorization page (/link). Default: https://muhaven.app. Hardcoded for phishing resistance — do not change unless you know what you are doing.",
-      "default": "https://muhaven.app",
-      "sensitive": false
-    },
-    {
-      "key": "broker_endpoint",
-      "type": "string",
-      "title": "muhaven-broker IPC endpoint",
-      "description": "Path to the broker's Unix socket (POSIX) or named pipe (Windows). Leave blank to use the per-user default.",
-      "default": "",
-      "sensitive": false
-    },
-    {
-      "key": "read_only",
-      "type": "boolean",
-      "title": "Read-only mode",
-      "description": "When enabled, only the muhaven.read.* toolset is exposed; position.* and policy.* tools are not registered.",
-      "default": false,
-      "sensitive": false
-    }
-  ],
-  "$comment_setup": "First-run instructions: (1) install this package via your MCPB host (Claude Desktop / Cursor / Claude Code). (2) Start the broker daemon: `muhaven-broker` (running in the background; see README for systemd / launchd / Windows-Service recipes). (3) Authenticate: `muhaven-broker login` — opens browser to https://muhaven.app/link?code=XXXX-XXXX, complete passkey ceremony. (4) Use any tool in this MCP package."
-}
+{
+  "$comment": "MCPB v0.2 manifest for @muhaven/mcp. Per ADR-3 the JWT is acquired via the device-code ceremony and stored in the broker's keystore — it is NOT a user_config entry. Sensitive items declared here are limited to the broker session-key + IPC endpoint overrides.",
+  "manifest_version": "0.2",
+  "name": "muhaven-mcp",
+  "display_name": "MuHaven (RWA portfolio)",
+  "version": "0.1.3",
+  "description": "Confidential RWA portfolio management on Fhenix CoFHE. Read your encrypted balances, propose yield claims and policy changes — all signing happens in a sibling broker daemon, the LLM never sees your private key.",
+  "long_description": "MuHaven MCP exposes 22 tools across read.* / position.* / policy.* / issuer.* / governance.* groups for managing real-world asset (RWA) tokens with FHE-encrypted balances. Authentication uses a one-time device-code ceremony (run `muhaven-broker login`); subsequent tool calls fetch the JWT from the broker over a Unix socket. Position / governance tools return unsigned UserOps + broker signatures — they NEVER auto-submit to a bundler. The companion `muhaven-broker` daemon must be running before tools can be invoked. See README for setup.",
+  "author": {
+    "name": "MuHaven",
+    "email": "hello@muhaven.app",
+    "url": "https://muhaven.app"
+  },
+  "homepage": "https://muhaven.app",
+  "documentation": "https://github.com/hasToDev/muhaven/blob/master/packages/mcp/README.md",
+  "support": "https://github.com/hasToDev/muhaven/issues",
+  "license": "MIT",
+  "keywords": ["fhe", "fhenix", "rwa", "claude", "mcp", "muhaven"],
+  "compatibility": {
+    "platforms": ["darwin", "win32", "linux"],
+    "runtimes": {
+      "node": ">=20.0.0"
+    }
+  },
+  "server": {
+    "type": "node",
+    "entry_point": "dist/index.cjs",
+    "mcp_config": {
+      "command": "node",
+      "args": ["${__dirname}/dist/index.cjs"],
+      "env": {
+        "MUHAVEN_BACKEND_URL": "${user_config.backend_url}",
+        "MUHAVEN_DASHBOARD_URL": "${user_config.dashboard_url}",
+        "MUHAVEN_BROKER_ENDPOINT": "${user_config.broker_endpoint}",
+        "MUHAVEN_READ_ONLY": "${user_config.read_only}"
+      }
+    }
+  },
+  "tools": [
+    { "name": "muhaven.read.portfolio", "description": "Encrypted-balance portfolio summary; aggregates only.", "sensitive": false },
+    { "name": "muhaven.read.yields", "description": "Per-token yield history (cleartext aggregates).", "sensitive": false },
+    { "name": "muhaven.read.distribution", "description": "Distribution status for a (token, epoch).", "sensitive": false },
+    { "name": "muhaven.read.tokens", "description": "RWA tokens the user holds.", "sensitive": false },
+    { "name": "muhaven.read.audit", "description": "User's tiered-autonomy audit log.", "sensitive": false },
+    { "name": "muhaven.position.buy", "description": "Propose a Subscription buy. Returns unsigned UserOp.", "sensitive": true },
+    { "name": "muhaven.position.sell", "description": "Propose a redemption-queue sell. Returns unsigned UserOp.", "sensitive": true },
+    { "name": "muhaven.position.claim", "description": "Propose a yield claim. Returns unsigned UserOp.", "sensitive": true },
+    { "name": "muhaven.position.rebalance", "description": "Propose a multi-leg atomic rebalance.", "sensitive": true },
+    { "name": "muhaven.policy.set_tier", "description": "Request / commit a tiered-autonomy transition.", "sensitive": true },
+    { "name": "muhaven.policy.pause", "description": "Activate /pause kill-switch.", "sensitive": true },
+    { "name": "muhaven.policy.audit_export", "description": "Drain the audit log to JSON.", "sensitive": false },
+    { "name": "muhaven.policy.session_key_status", "description": "Inspect ZeroDev session-key state.", "sensitive": false },
+    { "name": "muhaven.issuer.distribute_yield", "description": "Propose a yield distribution. Issuer-only.", "sensitive": true },
+    { "name": "muhaven.issuer.kyc_add", "description": "Propose adding an investor to the ERC-3643 whitelist. Issuer-only.", "sensitive": true },
+    { "name": "muhaven.issuer.kyc_remove", "description": "Propose removing an investor from the ERC-3643 whitelist. Issuer-only.", "sensitive": true },
+    { "name": "muhaven.issuer.unpause_token", "description": "Propose set-NAV-and-unpause for a freshly-deployed token. Issuer-only.", "sensitive": true },
+    { "name": "muhaven.issuer.audit_query", "description": "Read your own tiered-autonomy audit log (issuer-self).", "sensitive": false },
+    { "name": "muhaven.read.protection_coverage", "description": "Read the on-chain DefaultProtection coverage state for a token (P11).", "sensitive": false },
+    { "name": "muhaven.read.kyc_attestation", "description": "Read the KYC attestation registry status for an investor (P11).", "sensitive": false },
+    { "name": "muhaven.governance.propose", "description": "Propose an EncryptedGovernance vote. Returns unsigned UserOp (P11).", "sensitive": true },
+    { "name": "muhaven.governance.cast_vote", "description": "Cast an encrypted vote on an open proposal. Returns unsigned UserOp (P11; runner deferred to Wave 5).", "sensitive": true }
+  ],
+  "user_config": [
+    {
+      "key": "backend_url",
+      "type": "string",
+      "title": "MuHaven backend URL",
+      "description": "Backend host. Default: https://api.muhaven.app (production). Use https://api-stage.muhaven.app for staging.",
+      "default": "https://api.muhaven.app",
+      "sensitive": false
+    },
+    {
+      "key": "dashboard_url",
+      "type": "string",
+      "title": "MuHaven dashboard URL",
+      "description": "Dashboard origin used by the device-code authorization page (/link). Default: https://muhaven.app. Hardcoded for phishing resistance — do not change unless you know what you are doing.",
+      "default": "https://muhaven.app",
+      "sensitive": false
+    },
+    {
+      "key": "broker_endpoint",
+      "type": "string",
+      "title": "muhaven-broker IPC endpoint",
+      "description": "Path to the broker's Unix socket (POSIX) or named pipe (Windows). Leave blank to use the per-user default.",
+      "default": "",
+      "sensitive": false
+    },
+    {
+      "key": "read_only",
+      "type": "boolean",
+      "title": "Read-only mode",
+      "description": "When enabled, only the muhaven.read.* toolset is exposed; position.* and policy.* tools are not registered.",
+      "default": false,
+      "sensitive": false
+    }
+  ],
+  "$comment_setup": "First-run instructions: (1) install this package via your MCPB host (Claude Desktop / Cursor / Claude Code). (2) Start the broker daemon: `muhaven-broker` (running in the background; see README for systemd / launchd / Windows-Service recipes). (3) Authenticate: `muhaven-broker login` — opens browser to https://muhaven.app/link?code=XXXX-XXXX, complete passkey ceremony. (4) Use any tool in this MCP package."
+}

package/package.json

@@ -1,104 +1,104 @@
-{
-  "name": "@muhaven/mcp",
-  "version": "0.1.0",
-  "description": "MuHaven MCP server — read/position/policy toolsets bridging Claude Desktop / Cursor / Claude Code to the MuHaven backend, with a sibling muhaven-broker daemon holding the session-key private half over a local IPC socket",
-  "type": "module",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/hasToDev/muhaven.git",
-    "directory": "packages/mcp"
-  },
-  "bugs": {
-    "url": "https://github.com/hasToDev/muhaven/issues"
-  },
-  "homepage": "https://github.com/hasToDev/muhaven/tree/master/packages/mcp",
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/",
-    "provenance": true
-  },
-  "sideEffects": false,
-  "main": "./dist/index.cjs",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "import": {
-        "types": "./dist/index.d.ts",
-        "default": "./dist/index.js"
-      },
-      "require": {
-        "types": "./dist/index.d.cts",
-        "default": "./dist/index.cjs"
-      }
-    },
-    "./broker": {
-      "import": {
-        "types": "./dist/broker.d.ts",
-        "default": "./dist/broker.js"
-      },
-      "require": {
-        "types": "./dist/broker.d.cts",
-        "default": "./dist/broker.cjs"
-      }
-    },
-    "./package.json": "./package.json"
-  },
-  "bin": {
-    "muhaven-mcp": "./bin/muhaven-mcp.cjs",
-    "muhaven-broker": "./bin/muhaven-broker.cjs"
-  },
-  "files": [
-    "dist",
-    "bin",
-    "manifest.json",
-    "tool-hashes.json",
-    "README.md",
-    "CHANGELOG.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "build": "tsup",
-    "dev": "MUHAVEN_DEV_BUILD=1 tsup --watch",
-    "clean": "rimraf dist",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "verify-tool-hashes": "tsx scripts/verify-tool-hashes.ts",
-    "prepublishOnly": "pnpm clean && pnpm build && pnpm typecheck && pnpm test && pnpm verify-tool-hashes -- --check"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.4",
-    "viem": "^2.47.0",
-    "zod": "^3.24.0"
-  },
-  "optionalDependencies": {
-    "@napi-rs/keyring": "^1.1.0"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "rimraf": "^5.0.0",
-    "tsup": "^8.5.1",
-    "tsx": "^4.21.0",
-    "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
-  },
-  "engines": {
-    "node": ">=20.0.0",
-    "pnpm": ">=9.0.0"
-  },
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "mcpb",
-    "fhe",
-    "fhenix",
-    "muhaven",
-    "rwa",
-    "claude",
-    "agentic",
-    "web3",
-    "erc-3643"
-  ],
-  "license": "MIT"
-}
+{
+  "name": "@muhaven/mcp",
+  "version": "0.1.3",
+  "description": "MuHaven MCP server — read/position/policy toolsets bridging Claude Desktop / Cursor / Claude Code to the MuHaven backend, with a sibling muhaven-broker daemon holding the session-key private half over a local IPC socket",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hasToDev/muhaven.git",
+    "directory": "packages/mcp"
+  },
+  "bugs": {
+    "url": "https://github.com/hasToDev/muhaven/issues"
+  },
+  "homepage": "https://github.com/hasToDev/muhaven/tree/master/packages/mcp",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "provenance": true
+  },
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./broker": {
+      "import": {
+        "types": "./dist/broker.d.ts",
+        "default": "./dist/broker.js"
+      },
+      "require": {
+        "types": "./dist/broker.d.cts",
+        "default": "./dist/broker.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "muhaven-mcp": "./bin/muhaven-mcp.cjs",
+    "muhaven-broker": "./bin/muhaven-broker.cjs"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "manifest.json",
+    "tool-hashes.json",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "MUHAVEN_DEV_BUILD=1 tsup --watch",
+    "clean": "rimraf dist",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "verify-tool-hashes": "tsx scripts/verify-tool-hashes.ts",
+    "prepublishOnly": "pnpm clean && pnpm build && pnpm typecheck && pnpm test && pnpm verify-tool-hashes -- --check"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "viem": "^2.47.0",
+    "zod": "^3.24.0"
+  },
+  "optionalDependencies": {
+    "@napi-rs/keyring": "^1.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "rimraf": "^5.0.0",
+    "tsup": "^8.5.1",
+    "tsx": "^4.21.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0",
+    "pnpm": ">=9.0.0"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "mcpb",
+    "fhe",
+    "fhenix",
+    "muhaven",
+    "rwa",
+    "claude",
+    "agentic",
+    "web3",
+    "erc-3643"
+  ],
+  "license": "MIT"
+}