@odatano/nightgate-mcp 0.1.0

package/LICENSE

@@ -0,0 +1,178 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   Copyright [2026] [Max Weber]
+
+

package/README.md

@@ -0,0 +1,128 @@
+# @odatano/nightgate-mcp
+
+MCP server that lets AI agents use [NIGHTGATE](https://github.com/ODATANO/NIGHTGATE),
+the Midnight blockchain attestation layer: anchor documents, prove
+zero-knowledge predicates over hidden fields, manage disclosure grants,
+verify everything against live contract state, and poll async jobs.
+Wallet lifecycle (connect, send, deploy) is deliberately not exposed.
+
+## Requirements
+
+- Node.js >= 20
+- A running NIGHTGATE instance (>= 0.14.0 for the full tool set)
+
+## Getting a NIGHTGATE instance
+
+The fastest way is the official Docker image; no Node setup, no host app
+(published from the NIGHTGATE repo on every release, details in its
+`docs/docker.md`):
+
+```bash
+docker run -d --name nightgate -p 4004:4004 \
+  -e ENCRYPTION_KEY=$(openssl rand -hex 32) \
+  -e NIGHTGATE_HTTP_PASSWORD=change-me \
+  -v nightgate-data:/data \
+  ghcr.io/odatano/nightgate:latest
+```
+
+That container targets Midnight preprod by default, serves with HTTP basic
+auth (`nightgate` / your password), persists its database in the
+`nightgate-data` volume, and proves in-process (wasm), so no proof server
+is needed to start. Point this MCP server at it with:
+
+```bash
+NIGHTGATE_BASE_URL=http://localhost:4004
+NIGHTGATE_USERNAME=nightgate
+NIGHTGATE_PASSWORD=change-me
+```
+
+For agent operation, create a scoped grant once (as the operator, e.g. via
+curl against `createAgentGrant`) and hand the returned `ngat_...` token to
+the agent as `NIGHTGATE_TOKEN`; the write tools are then limited to the
+grant's allowlist, budget and pinned session.
+
+Alternatively any CAP app using the `@odatano/nightgate` plugin works,
+e.g. the NIGHTGATE repo itself via `npm run dev`.
+
+## Setup
+
+```bash
+npm install
+npm run build
+```
+
+Configuration is environment-driven:
+
+| Variable | Default | Purpose |
+|---|---|---|
+| `NIGHTGATE_BASE_URL` | `http://localhost:4004` | NIGHTGATE host app |
+| `NIGHTGATE_USERNAME` / `NIGHTGATE_PASSWORD` | unset | Basic auth (CAP dev/mocked auth) |
+| `NIGHTGATE_TOKEN` | unset | `ngat_...` agent-grant token (sent as `x-agent-token`, combinable with basic auth) or a plain bearer token |
+| `NIGHTGATE_SERVICE_PATH` | `/api/v1/nightgate` | OData service path |
+| `NIGHTGATE_TIMEOUT_MS` | `30000` | Per-request timeout |
+
+## Use with Claude Code
+
+```bash
+claude mcp add nightgate \
+  --env NIGHTGATE_BASE_URL=http://localhost:4004 \
+  --env NIGHTGATE_USERNAME=alice \
+  -- node /path/to/NIGHTGATE-MCP/dist/index.js
+```
+
+Or in a project `.mcp.json`:
+
+```json
+{
+  "mcpServers": {
+    "nightgate": {
+      "command": "node",
+      "args": ["/path/to/NIGHTGATE-MCP/dist/index.js"],
+      "env": {
+        "NIGHTGATE_BASE_URL": "http://localhost:4004",
+        "NIGHTGATE_USERNAME": "alice"
+      }
+    }
+  }
+}
+```
+
+## Tools
+
+| Tool | What it does |
+|---|---|
+| `verify_attestation` | Live-state check that a payload hash is attested in an AttestationVault (crawler-free, optional content-root check, optional cross-network read) |
+| `verify_predicate` | Live-state check that a ZK predicate proof was recorded true on-chain, id-free (plain or field-bound) |
+| `verify_predicate_attestation` | Verify a server-issued predicate attestation by its row id |
+| `verify_document` | Verify an anchored document by document id + sha256 |
+| `prepare_document_proof` | Canonicalize a document into payloadHash + Merkle contentRoot + per-field proof inputs (synchronous, NIGHTGATE >= 0.14.0) |
+| `attest_agent_output` | Anchor agent-output provenance (canonical envelope, third-party verifiable; async job, NIGHTGATE >= 0.14.0) |
+| `anchor_document` | Anchor a document content hash on-chain (async job) |
+| `prove_field_predicate` | ZK proof that a hidden document field satisfies a threshold, without revealing it (async job) |
+| `prove_field_predicates_batch` | Up to 8 field predicates on one document in ONE transaction (async job) |
+| `grant_disclosure` / `revoke_disclosure` | Attester-only on-chain disclosure ACL (async jobs) |
+| `get_job_status` | Poll an async NIGHTGATE job until succeeded/failed |
+
+All verification tools return `verified: false` as a clean negative rather
+than an error when the attestation or proof is absent. Write tools require
+a connected wallet session (`sessionId`); creating sessions stays outside
+MCP by design.
+
+## Integration check
+
+```bash
+npm run integration
+```
+
+Runs an in-memory MCP client against the server: asserts the tool set,
+schemas, and argument validation. Optional live round-trip:
+
+```bash
+NIGHTGATE_LIVE=1 NIGHTGATE_BASE_URL=... NIGHTGATE_USERNAME=... \
+NIGHTGATE_TEST_CONTRACT=<vault address> NIGHTGATE_TEST_PAYLOAD_HASH=<64 hex> \
+npm run integration
+```
+
+## License
+
+Apache-2.0

package/dist/client.d.ts

@@ -0,0 +1,29 @@
+import type { NightgateMcpConfig } from './config.js';
+/** Error carrying the OData error body of a failed NIGHTGATE call. */
+export declare class NightgateApiError extends Error {
+    readonly status: number;
+    readonly code: string | undefined;
+    constructor(status: number, code: string | undefined, message: string);
+}
+/**
+ * Marker for an OData Int64 URL literal: rendered unquoted so precision
+ * is preserved beyond Number.MAX_SAFE_INTEGER.
+ */
+export interface Int64Literal {
+    $int64: string;
+}
+export declare function int64(value: string | number): Int64Literal;
+/**
+ * Minimal OData V4 client for the Nightgate service. Two verbs only:
+ * unbound functions (GET, parameters inline in the URL) and unbound
+ * actions (POST, JSON body), which is all the MCP tools need.
+ */
+export declare class NightgateClient {
+    private readonly config;
+    constructor(config: NightgateMcpConfig);
+    /** GET <service>/<name>(p1=...,p2=...) with only the provided parameters. */
+    callFunction(name: string, params: Record<string, string | number | Int64Literal | undefined>): Promise<unknown>;
+    /** POST <service>/<name> with the provided parameters as JSON body. */
+    callAction(name: string, params: Record<string, unknown>): Promise<unknown>;
+    private request;
+}

package/dist/client.js

@@ -0,0 +1,112 @@
+/** Error carrying the OData error body of a failed NIGHTGATE call. */
+export class NightgateApiError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'NightgateApiError';
+    }
+}
+export function int64(value) {
+    const digits = String(value);
+    if (!/^\d+$/.test(digits))
+        throw new Error(`not a non-negative integer: ${value}`);
+    return { $int64: digits };
+}
+/**
+ * Minimal OData V4 client for the Nightgate service. Two verbs only:
+ * unbound functions (GET, parameters inline in the URL) and unbound
+ * actions (POST, JSON body), which is all the MCP tools need.
+ */
+export class NightgateClient {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    /** GET <service>/<name>(p1=...,p2=...) with only the provided parameters. */
+    async callFunction(name, params) {
+        const parts = [];
+        for (const [key, value] of Object.entries(params)) {
+            if (value === undefined || value === null || value === '')
+                continue;
+            parts.push(`${key}=${odataLiteral(value)}`);
+        }
+        const url = `${this.config.baseUrl}${this.config.servicePath}/${name}(${parts.join(',')})`;
+        return this.request('GET', url);
+    }
+    /** POST <service>/<name> with the provided parameters as JSON body. */
+    async callAction(name, params) {
+        const body = {};
+        for (const [key, value] of Object.entries(params)) {
+            if (value === undefined)
+                continue;
+            body[key] = value;
+        }
+        const url = `${this.config.baseUrl}${this.config.servicePath}/${name}`;
+        return this.request('POST', url, body);
+    }
+    async request(method, url, body) {
+        const headers = { Accept: 'application/json' };
+        if (this.config.token?.startsWith('ngat_')) {
+            // NIGHTGATE agent-grant token (0.14.0): travels in its own header so it
+            // never collides with the host app's transport auth. Basic credentials
+            // may accompany it when the host requires transport authentication.
+            headers['x-agent-token'] = this.config.token;
+            if (this.config.username) {
+                const basic = Buffer.from(`${this.config.username}:${this.config.password ?? ''}`).toString('base64');
+                headers.Authorization = `Basic ${basic}`;
+            }
+        }
+        else if (this.config.token) {
+            headers.Authorization = `Bearer ${this.config.token}`;
+        }
+        else if (this.config.username) {
+            const basic = Buffer.from(`${this.config.username}:${this.config.password ?? ''}`).toString('base64');
+            headers.Authorization = `Basic ${basic}`;
+        }
+        if (body !== undefined)
+            headers['Content-Type'] = 'application/json';
+        const response = await fetch(url, {
+            method,
+            headers,
+            body: body === undefined ? undefined : JSON.stringify(body),
+            signal: AbortSignal.timeout(this.config.timeoutMs),
+        });
+        const text = await response.text();
+        let payload;
+        try {
+            payload = text ? JSON.parse(text) : {};
+        }
+        catch {
+            payload = { raw: text };
+        }
+        if (!response.ok) {
+            const err = payload.error;
+            throw new NightgateApiError(response.status, err?.code, err?.message ?? `NIGHTGATE request failed with HTTP ${response.status}`);
+        }
+        return stripODataNoise(payload);
+    }
+}
+/** Encode a JS value as an OData URL literal (strings quoted, '' -> escaped). */
+function odataLiteral(value) {
+    if (typeof value === 'number')
+        return String(value);
+    if (typeof value === 'object')
+        return value.$int64;
+    return `'${value.replace(/'/g, "''")}'`;
+}
+/** Drop @odata.* metadata keys so tool output stays clean for the model. */
+function stripODataNoise(payload) {
+    if (payload === null || typeof payload !== 'object' || Array.isArray(payload))
+        return payload;
+    const out = {};
+    for (const [key, value] of Object.entries(payload)) {
+        if (key.startsWith('@odata'))
+            continue;
+        out[key] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,sEAAsE;AACtE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAExB;IACA;IAFlB,YACkB,MAAc,EACd,IAAwB,EACxC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAoB;QAIxC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAUD,MAAM,UAAU,KAAK,CAAC,KAAsB;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAE3D,6EAA6E;IAC7E,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,MAAkE;QACjG,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,SAAS;YACpE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC3F,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,MAA+B;QAC5D,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAsB,EAAE,GAAW,EAAE,IAAc;QACvE,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,wEAAwE;YACxE,uEAAuE;YACvE,oEAAoE;YACpE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACtG,OAAO,CAAC,aAAa,GAAG,SAAS,KAAK,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtG,OAAO,CAAC,aAAa,GAAG,SAAS,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAErE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACnD,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,GAAG,GAAI,OAA2D,CAAC,KAAK,CAAC;YAC/E,MAAM,IAAI,iBAAiB,CACzB,QAAQ,CAAC,MAAM,EACf,GAAG,EAAE,IAAI,EACT,GAAG,EAAE,OAAO,IAAI,sCAAsC,QAAQ,CAAC,MAAM,EAAE,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;CACF;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,KAAqC;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IACnD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC1C,CAAC;AAED,4EAA4E;AAC5E,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9F,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC;QAC9E,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACvC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Server configuration, environment-driven so the same binary works for
+ * local dev (basic auth against a `cds watch` instance) and for a deployed
+ * NIGHTGATE behind a reverse proxy (bearer token, phase B agent grants).
+ */
+export interface NightgateMcpConfig {
+    /** Base URL of the NIGHTGATE host app, e.g. http://localhost:4004 */
+    baseUrl: string;
+    /**
+     * Token credential. An `ngat_...` value is a NIGHTGATE agent-grant token
+     * (sent as `x-agent-token`, optionally alongside basic transport auth);
+     * anything else is sent as a plain `Authorization: Bearer` header.
+     */
+    token?: string;
+    /** Basic-auth credentials for dev/mocked CAP auth. */
+    username?: string;
+    password?: string;
+    /** OData service path of the main Nightgate service. */
+    servicePath: string;
+    /** Request timeout in milliseconds. */
+    timeoutMs: number;
+}
+export declare function loadConfig(env?: NodeJS.ProcessEnv): NightgateMcpConfig;

package/dist/config.js

@@ -0,0 +1,16 @@
+export function loadConfig(env = process.env) {
+    const baseUrl = (env.NIGHTGATE_BASE_URL ?? 'http://localhost:4004').replace(/\/+$/, '');
+    const timeoutMs = Number(env.NIGHTGATE_TIMEOUT_MS ?? 30000);
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+        throw new Error(`Invalid NIGHTGATE_TIMEOUT_MS: ${env.NIGHTGATE_TIMEOUT_MS}`);
+    }
+    return {
+        baseUrl,
+        token: env.NIGHTGATE_TOKEN || undefined,
+        username: env.NIGHTGATE_USERNAME || undefined,
+        password: env.NIGHTGATE_PASSWORD || undefined,
+        servicePath: env.NIGHTGATE_SERVICE_PATH ?? '/api/v1/nightgate',
+        timeoutMs,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAuBA,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,OAAO;QACP,KAAK,EAAE,GAAG,CAAC,eAAe,IAAI,SAAS;QACvC,QAAQ,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;QAC7C,QAAQ,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;QAC7C,WAAW,EAAE,GAAG,CAAC,sBAAsB,IAAI,mBAAmB;QAC9D,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { buildServer } from './server.js';
+import { loadConfig } from './config.js';
+async function main() {
+    const config = loadConfig();
+    const server = buildServer(config);
+    // stdio transport: stdout is the protocol channel, diagnostics go to stderr
+    console.error(`nightgate-mcp: connecting tools to ${config.baseUrl}${config.servicePath}`);
+    await server.connect(new StdioServerTransport());
+}
+main().catch((err) => {
+    console.error('nightgate-mcp failed to start:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,4EAA4E;IAC5E,OAAO,CAAC,KAAK,CAAC,sCAAsC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { NightgateMcpConfig } from './config.js';
+/** Build the MCP server with all tools registered; transport is the caller's choice. */
+export declare function buildServer(config: NightgateMcpConfig): McpServer;

package/dist/server.js

@@ -0,0 +1,10 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { NightgateClient } from './client.js';
+import { registerTools } from './tools.js';
+/** Build the MCP server with all tools registered; transport is the caller's choice. */
+export function buildServer(config) {
+    const server = new McpServer({ name: 'nightgate', version: '0.1.0' });
+    registerTools(server, new NightgateClient(config));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,MAA0B;IACpD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,aAAa,CAAC,MAAM,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,8 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { NightgateClient } from './client.js';
+/**
+ * Phase A tool set: crawler-free verification, job polling, and the
+ * curated write path (anchoring, field predicates, disclosure).
+ * Wallet lifecycle actions are deliberately never exposed over MCP.
+ */
+export declare function registerTools(server: McpServer, client: NightgateClient): void;

package/dist/tools.js

@@ -0,0 +1,341 @@
+import { z } from 'zod';
+import { int64, NightgateApiError } from './client.js';
+const HEX64 = /^[0-9a-fA-F]{64}$/;
+const hex64 = (what) => z.string().regex(HEX64, `${what} must be 64 hex characters`);
+/** Scaled non-negative integer, as string (preferred, exact) or JS number. */
+const scaledInt = (what) => z.union([
+    z.string().regex(/^\d+$/, `${what} must be a non-negative integer (decimal string)`),
+    z.number().int().nonnegative(),
+]);
+const merkleSiblings = z.array(hex64('sibling')).length(4)
+    .describe('Depth-4 Merkle inclusion path: exactly 4 sibling digests (64 hex each)');
+const merkleDirs = z.array(z.boolean()).length(4)
+    .describe('Exactly 4 booleans; true means the current node is the LEFT child');
+const POLL_HINT = 'Async: returns { jobId, status } immediately; poll get_job_status until succeeded or failed.';
+/**
+ * Phase A tool set: crawler-free verification, job polling, and the
+ * curated write path (anchoring, field predicates, disclosure).
+ * Wallet lifecycle actions are deliberately never exposed over MCP.
+ */
+export function registerTools(server, client) {
+    const run = wrapHandler(client);
+    server.registerTool('verify_attestation', {
+        description: 'Verify against LIVE Midnight contract state that a payload hash is attested in an ' +
+            'AttestationVault (crawler-free, no txHash needed). Optionally also checks that the ' +
+            'anchored content root matches. Returns verified:false (not an error) when absent.',
+        inputSchema: {
+            contractAddress: z.string().min(1).describe('AttestationVault contract address'),
+            payloadHash: hex64('payloadHash').describe('The attested payload hash (sha256, 64 hex)'),
+            contentRoot: hex64('contentRoot').optional().describe('Optional anchored content root to check (64 hex)'),
+            network: z.enum(['preview', 'preprod', 'mainnet']).optional()
+                .describe('Read from another network public indexer instead of the configured one'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+        },
+    }, run(async (args) => client.callFunction('verifyAttestationState', {
+        contractAddress: args.contractAddress,
+        payloadHash: args.payloadHash,
+        contentRoot: args.contentRoot,
+        compiledArtifactRef: args.compiledArtifactRef,
+        network: args.network,
+    })));
+    server.registerTool('verify_predicate', {
+        description: 'Verify against LIVE Midnight contract state that a ZK predicate proof (e.g. "hidden value ' +
+            '<= threshold") was recorded true on-chain. Id-free: works for proofs NIGHTGATE never saw. ' +
+            'threshold must be the SAME scaled integer the circuit hashed (scaling mismatch yields ' +
+            'verified:false). Supply fieldKey for a field-bound proof, omit it for a plain one.',
+        inputSchema: {
+            contractAddress: z.string().min(1).describe('AttestationVault contract address'),
+            payloadHash: hex64('payloadHash').describe('The attestation payload hash (64 hex)'),
+            predicate: z.enum(['lessOrEqual', 'greaterOrEqual']).describe('Predicate operator'),
+            threshold: scaledInt('threshold').describe('Scaled circuit integer threshold (same scaling the circuit hashed)'),
+            fieldKey: hex64('fieldKey').optional().describe('Optional field key (64 hex) for field-bound proofs'),
+            network: z.enum(['preview', 'preprod', 'mainnet']).optional()
+                .describe('Read from another network public indexer instead of the configured one'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+        },
+    }, run(async (args) => client.callFunction('verifyPredicateState', {
+        contractAddress: args.contractAddress,
+        payloadHash: args.payloadHash,
+        fieldKey: args.fieldKey,
+        predicate: args.predicate,
+        threshold: int64(args.threshold),
+        compiledArtifactRef: args.compiledArtifactRef,
+        network: args.network,
+    })));
+    server.registerTool('verify_predicate_attestation', {
+        description: 'Verify a server-issued predicate attestation by its NIGHTGATE row id (UUID). ' +
+            'Confirms the proving transaction succeeded, with a crawler-free live-state fallback. ' +
+            'Use verify_predicate instead when you only have on-chain coordinates.',
+        inputSchema: {
+            predicateAttestationId: z.string().uuid().describe('PredicateAttestations row id'),
+        },
+    }, run(async (args) => client.callFunction('verifyPredicateAttestation', {
+        predicateAttestationId: args.predicateAttestationId,
+    })));
+    server.registerTool('verify_document', {
+        description: 'Verify an anchored document by its NIGHTGATE document id: compares the provided sha256 ' +
+            'against the anchored original and confirms the anchoring transaction, with a crawler-free ' +
+            'live-state fallback when contractAddress is supplied.',
+        inputSchema: {
+            documentId: z.string().uuid().describe('Documents row id'),
+            providedSha256: hex64('providedSha256').describe('sha256 of the document to check (64 hex)'),
+            contractAddress: z.string().optional().describe('Optional vault address, enables the crawler-free fallback'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+        },
+    }, run(async (args) => client.callFunction('verifyDocument', {
+        documentId: args.documentId,
+        providedSha256: args.providedSha256,
+        contractAddress: args.contractAddress,
+        compiledArtifactRef: args.compiledArtifactRef,
+    })));
+    server.registerTool('prepare_document_proof', {
+        description: 'Turn a structured document into everything the proof tools need: canonical JSON and its ' +
+            'payloadHash (what anchor_document anchors), a Merkle contentRoot over an ORDERED list of ' +
+            'up to 16 proof fields, and per-field inclusion paths ready for prove_field_predicate. ' +
+            'Keep the field order stable across anchor and proof: it is part of the tree identity. ' +
+            'Compute-only and synchronous, nothing is stored server-side. The returned fields carry ' +
+            'witness material (scaled values): treat as sensitive. Store canonicalDocument at your ' +
+            'storageRef; re-serializing with different key order will not re-hash equal.',
+        inputSchema: {
+            document: z.record(z.unknown())
+                .describe('The full document as a JSON object; all of it goes into payloadHash'),
+            proofFields: z.array(z.object({
+                field: z.string().min(1)
+                    .describe('Dot-separated path into the document (e.g. invoice.total); a literal top-level key containing dots wins'),
+                scale: z.number().int().min(1).max(1_000_000_000).optional()
+                    .describe('Value scale (default 1000: milli-units)'),
+            })).min(1).max(16).describe('ORDERED list of fields to make provable (leaf index = position)'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+        },
+    }, run(async (args) => client.callAction('prepareDocumentProof', {
+        documentJson: JSON.stringify(args.document),
+        proofFieldsJson: JSON.stringify(args.proofFields),
+        compiledArtifactRef: args.compiledArtifactRef,
+    })));
+    server.registerTool('attest_agent_output', {
+        description: 'Anchor agent-output provenance on the Midnight chain: "agent X produced output O from ' +
+            'input I at time T". Builds the canonical v1 envelope server-side, hashes it and anchors ' +
+            'it; the response returns the envelopeJson any third party can re-hash and check via ' +
+            'verify_attestation, without trusting this server. ' + POLL_HINT,
+        inputSchema: {
+            agentId: z.string().min(1).max(200).describe('Agent identity, ideally a registered grantee id'),
+            inputHash: hex64('inputHash').describe('Commitment to the agent input (64 hex)'),
+            outputHash: hex64('outputHash').describe('Commitment to the produced output (64 hex)'),
+            sessionId: z.string().uuid().describe('Wallet session id that signs and submits'),
+            contractAddress: z.string().min(1).describe('AttestationVault deployment'),
+            modelId: z.string().max(200).optional().describe('Optional model identifier'),
+            policyHash: hex64('policyHash').optional().describe('Optional commitment to the governing policy (64 hex)'),
+            producedAt: z.string().datetime().optional().describe('Optional ISO-8601 production time, defaults to now'),
+            storageRef: z.string().optional().describe('Where output/envelope live, defaults to agent-output://<agentId>'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+            idempotencyKey: z.string().optional().describe('Dedupes retries'),
+            sponsorSessionId: z.string().uuid().optional().describe('Optional second session that pays the dust fee'),
+        },
+    }, run(async (args) => client.callAction('attestAgentOutput', {
+        agentId: args.agentId,
+        inputHash: args.inputHash,
+        outputHash: args.outputHash,
+        modelId: args.modelId,
+        policyHash: args.policyHash,
+        producedAt: args.producedAt,
+        storageRef: args.storageRef,
+        sessionId: args.sessionId,
+        contractAddress: args.contractAddress,
+        compiledArtifactRef: args.compiledArtifactRef,
+        idempotencyKey: args.idempotencyKey,
+        sponsorSessionId: args.sponsorSessionId,
+    })));
+    server.registerTool('anchor_document', {
+        description: 'Anchor a document content hash on the Midnight chain via the AttestationVault attest ' +
+            'circuit. Commits only the sha256 + public metadata; you are responsible for storing the ' +
+            'actual bytes at storageRef. Attestation is first-come-first-served per hash. ' + POLL_HINT +
+            ' Also returns documentId for verify_document.',
+        inputSchema: {
+            sha256: hex64('sha256').describe('sha256 of the document content (64 hex), becomes the on-chain payload hash'),
+            storageRef: z.string().min(1).describe('Where the bytes live, e.g. file://, s3://, ipfs://'),
+            sessionId: z.string().uuid().describe('Wallet session id that signs and submits'),
+            contractAddress: z.string().min(1).describe('AttestationVault deployment to anchor into'),
+            contentType: z.string().optional().describe('MIME type, informational'),
+            size: z.number().int().nonnegative().optional().describe('Content size in bytes, informational'),
+            metadata: z.record(z.unknown()).optional().describe('Public metadata object; its hash is anchored alongside'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+            idempotencyKey: z.string().optional().describe('Dedupes retries of the same anchor request'),
+            sponsorSessionId: z.string().uuid().optional().describe('Optional second session that pays the dust fee'),
+        },
+    }, run(async (args) => client.callAction('anchorDocument', {
+        sha256: args.sha256,
+        contentType: args.contentType,
+        size: args.size,
+        storageRef: args.storageRef,
+        metadata: args.metadata === undefined ? undefined : JSON.stringify(args.metadata),
+        sessionId: args.sessionId,
+        contractAddress: args.contractAddress,
+        compiledArtifactRef: args.compiledArtifactRef,
+        idempotencyKey: args.idempotencyKey,
+        sponsorSessionId: args.sponsorSessionId,
+    })));
+    server.registerTool('prove_field_predicate', {
+        description: 'Issue a zero-knowledge field-bound predicate proof: prove that a hidden field of an ' +
+            'anchored document satisfies "value <= threshold" or "value >= threshold" WITHOUT revealing ' +
+            'the value. Needs the depth-4 Merkle inclusion path of the field in the anchored content ' +
+            'root. value/threshold are scaled integers (decimal strings); the value is a witness and ' +
+            'never persisted. If contentRoot is supplied it is anchored first. A false predicate fails ' +
+            'at local proving time, nothing is submitted. ' + POLL_HINT,
+        inputSchema: {
+            payloadHash: hex64('payloadHash').describe('Attestation payload hash (64 hex)'),
+            fieldKey: hex64('fieldKey').describe('Canonical field id (64 hex, public)'),
+            value: z.string().regex(/^\d+$/, 'value must be a non-negative integer (decimal string)')
+                .describe('Scaled integer field value (witness only, never persisted)'),
+            siblings: merkleSiblings,
+            dirs: merkleDirs,
+            predicate: z.enum(['lessOrEqual', 'greaterOrEqual']).describe('Predicate operator'),
+            threshold: scaledInt('threshold').describe('Scaled integer threshold (same scaling as value)'),
+            sessionId: z.string().uuid().describe('Wallet session id that signs and submits'),
+            contractAddress: z.string().min(1).describe('AttestationVault deployment'),
+            contentRoot: hex64('contentRoot').optional().describe('Optional Merkle root (64 hex) to anchor first'),
+            unit: z.string().optional().describe('Informational unit, e.g. kWh'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+            idempotencyKey: z.string().optional().describe('Dedupes retries'),
+            sponsorSessionId: z.string().uuid().optional().describe('Optional second session that pays the dust fee'),
+        },
+    }, run(async (args) => client.callAction('issueFieldPredicateAttestation', {
+        payloadHash: args.payloadHash,
+        fieldKey: args.fieldKey,
+        value: args.value,
+        contentRoot: args.contentRoot,
+        siblingsJson: JSON.stringify(args.siblings),
+        dirsJson: JSON.stringify(args.dirs),
+        predicate: args.predicate,
+        threshold: String(args.threshold),
+        unit: args.unit,
+        sessionId: args.sessionId,
+        contractAddress: args.contractAddress,
+        compiledArtifactRef: args.compiledArtifactRef,
+        idempotencyKey: args.idempotencyKey,
+        sponsorSessionId: args.sponsorSessionId,
+    })));
+    server.registerTool('prove_field_predicates_batch', {
+        description: 'Batch variant of prove_field_predicate: prove up to 8 field-bound predicates on ONE ' +
+            'anchored document in ONE transaction (7 if contentRoot is supplied, since the anchor ' +
+            'occupies one call slot). Duplicate claim tuples are dropped server-side. One false ' +
+            'predicate aborts the whole batch at local proving time with zero on-chain effect. After ' +
+            'submission the chain can finalize a PARTIAL_SUCCESS subset; verify per claim via ' +
+            'verify_predicate_attestation instead of assuming all-or-nothing. ' + POLL_HINT,
+        inputSchema: {
+            payloadHash: hex64('payloadHash').describe('Shared attestation payload hash (64 hex)'),
+            claims: z.array(z.object({
+                fieldKey: hex64('fieldKey'),
+                value: z.string().regex(/^\d+$/, 'value must be a non-negative integer (decimal string)'),
+                siblings: merkleSiblings,
+                dirs: merkleDirs,
+                predicate: z.enum(['lessOrEqual', 'greaterOrEqual']),
+                threshold: scaledInt('threshold'),
+                unit: z.string().optional(),
+            })).min(1).max(8).describe('1-8 claims on the same payload hash'),
+            sessionId: z.string().uuid().describe('Wallet session id that signs and submits'),
+            contractAddress: z.string().min(1).describe('AttestationVault deployment'),
+            contentRoot: hex64('contentRoot').optional().describe('Optional Merkle root anchored as first call of the same batch'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+            idempotencyKey: z.string().optional().describe('Dedupes retries'),
+            sponsorSessionId: z.string().uuid().optional().describe('Optional second session that pays the dust fee'),
+        },
+    }, run(async (args) => {
+        if (args.contentRoot && args.claims.length > 7) {
+            throw new Error('with contentRoot the anchor occupies one slot: max 7 claims');
+        }
+        return client.callAction('issueFieldPredicateAttestationBatch', {
+            payloadHash: args.payloadHash,
+            contentRoot: args.contentRoot,
+            claimsJson: JSON.stringify(args.claims.map((c) => ({ ...c, threshold: String(c.threshold) }))),
+            sessionId: args.sessionId,
+            contractAddress: args.contractAddress,
+            compiledArtifactRef: args.compiledArtifactRef,
+            idempotencyKey: args.idempotencyKey,
+            sponsorSessionId: args.sponsorSessionId,
+        });
+    }));
+    server.registerTool('grant_disclosure', {
+        description: 'Grant a disclosure level for an attestation to a grantee identity, on-chain via the ' +
+            'AttestationVault. Attester-only: the transaction is rejected in-circuit unless the ' +
+            'session wallet is the original attester. level: 0=public, 1=legitimate-interest, ' +
+            '2=authority. ' + POLL_HINT,
+        inputSchema: {
+            payloadHash: hex64('payloadHash').describe('The attestation payload hash (64 hex)'),
+            grantee: hex64('grantee').describe('Grantee identity (64 hex Bytes<32>)'),
+            level: z.union([z.literal(0), z.literal(1), z.literal(2)])
+                .describe('0=public, 1=legitimate-interest, 2=authority'),
+            sessionId: z.string().uuid().describe('Wallet session id (must be the attester)'),
+            contractAddress: z.string().min(1).describe('AttestationVault deployment'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+            idempotencyKey: z.string().optional().describe('Dedupes retries'),
+            sponsorSessionId: z.string().uuid().optional().describe('Optional second session that pays the dust fee'),
+        },
+    }, run(async (args) => client.callAction('grantDisclosure', {
+        payloadHash: args.payloadHash,
+        grantee: args.grantee,
+        level: args.level,
+        sessionId: args.sessionId,
+        contractAddress: args.contractAddress,
+        compiledArtifactRef: args.compiledArtifactRef,
+        idempotencyKey: args.idempotencyKey,
+        sponsorSessionId: args.sponsorSessionId,
+    })));
+    server.registerTool('revoke_disclosure', {
+        description: 'Revoke a previously granted disclosure on-chain (removes the grantee entry). ' +
+            'Attester-only, enforced in-circuit. ' + POLL_HINT,
+        inputSchema: {
+            payloadHash: hex64('payloadHash').describe('The attestation payload hash (64 hex)'),
+            grantee: hex64('grantee').describe('Grantee identity (64 hex Bytes<32>)'),
+            sessionId: z.string().uuid().describe('Wallet session id (must be the attester)'),
+            contractAddress: z.string().min(1).describe('AttestationVault deployment'),
+            compiledArtifactRef: z.string().optional().describe("Contract artifact ref, defaults to 'attestation-vault'"),
+            idempotencyKey: z.string().optional().describe('Dedupes retries'),
+            sponsorSessionId: z.string().uuid().optional().describe('Optional second session that pays the dust fee'),
+        },
+    }, run(async (args) => client.callAction('revokeDisclosure', {
+        payloadHash: args.payloadHash,
+        grantee: args.grantee,
+        sessionId: args.sessionId,
+        contractAddress: args.contractAddress,
+        compiledArtifactRef: args.compiledArtifactRef,
+        idempotencyKey: args.idempotencyKey,
+        sponsorSessionId: args.sponsorSessionId,
+    })));
+    server.registerTool('get_job_status', {
+        description: 'Poll the status of an async NIGHTGATE job (all submit actions return a jobId). ' +
+            'status: pending | running | external_execution | submitted | reconciliation_required | ' +
+            'succeeded | failed. Poll every few seconds until succeeded or failed; result carries ' +
+            'the job outcome JSON, chainStatus tracks on-chain finalization independently.',
+        inputSchema: {
+            jobId: z.string().uuid().describe('Job id returned by a submit action'),
+            sessionId: z.string().uuid().describe('Wallet session id the job belongs to'),
+        },
+    }, run(async (args) => client.callAction('getJobStatus', {
+        jobId: args.jobId,
+        sessionId: args.sessionId,
+    })));
+}
+/**
+ * Uniform handler wrapper: JSON success payloads, API errors reported as
+ * tool errors (isError) with status + OData code so the agent can react
+ * (e.g. 401 -> credentials, 429 -> back off) instead of crashing the call.
+ */
+function wrapHandler(_client) {
+    return function run(fn) {
+        return async (args) => {
+            try {
+                const result = await fn(args);
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            catch (err) {
+                if (err instanceof NightgateApiError) {
+                    const detail = { httpStatus: err.status, code: err.code ?? null, message: err.message };
+                    return { content: [{ type: 'text', text: JSON.stringify(detail, null, 2) }], isError: true };
+                }
+                const message = err instanceof Error ? err.message : String(err);
+                return { content: [{ type: 'text', text: message }], isError: true };
+            }
+        };
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAmB,MAAM,aAAa,CAAC;AAExE,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAClC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;AAE/D,8EAA8E;AAC9E,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,CAAC,CAAC,KAAK,CAAC;IACN,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,kDAAkD,CAAC;IACpF,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC/B,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACvD,QAAQ,CAAC,wEAAwE,CAAC,CAAC;AACtF,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KAC9C,QAAQ,CAAC,mEAAmE,CAAC,CAAC;AAEjF,MAAM,SAAS,GAAG,8FAA8F,CAAC;AAEjH;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,MAAuB;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,WAAW,EACT,oFAAoF;YACpF,qFAAqF;YACrF,mFAAmF;QACrF,WAAW,EAAE;YACX,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAChF,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YACxF,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;YACzG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;iBAC1D,QAAQ,CAAC,wEAAwE,CAAC;YACrF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;SAC9G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,YAAY,CAAC,wBAAwB,EAAE;QAC5C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,WAAW,EACT,4FAA4F;YAC5F,4FAA4F;YAC5F,wFAAwF;YACxF,oFAAoF;QACtF,WAAW,EAAE;YACX,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAChF,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YACnF,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACnF,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC;YAChH,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YACrG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;iBAC1D,QAAQ,CAAC,wEAAwE,CAAC;YACrF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;SAC9G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,YAAY,CAAC,sBAAsB,EAAE;QAC1C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,8BAA8B,EAC9B;QACE,WAAW,EACT,+EAA+E;YAC/E,uFAAuF;YACvF,uEAAuE;QACzE,WAAW,EAAE;YACX,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;SACnF;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,YAAY,CAAC,4BAA4B,EAAE;QAChD,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;KACpD,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,yFAAyF;YACzF,4FAA4F;YAC5F,uDAAuD;QACzD,WAAW,EAAE;YACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC1D,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YAC5F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;YAC5G,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;SAC9G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE;QACpC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,WAAW,EACT,0FAA0F;YAC1F,2FAA2F;YAC3F,wFAAwF;YACxF,wFAAwF;YACxF,yFAAyF;YACzF,wFAAwF;YACxF,6EAA6E;QAC/E,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC5B,QAAQ,CAAC,qEAAqE,CAAC;YAClF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;qBACrB,QAAQ,CAAC,yGAAyG,CAAC;gBACtH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;qBACzD,QAAQ,CAAC,yCAAyC,CAAC;aACvD,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;YAC9F,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;SAC9G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,UAAU,CAAC,sBAAsB,EAAE;QACxC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3C,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACjD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,WAAW,EACT,wFAAwF;YACxF,0FAA0F;YAC1F,sFAAsF;YACtF,oDAAoD,GAAG,SAAS;QAClE,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;YAC/F,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAChF,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACjF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC1E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YAC7E,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;YAC3G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YAC3G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;YAC9G,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAC7G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;SAC1G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,UAAU,CAAC,mBAAmB,EAAE;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,uFAAuF;YACvF,0FAA0F;YAC1F,+EAA+E,GAAG,SAAS;YAC3F,+CAA+C;QACjD,WAAW,EAAE;YACX,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,4EAA4E,CAAC;YAC9G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACjF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YACzF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YAChG,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAC7G,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAC7G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YAC5F,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;SAC1G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,UAAU,CAAC,gBAAgB,EAAE;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjF,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,WAAW,EACT,sFAAsF;YACtF,6FAA6F;YAC7F,0FAA0F;YAC1F,0FAA0F;YAC1F,4FAA4F;YAC5F,+CAA+C,GAAG,SAAS;QAC7D,WAAW,EAAE;YACX,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAC/E,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,uDAAuD,CAAC;iBACtF,QAAQ,CAAC,4DAA4D,CAAC;YACzE,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACnF,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC;YAC9F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACjF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC1E,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;YACtG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YACpE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAC7G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;SAC1G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,UAAU,CAAC,gCAAgC,EAAE;QAClD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,8BAA8B,EAC9B;QACE,WAAW,EACT,sFAAsF;YACtF,uFAAuF;YACvF,qFAAqF;YACrF,0FAA0F;YAC1F,mFAAmF;YACnF,mEAAmE,GAAG,SAAS;QACjF,WAAW,EAAE;YACX,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACtF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvB,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;gBAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,uDAAuD,CAAC;gBACzF,QAAQ,EAAE,cAAc;gBACxB,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;gBACpD,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC;gBACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAC5B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YACjE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACjF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC1E,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;YACtH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAC7G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;SAC1G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACjB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,qCAAqC,EAAE;YAC9D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,WAAW,EACT,sFAAsF;YACtF,qFAAqF;YACrF,mFAAmF;YACnF,eAAe,GAAG,SAAS;QAC7B,WAAW,EAAE;YACX,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YACnF,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YACzE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;iBACvD,QAAQ,CAAC,8CAA8C,CAAC;YAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACjF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC1E,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAC7G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;SAC1G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,+EAA+E;YAC/E,sCAAsC,GAAG,SAAS;QACpD,WAAW,EAAE;YACX,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YACnF,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YACzE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACjF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC1E,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAC7G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;SAC1G;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,UAAU,CAAC,kBAAkB,EAAE;QACpC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,iFAAiF;YACjF,yFAAyF;YACzF,uFAAuF;YACvF,+EAA+E;QACjF,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;SAC9E;KACF,EACD,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE;QAChC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC,CACN,CAAC;AACJ,CAAC;AAOD;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAAwB;IAC3C,OAAO,SAAS,GAAG,CAAI,EAAiC;QACtD,OAAO,KAAK,EAAE,IAAO,EAAuB,EAAE;YAC5C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;oBACxF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC/F,CAAC;gBACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvE,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@odatano/nightgate-mcp",
+  "version": "0.1.0",
+  "description": "MCP server exposing NIGHTGATE (Midnight blockchain attestation layer) to AI agents",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "nightgate-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "start": "node dist/index.js",
+    "integration": "npm run build && node scripts/integration-mcp.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ODATANO/NIGHTGATE-MCP.git"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "midnight",
+    "blockchain",
+    "attestation",
+    "zero-knowledge",
+    "odata",
+    "sap-cap"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.5.0"
+  }
+}