@polygraphso/litmus 0.8.0 → 0.8.1

package/README.md

@@ -61,9 +61,9 @@ MCP-capable client. It exposes two tools:
 It also registers two **prompts** that show up as slash commands — in Claude Code,
 `/mcp__polygraph-litmus__grade <server_ref>` (run a fresh grade) and
 `/mcp__polygraph-litmus__check <server_ref>` (read a published grade); other
-clients surface the same prompts in their own UI. (Want a bare `/polygraph` in
-Claude Code? Drop a `.claude/commands/polygraph.md` that calls `run_litmus` — a
-Claude-Code-only convenience, not shipped here.)
+clients surface the same prompts in their own UI. For a cleaner pair of commands
+in Claude Code — `/polygraph:grade` and `/polygraph:check` — install the plugin
+(below), which wires up this server and both commands in one step.
 
 **Prerequisites:** Node ≥ 18. Docker is optional (without it, C-02 egress is
 skipped and the grade caps at B). Set `POLYGRAPH_API_URL=https://polygraph.so` so
@@ -73,7 +73,20 @@ skipped and the grade caps at B). Set `POLYGRAPH_API_URL=https://polygraph.so` s
 > commonly returns `not_available` today — that means *unevaluated*, not a failing
 > grade. To grade a server right now, use `run_litmus`.
 
-Add the server once, then just talk to your agent.
+### Claude Code: one-click plugin (recommended)
+
+The plugin bundles this MCP server **and** adds the `/polygraph:grade` and
+`/polygraph:check` commands — one install does everything:
+
+```
+/plugin marketplace add polygraphso/litmus
+/plugin install polygraph@polygraphso
+```
+
+Then just run `/polygraph:grade npm/@modelcontextprotocol/server-filesystem`.
+
+Prefer to wire the server up by hand, or using another client? Add it once, then
+just talk to your agent.
 
 **Claude Code** — one command:
 

package/dist/{chunk-LBXHFQN3.js → chunk-BPS4YCDL.js}

@@ -38,16 +38,43 @@ function rpcUrl(net = selectedNetwork()) {
   return override && override.length > 0 ? override : NETWORKS[net].rpc;
 }
 
-// ../onchain/src/eas-sdk.ts
-import { createRequire } from "module";
-var require2 = createRequire(import.meta.url);
-var sdk = require2(
-  "@ethereum-attestation-service/eas-sdk"
-);
-var { EAS, SchemaEncoder, SchemaRegistry } = sdk;
-
 // ../onchain/src/eas.ts
+import { AbiCoder } from "ethers";
 var LITMUS_SCHEMA = "string serverRef,bytes32 toolDefsFingerprint,uint8 gradeC01,uint8 gradeC02,uint8 gradeC03,string overallGrade,string reportCID,string methodologyVersion,uint64 ranAt,string resolvedVersion";
+var LITMUS_ABI_TYPES = [
+  "string",
+  // serverRef
+  "bytes32",
+  // toolDefsFingerprint
+  "uint8",
+  // gradeC01
+  "uint8",
+  // gradeC02
+  "uint8",
+  // gradeC03
+  "string",
+  // overallGrade
+  "string",
+  // reportCID
+  "string",
+  // methodologyVersion
+  "uint64",
+  // ranAt
+  "string"
+  // resolvedVersion
+];
+var LITMUS_ABI_NAMES = [
+  "serverRef",
+  "toolDefsFingerprint",
+  "gradeC01",
+  "gradeC02",
+  "gradeC03",
+  "overallGrade",
+  "reportCID",
+  "methodologyVersion",
+  "ranAt",
+  "resolvedVersion"
+];
 function categoryUint8(bundle, code) {
   const status = bundle.categories.find((c) => c.code === code)?.status;
   return status ? CATEGORY_STATUS_UINT8[status] : CATEGORY_STATUS_UINT8.skipped;
@@ -68,31 +95,36 @@ function litmusFields(bundle, reportCID) {
 }
 function encodeLitmusAttestation(bundle, reportCID) {
   const f = litmusFields(bundle, reportCID);
-  const enc = new SchemaEncoder(LITMUS_SCHEMA);
-  return enc.encodeData([
-    { name: "serverRef", value: f.serverRef, type: "string" },
-    { name: "toolDefsFingerprint", value: f.toolDefsFingerprint, type: "bytes32" },
-    { name: "gradeC01", value: f.gradeC01, type: "uint8" },
-    { name: "gradeC02", value: f.gradeC02, type: "uint8" },
-    { name: "gradeC03", value: f.gradeC03, type: "uint8" },
-    { name: "overallGrade", value: f.overallGrade, type: "string" },
-    { name: "reportCID", value: f.reportCID, type: "string" },
-    { name: "methodologyVersion", value: f.methodologyVersion, type: "string" },
-    { name: "ranAt", value: f.ranAt, type: "uint64" },
-    { name: "resolvedVersion", value: f.resolvedVersion, type: "string" }
-  ]);
+  return AbiCoder.defaultAbiCoder().encode(
+    [...LITMUS_ABI_TYPES],
+    [
+      f.serverRef,
+      f.toolDefsFingerprint,
+      f.gradeC01,
+      f.gradeC02,
+      f.gradeC03,
+      f.overallGrade,
+      f.reportCID,
+      f.methodologyVersion,
+      f.ranAt,
+      f.resolvedVersion
+    ]
+  );
 }
 function decodeLitmusAttestation(encoded) {
-  const enc = new SchemaEncoder(LITMUS_SCHEMA);
+  const values = AbiCoder.defaultAbiCoder().decode([...LITMUS_ABI_TYPES], encoded);
   const out = {};
-  for (const item of enc.decodeData(encoded)) {
-    out[item.name] = item.value.value;
-  }
+  LITMUS_ABI_NAMES.forEach((name, i) => {
+    out[name] = values[i];
+  });
   return out;
 }
 
 // ../onchain/src/read.ts
-import { JsonRpcProvider, ZeroHash } from "ethers";
+import { Contract, JsonRpcProvider, ZeroHash } from "ethers";
+var EAS_ABI = [
+  "function getAttestation(bytes32 uid) view returns ((bytes32 uid, bytes32 schema, uint64 time, uint64 expirationTime, uint64 revocationTime, bytes32 refUID, address recipient, address attester, bool revocable, bytes data))"
+];
 function litmusSchemaUID() {
   const uid = process.env.NEXT_PUBLIC_EAS_SCHEMA_UID;
   if (!uid) throw new Error("NEXT_PUBLIC_EAS_SCHEMA_UID is required \u2014 register the schema first.");
@@ -101,8 +133,7 @@ function litmusSchemaUID() {
 async function readAttestation(uid) {
   const cfg = networkConfig();
   const provider = new JsonRpcProvider(rpcUrl(), cfg.chainId);
-  const eas = new EAS(cfg.eas);
-  eas.connect(provider);
+  const eas = new Contract(cfg.eas, EAS_ABI, provider);
   const att = await eas.getAttestation(uid);
   if (!att || att.uid === ZeroHash) return null;
   if (String(att.schema).toLowerCase() !== litmusSchemaUID().toLowerCase()) return null;

package/dist/index.d.ts

@@ -494,7 +494,10 @@ declare function decodeLitmusAttestation(encoded: string): Record<string, unknow
  * §7). Needs an RPC + a registered schema; the agent-gate calls this, then
  * re-checks the live fingerprint before paying.
  *
- * [verify] eas-sdk EAS.getAttestation return shape (uid / data / revocationTime).
+ * The read is a single EAS `getAttestation` view call. We hit the contract
+ * directly through a minimal ethers ABI fragment (below) rather than the
+ * eas-sdk `EAS` class — same on-chain struct, one fewer dependency (eas-sdk
+ * dragged hardhat into the production tree).
  */
 /** The registered litmus schema UID for the selected network (from env). */
 declare function litmusSchemaUID(): string;

package/dist/index.js

@@ -14,7 +14,7 @@ import {
   rpcUrl,
   runLitmusInputShape,
   selectedNetwork
-} from "./chunk-LBXHFQN3.js";
+} from "./chunk-BPS4YCDL.js";
 import {
   parseAuthFlags,
   resolveTarget

package/dist/mcp.js

@@ -7,7 +7,7 @@ import {
   readAttestation,
   runLitmusInputShape,
   selectedNetwork
-} from "./chunk-LBXHFQN3.js";
+} from "./chunk-BPS4YCDL.js";
 import "./chunk-VOPISHBU.js";
 import "./chunk-35UOPCBW.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polygraphso/litmus",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Behavioral litmus harness for MCP servers — grade a server A–F (tool-output injection, egress, sensitive-data, adversarial-input) with reproducible, content-addressed evidence. Ships a CLI and an MCP server with a run_litmus tool for AI agents.",
   "license": "Apache-2.0",
   "homepage": "https://polygraph.so",
@@ -52,7 +52,6 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ethereum-attestation-service/eas-sdk": "^2.9.1",
     "ethers": "^6.16.0",
     "zod": "^3.23.8",
     "tsx": "^4.19.0"
@@ -63,11 +62,11 @@
     "typescript": "^5.9.3",
     "vitest": "^2.1.0",
     "@polygraph/core": "0.0.0",
-    "@polygraph/probes": "0.0.0",
     "@polygraph/onchain": "0.0.0",
+    "@polygraph/agent": "0.0.0",
+    "@polygraph/probes": "0.0.0",
     "@polygraph/mcp": "0.0.0",
-    "@polygraph/cli": "0.0.0",
-    "@polygraph/agent": "0.0.0"
+    "@polygraph/cli": "0.0.0"
   },
   "publishConfig": {
     "access": "public"