@potswap_io/mcp 0.0.0-stage → 0.2.0

package/dist/trade.js

@@ -0,0 +1,83 @@
+// Swap execution shared by the `swap` tool (P10) and the strategy scheduler (P11).
+// One path: quote → limits → fresh order as taker → local signature → execute.
+import { VersionedTransaction } from '@solana/web3.js';
+import { NO_WALLET, SOL_MINT } from './config.js';
+import { checkLimits } from './limits.js';
+import { explorer, fromRaw, toRaw } from './format.js';
+import { describeOrderError, friendlyError } from './shared/errors.js';
+import { feeBpsFor } from './shared/fee.js';
+export async function buildQuote(api, a) {
+    const [inTok, outTok, cfg, px] = await Promise.all([
+        api.token(a.inputMint), api.token(a.outputMint), api.config(), api.prices([a.inputMint]).catch(() => ({})),
+    ]);
+    const inAmountRaw = toRaw(a.amount, inTok.decimals);
+    // PRD P8.12–P8.15: the fee tier depends on the USD value of the input at quote time.
+    const inputUsd = px[a.inputMint] ? a.amount * px[a.inputMint] : undefined;
+    const feeDecision = feeBpsFor(cfg.fee, inputUsd);
+    const o = await api.order({ inputMint: a.inputMint, outputMint: a.outputMint, amount: inAmountRaw, slippageBps: a.slippageBps, feeBps: feeDecision.bps });
+    if (o.errorMessage && !o.outAmount)
+        throw new Error(`${describeOrderError(o)} No funds were debited.`);
+    const outAmount = fromRaw(o.outAmount, outTok.decimals);
+    return {
+        inputMint: a.inputMint, inputSymbol: inTok.symbol, outputMint: a.outputMint, outputSymbol: outTok.symbol,
+        inAmount: a.amount, inAmountRaw, outAmount, price: outAmount / a.amount,
+        priceImpactPct: o.priceImpactPct !== undefined ? Math.abs(Number(o.priceImpactPct)) : undefined,
+        slippageBps: o.slippageBps, feeBps: o.platformFee?.feeBps ?? o.feeBps ?? 0,
+        feeTier: cfg.referralAccount ? feeDecision.tier : null, feeLabel: cfg.referralAccount ? feeDecision.label : null,
+        scheduledFeeBps: feeDecision.bps, inputUsd, router: o.router, requestId: o.requestId, expiresAt: o.expireAt ?? null,
+    };
+}
+export async function executeSwap(ctx, a) {
+    const { api, config, signer } = ctx;
+    if (!signer)
+        return { kind: 'no-wallet', message: NO_WALLET };
+    try {
+        const quote = await buildQuote(api, a);
+        const prices = await api.prices([SOL_MINT, a.inputMint]).catch(() => ({}));
+        let balanceUi;
+        try {
+            balanceUi = (await ctx.balances(signer.publicKey))[a.inputMint] ?? 0;
+        }
+        catch {
+            balanceUi = undefined;
+        }
+        const inputUsd = prices[a.inputMint] ? a.amount * prices[a.inputMint] : undefined;
+        const solEquivalent = a.inputMint === SOL_MINT ? a.amount : inputUsd !== undefined && prices[SOL_MINT] ? inputUsd / prices[SOL_MINT] : undefined;
+        const refusal = checkLimits({
+            amountUi: a.amount, inputMint: a.inputMint, inputSymbol: quote.inputSymbol, isSol: a.inputMint === SOL_MINT,
+            inputUsd, solUsd: prices[SOL_MINT], slippageBps: a.slippageBps,
+            maxTradeSol: config.maxTradeSol, maxSlippageBps: config.maxSlippageBps, balanceUi,
+        });
+        if (refusal)
+            return { kind: 'refused', message: refusal, quote };
+        if (a.extraSolCap && solEquivalent !== undefined && solEquivalent > a.extraSolCap.remainingSol) {
+            return { kind: 'refused', message: `${a.extraSolCap.label} No funds were debited.`, quote };
+        }
+        if (!a.confirm)
+            return { kind: 'quote-only', quote };
+        if (config.dryRun)
+            return { kind: 'dry-run', quote };
+        const order = await api.order({ inputMint: a.inputMint, outputMint: a.outputMint, amount: quote.inAmountRaw, taker: signer.publicKey, slippageBps: a.slippageBps, feeBps: quote.scheduledFeeBps });
+        if (!order.transaction)
+            return { kind: 'failed', message: `${describeOrderError(order)} No funds were debited.`, quote };
+        const tx = VersionedTransaction.deserialize(Buffer.from(order.transaction, 'base64'));
+        signer.sign(tx);
+        const res = await api.execute(Buffer.from(tx.serialize()).toString('base64'), order.requestId);
+        if (res.status !== 'Success') {
+            return { kind: 'failed', message: friendlyError(res.error || `Swap failed (code ${res.code})`), quote, signature: res.signature, explorerUrl: res.signature ? explorer(res.signature) : undefined };
+        }
+        const outDec = (await api.token(a.outputMint)).decimals;
+        const outAmount = fromRaw(res.totalOutputAmount ?? order.outAmount, outDec);
+        const feeBps = order.platformFee?.feeBps ?? order.feeBps ?? 0;
+        const feeUsd = inputUsd !== undefined ? inputUsd * feeBps / 10_000 : undefined;
+        const cfg = await api.config();
+        const result = {
+            signature: res.signature, explorerUrl: explorer(res.signature), inAmount: a.amount, inputSymbol: quote.inputSymbol,
+            outAmount, outputSymbol: quote.outputSymbol, router: order.router, feeBps, feeUsd, pointsAdded: cfg.referralAccount ? feeUsd : 0, solEquivalent,
+        };
+        return { kind: 'ok', result, quote };
+    }
+    catch (e) {
+        return { kind: 'failed', message: friendlyError(e instanceof Error ? e.message : String(e)) };
+    }
+}

package/dist/wallet.d.ts

@@ -0,0 +1,10 @@
+import { type VersionedTransaction } from '@solana/web3.js';
+export interface Signer {
+    publicKey: string;
+    sign(tx: VersionedTransaction): VersionedTransaction;
+}
+export declare function parseSecret(raw: string): Uint8Array;
+export declare function loadSigner(opts: {
+    privateKey?: string;
+    keypairPath?: string;
+}): Signer | null;

package/dist/wallet.js

@@ -0,0 +1,48 @@
+// PRD P10.2/P10.9 — load the agent's keypair; the secret never leaves this module.
+import { readFileSync } from 'node:fs';
+import { Keypair } from '@solana/web3.js';
+import bs58 from 'bs58';
+import { registerSecret } from './redact.js';
+export function parseSecret(raw) {
+    const s = raw.trim();
+    if (s.startsWith('[')) {
+        const arr = JSON.parse(s);
+        if (!Array.isArray(arr) || arr.length !== 64 || !arr.every((n) => Number.isInteger(n) && n >= 0 && n < 256))
+            throw new Error('Keypair JSON must be an array of 64 bytes');
+        return Uint8Array.from(arr);
+    }
+    let bytes;
+    try {
+        bytes = bs58.decode(s);
+    }
+    catch {
+        throw new Error('Private key is not valid base58 or a JSON byte array');
+    }
+    if (bytes.length === 64)
+        return bytes;
+    if (bytes.length === 32)
+        return Keypair.fromSeed(bytes).secretKey;
+    throw new Error(`Private key has ${bytes.length} bytes; expected 64 (or a 32-byte seed)`);
+}
+export function loadSigner(opts) {
+    let raw = opts.privateKey;
+    if (!raw && opts.keypairPath) {
+        try {
+            raw = readFileSync(opts.keypairPath, 'utf8');
+        }
+        catch {
+            throw new Error(`Cannot read keypair file at SOLANA_KEYPAIR_PATH`);
+        }
+    }
+    if (!raw)
+        return null;
+    const kp = Keypair.fromSecretKey(parseSecret(raw));
+    // Register every encoding the secret could leak in, not just the one supplied.
+    registerSecret(raw.trim());
+    registerSecret(bs58.encode(kp.secretKey));
+    registerSecret(JSON.stringify(Array.from(kp.secretKey)));
+    return {
+        publicKey: kp.publicKey.toBase58(),
+        sign(tx) { tx.sign([kp]); return tx; },
+    };
+}

package/package.json

@@ -1,6 +1,58 @@
-{
-  "name": "@potswap_io/mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "@potswap_io/mcp",
+  "version": "0.2.0",
+  "description": "Potswap MCP server: best-route Solana swaps, DCA / rebalance / take-profit strategies for AI agents, non-custodial, earns POT.",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "potswap-mcp": "dist/index.js"
+  },
+  "main": "dist/server.js",
+  "types": "dist/server.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "sync-shared": "node scripts/sync-shared.mjs",
+    "prepublishOnly": "npm run sync-shared && npm run build"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/potswap-io/mcp.git"
+  },
+  "homepage": "https://www.potswap.io",
+  "keywords": [
+    "mcp",
+    "solana",
+    "swap",
+    "jupiter",
+    "ai-agent",
+    "potswap",
+    "model-context-protocol"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.32.2",
+    "@solana/web3.js": "^1.99.0",
+    "bs58": "^6.0.0",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.5",
+    "tsx": "^4.23.15",
+    "typescript": "^7.0.2",
+    "vite": "^8.3.5",
+    "vitest": "^5.0.5"
+  },
+  "bugs": {
+    "url": "https://github.com/potswap-io/mcp/issues"
+  }
+}