@quantsafe/mcp 0.0.0-stage → 0.1.0

package/dist/mcp/wallet-identity.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EVM_ADDRESS_RE = exports.QSAFE_DERIVATION_MESSAGE = void 0;
+exports.canonicalRecoveryByte = canonicalRecoveryByte;
+exports.recoverPersonalSigner = recoverPersonalSigner;
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const sha3_1 = require("@noble/hashes/sha3");
+const utils_1 = require("@noble/hashes/utils");
+// Byte for byte the message the browser asks a wallet to sign (QSAFE_SIGN_MESSAGE in
+// src/lib/wallet/keypair-context.tsx). That module loads React and wagmi, which the stdio server
+// must not, so the text lives here too and a unit test holds the two equal. Any other text
+// derives a different identity, one no browser session can reproduce.
+exports.QSAFE_DERIVATION_MESSAGE = 'QuantSafe keypair derivation v1\n' +
+    '\n' +
+    'This signature derives your personal post-quantum encryption keypair.\n' +
+    'It grants no permissions and costs no gas.\n' +
+    '\n' +
+    'Domain: quantsafe.tech';
+exports.EVM_ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
+function personalSignDigest(message) {
+    const body = (0, utils_1.utf8ToBytes)(message);
+    return (0, sha3_1.keccak_256)((0, utils_1.concatBytes)((0, utils_1.utf8ToBytes)(`\x19Ethereum Signed Message:\n${body.length}`), body));
+}
+/**
+ * The signature lowercase and 0x-prefixed, its 65 bytes untouched. The browser derives keys from
+ * the bytes exactly as the wallet returned them, recovery byte included, and has done so since
+ * v1; rewriting v here (0/1 to 27/28) would give a wallet that returns 0/1 one identity in the
+ * browser and another over MCP, and changing the browser instead would move every such user's
+ * keys. So the bytes stay as signed, and recoverPersonalSigner refuses any v other than 0, 1, 27
+ * or 28.
+ */
+function canonicalRecoveryByte(signatureHex) {
+    return `0x${(signatureHex.startsWith('0x') ? signatureHex.slice(2) : signatureHex).toLowerCase()}`;
+}
+/**
+ * The lowercase address whose key produced this EIP-191 (personal_sign) signature over message,
+ * or null when the 65 bytes are not a recoverable signature. Both recovery byte forms recover,
+ * and keys are derived from canonicalRecoveryByte(signature), the same bytes the browser uses. A high-s
+ * signature is refused even though it recovers: wallets only emit low-s, so it is a rewritten
+ * copy whose bytes would derive keys the wallet itself never reproduces.
+ */
+function recoverPersonalSigner(message, signatureHex) {
+    const raw = signatureHex.startsWith('0x') ? signatureHex.slice(2) : signatureHex;
+    if (!/^[0-9a-fA-F]{130}$/.test(raw))
+        return null;
+    const v = Number.parseInt(raw.slice(128), 16);
+    const recovery = v >= 27 ? v - 27 : v;
+    if (recovery !== 0 && recovery !== 1)
+        return null;
+    try {
+        const sig = secp256k1_1.secp256k1.Signature.fromCompact(raw.slice(0, 128)).addRecoveryBit(recovery);
+        if (sig.hasHighS())
+            return null;
+        const publicKey = sig.recoverPublicKey(personalSignDigest(message)).toRawBytes(false);
+        return '0x' + (0, utils_1.bytesToHex)((0, sha3_1.keccak_256)(publicKey.subarray(1)).subarray(-20));
+    }
+    catch {
+        return null;
+    }
+}

package/package.json

@@ -1,6 +1,36 @@
 {
   "name": "@quantsafe/mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Post-quantum encryption for AI agents. MCP server with ML-KEM-768 + X25519 hybrid encryption and ML-DSA-65 signatures.",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "post-quantum",
+    "ml-kem",
+    "ml-dsa",
+    "encryption",
+    "x402",
+    "quantsafe"
+  ],
+  "homepage": "https://quantsafe.tech/mcp",
+  "license": "MIT",
+  "bin": {
+    "qsafe-mcp": "dist/mcp/server.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "@noble/curves": "^1.8.1",
+    "@noble/hashes": "^1.7.1",
+    "@noble/post-quantum": "^0.4.0",
+    "zod": "^4.4.3"
+  }
+}