@scriptmasterlabs/mcp-x402 2.1.0 → 2.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (253) hide show
  1. package/.well-known/x402.json +37 -0
  2. package/LICENSE +57 -21
  3. package/README.md +185 -227
  4. package/dist/index.d.ts +12 -0
  5. package/dist/index.d.ts.map +1 -0
  6. package/dist/index.js +9 -0
  7. package/dist/index.js.map +1 -0
  8. package/dist/mcp-wrapper.d.ts +71 -0
  9. package/dist/mcp-wrapper.d.ts.map +1 -0
  10. package/dist/mcp-wrapper.js +104 -0
  11. package/dist/mcp-wrapper.js.map +1 -0
  12. package/dist/x402-middleware.d.ts +76 -0
  13. package/dist/x402-middleware.d.ts.map +1 -0
  14. package/dist/x402-middleware.js +113 -0
  15. package/dist/x402-middleware.js.map +1 -0
  16. package/dist/xrpl-facilitator.d.ts +77 -0
  17. package/dist/xrpl-facilitator.d.ts.map +1 -0
  18. package/dist/xrpl-facilitator.js +156 -0
  19. package/dist/xrpl-facilitator.js.map +1 -0
  20. package/llms.txt +108 -170
  21. package/package.json +43 -56
  22. package/schema.jsonld +97 -0
  23. package/.well-known/agentcard.json +0 -34
  24. package/.well-known/ai.txt +0 -32
  25. package/CONTRIBUTING.md +0 -76
  26. package/agents.json +0 -81
  27. package/ai/faq.json +0 -74
  28. package/ai/summary.json +0 -157
  29. package/dist/lib/chains/base.d.ts +0 -10
  30. package/dist/lib/chains/base.d.ts.map +0 -1
  31. package/dist/lib/chains/base.js +0 -75
  32. package/dist/lib/chains/base.js.map +0 -1
  33. package/dist/lib/chains/solana.d.ts +0 -10
  34. package/dist/lib/chains/solana.d.ts.map +0 -1
  35. package/dist/lib/chains/solana.js +0 -49
  36. package/dist/lib/chains/solana.js.map +0 -1
  37. package/dist/lib/chains/xrpl.d.ts +0 -10
  38. package/dist/lib/chains/xrpl.d.ts.map +0 -1
  39. package/dist/lib/chains/xrpl.js +0 -55
  40. package/dist/lib/chains/xrpl.js.map +0 -1
  41. package/dist/lib/credit/bureau.d.ts +0 -16
  42. package/dist/lib/credit/bureau.d.ts.map +0 -1
  43. package/dist/lib/credit/bureau.js +0 -88
  44. package/dist/lib/credit/bureau.js.map +0 -1
  45. package/dist/lib/sml-api/agentcard.d.ts +0 -17
  46. package/dist/lib/sml-api/agentcard.d.ts.map +0 -1
  47. package/dist/lib/sml-api/agentcard.js +0 -30
  48. package/dist/lib/sml-api/agentcard.js.map +0 -1
  49. package/dist/lib/sml-api/backtest.d.ts +0 -22
  50. package/dist/lib/sml-api/backtest.d.ts.map +0 -1
  51. package/dist/lib/sml-api/backtest.js +0 -28
  52. package/dist/lib/sml-api/backtest.js.map +0 -1
  53. package/dist/lib/sml-api/brokers.d.ts +0 -40
  54. package/dist/lib/sml-api/brokers.d.ts.map +0 -1
  55. package/dist/lib/sml-api/brokers.js +0 -128
  56. package/dist/lib/sml-api/brokers.js.map +0 -1
  57. package/dist/lib/sml-api/copytrader.d.ts +0 -11
  58. package/dist/lib/sml-api/copytrader.d.ts.map +0 -1
  59. package/dist/lib/sml-api/copytrader.js +0 -30
  60. package/dist/lib/sml-api/copytrader.js.map +0 -1
  61. package/dist/lib/sml-api/crawl.d.ts +0 -20
  62. package/dist/lib/sml-api/crawl.d.ts.map +0 -1
  63. package/dist/lib/sml-api/crawl.js +0 -32
  64. package/dist/lib/sml-api/crawl.js.map +0 -1
  65. package/dist/lib/sml-api/echo.d.ts +0 -10
  66. package/dist/lib/sml-api/echo.d.ts.map +0 -1
  67. package/dist/lib/sml-api/echo.js +0 -23
  68. package/dist/lib/sml-api/echo.js.map +0 -1
  69. package/dist/lib/sml-api/forge.d.ts +0 -11
  70. package/dist/lib/sml-api/forge.d.ts.map +0 -1
  71. package/dist/lib/sml-api/forge.js +0 -29
  72. package/dist/lib/sml-api/forge.js.map +0 -1
  73. package/dist/lib/sml-api/ftd.d.ts +0 -18
  74. package/dist/lib/sml-api/ftd.d.ts.map +0 -1
  75. package/dist/lib/sml-api/ftd.js +0 -43
  76. package/dist/lib/sml-api/ftd.js.map +0 -1
  77. package/dist/lib/sml-api/ghost.d.ts +0 -13
  78. package/dist/lib/sml-api/ghost.d.ts.map +0 -1
  79. package/dist/lib/sml-api/ghost.js +0 -29
  80. package/dist/lib/sml-api/ghost.js.map +0 -1
  81. package/dist/lib/sml-api/launchpad.d.ts +0 -20
  82. package/dist/lib/sml-api/launchpad.d.ts.map +0 -1
  83. package/dist/lib/sml-api/launchpad.js +0 -31
  84. package/dist/lib/sml-api/launchpad.js.map +0 -1
  85. package/dist/lib/sml-api/leviathan.d.ts +0 -22
  86. package/dist/lib/sml-api/leviathan.d.ts.map +0 -1
  87. package/dist/lib/sml-api/leviathan.js +0 -33
  88. package/dist/lib/sml-api/leviathan.js.map +0 -1
  89. package/dist/lib/sml-api/nexus.d.ts +0 -18
  90. package/dist/lib/sml-api/nexus.d.ts.map +0 -1
  91. package/dist/lib/sml-api/nexus.js +0 -40
  92. package/dist/lib/sml-api/nexus.js.map +0 -1
  93. package/dist/lib/sml-api/proof402.d.ts +0 -6
  94. package/dist/lib/sml-api/proof402.d.ts.map +0 -1
  95. package/dist/lib/sml-api/proof402.js +0 -30
  96. package/dist/lib/sml-api/proof402.js.map +0 -1
  97. package/dist/lib/sml-api/rails.d.ts +0 -12
  98. package/dist/lib/sml-api/rails.d.ts.map +0 -1
  99. package/dist/lib/sml-api/rails.js +0 -29
  100. package/dist/lib/sml-api/rails.js.map +0 -1
  101. package/dist/lib/sml-api/shadow.d.ts +0 -15
  102. package/dist/lib/sml-api/shadow.d.ts.map +0 -1
  103. package/dist/lib/sml-api/shadow.js +0 -27
  104. package/dist/lib/sml-api/shadow.js.map +0 -1
  105. package/dist/lib/sml-api/squeezeos.d.ts +0 -21
  106. package/dist/lib/sml-api/squeezeos.d.ts.map +0 -1
  107. package/dist/lib/sml-api/squeezeos.js +0 -97
  108. package/dist/lib/sml-api/squeezeos.js.map +0 -1
  109. package/dist/lib/sml-api/xdeo.d.ts +0 -13
  110. package/dist/lib/sml-api/xdeo.d.ts.map +0 -1
  111. package/dist/lib/sml-api/xdeo.js +0 -34
  112. package/dist/lib/sml-api/xdeo.js.map +0 -1
  113. package/dist/lib/sml-api/xmit.d.ts +0 -13
  114. package/dist/lib/sml-api/xmit.d.ts.map +0 -1
  115. package/dist/lib/sml-api/xmit.js +0 -34
  116. package/dist/lib/sml-api/xmit.js.map +0 -1
  117. package/dist/server/health.d.ts +0 -16
  118. package/dist/server/health.d.ts.map +0 -1
  119. package/dist/server/health.js +0 -39
  120. package/dist/server/health.js.map +0 -1
  121. package/dist/server/index.d.ts +0 -3
  122. package/dist/server/index.d.ts.map +0 -1
  123. package/dist/server/index.js +0 -322
  124. package/dist/server/index.js.map +0 -1
  125. package/dist/server/payments/ap2.d.ts +0 -17
  126. package/dist/server/payments/ap2.d.ts.map +0 -1
  127. package/dist/server/payments/ap2.js +0 -77
  128. package/dist/server/payments/ap2.js.map +0 -1
  129. package/dist/server/payments/receipt.d.ts +0 -28
  130. package/dist/server/payments/receipt.d.ts.map +0 -1
  131. package/dist/server/payments/receipt.js +0 -60
  132. package/dist/server/payments/receipt.js.map +0 -1
  133. package/dist/server/payments/router.d.ts +0 -23
  134. package/dist/server/payments/router.d.ts.map +0 -1
  135. package/dist/server/payments/router.js +0 -69
  136. package/dist/server/payments/router.js.map +0 -1
  137. package/dist/server/payments/wallet.d.ts +0 -18
  138. package/dist/server/payments/wallet.d.ts.map +0 -1
  139. package/dist/server/payments/wallet.js +0 -107
  140. package/dist/server/payments/wallet.js.map +0 -1
  141. package/dist/server/payments/x402.d.ts +0 -29
  142. package/dist/server/payments/x402.d.ts.map +0 -1
  143. package/dist/server/payments/x402.js +0 -138
  144. package/dist/server/payments/x402.js.map +0 -1
  145. package/dist/server/registry/catalog.d.ts +0 -12
  146. package/dist/server/registry/catalog.d.ts.map +0 -1
  147. package/dist/server/registry/catalog.js +0 -55
  148. package/dist/server/registry/catalog.js.map +0 -1
  149. package/dist/server/registry/discovery.d.ts +0 -16
  150. package/dist/server/registry/discovery.d.ts.map +0 -1
  151. package/dist/server/registry/discovery.js +0 -33
  152. package/dist/server/registry/discovery.js.map +0 -1
  153. package/dist/server/registry/pricing.d.ts +0 -10
  154. package/dist/server/registry/pricing.d.ts.map +0 -1
  155. package/dist/server/registry/pricing.js +0 -123
  156. package/dist/server/registry/pricing.js.map +0 -1
  157. package/dist/server/security/acl.d.ts +0 -28
  158. package/dist/server/security/acl.d.ts.map +0 -1
  159. package/dist/server/security/acl.js +0 -36
  160. package/dist/server/security/acl.js.map +0 -1
  161. package/dist/server/security/audit.d.ts +0 -15
  162. package/dist/server/security/audit.d.ts.map +0 -1
  163. package/dist/server/security/audit.js +0 -77
  164. package/dist/server/security/audit.js.map +0 -1
  165. package/dist/server/security/rate-limit.d.ts +0 -12
  166. package/dist/server/security/rate-limit.d.ts.map +0 -1
  167. package/dist/server/security/rate-limit.js +0 -72
  168. package/dist/server/security/rate-limit.js.map +0 -1
  169. package/dist/server/security/sandbox.d.ts +0 -7
  170. package/dist/server/security/sandbox.d.ts.map +0 -1
  171. package/dist/server/security/sandbox.js +0 -42
  172. package/dist/server/security/sandbox.js.map +0 -1
  173. package/dist/server/tools/agentcard.d.ts +0 -3
  174. package/dist/server/tools/agentcard.d.ts.map +0 -1
  175. package/dist/server/tools/agentcard.js +0 -118
  176. package/dist/server/tools/agentcard.js.map +0 -1
  177. package/dist/server/tools/backtest.d.ts +0 -3
  178. package/dist/server/tools/backtest.d.ts.map +0 -1
  179. package/dist/server/tools/backtest.js +0 -112
  180. package/dist/server/tools/backtest.js.map +0 -1
  181. package/dist/server/tools/brokers.d.ts +0 -3
  182. package/dist/server/tools/brokers.d.ts.map +0 -1
  183. package/dist/server/tools/brokers.js +0 -223
  184. package/dist/server/tools/brokers.js.map +0 -1
  185. package/dist/server/tools/copytrader.d.ts +0 -3
  186. package/dist/server/tools/copytrader.d.ts.map +0 -1
  187. package/dist/server/tools/copytrader.js +0 -90
  188. package/dist/server/tools/copytrader.js.map +0 -1
  189. package/dist/server/tools/crawl.d.ts +0 -3
  190. package/dist/server/tools/crawl.d.ts.map +0 -1
  191. package/dist/server/tools/crawl.js +0 -60
  192. package/dist/server/tools/crawl.js.map +0 -1
  193. package/dist/server/tools/discovery.d.ts +0 -3
  194. package/dist/server/tools/discovery.d.ts.map +0 -1
  195. package/dist/server/tools/discovery.js +0 -188
  196. package/dist/server/tools/discovery.js.map +0 -1
  197. package/dist/server/tools/echo.d.ts +0 -3
  198. package/dist/server/tools/echo.d.ts.map +0 -1
  199. package/dist/server/tools/echo.js +0 -48
  200. package/dist/server/tools/echo.js.map +0 -1
  201. package/dist/server/tools/forge.d.ts +0 -3
  202. package/dist/server/tools/forge.d.ts.map +0 -1
  203. package/dist/server/tools/forge.js +0 -77
  204. package/dist/server/tools/forge.js.map +0 -1
  205. package/dist/server/tools/ftd.d.ts +0 -3
  206. package/dist/server/tools/ftd.d.ts.map +0 -1
  207. package/dist/server/tools/ftd.js +0 -70
  208. package/dist/server/tools/ftd.js.map +0 -1
  209. package/dist/server/tools/ghost.d.ts +0 -3
  210. package/dist/server/tools/ghost.d.ts.map +0 -1
  211. package/dist/server/tools/ghost.js +0 -83
  212. package/dist/server/tools/ghost.js.map +0 -1
  213. package/dist/server/tools/index.d.ts +0 -3
  214. package/dist/server/tools/index.d.ts.map +0 -1
  215. package/dist/server/tools/index.js +0 -44
  216. package/dist/server/tools/index.js.map +0 -1
  217. package/dist/server/tools/launchpad.d.ts +0 -3
  218. package/dist/server/tools/launchpad.d.ts.map +0 -1
  219. package/dist/server/tools/launchpad.js +0 -151
  220. package/dist/server/tools/launchpad.js.map +0 -1
  221. package/dist/server/tools/leviathan.d.ts +0 -3
  222. package/dist/server/tools/leviathan.d.ts.map +0 -1
  223. package/dist/server/tools/leviathan.js +0 -73
  224. package/dist/server/tools/leviathan.js.map +0 -1
  225. package/dist/server/tools/nexus.d.ts +0 -3
  226. package/dist/server/tools/nexus.d.ts.map +0 -1
  227. package/dist/server/tools/nexus.js +0 -65
  228. package/dist/server/tools/nexus.js.map +0 -1
  229. package/dist/server/tools/proof402.d.ts +0 -3
  230. package/dist/server/tools/proof402.d.ts.map +0 -1
  231. package/dist/server/tools/proof402.js +0 -74
  232. package/dist/server/tools/proof402.js.map +0 -1
  233. package/dist/server/tools/rails.d.ts +0 -3
  234. package/dist/server/tools/rails.d.ts.map +0 -1
  235. package/dist/server/tools/rails.js +0 -82
  236. package/dist/server/tools/rails.js.map +0 -1
  237. package/dist/server/tools/shadow.d.ts +0 -3
  238. package/dist/server/tools/shadow.d.ts.map +0 -1
  239. package/dist/server/tools/shadow.js +0 -114
  240. package/dist/server/tools/shadow.js.map +0 -1
  241. package/dist/server/tools/squeezeos.d.ts +0 -3
  242. package/dist/server/tools/squeezeos.d.ts.map +0 -1
  243. package/dist/server/tools/squeezeos.js +0 -231
  244. package/dist/server/tools/squeezeos.js.map +0 -1
  245. package/dist/server/tools/xdeo.d.ts +0 -3
  246. package/dist/server/tools/xdeo.d.ts.map +0 -1
  247. package/dist/server/tools/xdeo.js +0 -58
  248. package/dist/server/tools/xdeo.js.map +0 -1
  249. package/dist/server/tools/xmit.d.ts +0 -3
  250. package/dist/server/tools/xmit.d.ts.map +0 -1
  251. package/dist/server/tools/xmit.js +0 -59
  252. package/dist/server/tools/xmit.js.map +0 -1
  253. package/server.json +0 -52
@@ -1,33 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.Discovery = void 0;
4
- const fs_1 = require("fs");
5
- const path_1 = require("path");
6
- class Discovery {
7
- static instance;
8
- agentsJson = null;
9
- llmsTxt = null;
10
- constructor() { }
11
- static getInstance() {
12
- if (!Discovery.instance) {
13
- Discovery.instance = new Discovery();
14
- }
15
- return Discovery.instance;
16
- }
17
- getAgentsJson() {
18
- if (!this.agentsJson) {
19
- const path = (0, path_1.join)(process.cwd(), 'agents.json');
20
- this.agentsJson = JSON.parse((0, fs_1.readFileSync)(path, 'utf8'));
21
- }
22
- return this.agentsJson;
23
- }
24
- getLlmsTxt() {
25
- if (!this.llmsTxt) {
26
- const path = (0, path_1.join)(process.cwd(), 'llms.txt');
27
- this.llmsTxt = (0, fs_1.readFileSync)(path, 'utf8');
28
- }
29
- return this.llmsTxt;
30
- }
31
- }
32
- exports.Discovery = Discovery;
33
- //# sourceMappingURL=discovery.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/server/registry/discovery.ts"],"names":[],"mappings":";;;AAAA,2BAAkC;AAClC,+BAA4B;AAQ5B,MAAa,SAAS;IACZ,MAAM,CAAC,QAAQ,CAAY;IAC3B,UAAU,GAAsB,IAAI,CAAC;IACrC,OAAO,GAAkB,IAAI,CAAC;IAEtC,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,SAAS,CAAC,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AA7BD,8BA6BC"}
@@ -1,10 +0,0 @@
1
- export declare class PriceRegistry {
2
- private static instance;
3
- private readonly cache;
4
- private readonly baseUrl;
5
- private constructor();
6
- static getInstance(): PriceRegistry;
7
- getPrice(toolName: string): Promise<string | null>;
8
- seedDefaults(): void;
9
- }
10
- //# sourceMappingURL=pricing.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":"AAyEA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,aAAa;IAO7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmCxD,YAAY,IAAI,IAAI;CAQrB"}
@@ -1,123 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.PriceRegistry = void 0;
4
- const PRICE_CACHE_TTL = parseInt(process.env['PRICE_CACHE_TTL_MS'] ?? '60000', 10);
5
- const BASE_PRICES = {
6
- // Discovery (free)
7
- sml_discover: '0.00',
8
- sml_status: '0.00',
9
- // SqueezeOS signals
10
- leviathan_signal: '0.05',
11
- squeezeos_council: '0.10',
12
- squeezeos_scan: '0.05',
13
- squeezeos_options: '0.05',
14
- squeezeos_iwm: '0.03',
15
- squeezeos_preview: '0.00',
16
- squeezeos_status: '0.00',
17
- // SEC / Earnings
18
- xmit_edgar_decode: '0.02',
19
- xdeo_earnings_estimate: '0.02',
20
- // FTD
21
- ftd_threshold_scan: '0.05',
22
- // Crawl
23
- crawl_paid_fetch: '0.005',
24
- // Agent marketplace
25
- nexus_agent_hire: '0.00',
26
- nexus_agent_list: '0.00',
27
- nexus_agent_status: '0.00',
28
- // Ghost Layer (cross-chain)
29
- ghost_transfer: '0.02',
30
- ghost_status: '0.00',
31
- ghost_routes: '0.00',
32
- // RLUSD Rails
33
- rails_send: '0.01',
34
- rails_status: '0.00',
35
- // Launchpad
36
- launchpad_create_token: '0.10',
37
- launchpad_buy_token: '0.02',
38
- launchpad_list: '0.00',
39
- launchpad_status: '0.00',
40
- // Copy-Trader
41
- copytrader_subscribe: '0.05',
42
- copytrader_status: '0.00',
43
- // Backtest
44
- backtest_run: '0.05',
45
- backtest_validate: '0.05',
46
- backtest_status: '0.00',
47
- // Brokers (Tradier)
48
- brokers_quote: '0.00',
49
- brokers_options_chain: '0.01',
50
- brokers_place_order: '0.05',
51
- brokers_account: '0.01',
52
- // Shadow Desk
53
- shadow_query: '0.05',
54
- shadow_ingest: '0.02',
55
- shadow_status: '0.00',
56
- // Forge (LLM gateway)
57
- forge_complete: '0.02',
58
- forge_status: '0.00',
59
- // Proof402
60
- proof402_get_invoice: '0.00',
61
- proof402_verify: '0.00',
62
- proof402_credit_score: '0.00',
63
- // Echo (pattern matching)
64
- echo_analogs: '0.05',
65
- // Agent card / identity
66
- agentcard_verify: '0.00',
67
- agentcard_register: '0.01',
68
- agentcard_lookup: '0.00',
69
- };
70
- class PriceRegistry {
71
- static instance;
72
- cache = new Map();
73
- baseUrl;
74
- constructor() {
75
- this.baseUrl = process.env['SML_API_BASE'] ?? 'https://squeezeos-api.onrender.com';
76
- }
77
- static getInstance() {
78
- if (!PriceRegistry.instance) {
79
- PriceRegistry.instance = new PriceRegistry();
80
- }
81
- return PriceRegistry.instance;
82
- }
83
- async getPrice(toolName) {
84
- const cached = this.cache.get(toolName);
85
- const now = Date.now();
86
- if (cached && now - cached.fetchedAt < PRICE_CACHE_TTL) {
87
- return cached.price;
88
- }
89
- // Fetch live price from SML pricing API
90
- try {
91
- const res = await fetch(`${this.baseUrl}/pricing/v1/tool/${toolName}`, {
92
- signal: AbortSignal.timeout(3000),
93
- });
94
- if (res.ok) {
95
- const body = (await res.json());
96
- this.cache.set(toolName, { price: body.price, fetchedAt: now });
97
- return body.price;
98
- }
99
- }
100
- catch {
101
- // Fall through to hardcoded baseline
102
- }
103
- // Use hardcoded baseline if API unavailable
104
- const fallback = BASE_PRICES[toolName];
105
- if (fallback !== undefined) {
106
- this.cache.set(toolName, { price: fallback, fetchedAt: now - PRICE_CACHE_TTL / 2 });
107
- return fallback;
108
- }
109
- // Unknown tool — default to free rather than reject
110
- this.cache.set(toolName, { price: '0.00', fetchedAt: now });
111
- return '0.00';
112
- }
113
- seedDefaults() {
114
- const now = Date.now();
115
- for (const [tool, price] of Object.entries(BASE_PRICES)) {
116
- if (!this.cache.has(tool)) {
117
- this.cache.set(tool, { price, fetchedAt: now });
118
- }
119
- }
120
- }
121
- }
122
- exports.PriceRegistry = PriceRegistry;
123
- //# sourceMappingURL=pricing.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":";;;AAAA,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAEnF,MAAM,WAAW,GAA2B;IAC1C,mBAAmB;IACnB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,MAAM;IACzB,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,MAAM;IACzB,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB;IACjB,iBAAiB,EAAE,MAAM;IACzB,sBAAsB,EAAE,MAAM;IAC9B,MAAM;IACN,kBAAkB,EAAE,MAAM;IAC1B,QAAQ;IACR,gBAAgB,EAAE,OAAO;IACzB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,4BAA4B;IAC5B,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,cAAc;IACd,UAAU,EAAE,MAAM;IAClB,YAAY,EAAE,MAAM;IACpB,YAAY;IACZ,sBAAsB,EAAE,MAAM;IAC9B,mBAAmB,EAAE,MAAM;IAC3B,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,MAAM;IACxB,cAAc;IACd,oBAAoB,EAAE,MAAM;IAC5B,iBAAiB,EAAE,MAAM;IACzB,WAAW;IACX,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,MAAM;IACzB,eAAe,EAAE,MAAM;IACvB,oBAAoB;IACpB,aAAa,EAAE,MAAM;IACrB,qBAAqB,EAAE,MAAM;IAC7B,mBAAmB,EAAE,MAAM;IAC3B,eAAe,EAAE,MAAM;IACvB,cAAc;IACd,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,sBAAsB;IACtB,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,WAAW;IACX,oBAAoB,EAAE,MAAM;IAC5B,eAAe,EAAE,MAAM;IACvB,qBAAqB,EAAE,MAAM;IAC7B,0BAA0B;IAC1B,YAAY,EAAE,MAAM;IACpB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAOF,MAAa,aAAa;IAChB,MAAM,CAAC,QAAQ,CAAgB;IACtB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,OAAO,CAAS;IAEjC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,oCAAoC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,eAAe,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,QAAQ,EAAE,EAAE;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,eAAe,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA3DD,sCA2DC"}
@@ -1,28 +0,0 @@
1
- import { z } from 'zod';
2
- export declare const ToolACLSchema: z.ZodObject<{
3
- toolName: z.ZodString;
4
- walletAddress: z.ZodOptional<z.ZodString>;
5
- creditScore: z.ZodOptional<z.ZodNumber>;
6
- paidTier: z.ZodDefault<z.ZodBoolean>;
7
- }, "strip", z.ZodTypeAny, {
8
- toolName: string;
9
- paidTier: boolean;
10
- walletAddress?: string | undefined;
11
- creditScore?: number | undefined;
12
- }, {
13
- toolName: string;
14
- walletAddress?: string | undefined;
15
- creditScore?: number | undefined;
16
- paidTier?: boolean | undefined;
17
- }>;
18
- export type ToolACL = z.infer<typeof ToolACLSchema>;
19
- export declare class ACL {
20
- private static instance;
21
- private constructor();
22
- static getInstance(): ACL;
23
- isFree(toolName: string): boolean;
24
- requiresPayment(toolName: string): boolean;
25
- requiresAP2(toolName: string): boolean;
26
- minCreditScore(_toolName: string): number;
27
- }
28
- //# sourceMappingURL=acl.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"acl.d.ts","sourceRoot":"","sources":["../../../src/server/security/acl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;EAKxB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD,qBAAa,GAAG;IACd,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAM;IAE7B,OAAO;IAEP,MAAM,CAAC,WAAW,IAAI,GAAG;IAOzB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIjC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI1C,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAKtC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAG1C"}
@@ -1,36 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.ACL = exports.ToolACLSchema = void 0;
4
- const zod_1 = require("zod");
5
- exports.ToolACLSchema = zod_1.z.object({
6
- toolName: zod_1.z.string(),
7
- walletAddress: zod_1.z.string().optional(),
8
- creditScore: zod_1.z.number().optional(),
9
- paidTier: zod_1.z.boolean().default(false),
10
- });
11
- const FREE_TOOLS = new Set(['ftd_threshold_scan_alerts', 'nexus_agent_hire_query']);
12
- class ACL {
13
- static instance;
14
- constructor() { }
15
- static getInstance() {
16
- if (!ACL.instance) {
17
- ACL.instance = new ACL();
18
- }
19
- return ACL.instance;
20
- }
21
- isFree(toolName) {
22
- return FREE_TOOLS.has(toolName);
23
- }
24
- requiresPayment(toolName) {
25
- return !this.isFree(toolName);
26
- }
27
- requiresAP2(toolName) {
28
- // leviathan, xmit, xdeo require AP2 per spec
29
- return ['leviathan_signal', 'xmit_edgar_decode', 'xdeo_earnings_estimate'].includes(toolName);
30
- }
31
- minCreditScore(_toolName) {
32
- return 300;
33
- }
34
- }
35
- exports.ACL = ACL;
36
- //# sourceMappingURL=acl.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"acl.js","sourceRoot":"","sources":["../../../src/server/security/acl.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAEX,QAAA,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrC,CAAC,CAAC;AAIH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAEpF,MAAa,GAAG;IACN,MAAM,CAAC,QAAQ,CAAM;IAE7B,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,eAAe,CAAC,QAAgB;QAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,WAAW,CAAC,QAAgB;QAC1B,6CAA6C;QAC7C,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChG,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AA5BD,kBA4BC"}
@@ -1,15 +0,0 @@
1
- export declare class AuditLogger {
2
- private static instance;
3
- private seq;
4
- private prevHash;
5
- private readonly logPath;
6
- private readonly hmacSecret;
7
- private constructor();
8
- static getInstance(): AuditLogger;
9
- private log;
10
- private redact;
11
- info(event: string, data?: Record<string, unknown>): void;
12
- warn(event: string, data?: Record<string, unknown>): void;
13
- error(event: string, data?: Record<string, unknown>): void;
14
- }
15
- //# sourceMappingURL=audit.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/server/security/audit.ts"],"names":[],"mappings":"AAiBA,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAc;IACrC,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAsE;IACtF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,OAAO;IAKP,MAAM,CAAC,WAAW,IAAI,WAAW;IAOjC,OAAO,CAAC,GAAG;IA8BX,OAAO,CAAC,MAAM;IAgBd,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAI7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAI7D,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;CAG/D"}
@@ -1,77 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.AuditLogger = void 0;
4
- const crypto_1 = require("crypto");
5
- const fs_1 = require("fs");
6
- // Append-only SHA-256 chained audit log (N5)
7
- // Each entry includes the hash of the previous entry — tampering breaks the chain.
8
- class AuditLogger {
9
- static instance;
10
- seq = 0;
11
- prevHash = '0000000000000000000000000000000000000000000000000000000000000000';
12
- logPath;
13
- hmacSecret;
14
- constructor() {
15
- this.logPath = process.env['AUDIT_LOG_PATH'] ?? './audit.log';
16
- this.hmacSecret = process.env['AUDIT_HMAC_SECRET'] ?? 'mcp-x402-audit-secret';
17
- }
18
- static getInstance() {
19
- if (!AuditLogger.instance) {
20
- AuditLogger.instance = new AuditLogger();
21
- }
22
- return AuditLogger.instance;
23
- }
24
- log(level, event, data) {
25
- const seq = ++this.seq;
26
- const ts = Date.now();
27
- // Redact PII (N3): hash wallet addresses, never log raw filing content
28
- const safeData = this.redact(data);
29
- const payload = JSON.stringify({ seq, ts, level, event, data: safeData, prev_hash: this.prevHash });
30
- const hash = (0, crypto_1.createHmac)('sha256', this.hmacSecret).update(payload).digest('hex');
31
- const entry = {
32
- seq,
33
- ts,
34
- level,
35
- event,
36
- data: safeData,
37
- prev_hash: this.prevHash,
38
- hash,
39
- };
40
- this.prevHash = hash;
41
- try {
42
- (0, fs_1.appendFileSync)(this.logPath, JSON.stringify(entry) + '\n', 'utf8');
43
- }
44
- catch {
45
- // If log write fails, emit to stderr but don't crash
46
- process.stderr.write(`[audit-fail] ${JSON.stringify(entry)}\n`);
47
- }
48
- }
49
- redact(data) {
50
- const out = {};
51
- for (const [k, v] of Object.entries(data)) {
52
- if (k === 'wallet' || k === 'address') {
53
- // Hash wallet addresses (N3)
54
- out[k] = (0, crypto_1.createHash)('sha256').update(String(v)).digest('hex').slice(0, 16) + '...';
55
- }
56
- else if (k === 'content' || k === 'raw_text' || k === 'filing') {
57
- // Never log raw filing data (N3)
58
- out[k] = '[REDACTED]';
59
- }
60
- else {
61
- out[k] = v;
62
- }
63
- }
64
- return out;
65
- }
66
- info(event, data = {}) {
67
- this.log('info', event, data);
68
- }
69
- warn(event, data = {}) {
70
- this.log('warn', event, data);
71
- }
72
- error(event, data = {}) {
73
- this.log('error', event, data);
74
- }
75
- }
76
- exports.AuditLogger = AuditLogger;
77
- //# sourceMappingURL=audit.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/server/security/audit.ts"],"names":[],"mappings":";;;AAAA,mCAAgD;AAChD,2BAAoC;AAcpC,6CAA6C;AAC7C,mFAAmF;AACnF,MAAa,WAAW;IACd,MAAM,CAAC,QAAQ,CAAc;IAC7B,GAAG,GAAG,CAAC,CAAC;IACR,QAAQ,GAAG,kEAAkE,CAAC;IACrE,OAAO,CAAS;IAChB,UAAU,CAAS;IAEpC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC;QAC9D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,uBAAuB,CAAC;IAChF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,KAAa,EAAE,IAA6B;QACvE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEtB,uEAAuE;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpG,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAa;YACtB,GAAG;YACH,EAAE;YACF,KAAK;YACL,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,IAAI;SACL,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC;YACH,IAAA,mBAAc,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,IAA6B;QAC1C,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACtC,6BAA6B;gBAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;YACrF,CAAC;iBAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjE,iCAAiC;gBACjC,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAgC,EAAE;QACpD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAgC,EAAE;QACpD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,OAAgC,EAAE;QACrD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;CACF;AA5ED,kCA4EC"}
@@ -1,12 +0,0 @@
1
- export declare class RateLimiter {
2
- private static instance;
3
- private readonly toolBuckets;
4
- private readonly walletBuckets;
5
- private readonly ipBuckets;
6
- private constructor();
7
- static getInstance(): RateLimiter;
8
- checkTool(toolName: string): boolean;
9
- checkWallet(wallet: string): boolean;
10
- checkIp(ip: string): boolean;
11
- }
12
- //# sourceMappingURL=rate-limit.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/server/security/rate-limit.ts"],"names":[],"mappings":"AAaA,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyD;IAEnF,OAAO;IAEP,MAAM,CAAC,WAAW,IAAI,WAAW;IAOjC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAqBpC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAqBpC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAa7B"}
@@ -1,72 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.RateLimiter = void 0;
4
- const PER_TOOL_MINUTE_LIMIT = 100;
5
- const PER_WALLET_DAY_LIMIT = 1000;
6
- const IP_MINUTE_LIMIT = 200;
7
- function nowMs() {
8
- return Date.now();
9
- }
10
- class RateLimiter {
11
- static instance;
12
- toolBuckets = new Map();
13
- walletBuckets = new Map();
14
- ipBuckets = new Map();
15
- constructor() { }
16
- static getInstance() {
17
- if (!RateLimiter.instance) {
18
- RateLimiter.instance = new RateLimiter();
19
- }
20
- return RateLimiter.instance;
21
- }
22
- checkTool(toolName) {
23
- const now = nowMs();
24
- let bucket = this.toolBuckets.get(toolName);
25
- if (!bucket) {
26
- bucket = {
27
- minute: { count: 0, resetAt: now + 60_000 },
28
- day: { count: 0, resetAt: now + 86_400_000 },
29
- };
30
- this.toolBuckets.set(toolName, bucket);
31
- }
32
- if (now > bucket.minute.resetAt) {
33
- bucket.minute = { count: 0, resetAt: now + 60_000 };
34
- }
35
- if (bucket.minute.count >= PER_TOOL_MINUTE_LIMIT)
36
- return false;
37
- bucket.minute.count++;
38
- return true;
39
- }
40
- checkWallet(wallet) {
41
- const now = nowMs();
42
- let bucket = this.walletBuckets.get(wallet);
43
- if (!bucket) {
44
- bucket = {
45
- minute: { count: 0, resetAt: now + 60_000 },
46
- day: { count: 0, resetAt: now + 86_400_000 },
47
- };
48
- this.walletBuckets.set(wallet, bucket);
49
- }
50
- if (now > bucket.day.resetAt) {
51
- bucket.day = { count: 0, resetAt: now + 86_400_000 };
52
- }
53
- if (bucket.day.count >= PER_WALLET_DAY_LIMIT)
54
- return false;
55
- bucket.day.count++;
56
- return true;
57
- }
58
- checkIp(ip) {
59
- const now = nowMs();
60
- let entry = this.ipBuckets.get(ip);
61
- if (!entry || now > entry.resetAt) {
62
- entry = { count: 0, resetAt: now + 60_000 };
63
- this.ipBuckets.set(ip, entry);
64
- }
65
- if (entry.count >= IP_MINUTE_LIMIT)
66
- return false;
67
- entry.count++;
68
- return true;
69
- }
70
- }
71
- exports.RateLimiter = RateLimiter;
72
- //# sourceMappingURL=rate-limit.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/server/security/rate-limit.ts"],"names":[],"mappings":";;;AAKA,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,SAAS,KAAK;IACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,MAAa,WAAW;IACd,MAAM,CAAC,QAAQ,CAAc;IACpB,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEnF,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE;gBAC3C,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,UAAU,EAAE;aAC7C,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,qBAAqB;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE;gBAC3C,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,UAAU,EAAE;aAC7C,CAAC;YACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC;QACvD,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,oBAAoB;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;YAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe;YAAE,OAAO,KAAK,CAAC;QACjD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAtED,kCAsEC"}
@@ -1,7 +0,0 @@
1
- import { z } from 'zod';
2
- export declare class Sandbox {
3
- static validate<T>(schema: z.ZodType<T>, input: unknown): T;
4
- static validateUrl(raw: string): URL;
5
- static sanitizeApiResponse(text: string): string;
6
- }
7
- //# sourceMappingURL=sandbox.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/server/security/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,qBAAa,OAAO;IAClB,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC;IAY3D,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG;IAcpC,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAQjD"}
@@ -1,42 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.Sandbox = void 0;
4
- // Sandboxed input validation layer — all tool inputs pass through here before execution.
5
- // No eval(), no dynamic require(), no raw SQL (N4 enforcement at schema layer).
6
- class Sandbox {
7
- static validate(schema, input) {
8
- const result = schema.safeParse(input);
9
- if (!result.success) {
10
- const issues = result.error.issues
11
- .map((i) => `${i.path.join('.')}: ${i.message}`)
12
- .join('; ');
13
- throw new Error(`Input validation failed: ${issues}`);
14
- }
15
- return result.data;
16
- }
17
- // Ensure URL is http/https only — no file://, data://, javascript:
18
- static validateUrl(raw) {
19
- let url;
20
- try {
21
- url = new URL(raw);
22
- }
23
- catch {
24
- throw new Error(`Invalid URL: ${raw}`);
25
- }
26
- if (url.protocol !== 'http:' && url.protocol !== 'https:') {
27
- throw new Error(`Disallowed URL protocol: ${url.protocol}`);
28
- }
29
- return url;
30
- }
31
- // Strip any response content that looks like a prompt injection attempt
32
- static sanitizeApiResponse(text) {
33
- // Remove common injection markers
34
- return text
35
- .replace(/<\/?system>/gi, '')
36
- .replace(/\[INST\]/gi, '')
37
- .replace(/\[\/?INST\]/gi, '')
38
- .slice(0, 50_000); // Hard cap on returned content size
39
- }
40
- }
41
- exports.Sandbox = Sandbox;
42
- //# sourceMappingURL=sandbox.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/server/security/sandbox.ts"],"names":[],"mappings":";;;AAEA,yFAAyF;AACzF,gFAAgF;AAChF,MAAa,OAAO;IAClB,MAAM,CAAC,QAAQ,CAAI,MAAoB,EAAE,KAAc;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,mEAAmE;IACnE,MAAM,CAAC,WAAW,CAAC,GAAW;QAC5B,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,mBAAmB,CAAC,IAAY;QACrC,kCAAkC;QAClC,OAAO,IAAI;aACR,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aACzB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,oCAAoC;IAC3D,CAAC;CACF;AAnCD,0BAmCC"}
@@ -1,3 +0,0 @@
1
- import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
2
- export declare function registerAgentCard(server: McpServer): void;
3
- //# sourceMappingURL=agentcard.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"agentcard.d.ts","sourceRoot":"","sources":["../../../src/server/tools/agentcard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA0BzE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA0GzD"}
@@ -1,118 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.registerAgentCard = registerAgentCard;
4
- const zod_1 = require("zod");
5
- const x402_js_1 = require("../payments/x402.js");
6
- const rate_limit_js_1 = require("../security/rate-limit.js");
7
- const sandbox_js_1 = require("../security/sandbox.js");
8
- const audit_js_1 = require("../security/audit.js");
9
- const pricing_js_1 = require("../registry/pricing.js");
10
- const agentcard_js_1 = require("../../lib/sml-api/agentcard.js");
11
- const LookupSchema = zod_1.z.object({
12
- identifier: zod_1.z.string().min(1),
13
- });
14
- const VerifySchema = zod_1.z.object({
15
- wallet_address: zod_1.z.string().min(10),
16
- message: zod_1.z.string().min(1),
17
- signature: zod_1.z.string().min(1),
18
- });
19
- const MintSchema = zod_1.z.object({
20
- wallet_address: zod_1.z.string().min(10),
21
- name: zod_1.z.string().min(1).max(64),
22
- did: zod_1.z.string().optional(),
23
- metadata: zod_1.z.record(zod_1.z.unknown()).optional(),
24
- payment_wallet: zod_1.z.string().optional(),
25
- });
26
- function registerAgentCard(server) {
27
- const audit = audit_js_1.AuditLogger.getInstance();
28
- // ── FREE: agentcard_lookup ─────────────────────────────────────────────────
29
- server.tool('agentcard_lookup', {
30
- identifier: zod_1.z.string().describe('Agent wallet address or DID to look up.'),
31
- }, async (rawArgs) => {
32
- const { identifier } = sandbox_js_1.Sandbox.validate(LookupSchema, rawArgs);
33
- if (!rate_limit_js_1.RateLimiter.getInstance().checkTool('agentcard_lookup')) {
34
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'rate_limit_exceeded', retry_after: 60 }) }], isError: true };
35
- }
36
- try {
37
- const data = await agentcard_js_1.AgentCardAPI.lookup(identifier);
38
- audit.info('agentcard_lookup', { identifier });
39
- return { content: [{ type: 'text', text: JSON.stringify(data) }] };
40
- }
41
- catch (err) {
42
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'api_error', message: String(err) }) }], isError: true };
43
- }
44
- });
45
- // ── FREE: agentcard_verify ─────────────────────────────────────────────────
46
- server.tool('agentcard_verify', {
47
- wallet_address: zod_1.z.string().describe('Agent wallet address that signed the message.'),
48
- message: zod_1.z.string().describe('Original message that was signed.'),
49
- signature: zod_1.z.string().describe('Ed25519 signature (hex or base64).'),
50
- }, async (rawArgs) => {
51
- const args = sandbox_js_1.Sandbox.validate(VerifySchema, rawArgs);
52
- if (!rate_limit_js_1.RateLimiter.getInstance().checkTool('agentcard_verify')) {
53
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'rate_limit_exceeded', retry_after: 60 }) }], isError: true };
54
- }
55
- try {
56
- const data = await agentcard_js_1.AgentCardAPI.verify({
57
- walletAddress: args.wallet_address,
58
- message: args.message,
59
- signature: args.signature,
60
- });
61
- audit.info('agentcard_verify', { wallet_address: args.wallet_address });
62
- return { content: [{ type: 'text', text: JSON.stringify(data) }] };
63
- }
64
- catch (err) {
65
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'api_error', message: String(err) }) }], isError: true };
66
- }
67
- });
68
- // ── PAID: agentcard_mint (0.01 USDC) ──────────────────────────────────────
69
- server.tool('agentcard_mint', {
70
- wallet_address: zod_1.z.string().describe('XRPL wallet address for the new agent identity.'),
71
- name: zod_1.z.string().describe('Human-readable agent name (max 64 chars).'),
72
- did: zod_1.z.string().describe('Optional DID (decentralized identifier) for the agent.'),
73
- metadata: zod_1.z.record(zod_1.z.unknown()).describe('Optional metadata object (capabilities, version, etc.).'),
74
- payment_wallet: zod_1.z.string().describe('Wallet to pay x402 fee from (defaults to wallet_address).'),
75
- }, async (rawArgs) => {
76
- const args = sandbox_js_1.Sandbox.validate(MintSchema, rawArgs);
77
- const paymentWallet = args.payment_wallet ?? args.wallet_address;
78
- if (!rate_limit_js_1.RateLimiter.getInstance().checkTool('agentcard_mint')) {
79
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'rate_limit_exceeded', retry_after: 60 }) }], isError: true };
80
- }
81
- await pricing_js_1.PriceRegistry.getInstance().seedDefaults();
82
- const price = await pricing_js_1.PriceRegistry.getInstance().getPrice('agentcard_mint');
83
- if (!price) {
84
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'price_unavailable' }) }], isError: true };
85
- }
86
- let payment;
87
- try {
88
- payment = await (0, x402_js_1.executeX402Payment)({ price, currency: 'USDC', toolName: 'agentcard_mint', walletAddress: paymentWallet });
89
- }
90
- catch (err) {
91
- audit.warn('agentcard_mint_payment_fail', { error: String(err) });
92
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'payment_failed', message: String(err) }) }], isError: true };
93
- }
94
- try {
95
- const data = await agentcard_js_1.AgentCardAPI.mint({
96
- walletAddress: args.wallet_address,
97
- name: args.name,
98
- did: args.did,
99
- metadata: args.metadata,
100
- });
101
- audit.info('agentcard_mint_success', { name: args.name, receiptId: payment.receiptId });
102
- return {
103
- content: [{
104
- type: 'text',
105
- text: JSON.stringify({
106
- data,
107
- _meta: { receipt_id: payment.receiptId, tx_hash: payment.txHash, chain: payment.chain, amount_paid: `${payment.amountPaid} ${payment.currency}`, timestamp: payment.timestamp },
108
- }),
109
- }],
110
- };
111
- }
112
- catch (err) {
113
- audit.error('agentcard_mint_api_fail', { error: String(err) });
114
- return { content: [{ type: 'text', text: JSON.stringify({ error: 'api_error', message: String(err) }) }], isError: true };
115
- }
116
- });
117
- }
118
- //# sourceMappingURL=agentcard.js.map