@scriptmasterlabs/mcp-x402 2.1.0 → 2.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.well-known/x402.json +37 -0
- package/LICENSE +57 -21
- package/README.md +185 -227
- package/dist/index.d.ts +12 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +9 -0
- package/dist/index.js.map +1 -0
- package/dist/mcp-wrapper.d.ts +71 -0
- package/dist/mcp-wrapper.d.ts.map +1 -0
- package/dist/mcp-wrapper.js +104 -0
- package/dist/mcp-wrapper.js.map +1 -0
- package/dist/x402-middleware.d.ts +76 -0
- package/dist/x402-middleware.d.ts.map +1 -0
- package/dist/x402-middleware.js +113 -0
- package/dist/x402-middleware.js.map +1 -0
- package/dist/xrpl-facilitator.d.ts +77 -0
- package/dist/xrpl-facilitator.d.ts.map +1 -0
- package/dist/xrpl-facilitator.js +156 -0
- package/dist/xrpl-facilitator.js.map +1 -0
- package/llms.txt +108 -170
- package/package.json +43 -56
- package/schema.jsonld +97 -0
- package/.well-known/agentcard.json +0 -34
- package/.well-known/ai.txt +0 -32
- package/CONTRIBUTING.md +0 -76
- package/agents.json +0 -81
- package/ai/faq.json +0 -74
- package/ai/summary.json +0 -157
- package/dist/lib/chains/base.d.ts +0 -10
- package/dist/lib/chains/base.d.ts.map +0 -1
- package/dist/lib/chains/base.js +0 -75
- package/dist/lib/chains/base.js.map +0 -1
- package/dist/lib/chains/solana.d.ts +0 -10
- package/dist/lib/chains/solana.d.ts.map +0 -1
- package/dist/lib/chains/solana.js +0 -49
- package/dist/lib/chains/solana.js.map +0 -1
- package/dist/lib/chains/xrpl.d.ts +0 -10
- package/dist/lib/chains/xrpl.d.ts.map +0 -1
- package/dist/lib/chains/xrpl.js +0 -55
- package/dist/lib/chains/xrpl.js.map +0 -1
- package/dist/lib/credit/bureau.d.ts +0 -16
- package/dist/lib/credit/bureau.d.ts.map +0 -1
- package/dist/lib/credit/bureau.js +0 -88
- package/dist/lib/credit/bureau.js.map +0 -1
- package/dist/lib/sml-api/agentcard.d.ts +0 -17
- package/dist/lib/sml-api/agentcard.d.ts.map +0 -1
- package/dist/lib/sml-api/agentcard.js +0 -30
- package/dist/lib/sml-api/agentcard.js.map +0 -1
- package/dist/lib/sml-api/backtest.d.ts +0 -22
- package/dist/lib/sml-api/backtest.d.ts.map +0 -1
- package/dist/lib/sml-api/backtest.js +0 -28
- package/dist/lib/sml-api/backtest.js.map +0 -1
- package/dist/lib/sml-api/brokers.d.ts +0 -40
- package/dist/lib/sml-api/brokers.d.ts.map +0 -1
- package/dist/lib/sml-api/brokers.js +0 -128
- package/dist/lib/sml-api/brokers.js.map +0 -1
- package/dist/lib/sml-api/copytrader.d.ts +0 -11
- package/dist/lib/sml-api/copytrader.d.ts.map +0 -1
- package/dist/lib/sml-api/copytrader.js +0 -30
- package/dist/lib/sml-api/copytrader.js.map +0 -1
- package/dist/lib/sml-api/crawl.d.ts +0 -20
- package/dist/lib/sml-api/crawl.d.ts.map +0 -1
- package/dist/lib/sml-api/crawl.js +0 -32
- package/dist/lib/sml-api/crawl.js.map +0 -1
- package/dist/lib/sml-api/echo.d.ts +0 -10
- package/dist/lib/sml-api/echo.d.ts.map +0 -1
- package/dist/lib/sml-api/echo.js +0 -23
- package/dist/lib/sml-api/echo.js.map +0 -1
- package/dist/lib/sml-api/forge.d.ts +0 -11
- package/dist/lib/sml-api/forge.d.ts.map +0 -1
- package/dist/lib/sml-api/forge.js +0 -29
- package/dist/lib/sml-api/forge.js.map +0 -1
- package/dist/lib/sml-api/ftd.d.ts +0 -18
- package/dist/lib/sml-api/ftd.d.ts.map +0 -1
- package/dist/lib/sml-api/ftd.js +0 -43
- package/dist/lib/sml-api/ftd.js.map +0 -1
- package/dist/lib/sml-api/ghost.d.ts +0 -13
- package/dist/lib/sml-api/ghost.d.ts.map +0 -1
- package/dist/lib/sml-api/ghost.js +0 -29
- package/dist/lib/sml-api/ghost.js.map +0 -1
- package/dist/lib/sml-api/launchpad.d.ts +0 -20
- package/dist/lib/sml-api/launchpad.d.ts.map +0 -1
- package/dist/lib/sml-api/launchpad.js +0 -31
- package/dist/lib/sml-api/launchpad.js.map +0 -1
- package/dist/lib/sml-api/leviathan.d.ts +0 -22
- package/dist/lib/sml-api/leviathan.d.ts.map +0 -1
- package/dist/lib/sml-api/leviathan.js +0 -33
- package/dist/lib/sml-api/leviathan.js.map +0 -1
- package/dist/lib/sml-api/nexus.d.ts +0 -18
- package/dist/lib/sml-api/nexus.d.ts.map +0 -1
- package/dist/lib/sml-api/nexus.js +0 -40
- package/dist/lib/sml-api/nexus.js.map +0 -1
- package/dist/lib/sml-api/proof402.d.ts +0 -6
- package/dist/lib/sml-api/proof402.d.ts.map +0 -1
- package/dist/lib/sml-api/proof402.js +0 -30
- package/dist/lib/sml-api/proof402.js.map +0 -1
- package/dist/lib/sml-api/rails.d.ts +0 -12
- package/dist/lib/sml-api/rails.d.ts.map +0 -1
- package/dist/lib/sml-api/rails.js +0 -29
- package/dist/lib/sml-api/rails.js.map +0 -1
- package/dist/lib/sml-api/shadow.d.ts +0 -15
- package/dist/lib/sml-api/shadow.d.ts.map +0 -1
- package/dist/lib/sml-api/shadow.js +0 -27
- package/dist/lib/sml-api/shadow.js.map +0 -1
- package/dist/lib/sml-api/squeezeos.d.ts +0 -21
- package/dist/lib/sml-api/squeezeos.d.ts.map +0 -1
- package/dist/lib/sml-api/squeezeos.js +0 -97
- package/dist/lib/sml-api/squeezeos.js.map +0 -1
- package/dist/lib/sml-api/xdeo.d.ts +0 -13
- package/dist/lib/sml-api/xdeo.d.ts.map +0 -1
- package/dist/lib/sml-api/xdeo.js +0 -34
- package/dist/lib/sml-api/xdeo.js.map +0 -1
- package/dist/lib/sml-api/xmit.d.ts +0 -13
- package/dist/lib/sml-api/xmit.d.ts.map +0 -1
- package/dist/lib/sml-api/xmit.js +0 -34
- package/dist/lib/sml-api/xmit.js.map +0 -1
- package/dist/server/health.d.ts +0 -16
- package/dist/server/health.d.ts.map +0 -1
- package/dist/server/health.js +0 -39
- package/dist/server/health.js.map +0 -1
- package/dist/server/index.d.ts +0 -3
- package/dist/server/index.d.ts.map +0 -1
- package/dist/server/index.js +0 -322
- package/dist/server/index.js.map +0 -1
- package/dist/server/payments/ap2.d.ts +0 -17
- package/dist/server/payments/ap2.d.ts.map +0 -1
- package/dist/server/payments/ap2.js +0 -77
- package/dist/server/payments/ap2.js.map +0 -1
- package/dist/server/payments/receipt.d.ts +0 -28
- package/dist/server/payments/receipt.d.ts.map +0 -1
- package/dist/server/payments/receipt.js +0 -60
- package/dist/server/payments/receipt.js.map +0 -1
- package/dist/server/payments/router.d.ts +0 -23
- package/dist/server/payments/router.d.ts.map +0 -1
- package/dist/server/payments/router.js +0 -69
- package/dist/server/payments/router.js.map +0 -1
- package/dist/server/payments/wallet.d.ts +0 -18
- package/dist/server/payments/wallet.d.ts.map +0 -1
- package/dist/server/payments/wallet.js +0 -107
- package/dist/server/payments/wallet.js.map +0 -1
- package/dist/server/payments/x402.d.ts +0 -29
- package/dist/server/payments/x402.d.ts.map +0 -1
- package/dist/server/payments/x402.js +0 -138
- package/dist/server/payments/x402.js.map +0 -1
- package/dist/server/registry/catalog.d.ts +0 -12
- package/dist/server/registry/catalog.d.ts.map +0 -1
- package/dist/server/registry/catalog.js +0 -55
- package/dist/server/registry/catalog.js.map +0 -1
- package/dist/server/registry/discovery.d.ts +0 -16
- package/dist/server/registry/discovery.d.ts.map +0 -1
- package/dist/server/registry/discovery.js +0 -33
- package/dist/server/registry/discovery.js.map +0 -1
- package/dist/server/registry/pricing.d.ts +0 -10
- package/dist/server/registry/pricing.d.ts.map +0 -1
- package/dist/server/registry/pricing.js +0 -123
- package/dist/server/registry/pricing.js.map +0 -1
- package/dist/server/security/acl.d.ts +0 -28
- package/dist/server/security/acl.d.ts.map +0 -1
- package/dist/server/security/acl.js +0 -36
- package/dist/server/security/acl.js.map +0 -1
- package/dist/server/security/audit.d.ts +0 -15
- package/dist/server/security/audit.d.ts.map +0 -1
- package/dist/server/security/audit.js +0 -77
- package/dist/server/security/audit.js.map +0 -1
- package/dist/server/security/rate-limit.d.ts +0 -12
- package/dist/server/security/rate-limit.d.ts.map +0 -1
- package/dist/server/security/rate-limit.js +0 -72
- package/dist/server/security/rate-limit.js.map +0 -1
- package/dist/server/security/sandbox.d.ts +0 -7
- package/dist/server/security/sandbox.d.ts.map +0 -1
- package/dist/server/security/sandbox.js +0 -42
- package/dist/server/security/sandbox.js.map +0 -1
- package/dist/server/tools/agentcard.d.ts +0 -3
- package/dist/server/tools/agentcard.d.ts.map +0 -1
- package/dist/server/tools/agentcard.js +0 -118
- package/dist/server/tools/agentcard.js.map +0 -1
- package/dist/server/tools/backtest.d.ts +0 -3
- package/dist/server/tools/backtest.d.ts.map +0 -1
- package/dist/server/tools/backtest.js +0 -112
- package/dist/server/tools/backtest.js.map +0 -1
- package/dist/server/tools/brokers.d.ts +0 -3
- package/dist/server/tools/brokers.d.ts.map +0 -1
- package/dist/server/tools/brokers.js +0 -223
- package/dist/server/tools/brokers.js.map +0 -1
- package/dist/server/tools/copytrader.d.ts +0 -3
- package/dist/server/tools/copytrader.d.ts.map +0 -1
- package/dist/server/tools/copytrader.js +0 -90
- package/dist/server/tools/copytrader.js.map +0 -1
- package/dist/server/tools/crawl.d.ts +0 -3
- package/dist/server/tools/crawl.d.ts.map +0 -1
- package/dist/server/tools/crawl.js +0 -60
- package/dist/server/tools/crawl.js.map +0 -1
- package/dist/server/tools/discovery.d.ts +0 -3
- package/dist/server/tools/discovery.d.ts.map +0 -1
- package/dist/server/tools/discovery.js +0 -188
- package/dist/server/tools/discovery.js.map +0 -1
- package/dist/server/tools/echo.d.ts +0 -3
- package/dist/server/tools/echo.d.ts.map +0 -1
- package/dist/server/tools/echo.js +0 -48
- package/dist/server/tools/echo.js.map +0 -1
- package/dist/server/tools/forge.d.ts +0 -3
- package/dist/server/tools/forge.d.ts.map +0 -1
- package/dist/server/tools/forge.js +0 -77
- package/dist/server/tools/forge.js.map +0 -1
- package/dist/server/tools/ftd.d.ts +0 -3
- package/dist/server/tools/ftd.d.ts.map +0 -1
- package/dist/server/tools/ftd.js +0 -70
- package/dist/server/tools/ftd.js.map +0 -1
- package/dist/server/tools/ghost.d.ts +0 -3
- package/dist/server/tools/ghost.d.ts.map +0 -1
- package/dist/server/tools/ghost.js +0 -83
- package/dist/server/tools/ghost.js.map +0 -1
- package/dist/server/tools/index.d.ts +0 -3
- package/dist/server/tools/index.d.ts.map +0 -1
- package/dist/server/tools/index.js +0 -44
- package/dist/server/tools/index.js.map +0 -1
- package/dist/server/tools/launchpad.d.ts +0 -3
- package/dist/server/tools/launchpad.d.ts.map +0 -1
- package/dist/server/tools/launchpad.js +0 -151
- package/dist/server/tools/launchpad.js.map +0 -1
- package/dist/server/tools/leviathan.d.ts +0 -3
- package/dist/server/tools/leviathan.d.ts.map +0 -1
- package/dist/server/tools/leviathan.js +0 -73
- package/dist/server/tools/leviathan.js.map +0 -1
- package/dist/server/tools/nexus.d.ts +0 -3
- package/dist/server/tools/nexus.d.ts.map +0 -1
- package/dist/server/tools/nexus.js +0 -65
- package/dist/server/tools/nexus.js.map +0 -1
- package/dist/server/tools/proof402.d.ts +0 -3
- package/dist/server/tools/proof402.d.ts.map +0 -1
- package/dist/server/tools/proof402.js +0 -74
- package/dist/server/tools/proof402.js.map +0 -1
- package/dist/server/tools/rails.d.ts +0 -3
- package/dist/server/tools/rails.d.ts.map +0 -1
- package/dist/server/tools/rails.js +0 -82
- package/dist/server/tools/rails.js.map +0 -1
- package/dist/server/tools/shadow.d.ts +0 -3
- package/dist/server/tools/shadow.d.ts.map +0 -1
- package/dist/server/tools/shadow.js +0 -114
- package/dist/server/tools/shadow.js.map +0 -1
- package/dist/server/tools/squeezeos.d.ts +0 -3
- package/dist/server/tools/squeezeos.d.ts.map +0 -1
- package/dist/server/tools/squeezeos.js +0 -231
- package/dist/server/tools/squeezeos.js.map +0 -1
- package/dist/server/tools/xdeo.d.ts +0 -3
- package/dist/server/tools/xdeo.d.ts.map +0 -1
- package/dist/server/tools/xdeo.js +0 -58
- package/dist/server/tools/xdeo.js.map +0 -1
- package/dist/server/tools/xmit.d.ts +0 -3
- package/dist/server/tools/xmit.d.ts.map +0 -1
- package/dist/server/tools/xmit.js +0 -59
- package/dist/server/tools/xmit.js.map +0 -1
- package/server.json +0 -52
|
@@ -1,33 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.Discovery = void 0;
|
|
4
|
-
const fs_1 = require("fs");
|
|
5
|
-
const path_1 = require("path");
|
|
6
|
-
class Discovery {
|
|
7
|
-
static instance;
|
|
8
|
-
agentsJson = null;
|
|
9
|
-
llmsTxt = null;
|
|
10
|
-
constructor() { }
|
|
11
|
-
static getInstance() {
|
|
12
|
-
if (!Discovery.instance) {
|
|
13
|
-
Discovery.instance = new Discovery();
|
|
14
|
-
}
|
|
15
|
-
return Discovery.instance;
|
|
16
|
-
}
|
|
17
|
-
getAgentsJson() {
|
|
18
|
-
if (!this.agentsJson) {
|
|
19
|
-
const path = (0, path_1.join)(process.cwd(), 'agents.json');
|
|
20
|
-
this.agentsJson = JSON.parse((0, fs_1.readFileSync)(path, 'utf8'));
|
|
21
|
-
}
|
|
22
|
-
return this.agentsJson;
|
|
23
|
-
}
|
|
24
|
-
getLlmsTxt() {
|
|
25
|
-
if (!this.llmsTxt) {
|
|
26
|
-
const path = (0, path_1.join)(process.cwd(), 'llms.txt');
|
|
27
|
-
this.llmsTxt = (0, fs_1.readFileSync)(path, 'utf8');
|
|
28
|
-
}
|
|
29
|
-
return this.llmsTxt;
|
|
30
|
-
}
|
|
31
|
-
}
|
|
32
|
-
exports.Discovery = Discovery;
|
|
33
|
-
//# sourceMappingURL=discovery.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/server/registry/discovery.ts"],"names":[],"mappings":";;;AAAA,2BAAkC;AAClC,+BAA4B;AAQ5B,MAAa,SAAS;IACZ,MAAM,CAAC,QAAQ,CAAY;IAC3B,UAAU,GAAsB,IAAI,CAAC;IACrC,OAAO,GAAkB,IAAI,CAAC;IAEtC,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,SAAS,CAAC,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AA7BD,8BA6BC"}
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
export declare class PriceRegistry {
|
|
2
|
-
private static instance;
|
|
3
|
-
private readonly cache;
|
|
4
|
-
private readonly baseUrl;
|
|
5
|
-
private constructor();
|
|
6
|
-
static getInstance(): PriceRegistry;
|
|
7
|
-
getPrice(toolName: string): Promise<string | null>;
|
|
8
|
-
seedDefaults(): void;
|
|
9
|
-
}
|
|
10
|
-
//# sourceMappingURL=pricing.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":"AAyEA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,aAAa;IAO7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmCxD,YAAY,IAAI,IAAI;CAQrB"}
|
|
@@ -1,123 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.PriceRegistry = void 0;
|
|
4
|
-
const PRICE_CACHE_TTL = parseInt(process.env['PRICE_CACHE_TTL_MS'] ?? '60000', 10);
|
|
5
|
-
const BASE_PRICES = {
|
|
6
|
-
// Discovery (free)
|
|
7
|
-
sml_discover: '0.00',
|
|
8
|
-
sml_status: '0.00',
|
|
9
|
-
// SqueezeOS signals
|
|
10
|
-
leviathan_signal: '0.05',
|
|
11
|
-
squeezeos_council: '0.10',
|
|
12
|
-
squeezeos_scan: '0.05',
|
|
13
|
-
squeezeos_options: '0.05',
|
|
14
|
-
squeezeos_iwm: '0.03',
|
|
15
|
-
squeezeos_preview: '0.00',
|
|
16
|
-
squeezeos_status: '0.00',
|
|
17
|
-
// SEC / Earnings
|
|
18
|
-
xmit_edgar_decode: '0.02',
|
|
19
|
-
xdeo_earnings_estimate: '0.02',
|
|
20
|
-
// FTD
|
|
21
|
-
ftd_threshold_scan: '0.05',
|
|
22
|
-
// Crawl
|
|
23
|
-
crawl_paid_fetch: '0.005',
|
|
24
|
-
// Agent marketplace
|
|
25
|
-
nexus_agent_hire: '0.00',
|
|
26
|
-
nexus_agent_list: '0.00',
|
|
27
|
-
nexus_agent_status: '0.00',
|
|
28
|
-
// Ghost Layer (cross-chain)
|
|
29
|
-
ghost_transfer: '0.02',
|
|
30
|
-
ghost_status: '0.00',
|
|
31
|
-
ghost_routes: '0.00',
|
|
32
|
-
// RLUSD Rails
|
|
33
|
-
rails_send: '0.01',
|
|
34
|
-
rails_status: '0.00',
|
|
35
|
-
// Launchpad
|
|
36
|
-
launchpad_create_token: '0.10',
|
|
37
|
-
launchpad_buy_token: '0.02',
|
|
38
|
-
launchpad_list: '0.00',
|
|
39
|
-
launchpad_status: '0.00',
|
|
40
|
-
// Copy-Trader
|
|
41
|
-
copytrader_subscribe: '0.05',
|
|
42
|
-
copytrader_status: '0.00',
|
|
43
|
-
// Backtest
|
|
44
|
-
backtest_run: '0.05',
|
|
45
|
-
backtest_validate: '0.05',
|
|
46
|
-
backtest_status: '0.00',
|
|
47
|
-
// Brokers (Tradier)
|
|
48
|
-
brokers_quote: '0.00',
|
|
49
|
-
brokers_options_chain: '0.01',
|
|
50
|
-
brokers_place_order: '0.05',
|
|
51
|
-
brokers_account: '0.01',
|
|
52
|
-
// Shadow Desk
|
|
53
|
-
shadow_query: '0.05',
|
|
54
|
-
shadow_ingest: '0.02',
|
|
55
|
-
shadow_status: '0.00',
|
|
56
|
-
// Forge (LLM gateway)
|
|
57
|
-
forge_complete: '0.02',
|
|
58
|
-
forge_status: '0.00',
|
|
59
|
-
// Proof402
|
|
60
|
-
proof402_get_invoice: '0.00',
|
|
61
|
-
proof402_verify: '0.00',
|
|
62
|
-
proof402_credit_score: '0.00',
|
|
63
|
-
// Echo (pattern matching)
|
|
64
|
-
echo_analogs: '0.05',
|
|
65
|
-
// Agent card / identity
|
|
66
|
-
agentcard_verify: '0.00',
|
|
67
|
-
agentcard_register: '0.01',
|
|
68
|
-
agentcard_lookup: '0.00',
|
|
69
|
-
};
|
|
70
|
-
class PriceRegistry {
|
|
71
|
-
static instance;
|
|
72
|
-
cache = new Map();
|
|
73
|
-
baseUrl;
|
|
74
|
-
constructor() {
|
|
75
|
-
this.baseUrl = process.env['SML_API_BASE'] ?? 'https://squeezeos-api.onrender.com';
|
|
76
|
-
}
|
|
77
|
-
static getInstance() {
|
|
78
|
-
if (!PriceRegistry.instance) {
|
|
79
|
-
PriceRegistry.instance = new PriceRegistry();
|
|
80
|
-
}
|
|
81
|
-
return PriceRegistry.instance;
|
|
82
|
-
}
|
|
83
|
-
async getPrice(toolName) {
|
|
84
|
-
const cached = this.cache.get(toolName);
|
|
85
|
-
const now = Date.now();
|
|
86
|
-
if (cached && now - cached.fetchedAt < PRICE_CACHE_TTL) {
|
|
87
|
-
return cached.price;
|
|
88
|
-
}
|
|
89
|
-
// Fetch live price from SML pricing API
|
|
90
|
-
try {
|
|
91
|
-
const res = await fetch(`${this.baseUrl}/pricing/v1/tool/${toolName}`, {
|
|
92
|
-
signal: AbortSignal.timeout(3000),
|
|
93
|
-
});
|
|
94
|
-
if (res.ok) {
|
|
95
|
-
const body = (await res.json());
|
|
96
|
-
this.cache.set(toolName, { price: body.price, fetchedAt: now });
|
|
97
|
-
return body.price;
|
|
98
|
-
}
|
|
99
|
-
}
|
|
100
|
-
catch {
|
|
101
|
-
// Fall through to hardcoded baseline
|
|
102
|
-
}
|
|
103
|
-
// Use hardcoded baseline if API unavailable
|
|
104
|
-
const fallback = BASE_PRICES[toolName];
|
|
105
|
-
if (fallback !== undefined) {
|
|
106
|
-
this.cache.set(toolName, { price: fallback, fetchedAt: now - PRICE_CACHE_TTL / 2 });
|
|
107
|
-
return fallback;
|
|
108
|
-
}
|
|
109
|
-
// Unknown tool — default to free rather than reject
|
|
110
|
-
this.cache.set(toolName, { price: '0.00', fetchedAt: now });
|
|
111
|
-
return '0.00';
|
|
112
|
-
}
|
|
113
|
-
seedDefaults() {
|
|
114
|
-
const now = Date.now();
|
|
115
|
-
for (const [tool, price] of Object.entries(BASE_PRICES)) {
|
|
116
|
-
if (!this.cache.has(tool)) {
|
|
117
|
-
this.cache.set(tool, { price, fetchedAt: now });
|
|
118
|
-
}
|
|
119
|
-
}
|
|
120
|
-
}
|
|
121
|
-
}
|
|
122
|
-
exports.PriceRegistry = PriceRegistry;
|
|
123
|
-
//# sourceMappingURL=pricing.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":";;;AAAA,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAEnF,MAAM,WAAW,GAA2B;IAC1C,mBAAmB;IACnB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,MAAM;IACzB,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,MAAM;IACzB,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB;IACjB,iBAAiB,EAAE,MAAM;IACzB,sBAAsB,EAAE,MAAM;IAC9B,MAAM;IACN,kBAAkB,EAAE,MAAM;IAC1B,QAAQ;IACR,gBAAgB,EAAE,OAAO;IACzB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,4BAA4B;IAC5B,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,cAAc;IACd,UAAU,EAAE,MAAM;IAClB,YAAY,EAAE,MAAM;IACpB,YAAY;IACZ,sBAAsB,EAAE,MAAM;IAC9B,mBAAmB,EAAE,MAAM;IAC3B,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,MAAM;IACxB,cAAc;IACd,oBAAoB,EAAE,MAAM;IAC5B,iBAAiB,EAAE,MAAM;IACzB,WAAW;IACX,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,MAAM;IACzB,eAAe,EAAE,MAAM;IACvB,oBAAoB;IACpB,aAAa,EAAE,MAAM;IACrB,qBAAqB,EAAE,MAAM;IAC7B,mBAAmB,EAAE,MAAM;IAC3B,eAAe,EAAE,MAAM;IACvB,cAAc;IACd,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,sBAAsB;IACtB,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,WAAW;IACX,oBAAoB,EAAE,MAAM;IAC5B,eAAe,EAAE,MAAM;IACvB,qBAAqB,EAAE,MAAM;IAC7B,0BAA0B;IAC1B,YAAY,EAAE,MAAM;IACpB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAOF,MAAa,aAAa;IAChB,MAAM,CAAC,QAAQ,CAAgB;IACtB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,OAAO,CAAS;IAEjC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,oCAAoC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,eAAe,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,QAAQ,EAAE,EAAE;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,eAAe,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA3DD,sCA2DC"}
|
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
import { z } from 'zod';
|
|
2
|
-
export declare const ToolACLSchema: z.ZodObject<{
|
|
3
|
-
toolName: z.ZodString;
|
|
4
|
-
walletAddress: z.ZodOptional<z.ZodString>;
|
|
5
|
-
creditScore: z.ZodOptional<z.ZodNumber>;
|
|
6
|
-
paidTier: z.ZodDefault<z.ZodBoolean>;
|
|
7
|
-
}, "strip", z.ZodTypeAny, {
|
|
8
|
-
toolName: string;
|
|
9
|
-
paidTier: boolean;
|
|
10
|
-
walletAddress?: string | undefined;
|
|
11
|
-
creditScore?: number | undefined;
|
|
12
|
-
}, {
|
|
13
|
-
toolName: string;
|
|
14
|
-
walletAddress?: string | undefined;
|
|
15
|
-
creditScore?: number | undefined;
|
|
16
|
-
paidTier?: boolean | undefined;
|
|
17
|
-
}>;
|
|
18
|
-
export type ToolACL = z.infer<typeof ToolACLSchema>;
|
|
19
|
-
export declare class ACL {
|
|
20
|
-
private static instance;
|
|
21
|
-
private constructor();
|
|
22
|
-
static getInstance(): ACL;
|
|
23
|
-
isFree(toolName: string): boolean;
|
|
24
|
-
requiresPayment(toolName: string): boolean;
|
|
25
|
-
requiresAP2(toolName: string): boolean;
|
|
26
|
-
minCreditScore(_toolName: string): number;
|
|
27
|
-
}
|
|
28
|
-
//# sourceMappingURL=acl.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"acl.d.ts","sourceRoot":"","sources":["../../../src/server/security/acl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;EAKxB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD,qBAAa,GAAG;IACd,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAM;IAE7B,OAAO;IAEP,MAAM,CAAC,WAAW,IAAI,GAAG;IAOzB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIjC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI1C,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAKtC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAG1C"}
|
|
@@ -1,36 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ACL = exports.ToolACLSchema = void 0;
|
|
4
|
-
const zod_1 = require("zod");
|
|
5
|
-
exports.ToolACLSchema = zod_1.z.object({
|
|
6
|
-
toolName: zod_1.z.string(),
|
|
7
|
-
walletAddress: zod_1.z.string().optional(),
|
|
8
|
-
creditScore: zod_1.z.number().optional(),
|
|
9
|
-
paidTier: zod_1.z.boolean().default(false),
|
|
10
|
-
});
|
|
11
|
-
const FREE_TOOLS = new Set(['ftd_threshold_scan_alerts', 'nexus_agent_hire_query']);
|
|
12
|
-
class ACL {
|
|
13
|
-
static instance;
|
|
14
|
-
constructor() { }
|
|
15
|
-
static getInstance() {
|
|
16
|
-
if (!ACL.instance) {
|
|
17
|
-
ACL.instance = new ACL();
|
|
18
|
-
}
|
|
19
|
-
return ACL.instance;
|
|
20
|
-
}
|
|
21
|
-
isFree(toolName) {
|
|
22
|
-
return FREE_TOOLS.has(toolName);
|
|
23
|
-
}
|
|
24
|
-
requiresPayment(toolName) {
|
|
25
|
-
return !this.isFree(toolName);
|
|
26
|
-
}
|
|
27
|
-
requiresAP2(toolName) {
|
|
28
|
-
// leviathan, xmit, xdeo require AP2 per spec
|
|
29
|
-
return ['leviathan_signal', 'xmit_edgar_decode', 'xdeo_earnings_estimate'].includes(toolName);
|
|
30
|
-
}
|
|
31
|
-
minCreditScore(_toolName) {
|
|
32
|
-
return 300;
|
|
33
|
-
}
|
|
34
|
-
}
|
|
35
|
-
exports.ACL = ACL;
|
|
36
|
-
//# sourceMappingURL=acl.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"acl.js","sourceRoot":"","sources":["../../../src/server/security/acl.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAEX,QAAA,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrC,CAAC,CAAC;AAIH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAEpF,MAAa,GAAG;IACN,MAAM,CAAC,QAAQ,CAAM;IAE7B,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,eAAe,CAAC,QAAgB;QAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,WAAW,CAAC,QAAgB;QAC1B,6CAA6C;QAC7C,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChG,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AA5BD,kBA4BC"}
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
export declare class AuditLogger {
|
|
2
|
-
private static instance;
|
|
3
|
-
private seq;
|
|
4
|
-
private prevHash;
|
|
5
|
-
private readonly logPath;
|
|
6
|
-
private readonly hmacSecret;
|
|
7
|
-
private constructor();
|
|
8
|
-
static getInstance(): AuditLogger;
|
|
9
|
-
private log;
|
|
10
|
-
private redact;
|
|
11
|
-
info(event: string, data?: Record<string, unknown>): void;
|
|
12
|
-
warn(event: string, data?: Record<string, unknown>): void;
|
|
13
|
-
error(event: string, data?: Record<string, unknown>): void;
|
|
14
|
-
}
|
|
15
|
-
//# sourceMappingURL=audit.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/server/security/audit.ts"],"names":[],"mappings":"AAiBA,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAc;IACrC,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAsE;IACtF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,OAAO;IAKP,MAAM,CAAC,WAAW,IAAI,WAAW;IAOjC,OAAO,CAAC,GAAG;IA8BX,OAAO,CAAC,MAAM;IAgBd,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAI7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAI7D,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;CAG/D"}
|
|
@@ -1,77 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.AuditLogger = void 0;
|
|
4
|
-
const crypto_1 = require("crypto");
|
|
5
|
-
const fs_1 = require("fs");
|
|
6
|
-
// Append-only SHA-256 chained audit log (N5)
|
|
7
|
-
// Each entry includes the hash of the previous entry — tampering breaks the chain.
|
|
8
|
-
class AuditLogger {
|
|
9
|
-
static instance;
|
|
10
|
-
seq = 0;
|
|
11
|
-
prevHash = '0000000000000000000000000000000000000000000000000000000000000000';
|
|
12
|
-
logPath;
|
|
13
|
-
hmacSecret;
|
|
14
|
-
constructor() {
|
|
15
|
-
this.logPath = process.env['AUDIT_LOG_PATH'] ?? './audit.log';
|
|
16
|
-
this.hmacSecret = process.env['AUDIT_HMAC_SECRET'] ?? 'mcp-x402-audit-secret';
|
|
17
|
-
}
|
|
18
|
-
static getInstance() {
|
|
19
|
-
if (!AuditLogger.instance) {
|
|
20
|
-
AuditLogger.instance = new AuditLogger();
|
|
21
|
-
}
|
|
22
|
-
return AuditLogger.instance;
|
|
23
|
-
}
|
|
24
|
-
log(level, event, data) {
|
|
25
|
-
const seq = ++this.seq;
|
|
26
|
-
const ts = Date.now();
|
|
27
|
-
// Redact PII (N3): hash wallet addresses, never log raw filing content
|
|
28
|
-
const safeData = this.redact(data);
|
|
29
|
-
const payload = JSON.stringify({ seq, ts, level, event, data: safeData, prev_hash: this.prevHash });
|
|
30
|
-
const hash = (0, crypto_1.createHmac)('sha256', this.hmacSecret).update(payload).digest('hex');
|
|
31
|
-
const entry = {
|
|
32
|
-
seq,
|
|
33
|
-
ts,
|
|
34
|
-
level,
|
|
35
|
-
event,
|
|
36
|
-
data: safeData,
|
|
37
|
-
prev_hash: this.prevHash,
|
|
38
|
-
hash,
|
|
39
|
-
};
|
|
40
|
-
this.prevHash = hash;
|
|
41
|
-
try {
|
|
42
|
-
(0, fs_1.appendFileSync)(this.logPath, JSON.stringify(entry) + '\n', 'utf8');
|
|
43
|
-
}
|
|
44
|
-
catch {
|
|
45
|
-
// If log write fails, emit to stderr but don't crash
|
|
46
|
-
process.stderr.write(`[audit-fail] ${JSON.stringify(entry)}\n`);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
redact(data) {
|
|
50
|
-
const out = {};
|
|
51
|
-
for (const [k, v] of Object.entries(data)) {
|
|
52
|
-
if (k === 'wallet' || k === 'address') {
|
|
53
|
-
// Hash wallet addresses (N3)
|
|
54
|
-
out[k] = (0, crypto_1.createHash)('sha256').update(String(v)).digest('hex').slice(0, 16) + '...';
|
|
55
|
-
}
|
|
56
|
-
else if (k === 'content' || k === 'raw_text' || k === 'filing') {
|
|
57
|
-
// Never log raw filing data (N3)
|
|
58
|
-
out[k] = '[REDACTED]';
|
|
59
|
-
}
|
|
60
|
-
else {
|
|
61
|
-
out[k] = v;
|
|
62
|
-
}
|
|
63
|
-
}
|
|
64
|
-
return out;
|
|
65
|
-
}
|
|
66
|
-
info(event, data = {}) {
|
|
67
|
-
this.log('info', event, data);
|
|
68
|
-
}
|
|
69
|
-
warn(event, data = {}) {
|
|
70
|
-
this.log('warn', event, data);
|
|
71
|
-
}
|
|
72
|
-
error(event, data = {}) {
|
|
73
|
-
this.log('error', event, data);
|
|
74
|
-
}
|
|
75
|
-
}
|
|
76
|
-
exports.AuditLogger = AuditLogger;
|
|
77
|
-
//# sourceMappingURL=audit.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/server/security/audit.ts"],"names":[],"mappings":";;;AAAA,mCAAgD;AAChD,2BAAoC;AAcpC,6CAA6C;AAC7C,mFAAmF;AACnF,MAAa,WAAW;IACd,MAAM,CAAC,QAAQ,CAAc;IAC7B,GAAG,GAAG,CAAC,CAAC;IACR,QAAQ,GAAG,kEAAkE,CAAC;IACrE,OAAO,CAAS;IAChB,UAAU,CAAS;IAEpC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC;QAC9D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,uBAAuB,CAAC;IAChF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,KAAa,EAAE,IAA6B;QACvE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEtB,uEAAuE;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpG,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAa;YACtB,GAAG;YACH,EAAE;YACF,KAAK;YACL,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,IAAI;SACL,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC;YACH,IAAA,mBAAc,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,IAA6B;QAC1C,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACtC,6BAA6B;gBAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;YACrF,CAAC;iBAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjE,iCAAiC;gBACjC,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAgC,EAAE;QACpD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAgC,EAAE;QACpD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,OAAgC,EAAE;QACrD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;CACF;AA5ED,kCA4EC"}
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
export declare class RateLimiter {
|
|
2
|
-
private static instance;
|
|
3
|
-
private readonly toolBuckets;
|
|
4
|
-
private readonly walletBuckets;
|
|
5
|
-
private readonly ipBuckets;
|
|
6
|
-
private constructor();
|
|
7
|
-
static getInstance(): RateLimiter;
|
|
8
|
-
checkTool(toolName: string): boolean;
|
|
9
|
-
checkWallet(wallet: string): boolean;
|
|
10
|
-
checkIp(ip: string): boolean;
|
|
11
|
-
}
|
|
12
|
-
//# sourceMappingURL=rate-limit.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/server/security/rate-limit.ts"],"names":[],"mappings":"AAaA,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyD;IAEnF,OAAO;IAEP,MAAM,CAAC,WAAW,IAAI,WAAW;IAOjC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAqBpC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAqBpC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAa7B"}
|
|
@@ -1,72 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.RateLimiter = void 0;
|
|
4
|
-
const PER_TOOL_MINUTE_LIMIT = 100;
|
|
5
|
-
const PER_WALLET_DAY_LIMIT = 1000;
|
|
6
|
-
const IP_MINUTE_LIMIT = 200;
|
|
7
|
-
function nowMs() {
|
|
8
|
-
return Date.now();
|
|
9
|
-
}
|
|
10
|
-
class RateLimiter {
|
|
11
|
-
static instance;
|
|
12
|
-
toolBuckets = new Map();
|
|
13
|
-
walletBuckets = new Map();
|
|
14
|
-
ipBuckets = new Map();
|
|
15
|
-
constructor() { }
|
|
16
|
-
static getInstance() {
|
|
17
|
-
if (!RateLimiter.instance) {
|
|
18
|
-
RateLimiter.instance = new RateLimiter();
|
|
19
|
-
}
|
|
20
|
-
return RateLimiter.instance;
|
|
21
|
-
}
|
|
22
|
-
checkTool(toolName) {
|
|
23
|
-
const now = nowMs();
|
|
24
|
-
let bucket = this.toolBuckets.get(toolName);
|
|
25
|
-
if (!bucket) {
|
|
26
|
-
bucket = {
|
|
27
|
-
minute: { count: 0, resetAt: now + 60_000 },
|
|
28
|
-
day: { count: 0, resetAt: now + 86_400_000 },
|
|
29
|
-
};
|
|
30
|
-
this.toolBuckets.set(toolName, bucket);
|
|
31
|
-
}
|
|
32
|
-
if (now > bucket.minute.resetAt) {
|
|
33
|
-
bucket.minute = { count: 0, resetAt: now + 60_000 };
|
|
34
|
-
}
|
|
35
|
-
if (bucket.minute.count >= PER_TOOL_MINUTE_LIMIT)
|
|
36
|
-
return false;
|
|
37
|
-
bucket.minute.count++;
|
|
38
|
-
return true;
|
|
39
|
-
}
|
|
40
|
-
checkWallet(wallet) {
|
|
41
|
-
const now = nowMs();
|
|
42
|
-
let bucket = this.walletBuckets.get(wallet);
|
|
43
|
-
if (!bucket) {
|
|
44
|
-
bucket = {
|
|
45
|
-
minute: { count: 0, resetAt: now + 60_000 },
|
|
46
|
-
day: { count: 0, resetAt: now + 86_400_000 },
|
|
47
|
-
};
|
|
48
|
-
this.walletBuckets.set(wallet, bucket);
|
|
49
|
-
}
|
|
50
|
-
if (now > bucket.day.resetAt) {
|
|
51
|
-
bucket.day = { count: 0, resetAt: now + 86_400_000 };
|
|
52
|
-
}
|
|
53
|
-
if (bucket.day.count >= PER_WALLET_DAY_LIMIT)
|
|
54
|
-
return false;
|
|
55
|
-
bucket.day.count++;
|
|
56
|
-
return true;
|
|
57
|
-
}
|
|
58
|
-
checkIp(ip) {
|
|
59
|
-
const now = nowMs();
|
|
60
|
-
let entry = this.ipBuckets.get(ip);
|
|
61
|
-
if (!entry || now > entry.resetAt) {
|
|
62
|
-
entry = { count: 0, resetAt: now + 60_000 };
|
|
63
|
-
this.ipBuckets.set(ip, entry);
|
|
64
|
-
}
|
|
65
|
-
if (entry.count >= IP_MINUTE_LIMIT)
|
|
66
|
-
return false;
|
|
67
|
-
entry.count++;
|
|
68
|
-
return true;
|
|
69
|
-
}
|
|
70
|
-
}
|
|
71
|
-
exports.RateLimiter = RateLimiter;
|
|
72
|
-
//# sourceMappingURL=rate-limit.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/server/security/rate-limit.ts"],"names":[],"mappings":";;;AAKA,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,SAAS,KAAK;IACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,MAAa,WAAW;IACd,MAAM,CAAC,QAAQ,CAAc;IACpB,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEnF,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE;gBAC3C,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,UAAU,EAAE;aAC7C,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,qBAAqB;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE;gBAC3C,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,UAAU,EAAE;aAC7C,CAAC;YACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC;QACvD,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,oBAAoB;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;YAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,eAAe;YAAE,OAAO,KAAK,CAAC;QACjD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAtED,kCAsEC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/server/security/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,qBAAa,OAAO;IAClB,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC;IAY3D,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG;IAcpC,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAQjD"}
|
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.Sandbox = void 0;
|
|
4
|
-
// Sandboxed input validation layer — all tool inputs pass through here before execution.
|
|
5
|
-
// No eval(), no dynamic require(), no raw SQL (N4 enforcement at schema layer).
|
|
6
|
-
class Sandbox {
|
|
7
|
-
static validate(schema, input) {
|
|
8
|
-
const result = schema.safeParse(input);
|
|
9
|
-
if (!result.success) {
|
|
10
|
-
const issues = result.error.issues
|
|
11
|
-
.map((i) => `${i.path.join('.')}: ${i.message}`)
|
|
12
|
-
.join('; ');
|
|
13
|
-
throw new Error(`Input validation failed: ${issues}`);
|
|
14
|
-
}
|
|
15
|
-
return result.data;
|
|
16
|
-
}
|
|
17
|
-
// Ensure URL is http/https only — no file://, data://, javascript:
|
|
18
|
-
static validateUrl(raw) {
|
|
19
|
-
let url;
|
|
20
|
-
try {
|
|
21
|
-
url = new URL(raw);
|
|
22
|
-
}
|
|
23
|
-
catch {
|
|
24
|
-
throw new Error(`Invalid URL: ${raw}`);
|
|
25
|
-
}
|
|
26
|
-
if (url.protocol !== 'http:' && url.protocol !== 'https:') {
|
|
27
|
-
throw new Error(`Disallowed URL protocol: ${url.protocol}`);
|
|
28
|
-
}
|
|
29
|
-
return url;
|
|
30
|
-
}
|
|
31
|
-
// Strip any response content that looks like a prompt injection attempt
|
|
32
|
-
static sanitizeApiResponse(text) {
|
|
33
|
-
// Remove common injection markers
|
|
34
|
-
return text
|
|
35
|
-
.replace(/<\/?system>/gi, '')
|
|
36
|
-
.replace(/\[INST\]/gi, '')
|
|
37
|
-
.replace(/\[\/?INST\]/gi, '')
|
|
38
|
-
.slice(0, 50_000); // Hard cap on returned content size
|
|
39
|
-
}
|
|
40
|
-
}
|
|
41
|
-
exports.Sandbox = Sandbox;
|
|
42
|
-
//# sourceMappingURL=sandbox.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/server/security/sandbox.ts"],"names":[],"mappings":";;;AAEA,yFAAyF;AACzF,gFAAgF;AAChF,MAAa,OAAO;IAClB,MAAM,CAAC,QAAQ,CAAI,MAAoB,EAAE,KAAc;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,mEAAmE;IACnE,MAAM,CAAC,WAAW,CAAC,GAAW;QAC5B,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,mBAAmB,CAAC,IAAY;QACrC,kCAAkC;QAClC,OAAO,IAAI;aACR,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aACzB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,oCAAoC;IAC3D,CAAC;CACF;AAnCD,0BAmCC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"agentcard.d.ts","sourceRoot":"","sources":["../../../src/server/tools/agentcard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA0BzE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA0GzD"}
|
|
@@ -1,118 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.registerAgentCard = registerAgentCard;
|
|
4
|
-
const zod_1 = require("zod");
|
|
5
|
-
const x402_js_1 = require("../payments/x402.js");
|
|
6
|
-
const rate_limit_js_1 = require("../security/rate-limit.js");
|
|
7
|
-
const sandbox_js_1 = require("../security/sandbox.js");
|
|
8
|
-
const audit_js_1 = require("../security/audit.js");
|
|
9
|
-
const pricing_js_1 = require("../registry/pricing.js");
|
|
10
|
-
const agentcard_js_1 = require("../../lib/sml-api/agentcard.js");
|
|
11
|
-
const LookupSchema = zod_1.z.object({
|
|
12
|
-
identifier: zod_1.z.string().min(1),
|
|
13
|
-
});
|
|
14
|
-
const VerifySchema = zod_1.z.object({
|
|
15
|
-
wallet_address: zod_1.z.string().min(10),
|
|
16
|
-
message: zod_1.z.string().min(1),
|
|
17
|
-
signature: zod_1.z.string().min(1),
|
|
18
|
-
});
|
|
19
|
-
const MintSchema = zod_1.z.object({
|
|
20
|
-
wallet_address: zod_1.z.string().min(10),
|
|
21
|
-
name: zod_1.z.string().min(1).max(64),
|
|
22
|
-
did: zod_1.z.string().optional(),
|
|
23
|
-
metadata: zod_1.z.record(zod_1.z.unknown()).optional(),
|
|
24
|
-
payment_wallet: zod_1.z.string().optional(),
|
|
25
|
-
});
|
|
26
|
-
function registerAgentCard(server) {
|
|
27
|
-
const audit = audit_js_1.AuditLogger.getInstance();
|
|
28
|
-
// ── FREE: agentcard_lookup ─────────────────────────────────────────────────
|
|
29
|
-
server.tool('agentcard_lookup', {
|
|
30
|
-
identifier: zod_1.z.string().describe('Agent wallet address or DID to look up.'),
|
|
31
|
-
}, async (rawArgs) => {
|
|
32
|
-
const { identifier } = sandbox_js_1.Sandbox.validate(LookupSchema, rawArgs);
|
|
33
|
-
if (!rate_limit_js_1.RateLimiter.getInstance().checkTool('agentcard_lookup')) {
|
|
34
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'rate_limit_exceeded', retry_after: 60 }) }], isError: true };
|
|
35
|
-
}
|
|
36
|
-
try {
|
|
37
|
-
const data = await agentcard_js_1.AgentCardAPI.lookup(identifier);
|
|
38
|
-
audit.info('agentcard_lookup', { identifier });
|
|
39
|
-
return { content: [{ type: 'text', text: JSON.stringify(data) }] };
|
|
40
|
-
}
|
|
41
|
-
catch (err) {
|
|
42
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'api_error', message: String(err) }) }], isError: true };
|
|
43
|
-
}
|
|
44
|
-
});
|
|
45
|
-
// ── FREE: agentcard_verify ─────────────────────────────────────────────────
|
|
46
|
-
server.tool('agentcard_verify', {
|
|
47
|
-
wallet_address: zod_1.z.string().describe('Agent wallet address that signed the message.'),
|
|
48
|
-
message: zod_1.z.string().describe('Original message that was signed.'),
|
|
49
|
-
signature: zod_1.z.string().describe('Ed25519 signature (hex or base64).'),
|
|
50
|
-
}, async (rawArgs) => {
|
|
51
|
-
const args = sandbox_js_1.Sandbox.validate(VerifySchema, rawArgs);
|
|
52
|
-
if (!rate_limit_js_1.RateLimiter.getInstance().checkTool('agentcard_verify')) {
|
|
53
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'rate_limit_exceeded', retry_after: 60 }) }], isError: true };
|
|
54
|
-
}
|
|
55
|
-
try {
|
|
56
|
-
const data = await agentcard_js_1.AgentCardAPI.verify({
|
|
57
|
-
walletAddress: args.wallet_address,
|
|
58
|
-
message: args.message,
|
|
59
|
-
signature: args.signature,
|
|
60
|
-
});
|
|
61
|
-
audit.info('agentcard_verify', { wallet_address: args.wallet_address });
|
|
62
|
-
return { content: [{ type: 'text', text: JSON.stringify(data) }] };
|
|
63
|
-
}
|
|
64
|
-
catch (err) {
|
|
65
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'api_error', message: String(err) }) }], isError: true };
|
|
66
|
-
}
|
|
67
|
-
});
|
|
68
|
-
// ── PAID: agentcard_mint (0.01 USDC) ──────────────────────────────────────
|
|
69
|
-
server.tool('agentcard_mint', {
|
|
70
|
-
wallet_address: zod_1.z.string().describe('XRPL wallet address for the new agent identity.'),
|
|
71
|
-
name: zod_1.z.string().describe('Human-readable agent name (max 64 chars).'),
|
|
72
|
-
did: zod_1.z.string().describe('Optional DID (decentralized identifier) for the agent.'),
|
|
73
|
-
metadata: zod_1.z.record(zod_1.z.unknown()).describe('Optional metadata object (capabilities, version, etc.).'),
|
|
74
|
-
payment_wallet: zod_1.z.string().describe('Wallet to pay x402 fee from (defaults to wallet_address).'),
|
|
75
|
-
}, async (rawArgs) => {
|
|
76
|
-
const args = sandbox_js_1.Sandbox.validate(MintSchema, rawArgs);
|
|
77
|
-
const paymentWallet = args.payment_wallet ?? args.wallet_address;
|
|
78
|
-
if (!rate_limit_js_1.RateLimiter.getInstance().checkTool('agentcard_mint')) {
|
|
79
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'rate_limit_exceeded', retry_after: 60 }) }], isError: true };
|
|
80
|
-
}
|
|
81
|
-
await pricing_js_1.PriceRegistry.getInstance().seedDefaults();
|
|
82
|
-
const price = await pricing_js_1.PriceRegistry.getInstance().getPrice('agentcard_mint');
|
|
83
|
-
if (!price) {
|
|
84
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'price_unavailable' }) }], isError: true };
|
|
85
|
-
}
|
|
86
|
-
let payment;
|
|
87
|
-
try {
|
|
88
|
-
payment = await (0, x402_js_1.executeX402Payment)({ price, currency: 'USDC', toolName: 'agentcard_mint', walletAddress: paymentWallet });
|
|
89
|
-
}
|
|
90
|
-
catch (err) {
|
|
91
|
-
audit.warn('agentcard_mint_payment_fail', { error: String(err) });
|
|
92
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'payment_failed', message: String(err) }) }], isError: true };
|
|
93
|
-
}
|
|
94
|
-
try {
|
|
95
|
-
const data = await agentcard_js_1.AgentCardAPI.mint({
|
|
96
|
-
walletAddress: args.wallet_address,
|
|
97
|
-
name: args.name,
|
|
98
|
-
did: args.did,
|
|
99
|
-
metadata: args.metadata,
|
|
100
|
-
});
|
|
101
|
-
audit.info('agentcard_mint_success', { name: args.name, receiptId: payment.receiptId });
|
|
102
|
-
return {
|
|
103
|
-
content: [{
|
|
104
|
-
type: 'text',
|
|
105
|
-
text: JSON.stringify({
|
|
106
|
-
data,
|
|
107
|
-
_meta: { receipt_id: payment.receiptId, tx_hash: payment.txHash, chain: payment.chain, amount_paid: `${payment.amountPaid} ${payment.currency}`, timestamp: payment.timestamp },
|
|
108
|
-
}),
|
|
109
|
-
}],
|
|
110
|
-
};
|
|
111
|
-
}
|
|
112
|
-
catch (err) {
|
|
113
|
-
audit.error('agentcard_mint_api_fail', { error: String(err) });
|
|
114
|
-
return { content: [{ type: 'text', text: JSON.stringify({ error: 'api_error', message: String(err) }) }], isError: true };
|
|
115
|
-
}
|
|
116
|
-
});
|
|
117
|
-
}
|
|
118
|
-
//# sourceMappingURL=agentcard.js.map
|