@shroud-fi/mcp-server 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ShroudFi contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,130 @@
+# @shroud-fi/mcp-server
+
+Model Context Protocol server exposing the ShroudFi privacy SDK as tools any MCP-aware agent runtime can call — Claude Code, Cursor, Windsurf, Zed AI, custom hosts.
+
+Two transports:
+
+| Transport | Use when | Auth |
+|---|---|---|
+| **stdio** | An agent runtime spawns the server as a child process from a local `.mcp.json` | None — process boundary IS the trust boundary; local key file or env var |
+| **HTTP** | Multiple agents share one server, or the server lives on a different host | EIP-191 challenge-response — every call signs a fresh server-issued nonce |
+
+## Tools
+
+| Tool | Args | Purpose |
+|---|---|---|
+| `shroud_register` | none | Publish the agent's stealth meta-address into ERC-6538. Idempotent. |
+| `shroud_send` | `to`, `asset`, `amount` | Send to an encoded meta-address (`st:base:0x…`) — privacy-native shape. |
+| `shroud_send_to_wallet` | `recipient`, `asset`, `amount` | Send to a plain wallet — SDK looks up its meta-address. |
+| `shroud_receive` | `fromBlock`, `toBlock?`, `finality?`, `limit?` | Scan a block range for incoming stealth payments. |
+| `shroud_sweep` | `detection`, `destination`, `token?`, `viaRelayer?` | Sweep a detected stealth address (direct or gasless). |
+| `shroud_balance` | `address?`, `token?` | Read ETH + optional ERC-20 balance. |
+| `shroud_status` | none | Operator wallet, meta-address, chain, latest block, registration state. |
+| `shroud_x402_pay` | `url`, `method?`, `body?`, `headers?`, `maxPriceUsdcAtomic?` | One-shot HTTP 402 client. SDK auto-signs USDC if a 402 lands. |
+| `shroud_x402_serve` | `op: 'challenge'\|'verify'`, … | Server-side x402 primitives — mint 402 challenges or verify payment payloads. |
+
+## Environment
+
+| Var | Required | Default | Notes |
+|---|---|---|---|
+| `SHROUDFI_PRIVATE_KEY` | one of the two | — | 0x… 32-byte hex. Operator EOA. |
+| `SHROUDFI_PRIVATE_KEY_FILE` | one of the two | — | Path to a file containing the hex private key (one line, trimmed). |
+| `SHROUDFI_CHAIN` | no | `base` | `base`, `sepolia`, `8453`, or `84532`. |
+| `SHROUDFI_RPC_URL` | no | public default | Alchemy or QuickNode endpoint. |
+| `SHROUDFI_START_BLOCK` | no | `0` | Where `shroud_receive` defaults its scan cursor. |
+| `SHROUDFI_MCP_HTTP_PORT` | HTTP only | `7070` | Listening port. |
+| `SHROUDFI_MCP_HTTP_ALLOWED_WALLETS` | HTTP recommended | empty (any) | Comma-separated EOA allow-list. **Set this in production.** |
+| `SHROUDFI_MASTER_SEED` | multi-surface | random per boot | 0x… 32-byte hex. Required when MCP + REST + UI must resolve the same stealth meta-address for the same operator. Skip = different surfaces will disagree on the recipient identity. |
+| `SHROUDFI_MASTER_SEED_FILE` | alt to above | — | Path to a file containing the 0x… seed (one line, trimmed). Use this in production so the seed never ends up in shell history. |
+
+## Claude Code — `.mcp.json` (per-project)
+
+Drop this at the repo root or `~/.config/claude/.mcp.json` (global):
+
+```json
+{
+  "mcpServers": {
+    "shroudfi": {
+      "command": "node",
+      "args": ["node_modules/@shroud-fi/mcp-server/dist/esm/bin/stdio.js"],
+      "env": {
+        "SHROUDFI_PRIVATE_KEY_FILE": "/absolute/path/to/agent-eoa.key.txt",
+        "SHROUDFI_CHAIN": "base",
+        "SHROUDFI_RPC_URL": "https://base-mainnet.g.alchemy.com/v2/<your-key>"
+      }
+    }
+  }
+}
+```
+
+After install, Claude Code surfaces every `shroud_*` tool as a callable from within any session inside that repo.
+
+## Cursor / Windsurf / Zed AI
+
+Same JSON shape under the editor's own MCP config path:
+
+| Editor | Config path |
+|---|---|
+| Cursor | Settings → Features → MCP Servers (UI) OR `~/.cursor/mcp.json` |
+| Windsurf | Settings → MCP Servers OR `~/.codeium/windsurf/mcp_config.json` |
+| Zed AI | `~/.config/zed/settings.json` → `assistant.context_servers` |
+
+## HTTP transport (deployed server)
+
+For shared-infra mode (one server, many agents):
+
+```bash
+SHROUDFI_PRIVATE_KEY_FILE=/secrets/relayer.key.txt \
+SHROUDFI_CHAIN=base \
+SHROUDFI_MCP_HTTP_PORT=7070 \
+SHROUDFI_MCP_HTTP_ALLOWED_WALLETS=0xAgent1,0xAgent2 \
+node node_modules/@shroud-fi/mcp-server/dist/esm/bin/http.js
+```
+
+### Auth flow for HTTP clients
+
+```ts
+// 1. Get a challenge.
+const challenge = await fetch('http://localhost:7070/auth/challenge', {
+  method: 'POST',
+  headers: { 'content-type': 'application/json' },
+  body: JSON.stringify({ wallet: '0xYourAgentEOA' }),
+}).then((r) => r.json());
+
+// 2. Sign the message string (EIP-191 personal_sign).
+const signature = await walletClient.signMessage({ message: challenge.message });
+
+// 3. Call any MCP method with the three auth headers.
+const response = await fetch('http://localhost:7070/mcp', {
+  method: 'POST',
+  headers: {
+    'content-type': 'application/json',
+    'x-shroudfi-wallet': '0xYourAgentEOA',
+    'x-shroudfi-nonce': challenge.nonce,
+    'x-shroudfi-signature': signature,
+  },
+  body: JSON.stringify({
+    method: 'tools/call',
+    params: {
+      name: 'shroud_send_to_wallet',
+      arguments: {
+        recipient: '0xRecipientWallet',
+        asset: { token: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' },
+        amount: '10000',
+      },
+    },
+  }),
+}).then((r) => r.json());
+```
+
+Challenges are single-use (consumed on success) and expire after 5 minutes.
+
+## Privacy
+
+- Stdio bin writes errors only to stderr — stdout is reserved for the MCP wire protocol.
+- HTTP transport returns short tag strings on auth failure (`unauthorized`, `auth_signature_invalid`, `auth_challenge_expired`); no signature bytes, no key bytes, no amount values are echoed in responses or in error fields.
+- The MCP tool envelope deliberately does not log tool arguments — `shroud_receive` returns stealth private keys to the caller, and those must never end up in a server log.
+
+## License
+
+MIT — same as the rest of the ShroudFi workspace.

package/dist/cjs/auth.d.ts

@@ -0,0 +1,41 @@
+/**
+ * EIP-191 challenge-response auth for the HTTP transport.
+ *
+ * Flow:
+ *   1. Client POSTs /auth/challenge with their wallet address.
+ *   2. Server returns a fresh nonce + a canonical message string.
+ *   3. Client signs message with personal_sign / signMessage (EIP-191).
+ *   4. Client sends every subsequent request with:
+ *        X-Shroudfi-Wallet:    <0x… EOA>
+ *        X-Shroudfi-Nonce:     <nonce returned at step 2>
+ *        X-Shroudfi-Signature: <0x… hex sig>
+ *   5. Server recovers, checks address match + expiry + allow-list.
+ *
+ * The signature is single-shot — once verifyAndConsume returns true for a
+ * nonce, the cache entry is deleted, so the same signed challenge cannot be
+ * replayed.
+ *
+ * Privacy: signature bytes never appear in logs, error messages, or response
+ * bodies. Errors are short tags only.
+ */
+import type { Hex } from 'viem';
+import type { Eip191Challenge } from './types.js';
+export interface AuthCache {
+    issue(wallet: `0x${string}`): Eip191Challenge;
+    verifyAndConsume(args: {
+        wallet: `0x${string}`;
+        nonce: Hex;
+        signature: Hex;
+    }): Promise<void>;
+    /** Test seam — drop expired entries. Called automatically on every op. */
+    prune(now?: number): void;
+    /** Returns the current size — test seam. */
+    size(): number;
+}
+declare function buildMessage(wallet: `0x${string}`, nonce: Hex, issuedAtMs: number): string;
+export declare function createAuthCache(ttlMs?: number): AuthCache;
+export declare const __auth_test__: {
+    buildMessage: typeof buildMessage;
+};
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/cjs/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAOhC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,EAAE,GAAG,eAAe,CAAC;IAC9C,gBAAgB,CAAC,IAAI,EAAE;QACrB,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;QACtB,KAAK,EAAE,GAAG,CAAC;QACX,SAAS,EAAE,GAAG,CAAC;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,0EAA0E;IAC1E,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4CAA4C;IAC5C,IAAI,IAAI,MAAM,CAAC;CAChB;AAID,iBAAS,YAAY,CAAC,MAAM,EAAE,KAAK,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAWnF;AAED,wBAAgB,eAAe,CAC7B,KAAK,GAAE,MAAgC,GACtC,SAAS,CAgEX;AAED,eAAO,MAAM,aAAa;;CAAmB,CAAC"}

package/dist/cjs/auth.js

@@ -0,0 +1,103 @@
+"use strict";
+/**
+ * EIP-191 challenge-response auth for the HTTP transport.
+ *
+ * Flow:
+ *   1. Client POSTs /auth/challenge with their wallet address.
+ *   2. Server returns a fresh nonce + a canonical message string.
+ *   3. Client signs message with personal_sign / signMessage (EIP-191).
+ *   4. Client sends every subsequent request with:
+ *        X-Shroudfi-Wallet:    <0x… EOA>
+ *        X-Shroudfi-Nonce:     <nonce returned at step 2>
+ *        X-Shroudfi-Signature: <0x… hex sig>
+ *   5. Server recovers, checks address match + expiry + allow-list.
+ *
+ * The signature is single-shot — once verifyAndConsume returns true for a
+ * nonce, the cache entry is deleted, so the same signed challenge cannot be
+ * replayed.
+ *
+ * Privacy: signature bytes never appear in logs, error messages, or response
+ * bodies. Errors are short tags only.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.__auth_test__ = void 0;
+exports.createAuthCache = createAuthCache;
+const node_crypto_1 = require("node:crypto");
+const viem_1 = require("viem");
+const constants_js_1 = require("./constants.js");
+const errors_js_1 = require("./errors.js");
+const SHROUDFI_DOMAIN_MARK = 'ShroudFi MCP HTTP authentication';
+function buildMessage(wallet, nonce, issuedAtMs) {
+    // The message is deliberately self-describing so a wallet UI shows the
+    // user the exact intent before signing. The nonce is the only random
+    // piece — it ties the signature to a single server-issued challenge.
+    return [
+        SHROUDFI_DOMAIN_MARK,
+        `Wallet: ${wallet}`,
+        `Nonce: ${nonce}`,
+        `Issued: ${new Date(issuedAtMs).toISOString()}`,
+        'Sign to prove control of this wallet.',
+    ].join('\n');
+}
+function createAuthCache(ttlMs = constants_js_1.EIP191_CHALLENGE_TTL_MS) {
+    const store = new Map();
+    function makeKey(wallet, nonce) {
+        return `${wallet.toLowerCase()}|${nonce.toLowerCase()}`;
+    }
+    function prune(now = Date.now()) {
+        for (const [k, v] of store) {
+            if (v.expiresAtMs <= now)
+                store.delete(k);
+        }
+    }
+    return {
+        issue(wallet) {
+            prune();
+            const nonceBytes = (0, node_crypto_1.randomBytes)(16);
+            const nonce = `0x${nonceBytes.toString('hex')}`;
+            const now = Date.now();
+            const ch = {
+                wallet: wallet.toLowerCase(),
+                nonce,
+                issuedAtMs: now,
+                expiresAtMs: now + ttlMs,
+                message: buildMessage(wallet.toLowerCase(), nonce, now),
+            };
+            store.set(makeKey(ch.wallet, ch.nonce), ch);
+            return ch;
+        },
+        async verifyAndConsume({ wallet, nonce, signature }) {
+            // Don't prune before lookup — we want callers to see the explicit
+            // `auth_challenge_expired` code when their nonce has timed out, instead
+            // of an indistinguishable `unauthorized`.
+            const key = makeKey(wallet, nonce);
+            const ch = store.get(key);
+            if (ch === undefined) {
+                throw new errors_js_1.McpUnauthorizedError();
+            }
+            if (ch.expiresAtMs <= Date.now()) {
+                store.delete(key);
+                throw new errors_js_1.McpEip191ChallengeExpiredError();
+            }
+            let recovered;
+            try {
+                recovered = await (0, viem_1.recoverMessageAddress)({
+                    message: ch.message,
+                    signature,
+                });
+            }
+            catch {
+                throw new errors_js_1.McpEip191SignatureInvalidError();
+            }
+            if (recovered.toLowerCase() !== ch.wallet.toLowerCase()) {
+                throw new errors_js_1.McpEip191SignatureInvalidError();
+            }
+            // Single-use: consume the nonce so the signed challenge can't be replayed.
+            store.delete(key);
+        },
+        prune,
+        size: () => store.size,
+    };
+}
+exports.__auth_test__ = { buildMessage };
+//# sourceMappingURL=auth.js.map

package/dist/cjs/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAyCH,0CAkEC;AAzGD,6CAA0C;AAC1C,+BAA6C;AAE7C,iDAAyD;AACzD,2CAIqB;AAgBrB,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE,SAAS,YAAY,CAAC,MAAqB,EAAE,KAAU,EAAE,UAAkB;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,OAAO;QACL,oBAAoB;QACpB,WAAW,MAAM,EAAE;QACnB,UAAU,KAAK,EAAE;QACjB,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE;QAC/C,uCAAuC;KACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,eAAe,CAC7B,QAAgB,sCAAuB;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEjD,SAAS,OAAO,CAAC,MAAqB,EAAE,KAAU;QAChD,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,SAAS,KAAK,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;QACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG;gBAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM;YACV,KAAK,EAAE,CAAC;YACR,MAAM,UAAU,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;YACnC,MAAM,KAAK,GAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,EAAE,GAAoB;gBAC1B,MAAM,EAAE,MAAM,CAAC,WAAW,EAAmB;gBAC7C,KAAK;gBACL,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,GAAG,GAAG,KAAK;gBACxB,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,WAAW,EAAmB,EAAE,KAAK,EAAE,GAAG,CAAC;aACzE,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE;YACjD,kEAAkE;YAClE,wEAAwE;YACxE,0CAA0C;YAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,gCAAoB,EAAE,CAAC;YACnC,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACjC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,MAAM,IAAI,0CAA8B,EAAE,CAAC;YAC7C,CAAC;YAED,IAAI,SAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAA,4BAAqB,EAAC;oBACtC,OAAO,EAAE,EAAE,CAAC,OAAO;oBACnB,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0CAA8B,EAAE,CAAC;YAC7C,CAAC;YACD,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxD,MAAM,IAAI,0CAA8B,EAAE,CAAC;YAC7C,CAAC;YAED,2EAA2E;YAC3E,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAED,KAAK;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI;KACvB,CAAC;AACJ,CAAC;AAEY,QAAA,aAAa,GAAG,EAAE,YAAY,EAAE,CAAC"}

package/dist/cjs/bin/http.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+/**
+ * HTTP transport bin. Reads SHROUDFI_MCP_HTTP_PORT (default 7070) via the
+ * config module, boots the HTTP server, parks until SIGINT/SIGTERM.
+ */
+export {};
+//# sourceMappingURL=http.d.ts.map

package/dist/cjs/bin/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/bin/http.ts"],"names":[],"mappings":";AACA;;;GAGG"}

package/dist/cjs/bin/http.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * HTTP transport bin. Reads SHROUDFI_MCP_HTTP_PORT (default 7070) via the
+ * config module, boots the HTTP server, parks until SIGINT/SIGTERM.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const http_js_1 = require("../http.js");
+const config_js_1 = require("../config.js");
+const port = (0, config_js_1.readHttpPortFromEnv)();
+(0, http_js_1.runHttpServer)({ port })
+    .then((handle) => {
+    process.stderr.write(`shroudfi-mcp-http listening on :${port}\n`);
+    const shutdown = () => {
+        void handle.close().then(() => process.exit(0));
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+})
+    .catch((err) => {
+    process.stderr.write(`shroudfi-mcp-http failed: ${err.code ?? 'unknown'}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=http.js.map

package/dist/cjs/bin/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/bin/http.ts"],"names":[],"mappings":";;AACA;;;GAGG;;AAEH,wCAA2C;AAC3C,4CAAmD;AAEnD,MAAM,IAAI,GAAG,IAAA,+BAAmB,GAAE,CAAC;AAEnC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC;KACpB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,IAAI,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA8B,GAAyB,CAAC,IAAI,IAAI,SAAS,IAAI,CAC9E,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cjs/bin/stdio.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * Stdio bin — invoked by MCP clients via `.mcp.json` `command` field.
+ *
+ * Errors go to stderr only — stdout is reserved for the JSON-RPC framed
+ * MCP protocol stream. Any stdout pollution corrupts the client.
+ */
+export {};
+//# sourceMappingURL=stdio.d.ts.map

package/dist/cjs/bin/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../../src/bin/stdio.ts"],"names":[],"mappings":";AACA;;;;;GAKG"}

package/dist/cjs/bin/stdio.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Stdio bin — invoked by MCP clients via `.mcp.json` `command` field.
+ *
+ * Errors go to stderr only — stdout is reserved for the JSON-RPC framed
+ * MCP protocol stream. Any stdout pollution corrupts the client.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const stdio_js_1 = require("../stdio.js");
+(0, stdio_js_1.runStdioServer)().catch((err) => {
+    process.stderr.write(`shroudfi-mcp stdio failed: ${err.code ?? 'unknown'}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=stdio.js.map

package/dist/cjs/bin/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../src/bin/stdio.ts"],"names":[],"mappings":";;AACA;;;;;GAKG;;AAEH,0CAA6C;AAE7C,IAAA,yBAAc,GAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA+B,GAAyB,CAAC,IAAI,IAAI,SAAS,IAAI,CAC/E,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cjs/config.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Resolve operator config from env (or explicit args) into a runtime context.
+ *
+ * Env reads concentrated here per verify-privacy R5. Allowed to use process.env.
+ */
+import type { McpServerBootstrapConfig, McpServerContext } from './types.js';
+/**
+ * Read the HTTP port the operator wants the MCP server to listen on. Defaults
+ * to 7070. Strict integer between 1 and 65535.
+ */
+export declare function readHttpPortFromEnv(defaultPort?: number): number;
+/**
+ * Resolve env into a fully-formed bootstrap config.
+ */
+export declare function loadBootstrapConfigFromEnv(): McpServerBootstrapConfig;
+/**
+ * Build a McpServerContext from a resolved bootstrap config.
+ *
+ * Throws McpConfigError if the chain is unknown to @shroud-fi/transport.
+ */
+export declare function buildContextFromConfig(config: McpServerBootstrapConfig): McpServerContext;
+//# sourceMappingURL=config.d.ts.map

package/dist/cjs/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH,OAAO,KAAK,EACV,wBAAwB,EACxB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AA2FpB;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,SAAO,GAAG,MAAM,CAQ9D;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,wBAAwB,CAkBrE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,wBAAwB,GAC/B,gBAAgB,CAmClB"}

package/dist/cjs/config.js

@@ -0,0 +1,180 @@
+"use strict";
+/**
+ * Resolve operator config from env (or explicit args) into a runtime context.
+ *
+ * Env reads concentrated here per verify-privacy R5. Allowed to use process.env.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readHttpPortFromEnv = readHttpPortFromEnv;
+exports.loadBootstrapConfigFromEnv = loadBootstrapConfigFromEnv;
+exports.buildContextFromConfig = buildContextFromConfig;
+const node_fs_1 = require("node:fs");
+const viem_1 = require("viem");
+const transport_1 = require("@shroud-fi/transport");
+const agent_runtime_1 = require("@shroud-fi/agent-runtime");
+const constants_js_1 = require("./constants.js");
+const errors_js_1 = require("./errors.js");
+function readChain() {
+    const v = process.env[constants_js_1.ENV_CHAIN];
+    if (v === undefined || v === '')
+        return 8453;
+    if (v === 'base' || v === 'mainnet' || v === '8453')
+        return 8453;
+    if (v === 'sepolia' || v === 'base-sepolia' || v === '84532')
+        return 84532;
+    throw new errors_js_1.McpConfigError('Unknown chain — set SHROUDFI_CHAIN to base|sepolia');
+}
+function readPrivateKey() {
+    const inline = process.env[constants_js_1.ENV_PRIVATE_KEY];
+    if (typeof inline === 'string' && inline.length > 0) {
+        if (!(0, viem_1.isHex)(inline) || inline.length !== 66) {
+            throw new errors_js_1.McpConfigError('SHROUDFI_PRIVATE_KEY is not a 0x… 32-byte hex');
+        }
+        return inline;
+    }
+    const file = process.env[constants_js_1.ENV_PRIVATE_KEY_FILE];
+    if (typeof file === 'string' && file.length > 0) {
+        let raw;
+        try {
+            raw = (0, node_fs_1.readFileSync)(file, 'utf-8').trim();
+        }
+        catch {
+            throw new errors_js_1.McpConfigError('SHROUDFI_PRIVATE_KEY_FILE could not be read');
+        }
+        if (!(0, viem_1.isHex)(raw) || raw.length !== 66) {
+            throw new errors_js_1.McpConfigError('Private key file contents are not a 0x… 32-byte hex');
+        }
+        return raw;
+    }
+    return undefined;
+}
+/**
+ * Resolve the optional 32-byte master seed from env. Accepts either an inline
+ * 0x… hex string or a path to a file containing one (same shape as the
+ * private-key resolution). Returns `undefined` when neither is set so callers
+ * can fall back to per-process random seeds.
+ */
+function readMasterSeed() {
+    const inline = process.env[constants_js_1.ENV_MASTER_SEED];
+    if (typeof inline === 'string' && inline.length > 0) {
+        if (!(0, viem_1.isHex)(inline) || inline.length !== 66) {
+            throw new errors_js_1.McpConfigError('SHROUDFI_MASTER_SEED is not a 0x… 32-byte hex');
+        }
+        return (0, viem_1.hexToBytes)(inline);
+    }
+    const file = process.env[constants_js_1.ENV_MASTER_SEED_FILE];
+    if (typeof file === 'string' && file.length > 0) {
+        let raw;
+        try {
+            raw = (0, node_fs_1.readFileSync)(file, 'utf-8').trim();
+        }
+        catch {
+            throw new errors_js_1.McpConfigError('SHROUDFI_MASTER_SEED_FILE could not be read');
+        }
+        if (!(0, viem_1.isHex)(raw) || raw.length !== 66) {
+            throw new errors_js_1.McpConfigError('Master seed file contents are not a 0x… 32-byte hex');
+        }
+        return (0, viem_1.hexToBytes)(raw);
+    }
+    return undefined;
+}
+function readStartBlock() {
+    const v = process.env[constants_js_1.ENV_START_BLOCK];
+    if (v === undefined || v === '')
+        return 0n;
+    try {
+        return BigInt(v);
+    }
+    catch {
+        throw new errors_js_1.McpConfigError('SHROUDFI_START_BLOCK must be a non-negative integer');
+    }
+}
+function readHttpAllowedWallets() {
+    const v = process.env[constants_js_1.ENV_HTTP_ALLOWED_WALLETS];
+    if (v === undefined || v === '')
+        return new Set();
+    const out = new Set();
+    for (const piece of v.split(',')) {
+        const trimmed = piece.trim().toLowerCase();
+        if (trimmed.length === 0)
+            continue;
+        if (!(0, viem_1.isHex)(trimmed) || trimmed.length !== 42) {
+            throw new errors_js_1.McpConfigError('SHROUDFI_MCP_HTTP_ALLOWED_WALLETS contains a non-address entry');
+        }
+        out.add(trimmed);
+    }
+    return out;
+}
+/**
+ * Read the HTTP port the operator wants the MCP server to listen on. Defaults
+ * to 7070. Strict integer between 1 and 65535.
+ */
+function readHttpPortFromEnv(defaultPort = 7070) {
+    const raw = process.env[constants_js_1.ENV_HTTP_PORT];
+    if (raw === undefined || raw.length === 0)
+        return defaultPort;
+    const port = Number(raw);
+    if (!Number.isInteger(port) || port < 1 || port > 65_535) {
+        throw new errors_js_1.McpConfigError('SHROUDFI_MCP_HTTP_PORT must be 1..65535');
+    }
+    return port;
+}
+/**
+ * Resolve env into a fully-formed bootstrap config.
+ */
+function loadBootstrapConfigFromEnv() {
+    const chainId = readChain();
+    const rpcOverride = process.env[constants_js_1.ENV_RPC_URL];
+    const rpcUrl = rpcOverride !== undefined && rpcOverride.length > 0
+        ? rpcOverride
+        : constants_js_1.DEFAULT_RPC_URL_BY_CHAIN[chainId];
+    if (rpcUrl === undefined) {
+        throw new errors_js_1.McpConfigError('No RPC URL resolved for the requested chain');
+    }
+    return {
+        chainId,
+        rpcUrl,
+        privateKey: readPrivateKey(),
+        startBlock: readStartBlock(),
+        masterSeed: readMasterSeed(),
+        httpAllowedWallets: readHttpAllowedWallets(),
+    };
+}
+/**
+ * Build a McpServerContext from a resolved bootstrap config.
+ *
+ * Throws McpConfigError if the chain is unknown to @shroud-fi/transport.
+ */
+function buildContextFromConfig(config) {
+    const chainName = config.chainId === 8453 ? 'base' : 'baseSepolia';
+    const transport = (0, transport_1.createTransport)({
+        chain: chainName,
+        rpcUrl: config.rpcUrl,
+        ...(config.privateKey !== undefined
+            ? { privateKey: config.privateKey }
+            : {}),
+    });
+    // Will throw UnknownChainError if no manifest entry — surface as config error.
+    let stealthContract;
+    try {
+        stealthContract = (0, transport_1.getShroudFiStealth)(config.chainId);
+    }
+    catch {
+        throw new errors_js_1.McpConfigError('No ShroudFiStealth deployment for the chain');
+    }
+    const agent = (0, agent_runtime_1.createShroudAgent)({
+        transport,
+        startBlock: config.startBlock,
+        stealthContract,
+        autoRegister: true,
+        ...(config.masterSeed !== undefined ? { masterSeed: config.masterSeed } : {}),
+    });
+    const walletAddress = transport.walletClient?.account?.address;
+    return {
+        agent,
+        transport,
+        chainId: config.chainId,
+        walletAddress,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/cjs/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAsHH,kDAQC;AAKD,gEAkBC;AAOD,wDAqCC;AA/LD,qCAAuC;AAEvC,+BAAyC;AACzC,oDAA2E;AAC3E,4DAA6D;AAC7D,iDAWwB;AACxB,2CAA6C;AAM7C,SAAS,SAAS;IAChB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAS,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,IAAI,0BAAc,CAAC,oDAAoD,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,8BAAe,CAAC,CAAC;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,IAAA,YAAK,EAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,0BAAc,CAAC,+CAA+C,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,MAAa,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mCAAoB,CAAC,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0BAAc,CAAC,6CAA6C,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAA,YAAK,EAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,0BAAc,CAAC,qDAAqD,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,GAAU,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,8BAAe,CAAC,CAAC;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,IAAA,YAAK,EAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,0BAAc,CAAC,+CAA+C,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAA,iBAAU,EAAC,MAAa,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mCAAoB,CAAC,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0BAAc,CAAC,6CAA6C,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAA,YAAK,EAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,0BAAc,CAAC,qDAAqD,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,IAAA,iBAAU,EAAC,GAAU,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,8BAAe,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAAc,CAAC,qDAAqD,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB;IAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,uCAAwB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAiB,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,IAAA,YAAK,EAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,0BAAc,CACtB,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,OAAwB,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,WAAW,GAAG,IAAI;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,4BAAa,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,0BAAc,CAAC,yCAAyC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,0BAA0B;IACxC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0BAAW,CAAC,CAAC;IAC7C,MAAM,MAAM,GACV,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QACjD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,uCAAwB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,0BAAc,CAAC,6CAA6C,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,OAAO;QACP,MAAM;QACN,UAAU,EAAE,cAAc,EAAE;QAC5B,UAAU,EAAE,cAAc,EAAE;QAC5B,UAAU,EAAE,cAAc,EAAE;QAC5B,kBAAkB,EAAE,sBAAsB,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CACpC,MAAgC;IAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;IAEnE,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC;QAChC,KAAK,EAAE,SAAmC;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,+EAA+E;IAC/E,IAAI,eAA8B,CAAC;IACnC,IAAI,CAAC;QACH,eAAe,GAAG,IAAA,8BAAkB,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAAc,CAAC,6CAA6C,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,iCAAiB,EAAC;QAC9B,SAAS;QACT,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,eAAe;QACf,YAAY,EAAE,IAAI;QAClB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC;IAE/D,OAAO;QACL,KAAK;QACL,SAAS;QACT,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/cjs/constants.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Static constants. All env reads live here per verify-privacy R5.
+ */
+export declare const SHROUDFI_MCP_SERVER_NAME: "shroudfi-mcp";
+export declare const SHROUDFI_MCP_SERVER_VERSION: "0.0.1";
+/** EIP-191 challenge TTL — short window so a replayed challenge dies fast. */
+export declare const EIP191_CHALLENGE_TTL_MS: number;
+/** Default RPC URLs by chain id. Operator override via SHROUDFI_RPC_URL. */
+export declare const DEFAULT_RPC_URL_BY_CHAIN: Record<number, string>;
+/** Env knobs the bootstrap surface reads. */
+export declare const ENV_PRIVATE_KEY: "SHROUDFI_PRIVATE_KEY";
+export declare const ENV_PRIVATE_KEY_FILE: "SHROUDFI_PRIVATE_KEY_FILE";
+export declare const ENV_RPC_URL: "SHROUDFI_RPC_URL";
+export declare const ENV_CHAIN: "SHROUDFI_CHAIN";
+export declare const ENV_START_BLOCK: "SHROUDFI_START_BLOCK";
+export declare const ENV_HTTP_PORT: "SHROUDFI_MCP_HTTP_PORT";
+export declare const ENV_HTTP_ALLOWED_WALLETS: "SHROUDFI_MCP_HTTP_ALLOWED_WALLETS";
+/**
+ * Deterministic 32-byte master seed (0x… 64 hex chars). When set, every
+ * boot of the MCP server, REST API, or any other surface using
+ * `loadBootstrapConfigFromEnv` resolves the SAME stealth meta-address for
+ * the same operator EOA. When unset, a fresh random seed is generated per
+ * process — fine for local testing, BAD for production multi-surface
+ * deployments (caller's main wallet ↔ stealth meta-address binding would
+ * desync between MCP, REST, and UI processes).
+ */
+export declare const ENV_MASTER_SEED: "SHROUDFI_MASTER_SEED";
+export declare const ENV_MASTER_SEED_FILE: "SHROUDFI_MASTER_SEED_FILE";
+//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,wBAAwB,EAAG,cAAuB,CAAC;AAChE,eAAO,MAAM,2BAA2B,EAAG,OAAgB,CAAC;AAE5D,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,QAAgB,CAAC;AAErD,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAG3D,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,eAAe,EAAG,sBAA+B,CAAC;AAC/D,eAAO,MAAM,oBAAoB,EAAG,2BAAoC,CAAC;AACzE,eAAO,MAAM,WAAW,EAAG,kBAA2B,CAAC;AACvD,eAAO,MAAM,SAAS,EAAG,gBAAyB,CAAC;AACnD,eAAO,MAAM,eAAe,EAAG,sBAA+B,CAAC;AAC/D,eAAO,MAAM,aAAa,EAAG,wBAAiC,CAAC;AAC/D,eAAO,MAAM,wBAAwB,EAAG,mCAA4C,CAAC;AACrF;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAG,sBAA+B,CAAC;AAC/D,eAAO,MAAM,oBAAoB,EAAG,2BAAoC,CAAC"}