@smartpolicy/mcp 0.1.0

package/dist/server.js

@@ -0,0 +1,219 @@
+/**
+ * SmartPolicy MCP server construction — all tool registrations live here.
+ * Transports (stdio in index.ts, Streamable HTTP in http.ts) call buildServer
+ * per connection/request; Registry and GrantIssuer are shared singletons
+ * (grant nonces are random and stateless, so sharing is safe).
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { isAddress } from "viem";
+import { z } from "zod";
+const addressSchema = z
+    .string()
+    .refine(isAddress, "must be a 0x-prefixed Ethereum address")
+    .transform((value) => value);
+// NOTE: no z.bigint() here — bigint cannot be expressed in JSON Schema and
+// silently breaks tools/list serialization in the MCP SDK.
+const policyIdSchema = z
+    .union([z.string().regex(/^\d+$/), z.number().int().positive()])
+    .describe("Policy ID as decimal string or integer");
+const toPolicyId = (value) => BigInt(value);
+const actionSchema = z
+    .string()
+    .min(1)
+    .describe('Action name (e.g. "withdraw") or 0x-prefixed bytes32. Names are keccak256-hashed, matching keccak256("withdraw") in the protected contract.');
+function json(result) {
+    return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+}
+function jsonError(error) {
+    return {
+        content: [{ type: "text", text: JSON.stringify({ error: error instanceof Error ? error.message : String(error) }) }],
+        isError: true,
+    };
+}
+export function buildServer(config, registry, issuer) {
+    const server = new McpServer({ name: "smartpolicy", version: "0.1.0" }, {
+        instructions: "SmartPolicy answers one question everywhere: isAllowed(policyId, subject, action). " +
+            "Key facts for correct use: (1) ALWAYS read fees first (policy_fees) — write txs need an EXACT msg.value, " +
+            "overpaying reverts. (2) Conditions have NO on-chain teeth; only membership, per-action rules, expiry, " +
+            "and grants enforce. (3) A grant's subject must be the eventual msg.sender, and only the grant's `target` " +
+            "contract may consume it. (4) policy_create/policy_update return UNSIGNED txs for your wallet to sign — " +
+            "this server never holds user keys. Verify grants with grant_verify before broadcasting.",
+    });
+    server.registerTool("policy_check", {
+        description: "THE canonical SmartPolicy question: may `subject` perform `action` under policy `policyId`? " +
+            "Returns allowed (boolean) plus the reasons. Maps 1:1 to PolicyRegistry.isAllowed — " +
+            "a protected contract gives the identical answer on-chain. Free.",
+        inputSchema: {
+            policyId: policyIdSchema,
+            subject: addressSchema,
+            action: actionSchema,
+        },
+    }, async ({ policyId, subject, action }) => {
+        try {
+            return json(await registry.check(toPolicyId(policyId), subject, action));
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
+    server.registerTool("policy_get", {
+        description: "Read a policy: owner, expiry, active/locked state, membership mode, member count, metadata URI. Free.",
+        inputSchema: { policyId: policyIdSchema },
+    }, async ({ policyId }) => {
+        try {
+            return json(await registry.getPolicy(toPolicyId(policyId)));
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
+    server.registerTool("grant_issue", {
+        description: "Issue a short-lived single-use EIP-712 grant authorizing `subject` to perform `action` under " +
+            "`policyId`, redeemable ONLY at the `target` contract. The subject must pass policy_check first; the " +
+            "policy must list this server's issuer address (grant_issuer_info) via addIssuer. Pass the result to " +
+            "target's PolicyGate.withGrant function. Verify with grant_verify before broadcasting.",
+        inputSchema: {
+            policyId: policyIdSchema,
+            subject: addressSchema,
+            action: actionSchema,
+            target: addressSchema.describe("the contract that will consume the grant (the integrator/gate); only it may redeem"),
+            ttlSeconds: z
+                .number()
+                .int()
+                .positive()
+                .max(86400)
+                .default(600)
+                .describe("Requested grant lifetime in seconds; clamped to the server's maxGrantTtlSeconds (see grant_issuer_info)"),
+        },
+    }, async ({ policyId, subject, action, target, ttlSeconds }) => {
+        try {
+            if (!issuer)
+                throw new Error("grant issuance disabled on this server (no issuer key configured)");
+            await registry.assertChainId();
+            const id = toPolicyId(policyId);
+            const authorized = await registry.isAuthorizedIssuer(id, issuer.address);
+            if (!authorized) {
+                throw new Error(`this server's issuer address ${issuer.address} is not authorized for policy ${id}; ` +
+                    "the policy owner must call addIssuer first (see policy_update)");
+            }
+            const allowed = await registry.check(id, subject, action);
+            if (!allowed.allowed) {
+                throw new Error(`policy denies this: ${allowed.reasons.join("; ")}`);
+            }
+            return json(await issuer.issue(id, subject, action, ttlSeconds, target));
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
+    server.registerTool("grant_issuer_info", {
+        description: "This server's grant-issuer address (authorize it on a policy via addIssuer) and limits.",
+        inputSchema: {},
+    }, async () => {
+        return json({
+            issuerEnabled: Boolean(issuer),
+            issuerAddress: issuer?.address ?? null,
+            maxGrantTtlSeconds: config.maxGrantTtl,
+            chainId: config.chainId,
+            registry: config.registry,
+            verifier: config.verifier,
+        });
+    });
+    server.registerTool("policy_fees", {
+        description: "Current protocol fees in wei (read live). createPolicy needs exactly creationFee as msg.value; " +
+            "every other write needs exactly updateFee. Read this before building any write tx — wrong value reverts.",
+        inputSchema: {},
+    }, async () => {
+        try {
+            const { creationFee, updateFee } = await registry.fees();
+            return json({ creationFeeWei: creationFee.toString(), updateFeeWei: updateFee.toString() });
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
+    server.registerTool("grant_verify", {
+        description: "Pre-flight a grant before broadcasting: checks the on-chain GrantVerifier for validity (signature, " +
+            "validity window, issuer authorization, policy active) and whether the nonce is already used. Returns " +
+            "{valid, nonceUsed}. Note: does NOT check subject==caller or target — the gate enforces those on redemption.",
+        inputSchema: {
+            grant: z
+                .object({
+                policyId: z.union([z.string(), z.number()]),
+                subject: addressSchema,
+                action: z.string(),
+                issuedAt: z.union([z.string(), z.number()]),
+                expiresAt: z.union([z.string(), z.number()]),
+                nonce: z.string(),
+                issuer: addressSchema,
+                target: addressSchema,
+            })
+                .describe("the grant object exactly as returned by grant_issue"),
+            signature: z.string().regex(/^0x[0-9a-fA-F]+$/),
+        },
+    }, async ({ grant, signature }) => {
+        try {
+            return json(await registry.verifyGrant({ ...grant, action: grant.action }, signature));
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
+    server.registerTool("policy_create", {
+        description: "Build the unsigned transaction that creates a new policy. Returns {to, value, data} for YOUR " +
+            "wallet to sign and submit — the submitting address becomes the policy owner. `value` is the " +
+            "protocol creation fee in wei.",
+        inputSchema: {
+            openMembership: z.boolean().default(false).describe("true: every address counts as a member"),
+            transferable: z.boolean().default(false).describe("true: ownership can be transferred later"),
+            expiresAt: z.number().int().nonnegative().default(0).describe("unix seconds; 0 = never expires"),
+            metadataURI: z
+                .string()
+                .default("")
+                .describe("optional metadata pointer, informational only; prefer ipfs:// (content-immutable)"),
+            metadataHash: z
+                .string()
+                .regex(/^0x[0-9a-fA-F]{64}$/)
+                .optional()
+                .describe("optional keccak256 of the metadata document — on-chain tamper-evidence for the URI's content"),
+        },
+    }, async (opts) => {
+        try {
+            return json(await registry.buildCreatePolicy({ ...opts, metadataHash: opts.metadataHash }));
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
+    server.registerTool("policy_update", {
+        description: "Build the unsigned transaction for a policy rule change (submit from the owner or an admin " +
+            "wallet; `value` is the protocol update fee in wei). Operations: addMembers, removeMembers, " +
+            "setActionRule (UNSET|MEMBERS|ANYONE|NOBODY), addIssuer, removeIssuer, addAdmin, removeAdmin, setExpiry.",
+        inputSchema: {
+            policyId: policyIdSchema,
+            operation: z.discriminatedUnion("kind", [
+                z.object({ kind: z.literal("addMembers"), members: z.array(addressSchema).min(1) }),
+                z.object({ kind: z.literal("removeMembers"), members: z.array(addressSchema).min(1) }),
+                z.object({
+                    kind: z.literal("setActionRule"),
+                    action: actionSchema,
+                    rule: z.enum(["UNSET", "MEMBERS", "ANYONE", "NOBODY"]),
+                }),
+                z.object({ kind: z.literal("addIssuer"), issuer: addressSchema }),
+                z.object({ kind: z.literal("removeIssuer"), issuer: addressSchema }),
+                z.object({ kind: z.literal("addAdmin"), admin: addressSchema }),
+                z.object({ kind: z.literal("removeAdmin"), admin: addressSchema }),
+                z.object({ kind: z.literal("setExpiry"), expiresAt: z.number().int().nonnegative() }),
+            ]),
+        },
+    }, async ({ policyId, operation }) => {
+        try {
+            return json(await registry.buildUpdate(toPolicyId(policyId), operation));
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAgB,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CAAC,SAAS,EAAE,wCAAwC,CAAC;KAC3D,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAgB,CAAC,CAAC;AAE1C,2EAA2E;AAC3E,2DAA2D;AAC3D,MAAM,cAAc,GAAG,CAAC;KACrB,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;KAC/D,QAAQ,CAAC,wCAAwC,CAAC,CAAC;AAEtD,MAAM,UAAU,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAErE,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,CAAC,6IAA6I,CAAC,CAAC;AAE3J,SAAS,IAAI,CAAC,MAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7H,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,QAAkB,EAAE,MAA+B;IAC7F,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,EACzC;QACE,YAAY,EACV,qFAAqF;YACrF,2GAA2G;YAC3G,wGAAwG;YACxG,2GAA2G;YAC3G,yGAAyG;YACzG,yFAAyF;KAC5F,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,8FAA8F;YAC9F,qFAAqF;YACrF,iEAAiE;QACnE,WAAW,EAAE;YACX,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,YAAY;SACrB;KACF,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,WAAW,EACT,uGAAuG;QACzG,WAAW,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;KAC1C,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EACT,+FAA+F;YAC/F,sGAAsG;YACtG,sGAAsG;YACtG,uFAAuF;QACzF,WAAW,EAAE;YACX,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,oFAAoF,CAAC;YACpH,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,GAAG,CAAC,KAAK,CAAC;iBACV,OAAO,CAAC,GAAG,CAAC;iBACZ,QAAQ,CAAC,yGAAyG,CAAC;SACvH;KACF,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YAClG,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,OAAO,iCAAiC,EAAE,IAAI;oBACnF,gEAAgE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EAAE,yFAAyF;QACtG,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,OAAO,IAAI,CAAC;YACV,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC;YAC9B,aAAa,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI;YACtC,kBAAkB,EAAE,MAAM,CAAC,WAAW;YACtC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EACT,iGAAiG;YACjG,0GAA0G;QAC5G,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,qGAAqG;YACrG,uGAAuG;YACvG,6GAA6G;QAC/G,WAAW,EAAE;YACX,KAAK,EAAE,CAAC;iBACL,MAAM,CAAC;gBACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;gBACjB,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,aAAa;aACtB,CAAC;iBACD,QAAQ,CAAC,qDAAqD,CAAC;YAClE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;SAChD;KACF,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,CACT,MAAM,QAAQ,CAAC,WAAW,CACxB,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAuB,EAAE,EACnD,SAA0B,CAC3B,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,+FAA+F;YAC/F,8FAA8F;YAC9F,+BAA+B;QACjC,WAAW,EAAE;YACX,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAC7F,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YAC7F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YAChG,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,mFAAmF,CAAC;YAChG,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,KAAK,CAAC,qBAAqB,CAAC;iBAC5B,QAAQ,EAAE;iBACV,QAAQ,CAAC,8FAA8F,CAAC;SAC5G;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,QAAQ,CAAC,iBAAiB,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAyC,EAAE,CAAC,CAAC,CAAC;QAC3H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,6FAA6F;YAC7F,6FAA6F;YAC7F,yGAAyG;QAC3G,WAAW,EAAE;YACX,QAAQ,EAAE,cAAc;YACxB,SAAS,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;gBACtC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,CAAC,CAAC,MAAM,CAAC;oBACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;oBAChC,MAAM,EAAE,YAAY;oBACpB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBACvD,CAAC;gBACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBACjE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBACpE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;gBAC/D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;gBAClE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aACtF,CAAC;SACH;KACF,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@smartpolicy/mcp",
+  "version": "0.1.0",
+  "description": "SmartPolicy MCP server — runtime authorization for AI agents and smart contracts",
+  "type": "module",
+  "bin": {
+    "smartpolicy-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepack": "tsc",
+    "start": "tsx src/index.ts",
+    "test": "vitest run",
+    "integration": "tsx scripts/integration.ts",
+    "smoke:http": "tsx scripts/http-smoke.ts"
+  },
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/smartpolicy-protocol/smartpolicy.git",
+    "directory": "mcp"
+  },
+  "homepage": "https://smartpolicy.io",
+  "bugs": "https://github.com/smartpolicy-protocol/smartpolicy/issues",
+  "keywords": ["mcp", "modelcontextprotocol", "authorization", "ai-agents", "smart-contracts", "eip-712", "x402", "base"],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "viem": "^2.21.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.3",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
+  }
+}