@toon-protocol/client-mcp 0.10.9 → 0.12.0

package/dist/daemon.js

@@ -4,7 +4,7 @@ import {
   ClientRunner,
   registerRoutes,
   scaffoldFirstRun
-} from "./chunk-CS4B3GET.js";
+} from "./chunk-74KX5LXI.js";
 import {
   ControlClient,
   ToonClient,
@@ -17,7 +17,7 @@ import {
   resolveConfig,
   spawnDaemonDetached,
   waitForReady
-} from "./chunk-UHITXU5V.js";
+} from "./chunk-W6T6ZK7U.js";
 import "./chunk-32QD72IL.js";
 import "./chunk-DLYE6U2Z.js";
 import "./chunk-LR7W2ISE.js";

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { NostrEvent, EventTemplate } from 'nostr-tools/pure';
 import { SwapPair } from '@toon-protocol/core';
-import { ToonClientConfig } from '@toon-protocol/client';
+import { ToonClientConfig, FaucetChain } from '@toon-protocol/client';
 import { FastifyInstance } from 'fastify';
 import { ViewSpec } from '@toon-protocol/views';
 
@@ -453,16 +453,42 @@ interface FundWalletRequest {
     /** Address to fund (default: this client's own address for `chain`). */
     address?: string;
 }
-/** `POST /fund-wallet` result. */
+/**
+ * `POST /fund-wallet` result — a snapshot of an ASYNC faucet drip job.
+ *
+ * The drip is non-blocking: `POST /fund-wallet` launches the faucet call in the
+ * daemon background and returns immediately with `status: 'pending'`. This avoids
+ * the MCP host's ~60s tool-call timeout surfacing a still-working Mina drip
+ * (which legitimately settles in ~75s, native MINA + USDC) as a misleading
+ * relay/apex timeout (#199-class). Poll `GET /fund-wallet/status` (or just
+ * re-read balances) to observe the terminal `'success'` / `'error'` state.
+ */
 interface FundWalletResponse {
-    /** The chain that was funded. */
+    /** The chain being funded. */
     chain: SettlementChain;
-    /** The address that was funded. */
+    /** The address being funded. */
     address: string;
     /** The faucet base URL the drip was requested from. */
     faucetUrl: string;
-    /** Raw parsed JSON body from the faucet (shape is faucet-defined). */
-    response: unknown;
+    /**
+     * Lifecycle of the background drip. `'timeout'` is distinct from `'error'`:
+     * the faucet client gave up but the on-chain drip MAY still have settled
+     * (observed on a loaded EVM faucet) — treat it as "uncertain, re-check
+     * balances", not a definitive failure, to avoid a misleading double-fund.
+     */
+    status: 'pending' | 'success' | 'error' | 'timeout';
+    /** Unix ms the drip was submitted. */
+    startedAt: number;
+    /** Unix ms the drip settled or failed (absent while `'pending'`). */
+    finishedAt?: number;
+    /** Raw parsed JSON body from the faucet on success (shape is faucet-defined). */
+    response?: unknown;
+    /** Error message on failure. */
+    error?: string;
+}
+/** `GET /fund-wallet/status` result — snapshots of tracked drip jobs. */
+interface FundStatusResponse {
+    jobs: FundWalletResponse[];
 }
 /** Uniform error envelope returned with non-2xx responses. */
 interface ErrorResponse {
@@ -543,6 +569,7 @@ declare class ControlClient {
     addApex(body: AddApexRequest): Promise<AddApexResponse>;
     removeApex(body: RemoveApexRequest): Promise<TargetsResponse>;
     fundWallet(body?: FundWalletRequest): Promise<FundWalletResponse>;
+    fundStatus(chain?: SettlementChain): Promise<FundStatusResponse>;
     /**
      * Whether an HTTP method is safe to transparently retry. Idempotent reads
      * (GET) and deletes can be replayed verbatim; a mutating POST cannot — the
@@ -979,6 +1006,15 @@ interface ToonClientLike {
     }>;
     getChannelCloseState(channelId: string): 'open' | 'closing' | 'settleable' | 'settled';
     getSettleableAt(channelId: string): bigint | undefined;
+    /**
+     * Re-read a resumed channel's on-chain deposit (persisted state omits it).
+     * Optional so lightweight fakes need not implement it; the real ToonClient
+     * does. Best-effort — callers await + catch.
+     */
+    rehydrateChannelDeposit?(channelId: string, opts: {
+        chain: string;
+        tokenNetworkAddress: string;
+    }): Promise<bigint | undefined>;
     sendSwapPacket(params: {
         destination: string;
         amount: bigint;
@@ -1028,11 +1064,29 @@ declare class ClientRunner {
     private readonly createRelay;
     private readonly log;
     private readonly targetsPath?;
+    /**
+     * Identity-level chain-read client. Reading your OWN on-chain wallet balance is
+     * a pure (wallet keys + chain RPC) operation that has nothing to do with the
+     * ILP/payment peer, so it lives at the daemon level rather than inside an apex.
+     * Built once from the daemon's own `toonClientConfig` (the same keys + chain
+     * RPC config every apex shares) and REUSED as the default apex's client, so a
+     * funded apex's `start()` (which derives Solana/Mina keys) also benefits this
+     * reader. `getBalances` uses it directly, so balances work even with zero
+     * apexes registered (follow-up to #199/#200).
+     */
+    private readonly identityClient;
     private readonly startedAt;
     /** Apex write targets, keyed by btpUrl. */
     private readonly apexes;
     /** Relay read targets, keyed by relayUrl. */
     private readonly relays;
+    /**
+     * Async faucet drip jobs, keyed by chain. A drip is launched in the background
+     * (the Mina faucet legitimately takes ~75s — longer than the MCP host's ~60s
+     * tool-call budget) and its terminal state is observed via {@link getFundStatus}
+     * / re-reading balances rather than by blocking the caller.
+     */
+    private readonly fundJobs;
     /** Runner-level merged read buffer across all relays (de-duped by event.id). */
     private merged;
     private readonly mergedSeen;
@@ -1145,7 +1199,13 @@ declare class ClientRunner {
      * (the typical "fund me before I open a channel" flow). The daemon holds the
      * faucet URL + the keys, so the MCP caller never needs either.
      */
-    fundWallet(req?: FundWalletRequest): Promise<FundWalletResponse>;
+    fundWallet(req?: FundWalletRequest): FundWalletResponse;
+    /**
+     * Snapshots of tracked faucet drip jobs — all of them, or just the one for
+     * `chain`. Lets a caller poll for the terminal state of an async drip without
+     * re-dripping.
+     */
+    getFundStatus(chain?: FaucetChain): FundStatusResponse;
     /** Full registry of relay + apex targets with per-target status. */
     getTargets(): TargetsResponse;
     /** Pay-to-write a single event through the selected (or default) apex. */
@@ -1190,8 +1250,20 @@ declare class ClientRunner {
     getChannels(): ChannelsResponse;
     /**
      * On-chain wallet balances. The wallet is identity-level (same keys across
-     * apexes), so read from the first available apex's client; per-chain reads are
-     * best-effort inside the client (a failing chain is simply omitted).
+     * apexes), so this reads from the daemon's {@link identityClient} — NOT an apex
+     * — and therefore works even with zero apexes / no payment peer configured
+     * (reading your own balance is a pure wallet-keys + chain-RPC operation).
+     * Per-chain reads are best-effort inside the client (a failing chain is simply
+     * omitted).
+     *
+     * Each underlying read hits per-chain RPC providers that can stall
+     * indefinitely on devnet (a provider being `detail: "configured"` in
+     * toon_status means it is WIRED, not that its RPC is live). A stall here used
+     * to block the whole control request until the client aborted, surfacing as a
+     * misleading "relay/apex unreachable" timeout (#199). Bound each attempt well
+     * under the control-plane timeout and retry once so a single transient
+     * provider stall FAST-FAILS with an honest "balances handler / provider
+     * stalled" error instead of hanging.
      */
     getBalances(): Promise<BalancesResponse>;
     /**
@@ -1402,4 +1474,4 @@ interface JourneyResult {
  */
 declare function runJourney(plan: JourneyPlan, client: ControlClient): Promise<JourneyResult>;
 
-export { type AddApexRequest, type AddApexResponse, type AddRelayRequest, type ApexNegotiationConfig, type ApexTargetStatus, type BalanceInfo, type BalancesResponse, type ChainStatus, type ChannelDepositRequest, type ChannelDepositResponse, type ChannelInfo, type ChannelsResponse, ClientRunner, type ClientRunnerDeps, type CloseChannelRequest, type CloseChannelResponse, ControlApiError, ControlClient, type ControlClientOptions, DEFAULT_KEYSTORE_PASSWORD, type DaemonConfigFile, DaemonUnreachableError, type DrainResult, type ErrorResponse, type EventsQuery, type EventsResponse, type FundWalletRequest, type FundWalletResponse, type HttpFetchPaidRequest, type HttpFetchPaidResponse, type JourneyPlan, type JourneyResult, type JourneyState, type JourneyStep, type JourneyStepResult, type MinimalWebSocket, type NostrFilter, NotReadyError, type OpenChannelRequest, PublishRejectedError, type PublishRequest, type PublishResponse, type PublishUnsignedRequest, type QueryRequest, type QueryResponse, RelaySubscription, type RelaySubscriptionOptions, type RelayTargetStatus, type RemoveApexRequest, type RemoveRelayRequest, type ResolvedDaemonConfig, type SettleChannelRequest, type SettleChannelResponse, type SettlementChain, type StatusResponse, type SubscribeRequest, type SubscribeResponse, type SwapClaim, type SwapRequest, type SwapResponse, TOOL_DEFINITIONS, type TargetsResponse, type ToolDefinition, type ToolResult, type ToonClientLike, type UploadMediaRequest, type UploadMediaResponse, type WebSocketFactory, acquireLock, configDir, defaultConfigPath, defaultKeystorePath, dispatchTool, hasConfiguredIdentity, isDaemonRunning, isProcessAlive, readConfigFile, readPid, registerRoutes, releaseLock, resolveConfig, resolveMnemonic, runJourney, scaffoldFirstRun, spawnDaemonDetached, waitForReady };
+export { type AddApexRequest, type AddApexResponse, type AddRelayRequest, type ApexNegotiationConfig, type ApexTargetStatus, type BalanceInfo, type BalancesResponse, type ChainStatus, type ChannelDepositRequest, type ChannelDepositResponse, type ChannelInfo, type ChannelsResponse, ClientRunner, type ClientRunnerDeps, type CloseChannelRequest, type CloseChannelResponse, ControlApiError, ControlClient, type ControlClientOptions, DEFAULT_KEYSTORE_PASSWORD, type DaemonConfigFile, DaemonUnreachableError, type DrainResult, type ErrorResponse, type EventsQuery, type EventsResponse, type FundStatusResponse, type FundWalletRequest, type FundWalletResponse, type HttpFetchPaidRequest, type HttpFetchPaidResponse, type JourneyPlan, type JourneyResult, type JourneyState, type JourneyStep, type JourneyStepResult, type MinimalWebSocket, type NostrFilter, NotReadyError, type OpenChannelRequest, PublishRejectedError, type PublishRequest, type PublishResponse, type PublishUnsignedRequest, type QueryRequest, type QueryResponse, RelaySubscription, type RelaySubscriptionOptions, type RelayTargetStatus, type RemoveApexRequest, type RemoveRelayRequest, type ResolvedDaemonConfig, type SettleChannelRequest, type SettleChannelResponse, type SettlementChain, type StatusResponse, type SubscribeRequest, type SubscribeResponse, type SwapClaim, type SwapRequest, type SwapResponse, TOOL_DEFINITIONS, type TargetsResponse, type ToolDefinition, type ToolResult, type ToonClientLike, type UploadMediaRequest, type UploadMediaResponse, type WebSocketFactory, acquireLock, configDir, defaultConfigPath, defaultKeystorePath, dispatchTool, hasConfiguredIdentity, isDaemonRunning, isProcessAlive, readConfigFile, readPid, registerRoutes, releaseLock, resolveConfig, resolveMnemonic, runJourney, scaffoldFirstRun, spawnDaemonDetached, waitForReady };

package/dist/index.js

@@ -8,7 +8,7 @@ import {
   hasConfiguredIdentity,
   registerRoutes,
   scaffoldFirstRun
-} from "./chunk-CS4B3GET.js";
+} from "./chunk-74KX5LXI.js";
 import {
   PUBLISH_TOOL,
   TOOL_DEFINITIONS,
@@ -18,7 +18,7 @@ import {
   buildFollowListFilter,
   buildProfileFilter,
   dispatchTool
-} from "./chunk-X4GKWZQP.js";
+} from "./chunk-LN64MLWP.js";
 import {
   ControlApiError,
   ControlClient,
@@ -36,7 +36,7 @@ import {
   resolveMnemonic,
   spawnDaemonDetached,
   waitForReady
-} from "./chunk-UHITXU5V.js";
+} from "./chunk-W6T6ZK7U.js";
 import "./chunk-32QD72IL.js";
 import "./chunk-DLYE6U2Z.js";
 import "./chunk-LR7W2ISE.js";

package/dist/mcp.js

@@ -4,7 +4,7 @@ import {
   APP_RESOURCE_URI,
   TOOL_DEFINITIONS,
   dispatchTool
-} from "./chunk-X4GKWZQP.js";
+} from "./chunk-LN64MLWP.js";
 import {
   ARWEAVE_GATEWAYS,
   ControlClient,
@@ -13,7 +13,7 @@ import {
   readConfigFile,
   spawnDaemonDetached,
   waitForReady
-} from "./chunk-UHITXU5V.js";
+} from "./chunk-W6T6ZK7U.js";
 import "./chunk-32QD72IL.js";
 import "./chunk-DLYE6U2Z.js";
 import "./chunk-LR7W2ISE.js";
@@ -84,7 +84,7 @@ async function main() {
       // Travels to EVERY host in the `initialize` result (incl. claude.ai chat,
       // which never loads the Claude Code skill). Keep the render-first policy
       // here so it governs all surfaces, not just Claude Code.
-      instructions: 'TOON is pay-to-write Nostr over Interledger; reads are free, writes are paid. RENDERING IS THE DEFAULT SURFACE: when the user asks to see/show/open/view/browse/render TOON events, profiles, feeds, threads, channels, or balances, call toon_atoms then toon_render (ui://toon/app) \u2014 do NOT route TOON data to a generic HTML/SVG/chart/widget tool or dump it as text. Always call toon_atoms before toon_render. On ANY intent to upload media or post/publish a picture/video/image (e.g. "I want to upload", "publish an image", "post a photo"), your FIRST action is toon_atoms then toon_render with the media view (media-uploader atom). The uploader has an in-app FILE PICKER, so do NOT ask whether a file is attached, where the image is, or for a URL, and do NOT recount upload-path history or known issues \u2014 just render the uploader and let the user pick a file. Writes (post/like/follow/upload/swap) spend a payment-channel claim; surface the fee and confirm before paying. Fall back to text only on explicit request or render failure.'
+      instructions: 'TOON is pay-to-write Nostr over Interledger; reads are free, writes are paid. RENDERING IS THE DEFAULT SURFACE: when the user asks to see/show/open/view/browse/render TOON events, profiles, feeds, threads, channels, or balances, call toon_atoms then toon_render (ui://toon/app) \u2014 do NOT route TOON data to a generic HTML/SVG/chart/widget tool or dump it as text. Always call toon_atoms before toon_render. The rendered card IS the response: for read-only views (feeds, profiles, threads, channels, balances, wallet) go STRAIGHT toon_atoms \u2192 toon_render \u2014 do NOT precede a render with daemon-health (toon_status), identity (toon_identity), or balance preflight, and do NOT narrate the tool calls or write a status report; at most a one-line caption after. On ANY intent to upload media or post/publish a picture/video/image (e.g. "I want to upload", "publish an image", "post a photo"), your FIRST action is toon_atoms then toon_render with the media view (media-uploader atom). The uploader has an in-app FILE PICKER, so do NOT ask whether a file is attached, where the image is, or for a URL, and do NOT recount upload-path history or known issues \u2014 just render the uploader and let the user pick a file. Writes (post/like/follow/upload/swap) spend a payment-channel claim; surface the fee and confirm before paying. Fall back to text only on explicit request or render failure.'
     }
   );
   const appHtml = loadAppHtml();

package/dist/mcp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/mcp.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * `toon-mcp` — a thin MCP stdio server exposing the TOON client to a Claude\n * agent (Desktop or Code). It holds NO chain keys and NO long-lived\n * connections: every tool maps to an HTTP call against the always-on\n * `toon-clientd` daemon, which it auto-spawns (detached) if it is not running.\n *\n * Works on both surfaces:\n *   • Claude Desktop — `claude_desktop_config.json` mcpServers entry.\n *   • Claude Code   — `claude mcp add toon -- toon-mcp`  (or `.mcp.json`).\n */\n\nimport { createRequire } from 'node:module';\nimport { readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport {\n  CallToolRequestSchema,\n  ListResourcesRequestSchema,\n  ListToolsRequestSchema,\n  ReadResourceRequestSchema,\n  type CallToolResult,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { APP_RESOURCE_URI } from '@toon-protocol/views';\nimport { ARWEAVE_GATEWAYS } from '@toon-protocol/arweave';\nimport { ControlClient } from './control-client.js';\nimport { dispatchTool, TOOL_DEFINITIONS } from './mcp-tools.js';\n\n/** MIME marking the bundle as an MCP-app UI resource (ext-apps profile). */\nconst APP_MIME = 'text/html;profile=mcp-app';\n\n/** Load the prebuilt single-file MCP-app bundle served as `ui://toon/app`. */\nfunction loadAppHtml(): string {\n  // 1. Prefer the copy shipped next to the built server (tsup onSuccess copies\n  //    it into dist/app). This is what a published client-mcp serves — no\n  //    dependency on the unpublished @toon-protocol/views package at runtime.\n  try {\n    return readFileSync(new URL('./app/index.html', import.meta.url), 'utf8');\n  } catch {\n    /* running from source / not yet copied — fall through to the dev resolve */\n  }\n  // 2. Dev fallback: resolve the bundle from the @toon-protocol/views workspace.\n  try {\n    const req = createRequire(import.meta.url);\n    const entry = req.resolve('@toon-protocol/views'); // …/views/dist/index.js\n    return readFileSync(join(dirname(entry), 'app', 'index.html'), 'utf8');\n  } catch {\n    return '<!doctype html><html><body><div id=\"root\">toon app bundle missing — run `pnpm --filter @toon-protocol/views build`</div></body></html>';\n  }\n}\nimport { defaultConfigPath, readConfigFile } from './daemon/config.js';\nimport {\n  isDaemonRunning,\n  spawnDaemonDetached,\n  waitForReady,\n} from './daemon/lifecycle.js';\n\n/** stdout carries the MCP protocol — all logging must go to stderr. */\nfunction log(msg: string): void {\n  console.error(`[toon-mcp] ${msg}`);\n}\n\n/** Resolve the daemon control-plane URL without needing the mnemonic. */\nfunction controlPlaneUrl(): string {\n  const file = readConfigFile(\n    process.env['TOON_CLIENT_CONFIG'] ?? defaultConfigPath()\n  );\n  const port = Number(\n    process.env['TOON_CLIENT_HTTP_PORT'] ?? file.httpPort ?? 8787\n  );\n  return `http://127.0.0.1:${port}`;\n}\n\n/**\n * Make sure the daemon is up: if the lock shows it running, return; otherwise\n * spawn it detached and wait until the control plane is reachable. Best-effort\n * — failures surface as readable tool errors rather than crashing the server.\n */\nasync function ensureDaemon(url: string): Promise<void> {\n  if (isDaemonRunning()) return;\n  const client = new ControlClient({ baseUrl: url });\n  if (await client.ping()) return;\n  log('daemon not running — spawning detached');\n  try {\n    const pid = spawnDaemonDetached();\n    log(`spawned toon-clientd (pid ${pid}); waiting for control plane`);\n    await waitForReady(url, 20_000);\n  } catch (err) {\n    log(\n      `failed to spawn daemon: ${err instanceof Error ? err.message : String(err)}`\n    );\n  }\n}\n\nasync function main(): Promise<void> {\n  const url = controlPlaneUrl();\n  const control = new ControlClient({ baseUrl: url });\n\n  // Kick off daemon startup; don't block server init on it (BTP bootstrap can\n  // take a moment). Tools report \"bootstrapping — retry\" until it is ready.\n  void ensureDaemon(url);\n\n  const server = new Server(\n    { name: 'toon-client', version: '0.1.0' },\n    {\n      capabilities: { tools: {}, resources: {} },\n      // Travels to EVERY host in the `initialize` result (incl. claude.ai chat,\n      // which never loads the Claude Code skill). Keep the render-first policy\n      // here so it governs all surfaces, not just Claude Code.\n      instructions:\n        'TOON is pay-to-write Nostr over Interledger; reads are free, writes ' +\n        'are paid. RENDERING IS THE DEFAULT SURFACE: when the user asks to ' +\n        'see/show/open/view/browse/render TOON events, profiles, feeds, ' +\n        'threads, channels, or balances, call toon_atoms then toon_render ' +\n        '(ui://toon/app) — do NOT route TOON data to a generic ' +\n        'HTML/SVG/chart/widget tool or dump it as text. Always call toon_atoms ' +\n        'before toon_render. On ANY intent to upload media or post/publish a ' +\n        'picture/video/image (e.g. \"I want to upload\", \"publish an image\", ' +\n        '\"post a photo\"), your FIRST action is toon_atoms then toon_render with ' +\n        'the media view (media-uploader atom). The uploader has an in-app FILE ' +\n        'PICKER, so do NOT ask whether a file is attached, where the image is, ' +\n        'or for a URL, and do NOT recount upload-path history or known issues — ' +\n        'just render the uploader and let the user pick a file. Writes ' +\n        '(post/like/follow/upload/swap) spend a ' +\n        'payment-channel claim; surface the fee and confirm before paying. ' +\n        'Fall back to text only on explicit request or render failure.',\n    }\n  );\n\n  const appHtml = loadAppHtml();\n\n  server.setRequestHandler(ListToolsRequestSchema, async () => ({\n    tools: TOOL_DEFINITIONS,\n  }));\n\n  // The MCP-app UI resource the host renders for toon_render results.\n  //\n  // CSP: the rendered feed/uploader shows media stored on Arweave. Without an\n  // explicit `resourceDomains`, the host iframe's default `img-src`/`media-src`\n  // blocks those gateways and images never load (toon-client#127). Advertise the\n  // Arweave gateways as both resource (img/media/static) and connect origins.\n  // Per the ext-apps spec the host reads `_meta.ui.csp` from the `resources/read`\n  // content item, with the `resources/list` entry as fallback — so set it on both.\n  //\n  // CRUCIAL: ar.io / arweave.net gateways serve a 302 from the apex\n  // (`https://arweave.net/<txId>`) to a per-tx SANDBOX SUBDOMAIN\n  // (`https://<base32>.arweave.net/<txId>`). CSP `img-src` is checked against the\n  // REDIRECT TARGET, so an apex-only allowlist still blocks the image. Allow both\n  // the apex (initial request) and a wildcard subdomain (where the bytes load).\n  const arweaveCspDomains = ARWEAVE_GATEWAYS.flatMap((gateway) => {\n    try {\n      const host = new URL(gateway).host;\n      return [gateway, `https://*.${host}`];\n    } catch {\n      return [gateway];\n    }\n  });\n  const APP_CSP = {\n    csp: {\n      resourceDomains: arweaveCspDomains,\n      connectDomains: arweaveCspDomains,\n    },\n  };\n\n  server.setRequestHandler(ListResourcesRequestSchema, async () => ({\n    resources: [\n      { uri: APP_RESOURCE_URI, name: 'TOON', mimeType: APP_MIME, _meta: { ui: APP_CSP } },\n    ],\n  }));\n\n  server.setRequestHandler(ReadResourceRequestSchema, async (request) => {\n    if (request.params.uri !== APP_RESOURCE_URI) {\n      throw new Error(`Unknown resource: ${request.params.uri}`);\n    }\n    return {\n      contents: [\n        { uri: APP_RESOURCE_URI, mimeType: APP_MIME, text: appHtml, _meta: { ui: APP_CSP } },\n      ],\n    };\n  });\n\n  server.setRequestHandler(CallToolRequestSchema, async (request) => {\n    const name = request.params.name;\n    const args = (request.params.arguments ?? {}) as Record<string, unknown>;\n    // If the daemon went away, try once to bring it back before dispatching.\n    if (!(await control.ping())) await ensureDaemon(url);\n    // Our ToolResult is a structural subset of CallToolResult (content + isError);\n    // the SDK's handler union also carries a task-augmented variant we never use.\n    return (await dispatchTool(control, name, args)) as CallToolResult;\n  });\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n  log(`ready; proxying to ${url}`);\n}\n\nmain().catch((err) => {\n  log(err instanceof Error ? (err.stack ?? err.message) : String(err));\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAYA,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,SAAS,YAAY;AAC9B,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAOP,IAAM,WAAW;AAGjB,SAAS,cAAsB;AAI7B,MAAI;AACF,WAAO,aAAa,IAAI,IAAI,oBAAoB,YAAY,GAAG,GAAG,MAAM;AAAA,EAC1E,QAAQ;AAAA,EAER;AAEA,MAAI;AACF,UAAM,MAAM,cAAc,YAAY,GAAG;AACzC,UAAM,QAAQ,IAAI,QAAQ,sBAAsB;AAChD,WAAO,aAAa,KAAK,QAAQ,KAAK,GAAG,OAAO,YAAY,GAAG,MAAM;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,SAAS,IAAI,KAAmB;AAC9B,UAAQ,MAAM,cAAc,GAAG,EAAE;AACnC;AAGA,SAAS,kBAA0B;AACjC,QAAM,OAAO;AAAA,IACX,QAAQ,IAAI,oBAAoB,KAAK,kBAAkB;AAAA,EACzD;AACA,QAAM,OAAO;AAAA,IACX,QAAQ,IAAI,uBAAuB,KAAK,KAAK,YAAY;AAAA,EAC3D;AACA,SAAO,oBAAoB,IAAI;AACjC;AAOA,eAAe,aAAa,KAA4B;AACtD,MAAI,gBAAgB,EAAG;AACvB,QAAM,SAAS,IAAI,cAAc,EAAE,SAAS,IAAI,CAAC;AACjD,MAAI,MAAM,OAAO,KAAK,EAAG;AACzB,MAAI,6CAAwC;AAC5C,MAAI;AACF,UAAM,MAAM,oBAAoB;AAChC,QAAI,6BAA6B,GAAG,8BAA8B;AAClE,UAAM,aAAa,KAAK,GAAM;AAAA,EAChC,SAAS,KAAK;AACZ;AAAA,MACE,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC7E;AAAA,EACF;AACF;AAEA,eAAe,OAAsB;AACnC,QAAM,MAAM,gBAAgB;AAC5B,QAAM,UAAU,IAAI,cAAc,EAAE,SAAS,IAAI,CAAC;AAIlD,OAAK,aAAa,GAAG;AAErB,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,eAAe,SAAS,QAAQ;AAAA,IACxC;AAAA,MACE,cAAc,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC,EAAE;AAAA;AAAA;AAAA;AAAA,MAIzC,cACE;AAAA,IAgBJ;AAAA,EACF;AAEA,QAAM,UAAU,YAAY;AAE5B,SAAO,kBAAkB,wBAAwB,aAAa;AAAA,IAC5D,OAAO;AAAA,EACT,EAAE;AAgBF,QAAM,oBAAoB,iBAAiB,QAAQ,CAAC,YAAY;AAC9D,QAAI;AACF,YAAM,OAAO,IAAI,IAAI,OAAO,EAAE;AAC9B,aAAO,CAAC,SAAS,aAAa,IAAI,EAAE;AAAA,IACtC,QAAQ;AACN,aAAO,CAAC,OAAO;AAAA,IACjB;AAAA,EACF,CAAC;AACD,QAAM,UAAU;AAAA,IACd,KAAK;AAAA,MACH,iBAAiB;AAAA,MACjB,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,SAAO,kBAAkB,4BAA4B,aAAa;AAAA,IAChE,WAAW;AAAA,MACT,EAAE,KAAK,kBAAkB,MAAM,QAAQ,UAAU,UAAU,OAAO,EAAE,IAAI,QAAQ,EAAE;AAAA,IACpF;AAAA,EACF,EAAE;AAEF,SAAO,kBAAkB,2BAA2B,OAAO,YAAY;AACrE,QAAI,QAAQ,OAAO,QAAQ,kBAAkB;AAC3C,YAAM,IAAI,MAAM,qBAAqB,QAAQ,OAAO,GAAG,EAAE;AAAA,IAC3D;AACA,WAAO;AAAA,MACL,UAAU;AAAA,QACR,EAAE,KAAK,kBAAkB,UAAU,UAAU,MAAM,SAAS,OAAO,EAAE,IAAI,QAAQ,EAAE;AAAA,MACrF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,kBAAkB,uBAAuB,OAAO,YAAY;AACjE,UAAM,OAAO,QAAQ,OAAO;AAC5B,UAAM,OAAQ,QAAQ,OAAO,aAAa,CAAC;AAE3C,QAAI,CAAE,MAAM,QAAQ,KAAK,EAAI,OAAM,aAAa,GAAG;AAGnD,WAAQ,MAAM,aAAa,SAAS,MAAM,IAAI;AAAA,EAChD,CAAC;AAED,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAC9B,MAAI,sBAAsB,GAAG,EAAE;AACjC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,MAAI,eAAe,QAAS,IAAI,SAAS,IAAI,UAAW,OAAO,GAAG,CAAC;AACnE,UAAQ,WAAW;AACrB,CAAC;","names":[]}
+{"version":3,"sources":["../src/mcp.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * `toon-mcp` — a thin MCP stdio server exposing the TOON client to a Claude\n * agent (Desktop or Code). It holds NO chain keys and NO long-lived\n * connections: every tool maps to an HTTP call against the always-on\n * `toon-clientd` daemon, which it auto-spawns (detached) if it is not running.\n *\n * Works on both surfaces:\n *   • Claude Desktop — `claude_desktop_config.json` mcpServers entry.\n *   • Claude Code   — `claude mcp add toon -- toon-mcp`  (or `.mcp.json`).\n */\n\nimport { createRequire } from 'node:module';\nimport { readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport {\n  CallToolRequestSchema,\n  ListResourcesRequestSchema,\n  ListToolsRequestSchema,\n  ReadResourceRequestSchema,\n  type CallToolResult,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { APP_RESOURCE_URI } from '@toon-protocol/views';\nimport { ARWEAVE_GATEWAYS } from '@toon-protocol/arweave';\nimport { ControlClient } from './control-client.js';\nimport { dispatchTool, TOOL_DEFINITIONS } from './mcp-tools.js';\n\n/** MIME marking the bundle as an MCP-app UI resource (ext-apps profile). */\nconst APP_MIME = 'text/html;profile=mcp-app';\n\n/** Load the prebuilt single-file MCP-app bundle served as `ui://toon/app`. */\nfunction loadAppHtml(): string {\n  // 1. Prefer the copy shipped next to the built server (tsup onSuccess copies\n  //    it into dist/app). This is what a published client-mcp serves — no\n  //    dependency on the unpublished @toon-protocol/views package at runtime.\n  try {\n    return readFileSync(new URL('./app/index.html', import.meta.url), 'utf8');\n  } catch {\n    /* running from source / not yet copied — fall through to the dev resolve */\n  }\n  // 2. Dev fallback: resolve the bundle from the @toon-protocol/views workspace.\n  try {\n    const req = createRequire(import.meta.url);\n    const entry = req.resolve('@toon-protocol/views'); // …/views/dist/index.js\n    return readFileSync(join(dirname(entry), 'app', 'index.html'), 'utf8');\n  } catch {\n    return '<!doctype html><html><body><div id=\"root\">toon app bundle missing — run `pnpm --filter @toon-protocol/views build`</div></body></html>';\n  }\n}\nimport { defaultConfigPath, readConfigFile } from './daemon/config.js';\nimport {\n  isDaemonRunning,\n  spawnDaemonDetached,\n  waitForReady,\n} from './daemon/lifecycle.js';\n\n/** stdout carries the MCP protocol — all logging must go to stderr. */\nfunction log(msg: string): void {\n  console.error(`[toon-mcp] ${msg}`);\n}\n\n/** Resolve the daemon control-plane URL without needing the mnemonic. */\nfunction controlPlaneUrl(): string {\n  const file = readConfigFile(\n    process.env['TOON_CLIENT_CONFIG'] ?? defaultConfigPath()\n  );\n  const port = Number(\n    process.env['TOON_CLIENT_HTTP_PORT'] ?? file.httpPort ?? 8787\n  );\n  return `http://127.0.0.1:${port}`;\n}\n\n/**\n * Make sure the daemon is up: if the lock shows it running, return; otherwise\n * spawn it detached and wait until the control plane is reachable. Best-effort\n * — failures surface as readable tool errors rather than crashing the server.\n */\nasync function ensureDaemon(url: string): Promise<void> {\n  if (isDaemonRunning()) return;\n  const client = new ControlClient({ baseUrl: url });\n  if (await client.ping()) return;\n  log('daemon not running — spawning detached');\n  try {\n    const pid = spawnDaemonDetached();\n    log(`spawned toon-clientd (pid ${pid}); waiting for control plane`);\n    await waitForReady(url, 20_000);\n  } catch (err) {\n    log(\n      `failed to spawn daemon: ${err instanceof Error ? err.message : String(err)}`\n    );\n  }\n}\n\nasync function main(): Promise<void> {\n  const url = controlPlaneUrl();\n  const control = new ControlClient({ baseUrl: url });\n\n  // Kick off daemon startup; don't block server init on it (BTP bootstrap can\n  // take a moment). Tools report \"bootstrapping — retry\" until it is ready.\n  void ensureDaemon(url);\n\n  const server = new Server(\n    { name: 'toon-client', version: '0.1.0' },\n    {\n      capabilities: { tools: {}, resources: {} },\n      // Travels to EVERY host in the `initialize` result (incl. claude.ai chat,\n      // which never loads the Claude Code skill). Keep the render-first policy\n      // here so it governs all surfaces, not just Claude Code.\n      instructions:\n        'TOON is pay-to-write Nostr over Interledger; reads are free, writes ' +\n        'are paid. RENDERING IS THE DEFAULT SURFACE: when the user asks to ' +\n        'see/show/open/view/browse/render TOON events, profiles, feeds, ' +\n        'threads, channels, or balances, call toon_atoms then toon_render ' +\n        '(ui://toon/app) — do NOT route TOON data to a generic ' +\n        'HTML/SVG/chart/widget tool or dump it as text. Always call toon_atoms ' +\n        'before toon_render. The rendered card IS the response: for read-only ' +\n        'views (feeds, profiles, threads, channels, balances, wallet) go ' +\n        'STRAIGHT toon_atoms → toon_render — do NOT precede a render with ' +\n        'daemon-health (toon_status), identity (toon_identity), or balance ' +\n        'preflight, and do NOT narrate the tool calls or write a status ' +\n        'report; at most a one-line caption after. On ANY intent to upload ' +\n        'media or post/publish a ' +\n        'picture/video/image (e.g. \"I want to upload\", \"publish an image\", ' +\n        '\"post a photo\"), your FIRST action is toon_atoms then toon_render with ' +\n        'the media view (media-uploader atom). The uploader has an in-app FILE ' +\n        'PICKER, so do NOT ask whether a file is attached, where the image is, ' +\n        'or for a URL, and do NOT recount upload-path history or known issues — ' +\n        'just render the uploader and let the user pick a file. Writes ' +\n        '(post/like/follow/upload/swap) spend a ' +\n        'payment-channel claim; surface the fee and confirm before paying. ' +\n        'Fall back to text only on explicit request or render failure.',\n    }\n  );\n\n  const appHtml = loadAppHtml();\n\n  server.setRequestHandler(ListToolsRequestSchema, async () => ({\n    tools: TOOL_DEFINITIONS,\n  }));\n\n  // The MCP-app UI resource the host renders for toon_render results.\n  //\n  // CSP: the rendered feed/uploader shows media stored on Arweave. Without an\n  // explicit `resourceDomains`, the host iframe's default `img-src`/`media-src`\n  // blocks those gateways and images never load (toon-client#127). Advertise the\n  // Arweave gateways as both resource (img/media/static) and connect origins.\n  // Per the ext-apps spec the host reads `_meta.ui.csp` from the `resources/read`\n  // content item, with the `resources/list` entry as fallback — so set it on both.\n  //\n  // CRUCIAL: ar.io / arweave.net gateways serve a 302 from the apex\n  // (`https://arweave.net/<txId>`) to a per-tx SANDBOX SUBDOMAIN\n  // (`https://<base32>.arweave.net/<txId>`). CSP `img-src` is checked against the\n  // REDIRECT TARGET, so an apex-only allowlist still blocks the image. Allow both\n  // the apex (initial request) and a wildcard subdomain (where the bytes load).\n  const arweaveCspDomains = ARWEAVE_GATEWAYS.flatMap((gateway) => {\n    try {\n      const host = new URL(gateway).host;\n      return [gateway, `https://*.${host}`];\n    } catch {\n      return [gateway];\n    }\n  });\n  const APP_CSP = {\n    csp: {\n      resourceDomains: arweaveCspDomains,\n      connectDomains: arweaveCspDomains,\n    },\n  };\n\n  server.setRequestHandler(ListResourcesRequestSchema, async () => ({\n    resources: [\n      { uri: APP_RESOURCE_URI, name: 'TOON', mimeType: APP_MIME, _meta: { ui: APP_CSP } },\n    ],\n  }));\n\n  server.setRequestHandler(ReadResourceRequestSchema, async (request) => {\n    if (request.params.uri !== APP_RESOURCE_URI) {\n      throw new Error(`Unknown resource: ${request.params.uri}`);\n    }\n    return {\n      contents: [\n        { uri: APP_RESOURCE_URI, mimeType: APP_MIME, text: appHtml, _meta: { ui: APP_CSP } },\n      ],\n    };\n  });\n\n  server.setRequestHandler(CallToolRequestSchema, async (request) => {\n    const name = request.params.name;\n    const args = (request.params.arguments ?? {}) as Record<string, unknown>;\n    // If the daemon went away, try once to bring it back before dispatching.\n    if (!(await control.ping())) await ensureDaemon(url);\n    // Our ToolResult is a structural subset of CallToolResult (content + isError);\n    // the SDK's handler union also carries a task-augmented variant we never use.\n    return (await dispatchTool(control, name, args)) as CallToolResult;\n  });\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n  log(`ready; proxying to ${url}`);\n}\n\nmain().catch((err) => {\n  log(err instanceof Error ? (err.stack ?? err.message) : String(err));\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAYA,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,SAAS,YAAY;AAC9B,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAOP,IAAM,WAAW;AAGjB,SAAS,cAAsB;AAI7B,MAAI;AACF,WAAO,aAAa,IAAI,IAAI,oBAAoB,YAAY,GAAG,GAAG,MAAM;AAAA,EAC1E,QAAQ;AAAA,EAER;AAEA,MAAI;AACF,UAAM,MAAM,cAAc,YAAY,GAAG;AACzC,UAAM,QAAQ,IAAI,QAAQ,sBAAsB;AAChD,WAAO,aAAa,KAAK,QAAQ,KAAK,GAAG,OAAO,YAAY,GAAG,MAAM;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AASA,SAAS,IAAI,KAAmB;AAC9B,UAAQ,MAAM,cAAc,GAAG,EAAE;AACnC;AAGA,SAAS,kBAA0B;AACjC,QAAM,OAAO;AAAA,IACX,QAAQ,IAAI,oBAAoB,KAAK,kBAAkB;AAAA,EACzD;AACA,QAAM,OAAO;AAAA,IACX,QAAQ,IAAI,uBAAuB,KAAK,KAAK,YAAY;AAAA,EAC3D;AACA,SAAO,oBAAoB,IAAI;AACjC;AAOA,eAAe,aAAa,KAA4B;AACtD,MAAI,gBAAgB,EAAG;AACvB,QAAM,SAAS,IAAI,cAAc,EAAE,SAAS,IAAI,CAAC;AACjD,MAAI,MAAM,OAAO,KAAK,EAAG;AACzB,MAAI,6CAAwC;AAC5C,MAAI;AACF,UAAM,MAAM,oBAAoB;AAChC,QAAI,6BAA6B,GAAG,8BAA8B;AAClE,UAAM,aAAa,KAAK,GAAM;AAAA,EAChC,SAAS,KAAK;AACZ;AAAA,MACE,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC7E;AAAA,EACF;AACF;AAEA,eAAe,OAAsB;AACnC,QAAM,MAAM,gBAAgB;AAC5B,QAAM,UAAU,IAAI,cAAc,EAAE,SAAS,IAAI,CAAC;AAIlD,OAAK,aAAa,GAAG;AAErB,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,eAAe,SAAS,QAAQ;AAAA,IACxC;AAAA,MACE,cAAc,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC,EAAE;AAAA;AAAA;AAAA;AAAA,MAIzC,cACE;AAAA,IAsBJ;AAAA,EACF;AAEA,QAAM,UAAU,YAAY;AAE5B,SAAO,kBAAkB,wBAAwB,aAAa;AAAA,IAC5D,OAAO;AAAA,EACT,EAAE;AAgBF,QAAM,oBAAoB,iBAAiB,QAAQ,CAAC,YAAY;AAC9D,QAAI;AACF,YAAM,OAAO,IAAI,IAAI,OAAO,EAAE;AAC9B,aAAO,CAAC,SAAS,aAAa,IAAI,EAAE;AAAA,IACtC,QAAQ;AACN,aAAO,CAAC,OAAO;AAAA,IACjB;AAAA,EACF,CAAC;AACD,QAAM,UAAU;AAAA,IACd,KAAK;AAAA,MACH,iBAAiB;AAAA,MACjB,gBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,SAAO,kBAAkB,4BAA4B,aAAa;AAAA,IAChE,WAAW;AAAA,MACT,EAAE,KAAK,kBAAkB,MAAM,QAAQ,UAAU,UAAU,OAAO,EAAE,IAAI,QAAQ,EAAE;AAAA,IACpF;AAAA,EACF,EAAE;AAEF,SAAO,kBAAkB,2BAA2B,OAAO,YAAY;AACrE,QAAI,QAAQ,OAAO,QAAQ,kBAAkB;AAC3C,YAAM,IAAI,MAAM,qBAAqB,QAAQ,OAAO,GAAG,EAAE;AAAA,IAC3D;AACA,WAAO;AAAA,MACL,UAAU;AAAA,QACR,EAAE,KAAK,kBAAkB,UAAU,UAAU,MAAM,SAAS,OAAO,EAAE,IAAI,QAAQ,EAAE;AAAA,MACrF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,kBAAkB,uBAAuB,OAAO,YAAY;AACjE,UAAM,OAAO,QAAQ,OAAO;AAC5B,UAAM,OAAQ,QAAQ,OAAO,aAAa,CAAC;AAE3C,QAAI,CAAE,MAAM,QAAQ,KAAK,EAAI,OAAM,aAAa,GAAG;AAGnD,WAAQ,MAAM,aAAa,SAAS,MAAM,IAAI;AAAA,EAChD,CAAC;AAED,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAC9B,MAAI,sBAAsB,GAAG,EAAE;AACjC;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,MAAI,eAAe,QAAS,IAAI,SAAS,IAAI,UAAW,OAAO,GAAG,CAAC;AACnE,UAAQ,WAAW;AACrB,CAAC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toon-protocol/client-mcp",
-  "version": "0.10.9",
+  "version": "0.12.0",
   "description": "Always-on local daemon + MCP server letting a Claude agent (Desktop or Code) act as a TOON Protocol client: pay-to-write publishing, free reads, channel/balance management, and swaps.",
   "license": "MIT",
   "author": "Jonathan Green",
@@ -49,8 +49,8 @@
     "typescript": "^5.3.0",
     "vitest": "^1.0.0",
     "@toon-protocol/arweave": "0.1.1",
-    "@toon-protocol/client": "0.14.9",
-    "@toon-protocol/views": "0.10.9"
+    "@toon-protocol/client": "0.14.11",
+    "@toon-protocol/views": "0.12.0"
   },
   "engines": {
     "node": ">=20"