@toon-protocol/client-mcp 0.9.1 → 0.10.1

package/dist/daemon.js

@@ -4,7 +4,7 @@ import {
   ClientRunner,
   registerRoutes,
   scaffoldFirstRun
-} from "./chunk-2GQXKV2O.js";
+} from "./chunk-ZIJNTR5Y.js";
 import {
   ControlClient,
   ToonClient,
@@ -17,7 +17,7 @@ import {
   resolveConfig,
   spawnDaemonDetached,
   waitForReady
-} from "./chunk-WAE4H47W.js";
+} from "./chunk-5Z74D23J.js";
 import "./chunk-32QD72IL.js";
 import "./chunk-DLYE6U2Z.js";
 import "./chunk-LR7W2ISE.js";

package/dist/index.d.ts

@@ -114,8 +114,20 @@ interface PublishUnsignedRequest {
  * `requestBlobStorage`).
  */
 interface UploadMediaRequest {
-    /** Base64-encoded media bytes. */
-    dataBase64: string;
+    /**
+     * Base64-encoded media bytes. Mutually exclusive with `filePath`: supply
+     * EXACTLY ONE. Inline base64 streams the whole payload through the model
+     * context — prefer `filePath` for anything but tiny blobs.
+     */
+    dataBase64?: string;
+    /**
+     * Absolute path the daemon `fs.readFile`s to source the media bytes off disk
+     * (avoids materializing base64 as a tool argument). Mutually exclusive with
+     * `dataBase64`: supply EXACTLY ONE. The path is resolved and, when an upload
+     * root is configured (`TOON_CLIENT_UPLOAD_ROOT` / `uploadAllowedRoot`), must
+     * resolve inside it.
+     */
+    filePath?: string;
     /** MIME type (default 'application/octet-stream'). */
     mime?: string;
     /**
@@ -765,6 +777,14 @@ interface DaemonConfigFile {
      * Env override: `TOON_CLIENT_ARWEAVE_GATEWAYS` (comma-separated).
      */
     arweaveGateways?: string[];
+    /**
+     * Optional allowed-root for `toon_upload`'s `filePath` reads. When set, a
+     * supplied `filePath` is resolved and rejected unless it lies inside this
+     * directory — bounding which filesystem locations the daemon will read on an
+     * agent's behalf. When unset, any absolute path is read (the path is still
+     * resolved). Env override: `TOON_CLIENT_UPLOAD_ROOT`.
+     */
+    uploadAllowedRoot?: string;
 }
 interface ResolvedDaemonConfig {
     httpPort: number;
@@ -809,6 +829,11 @@ interface ResolvedDaemonConfig {
      * fall back to the shared default when it is absent.
      */
     arweaveGateways?: string[];
+    /**
+     * Resolved allowed-root for `toon_upload` `filePath` reads, when configured.
+     * Absent means no boundary (any absolute path is read, still resolved).
+     */
+    uploadAllowedRoot?: string;
 }
 /**
  * Password used to encrypt an auto-generated keystore (#251 first-run
@@ -1093,6 +1118,14 @@ declare class ClientRunner {
      * entirely server-side.
      */
     uploadMedia(req: UploadMediaRequest): Promise<UploadMediaResponse>;
+    /**
+     * Read media bytes off disk for an upload `filePath`. The path is resolved
+     * and, when an `uploadAllowedRoot` is configured, must resolve inside it —
+     * bounding which filesystem locations the daemon reads on an agent's behalf.
+     * A missing/unreadable file (or an out-of-bounds path) surfaces as an
+     * `InvalidPayloadError` (HTTP 400), not an unhandled crash.
+     */
+    private readUploadFile;
     /** Validate + assemble a signable event template (with replaceable merge). */
     private buildTemplate;
     /** Latest self-authored event of `kind` currently in the merged read buffer. */

package/dist/index.js

@@ -8,7 +8,7 @@ import {
   hasConfiguredIdentity,
   registerRoutes,
   scaffoldFirstRun
-} from "./chunk-2GQXKV2O.js";
+} from "./chunk-ZIJNTR5Y.js";
 import {
   PUBLISH_TOOL,
   TOOL_DEFINITIONS,
@@ -18,7 +18,7 @@ import {
   buildFollowListFilter,
   buildProfileFilter,
   dispatchTool
-} from "./chunk-5E7BCL4B.js";
+} from "./chunk-KWQKOCE4.js";
 import {
   ControlApiError,
   ControlClient,
@@ -36,7 +36,7 @@ import {
   resolveMnemonic,
   spawnDaemonDetached,
   waitForReady
-} from "./chunk-WAE4H47W.js";
+} from "./chunk-5Z74D23J.js";
 import "./chunk-32QD72IL.js";
 import "./chunk-DLYE6U2Z.js";
 import "./chunk-LR7W2ISE.js";

package/dist/mcp.js

@@ -4,7 +4,7 @@ import {
   APP_RESOURCE_URI,
   TOOL_DEFINITIONS,
   dispatchTool
-} from "./chunk-5E7BCL4B.js";
+} from "./chunk-KWQKOCE4.js";
 import {
   ControlClient,
   defaultConfigPath,
@@ -12,7 +12,7 @@ import {
   readConfigFile,
   spawnDaemonDetached,
   waitForReady
-} from "./chunk-WAE4H47W.js";
+} from "./chunk-5Z74D23J.js";
 import "./chunk-32QD72IL.js";
 import "./chunk-DLYE6U2Z.js";
 import "./chunk-LR7W2ISE.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toon-protocol/client-mcp",
-  "version": "0.9.1",
+  "version": "0.10.1",
   "description": "Always-on local daemon + MCP server letting a Claude agent (Desktop or Code) act as a TOON Protocol client: pay-to-write publishing, free reads, channel/balance management, and swaps.",
   "license": "MIT",
   "author": "Jonathan Green",
@@ -49,8 +49,8 @@
     "typescript": "^5.3.0",
     "vitest": "^1.0.0",
     "@toon-protocol/arweave": "0.1.1",
-    "@toon-protocol/views": "0.9.1",
-    "@toon-protocol/client": "0.14.6"
+    "@toon-protocol/client": "0.14.7",
+    "@toon-protocol/views": "0.10.1"
   },
   "engines": {
     "node": ">=20"