@varnir/agent-server 0.1.0

package/dist/rest.js

@@ -0,0 +1,84 @@
+import express from 'express';
+import { tokenMatches } from './bearer.js';
+import { toToolFailure, httpStatusFor, classifyBodyError } from './tool-error.js';
+import { REST_METHODS } from './rest-methods.js';
+import { log } from './log.js';
+/**
+ * The SecureAPI: the TypeScript SDK's methods mapped to HTTP, for integrating
+ * software that can only call HTTP endpoints. This is the surface that can move
+ * money, so its gates are all here and all tested: off unless enabled, a
+ * mandatory bearer token, and writes behind their own flag on top of the
+ * boot-time key guard.
+ */
+export function createRestApp(deps) {
+    const { client, config, mode } = deps;
+    if (!config.restApi.enabled)
+        throw new Error('createRestApp called while the REST API is disabled.');
+    const { token, writes } = config.restApi;
+    const methods = new Map(REST_METHODS.map(m => [m.name, m]));
+    const app = express();
+    // Unauthenticated liveness. Deliberately carries no identity and no key data.
+    app.get('/v1/health', (_req, res) => {
+        res.json({ ok: true, readOnly: mode !== 'writes', writesEnabled: writes });
+    });
+    const authorise = (req, res, next) => {
+        const header = req.header('authorization') ?? '';
+        const presented = header.startsWith('Bearer ') ? header.slice(7) : '';
+        if (!presented || !tokenMatches(presented, token)) {
+            res.status(401).json({ error: { code: 'UNAUTHORIZED', message: 'A valid bearer token is required.' } });
+            return;
+        }
+        next();
+    };
+    // I5: auth runs BEFORE the body parser on every route that takes one, so an
+    // unauthenticated caller can never reach express.json() at all - a bad body
+    // from an authenticated caller still only ever gets the structured error
+    // handler below, never express's default handler (which echoes err.stack
+    // whenever NODE_ENV isn't 'production' - nothing here sets it).
+    const jsonBody = express.json({ limit: '1mb' });
+    app.get('/v1/methods', authorise, (_req, res) => {
+        res.json({ methods: REST_METHODS.map(m => ({ name: m.name, write: m.write })) });
+    });
+    app.post('/v1/:method', authorise, jsonBody, async (req, res) => {
+        const methodName = req.params.method ?? '';
+        const method = methods.get(methodName);
+        if (!method) {
+            res.status(404).json({ error: { code: 'NOT_FOUND', message: `No such method: ${methodName}. GET /v1/methods lists what is callable.` } });
+            return;
+        }
+        if (method.write && !writes) {
+            res.status(403).json({ error: { code: 'WRITES_DISABLED', message: 'Write methods are disabled. Set VARNIR_HTTP_API_WRITES=on to enable them.' } });
+            return;
+        }
+        if (method.write && mode !== 'writes') {
+            res.status(403).json({ error: { code: 'READ_ONLY', message: 'This server is running read-only because of its key; see the server logs. Nothing was attempted.' } });
+            return;
+        }
+        try {
+            res.json({ result: await method.call(client, (req.body ?? {})) });
+        }
+        catch (e) {
+            const failure = toToolFailure(e);
+            log.warn(`REST ${method.name} failed: ${failure.code}`);
+            res.status(httpStatusFor(failure.code)).json({ error: failure });
+        }
+    });
+    // Structured JSON errors, never express's default handler - a malformed
+    // body throws inside express.json() and would otherwise reach the default
+    // final handler, which echoes err.stack (absolute paths, the operator's
+    // username, express internals) whenever NODE_ENV isn't 'production'. Must
+    // be declared after the routes/middleware it protects.
+    app.use((err, _req, res, next) => {
+        // Once a response has started, express's contract is to delegate to the
+        // default handler rather than write again - calling res.status() after
+        // headers are sent throws and drops the socket opaquely.
+        if (res.headersSent) {
+            next(err);
+            return;
+        }
+        const { status, code, message } = classifyBodyError(err);
+        res.status(status).json({ error: { code, message } });
+    });
+    return app;
+}
+//# sourceMappingURL=rest.js.map

package/dist/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../src/rest.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B,OAAO,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAC,GAAG,EAAC,MAAM,UAAU,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmE;IAC/F,MAAM,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAC,GAAG,IAAI,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACrG,MAAM,EAAC,KAAK,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,EAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mCAAmC,EAAC,EAAC,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,yEAAyE;IACzE,gEAAgE;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAE9C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC9C,GAAG,CAAC,IAAI,CAAC,EAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9D,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,UAAU,2CAA2C,EAAC,EAAC,CAAC,CAAC;YACtI,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,2EAA2E,EAAC,EAAC,CAAC,CAAC;YAC/I,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kGAAkG,EAAC,EAAC,CAAC,CAAC;YAChK,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,EAAC,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,IAAI,YAAY,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,uDAAuD;IACvD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,IAAqB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;QACjG,wEAAwE;QACxE,uEAAuE;QACvE,yDAAyD;QACzD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3C,MAAM,EAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC,EAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tool-error.d.ts

@@ -0,0 +1,31 @@
+/**
+ * A failure shaped so an assistant can EXPLAIN it rather than blindly retry.
+ * `policy: true` means the ledger refused on the key's spending policy - the
+ * feature working as designed, and something the user should hear in those
+ * terms ("your agent key's per-transaction limit blocked this"), not as an
+ * error.
+ */
+export interface ToolFailure {
+    code: string;
+    message: string;
+    retryable: boolean;
+    policy: boolean;
+}
+export declare function toToolFailure(e: unknown): ToolFailure;
+/**
+ * Classifies a body-parsing error (from `express.json({limit})`) into a
+ * status/message pair that's safe to send over the wire. `express.json`
+ * raises more than plain JSON syntax errors: `entity.too.large` (413) when
+ * the body exceeds `limit`, and `charset.unsupported`/`encoding.unsupported`
+ * (415) for a Content-Type/Content-Encoding it won't parse. Collapsing all
+ * of those to a flat 400 hides the real problem from an otherwise
+ * well-behaved caller. The message is always static - it must never echo
+ * `err.message`, which can carry request bytes.
+ */
+export declare function classifyBodyError(err: unknown): {
+    status: number;
+    code: string;
+    message: string;
+};
+export declare function httpStatusFor(code: string): number;
+//# sourceMappingURL=tool-error.d.ts.map

package/dist/tool-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-error.d.ts","sourceRoot":"","sources":["../src/tool-error.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB;AAeD,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,WAAW,CAQrD;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAe/F;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAclD"}

package/dist/tool-error.js

@@ -0,0 +1,66 @@
+import { VarnirError } from '@varnir/chain-client';
+import { redact } from './log.js';
+const POLICY_CODES = new Set([
+    'POLICY_PER_TX_EXCEEDED',
+    'POLICY_ASSET_DENIED',
+    'POLICY_RECIPIENT_DENIED',
+    'POLICY_PERIOD_CAP_EXCEEDED',
+    'POLICY_COSIGN_REQUIRED',
+    'SCOPE_DENIED',
+]);
+// I5: route every message through redact() here, at the single point every
+// HTTP body and MCP tool result flows through, so the redaction contract
+// holds by construction rather than by the current accident that no SDK
+// error happens to interpolate the signing key.
+export function toToolFailure(e) {
+    if (e instanceof VarnirError) {
+        return { code: e.code, message: redact(e.message), retryable: e.retryable, policy: POLICY_CODES.has(e.code) };
+    }
+    if (e instanceof Error) {
+        return { code: 'UNKNOWN', message: redact(e.message), retryable: false, policy: false };
+    }
+    return { code: 'UNKNOWN', message: redact(String(e)), retryable: false, policy: false };
+}
+/**
+ * Classifies a body-parsing error (from `express.json({limit})`) into a
+ * status/message pair that's safe to send over the wire. `express.json`
+ * raises more than plain JSON syntax errors: `entity.too.large` (413) when
+ * the body exceeds `limit`, and `charset.unsupported`/`encoding.unsupported`
+ * (415) for a Content-Type/Content-Encoding it won't parse. Collapsing all
+ * of those to a flat 400 hides the real problem from an otherwise
+ * well-behaved caller. The message is always static - it must never echo
+ * `err.message`, which can carry request bytes.
+ */
+export function classifyBodyError(err) {
+    const e = err;
+    if (e?.type === 'entity.too.large') {
+        return { status: 413, code: 'PAYLOAD_TOO_LARGE', message: 'Request body exceeds the 1MB limit.' };
+    }
+    if (e?.type === 'charset.unsupported' || e?.type === 'encoding.unsupported') {
+        return { status: 415, code: 'UNSUPPORTED_MEDIA_TYPE', message: 'Unsupported request charset or content-encoding.' };
+    }
+    // Anything else from the body parser (bad JSON syntax, etc.) - preserve a
+    // genuine 4xx status if the error carries one, clamped so an unrelated
+    // thrown value can never turn into an unexpected 5xx here. The message
+    // stays static either way.
+    const rawStatus = typeof e?.status === 'number' ? e.status : typeof e?.statusCode === 'number' ? e.statusCode : 400;
+    const status = rawStatus >= 400 && rawStatus < 500 ? rawStatus : 400;
+    return { status, code: 'VALIDATION', message: 'Malformed JSON body.' };
+}
+export function httpStatusFor(code) {
+    if (POLICY_CODES.has(code))
+        return 403;
+    switch (code) {
+        case 'VALIDATION': return 400;
+        case 'NOT_FOUND': return 404;
+        case 'NOT_OWNER': return 403;
+        case 'INSUFFICIENT_BALANCE': return 409;
+        case 'ALREADY_SETTLED': return 409;
+        case 'EXPIRED': return 409;
+        case 'TREASURY_GATED': return 409;
+        case 'CONTRACT_REJECTED': return 422;
+        case 'NODE_UNREACHABLE': return 503;
+        default: return 500;
+    }
+}
+//# sourceMappingURL=tool-error.js.map

package/dist/tool-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-error.js","sourceRoot":"","sources":["../src/tool-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAC,MAAM,EAAC,MAAM,UAAU,CAAC;AAgBhC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,wBAAwB;IACxB,qBAAqB;IACrB,yBAAyB;IACzB,4BAA4B;IAC5B,wBAAwB;IACxB,cAAc;CACf,CAAC,CAAC;AAEH,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC;QAC7B,OAAO,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAC,CAAC;IAC9G,CAAC;IACD,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;QACvB,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC;IACxF,CAAC;IACD,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,GAAkF,CAAC;IAC7F,IAAI,CAAC,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACnC,OAAO,EAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,qCAAqC,EAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,EAAE,IAAI,KAAK,qBAAqB,IAAI,CAAC,EAAE,IAAI,KAAK,sBAAsB,EAAE,CAAC;QAC5E,OAAO,EAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,kDAAkD,EAAC,CAAC;IACpH,CAAC;IACD,0EAA0E;IAC1E,uEAAuE;IACvE,uEAAuE;IACvE,2BAA2B;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IACpH,MAAM,MAAM,GAAG,SAAS,IAAI,GAAG,IAAI,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,OAAO,EAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IACvC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,YAAY,CAAC,CAAC,OAAO,GAAG,CAAC;QAC9B,KAAK,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC;QAC7B,KAAK,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC;QAC7B,KAAK,sBAAsB,CAAC,CAAC,OAAO,GAAG,CAAC;QACxC,KAAK,iBAAiB,CAAC,CAAC,OAAO,GAAG,CAAC;QACnC,KAAK,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC;QAC3B,KAAK,gBAAgB,CAAC,CAAC,OAAO,GAAG,CAAC;QAClC,KAAK,mBAAmB,CAAC,CAAC,OAAO,GAAG,CAAC;QACrC,KAAK,kBAAkB,CAAC,CAAC,OAAO,GAAG,CAAC;QACpC,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+import type { VarnirClient } from '@varnir/chain-client';
+import type { GuardMode } from './guard.js';
+export interface ToolContext {
+    client: VarnirClient;
+    identity: string;
+    /** The UNTAGGED on-wire public key — see key-match.ts and Task 3's preamble. */
+    publicKeyHex: string;
+    mode: GuardMode;
+    /**
+     * `KeyClassification.reason` from guard.ts's `classifyKey` - the ACTUAL
+     * cause this key ended up in `mode` (owner key, a read-only/offledger role,
+     * no spend policy, or not attached at all). A write-denial message that
+     * guesses among those causes instead of reporting this is liable to name
+     * the wrong one - see WRITE_DENIED_MESSAGE's history.
+     */
+    reason: string;
+}
+export interface ToolDef {
+    name: string;
+    title: string;
+    description: string;
+    /** True for anything that signs. Withheld when the guard degraded to read-only. */
+    write: boolean;
+    inputSchema: z.ZodRawShape;
+    handler(args: Record<string, unknown>): Promise<unknown>;
+}
+export declare const WRITE_DENIED_MESSAGE = "This server is running read-only, so it will not sign anything. Nothing was attempted.";
+export declare const REFUSE_DENIED_MESSAGE = "This server refused to start signing anything: its own key is not attached to the configured identity on the ledger at all, so no write could ever succeed. Nothing was attempted.";
+export declare function buildTools(ctx: ToolContext): ToolDef[];
+//# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,EAAC,YAAY,EAAc,MAAM,sBAAsB,CAAC;AAIpE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;IAC3B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AASD,eAAO,MAAM,oBAAoB,2FACyD,CAAC;AAE3F,eAAO,MAAM,qBAAqB,uLACoJ,CAAC;AAmDvL,wBAAgB,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,EAAE,CA8MtD"}

package/dist/tools.js

@@ -0,0 +1,223 @@
+import { z } from 'zod';
+import { chainConfig, fromRawAmount } from '@varnir/chain-client';
+import { toToolFailure } from './tool-error.js';
+import { samePublicKey } from './key-match.js';
+// Generic fallbacks only - guarded() below appends the REAL reason
+// (ctx.reason, straight from guard.ts's classifyKey) rather than guessing
+// among the several causes that can put a key into read-only or refuse.
+// classifyKey has FOUR distinct read-only causes (owner key, a read-only-role
+// key, an offledger-role key, or a policy-less key) and a wrong guess here
+// once told an assistant its key was "the owner key or has no spend policy"
+// when it was actually a role the contracts refuse regardless of policy.
+export const WRITE_DENIED_MESSAGE = 'This server is running read-only, so it will not sign anything. Nothing was attempted.';
+export const REFUSE_DENIED_MESSAGE = 'This server refused to start signing anything: its own key is not attached to the configured identity on the ledger at all, so no write could ever succeed. Nothing was attempted.';
+// Amounts are STRING-ONLY on purpose. A JS number serializes very small
+// amounts as exponential notation ('1e-7') and very large ones the same way
+// ('1e+21'), and both fail toRawAmount's plain-decimal check; a large token
+// amount also loses float precision before it ever gets there. A string
+// carries the exact decimal digits the ledger will scale.
+const leg = z.object({
+    chain: z.string().describe("Chain alias ('niles', 'sep', 'tbnb') or ledger code ('TRX-NILE')."),
+    token: z.string().optional().describe("The token's L1 contract address; omit for the chain's native asset."),
+    amount: z.string().describe("Human decimal amount, as a STRING, e.g. '12.5' - not a JS number."),
+});
+/** Wrap a handler so a throw becomes a structured failure the assistant can explain. */
+function guarded(write, mode, reason, schema, fn) {
+    const shape = z.object(schema);
+    return async (args) => {
+        if (write && mode === 'refuse') {
+            // Unreachable in this server's own index.ts today (it exits the process
+            // on 'refuse' before buildTools ever runs) - kept as defence-in-depth
+            // for any other embedder of buildTools that doesn't do the same.
+            return { status: 'error', error: { code: 'REFUSED', message: `${REFUSE_DENIED_MESSAGE} ${reason}`, retryable: false, policy: false } };
+        }
+        if (write && mode === 'read-only') {
+            return { status: 'error', error: { code: 'READ_ONLY', message: `${WRITE_DENIED_MESSAGE} ${reason}`, retryable: false, policy: false } };
+        }
+        const parsed = shape.safeParse(args);
+        if (!parsed.success) {
+            const detail = parsed.error.issues.map(i => `${i.path.join('.') || '(root)'}: ${i.message}`).join('; ');
+            return { status: 'error', error: { code: 'VALIDATION', message: `Invalid arguments: ${detail}`, retryable: false, policy: false } };
+        }
+        try {
+            return await fn(parsed.data);
+        }
+        catch (e) {
+            return { status: 'error', error: toToolFailure(e) };
+        }
+    };
+}
+/** Best-effort decimals for a chain/token pair, for converting a raw on-ledger integer to a human string. Null when it can't be resolved. */
+async function resolveDecimals(client, chain, token) {
+    try {
+        const { ledgerCode, nativeDecimals } = chainConfig(chain);
+        if (!token)
+            return nativeDecimals;
+        const described = await client.getToken(ledgerCode, token);
+        return described?.decimals ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+export function buildTools(ctx) {
+    const { client, mode, reason } = ctx;
+    const def = (name, title, description, write, inputSchema, fn) => ({ name, title, description, write, inputSchema, handler: guarded(write, mode, reason, inputSchema, fn) });
+    return [
+        // ---------- reads ----------
+        def('get_identity', 'Get identity', 'Read this Varnir identity and its on-ledger stream. Use it to confirm which account you are acting for before doing anything else.', false, {}, async () => client.getIdentityStream()),
+        def('get_balances', 'Get balances', "List this identity's Layer-2 balances by network and token. Each entry's `raw` figure is the running total, not what a new trade or transfer could freely use: this identity's own open resting orders may reserve part of it, reflected in that entry's `reserved`/`available` fields. Check `available`, not just the raw total, before proposing a trade or a transfer.", false, {}, async () => client.getBalances()),
+        def('list_tokens', 'List tokens', 'List the tokens the Varnir ledger knows about, with their networks, contract addresses and decimals. Use it to resolve a symbol a user mentions into the contract address the other tools expect.', false, {}, async () => client.listTokens()),
+        def('get_order_book', 'Get order book', 'Read the open exchange order book: every live order with what it gives, what it wants, and its order hash. Use the order hash with fill_order.', false, {}, async () => client.getOrderBook()),
+        def('list_transactions', 'List transactions', 'List recent transactions for this identity. The SDK does not guarantee any ordering. On a network whose transaction index is not available yet (e.g. freshly reset), this reports `indexed: false` with an empty list instead of an array - check `indexed` before treating the result as history.', false, { from: z.number().optional().describe('Index to start from.'), limit: z.number().optional().describe('How many to return.') }, async (a) => {
+            const result = await client.listTransactions({ from: a.from, limit: a.limit });
+            if (!Array.isArray(result)) {
+                return {
+                    indexed: false, transactions: [],
+                    note: "The ledger's transaction index is not available yet on this network. This is not an error and does not mean there is no history - it means it cannot be listed yet.",
+                };
+            }
+            return { indexed: true, transactions: result };
+        }),
+        def('get_transfer', 'Get transfer', "Read one transfer's L1 settlement receipt by the `umid` that `send` or `transfer_on_ledger` returned. The SDK's `getTransfer` returns `null` both when the umid is unknown AND while a submitted transfer is still working its way through the gateway's presign queue - a real transfer's receipt took about two minutes to appear after submission when this was last verified live, so a null result seconds after sending is normal and does NOT mean anything failed. This call does not wait or poll for that - it reports the truth as of right now, so check back again shortly rather than assuming a failure. When a receipt exists, `confirmed.success === false` is also a real, non-error terminal state - Varnir.ConfirmWithdraw writes that for a withdrawal that failed on L1 and was refunded back onto Layer 2, not only for one that went through. LIMITATION: given only a umid, this cannot tell 'still settling' apart from 'held for a treasury co-sign and will never settle without a second key confirming it' - that distinction is only visible in `send`'s/`transfer_on_ledger`'s own return at submission time (its `awaiting_cosign` status and `proposal`), not by looking the umid up afterwards. If the assistant already knows from that earlier response that the transfer was held, trust that over a 'not settled yet' result here.", false, { umid: z.string().describe('The umid returned by `send` or `transfer_on_ledger`.') }, async (a) => {
+            const receipt = await client.getTransfer(a.umid);
+            if (!receipt) {
+                return {
+                    status: 'not_settled',
+                    note: "No receipt yet. Real settlement on this network has taken about two minutes end to end, so this alone is not evidence of a problem - check again shortly. It also does not rule out that this transfer is being held for a treasury co-sign, which will never resolve on its own - if send/transfer_on_ledger reported `awaiting_cosign` for this umid, trust that over this result.",
+                };
+            }
+            if (receipt.success === false) {
+                return {
+                    status: 'failed',
+                    confirmed: receipt.confirmed ?? null,
+                    note: 'This transfer failed on L1 and was refunded back onto Layer 2 - see `confirmed` for the terminal detail. This is not a "not settled yet" case; it will not resolve differently on a retry.',
+                };
+            }
+            // Receipt.receipt is typed `unknown` (minigate-transport.ts) - it's
+            // the gateway's raw broadcast receipt. Verified live shape carries
+            // `txid`; narrow it defensively rather than assume the field exists.
+            const raw = receipt.receipt;
+            return {
+                status: 'settled',
+                txid: typeof raw?.txid === 'string' ? raw.txid : null,
+                gasFee: receipt.confirmed?.gasFee ?? null,
+                confirmed: receipt.confirmed ?? null,
+            };
+        }),
+        def('get_spend_policy', 'Get spend policy', "Read the on-ledger spending policy that bounds THIS key: per-transaction ceilings, rolling-period caps, the recipient allowlist and the co-sign threshold. Explain these limits to the user when a write is refused. If `keyFound` is false, this key's policy could not be read at all - that is NOT the same as having no limits, and writes should be treated as unverified. Note this reports the LIMITS, not how much remains - remaining allowance is not readable yet.", false, {}, async () => {
+            const keys = await client.listLedgerKeys();
+            const mine = keys.find(k => samePublicKey(k.publicKey, ctx.publicKeyHex));
+            if (!mine) {
+                return {
+                    identity: ctx.identity,
+                    mode: ctx.mode,
+                    keyFound: false,
+                    role: null,
+                    scopes: [],
+                    policy: null,
+                    note: "This server's own key was not found among this identity's ledger authorities, so its policy is UNKNOWN - this does not mean it has no spending limits.",
+                };
+            }
+            return {
+                identity: ctx.identity,
+                mode: ctx.mode,
+                keyFound: true,
+                role: mine.role,
+                scopes: mine.scopes,
+                policy: mine.policy,
+                note: 'These are the configured limits. Remaining allowance against a rolling-period cap is not readable through the SDK yet.',
+            };
+        }),
+        // ---------- writes ----------
+        def('create_order', 'Create order', 'Create and post a signed exchange order: you give one asset and want another, at the rate implied by the two amounts. Returns the order hash. This only signs the order and posts it to the off-ledger order book - nothing moves and no spending-policy check runs yet. The give-leg policy check happens only when a taker fills it, so an order over this key\'s spending policy will rest on the book and simply never settle rather than being refused up front.', true, { give: leg, want: leg, expireMs: z.number().optional().describe('Absolute ms-since-epoch expiry. Defaults to one hour out.') }, async (a) => {
+            const signed = await client.createOrder({
+                give: a.give, want: a.want,
+                expireMs: a.expireMs ?? Date.now() + 3_600_000,
+            });
+            await client.postOrder(signed);
+            return { status: 'ok', orderHash: signed.orderHash, order: signed.order };
+        }),
+        def('fill_order', 'Fill order', 'Fill an existing order from the book by its order hash, in whole or in part. Refused if your side of the swap exceeds this key\'s spending policy.', true, { orderHash: z.string().describe('The order hash from get_order_book.'),
+            fillAmount: z.string().optional().describe('Partial fill amount; omit to fill entirely.'),
+            minReceive: z.string().optional().describe('Minimum you will accept, as slippage protection.') }, async (a) => {
+            const book = await client.getOrderBook();
+            const entry = book.find(e => e.orderHash === a.orderHash);
+            if (!entry || !entry.sig) {
+                return { status: 'error', error: { code: 'NOT_FOUND', message: `No open order with hash ${String(a.orderHash)} is in the book. Re-read get_order_book; it may have been filled or cancelled.`, retryable: false, policy: false } };
+            }
+            const signed = { order: entry.order, sig: entry.sig, orderHash: entry.orderHash };
+            const r = await client.fillOrder(signed, {
+                fillAmount: a.fillAmount,
+                minReceive: a.minReceive,
+            });
+            return { status: 'ok', umid: r.umid };
+        }),
+        def('market_order', 'Market order', "Spend a given asset to buy another at whatever the book currently offers, within a slippage bound. Use when the user wants to trade now rather than post a price. Filling only PART of the amount is a normal v1 outcome, not an error - always read `status` and `unfilledGive` rather than assuming a full fill. When NOTHING can be filled at all, this returns an error explaining why (no crossing liquidity, the book raced you, etc.) - read the error, do not treat it as a completed no-op. Amounts are reported as human decimal strings where this identity's token registry can resolve the asset's decimals; when it cannot, only the raw smallest-unit integer is available and `decimals` is null.", true, { give: leg, wantAsset: z.object({ network: z.string(), token: z.string().optional() }),
+            maxSlippageBps: z.number().optional().describe('Max slippage in basis points; 100 = 1%.') }, async (a) => {
+            const give = a.give;
+            const wantAsset = a.wantAsset;
+            const r = await client.marketOrder({
+                give: give, wantAsset: wantAsset,
+                maxSlippageBps: a.maxSlippageBps,
+            });
+            const giveDecimals = await resolveDecimals(client, give.chain, give.token);
+            const wantDecimals = await resolveDecimals(client, wantAsset.network, wantAsset.token);
+            const view = (raw, decimals) => ({
+                raw, decimals, amount: decimals === null ? null : fromRawAmount(raw, decimals),
+            });
+            // marketOrder() has no return path that produces an empty `fills` today
+            // - every zero-fill case throws instead (no crossing liquidity, raced
+            // out, unsigned, or dust-indivisible; see orders.test.ts), so 'error'
+            // is what an assistant actually sees for a true zero fill. This branch
+            // is defence-in-depth only, for MarketOrderResult's own documented "0
+            // or 1 entries" contract should a future SDK version return one.
+            const status = r.fills.length === 0 ? 'unfilled' : r.unfilledGive !== '0' ? 'partial' : 'ok';
+            return {
+                status,
+                fills: r.fills,
+                give: view(r.spentGive, giveDecimals),
+                want: view(r.receivedWant, wantDecimals),
+                unfilledGive: view(r.unfilledGive, giveDecimals),
+            };
+        }),
+        def('cancel_order', 'Cancel order', 'Cancel one of this identity\'s own open orders by its order hash.', true, { orderHash: z.string().describe('The order hash to cancel.') }, async (a) => ({ status: 'ok', umid: (await client.cancelOrder(a.orderHash)).umid })),
+        def('send', 'Send / withdraw', "Send funds out to a Layer-1 address - a withdrawal. IMPORTANT: this can succeed WITHOUT moving money if the amount is over this key's co-sign threshold or a treasury limit; read the returned `status` before telling the user anything. Refused outright if it breaks a per-transaction or period cap.", true, { chain: z.string().describe("Chain alias ('niles', 'sep', 'tbnb')."),
+            to: z.string().describe('The Layer-1 recipient address.'),
+            amount: z.string().describe("Human decimal amount, as a STRING, e.g. '0.01' - not a JS number."),
+            token: z.string().optional().describe("The token's L1 contract address; omit for the native asset.") }, async (a) => {
+            const wallet = await client.getWallet(a.chain);
+            const t = await client.send({
+                wallet, to: a.to, amount: a.amount, token: a.token,
+            });
+            // send() does NOT throw POLICY_COSIGN_REQUIRED. A held transfer is a
+            // SUCCESS carrying a proposal. Reporting it as sent would be a lie.
+            if (t.proposal) {
+                return {
+                    status: 'awaiting_cosign', umid: t.umid, proposal: t.proposal,
+                    message: 'The transaction was recorded but NO MONEY HAS MOVED. It is over this key\'s co-sign threshold or a treasury limit, so it is held as a proposal until a co-signing key confirms it. Tell the user their funds have NOT been sent and that approval is needed.',
+                };
+            }
+            return { status: 'sent', umid: t.umid };
+        }),
+        def('transfer_on_ledger', 'Transfer on Varnir', "Transfer funds to another Varnir identity on Layer 2 - instant and gas-free, staying inside Varnir. Use this instead of `send` when the recipient is a Varnir identity rather than a Layer-1 address. IMPORTANT: like `send`, this can succeed WITHOUT moving money if the amount is over this key's co-sign threshold or a treasury limit; read the returned `status` before telling the user anything.", true, { to: z.string().describe('The recipient Varnir IDENTITY (not an L1 address).'),
+            chain: z.string().describe("Which chain's pooled balance to move."),
+            amount: z.string().describe("Human decimal amount, as a STRING, e.g. '12.5' - not a JS number."),
+            token: z.string().optional().describe("The token's L1 contract address; omit for the native asset.") }, async (a) => {
+            const t = await client.transferOnLedger({
+                to: a.to, chain: a.chain,
+                amount: a.amount, token: a.token,
+            });
+            // Mirrors send(): a treasury-gated transfer succeeds without moving
+            // anything and comes back carrying a proposal instead of throwing.
+            if (t.proposal) {
+                return {
+                    status: 'awaiting_cosign', umid: t.umid, proposal: t.proposal,
+                    message: 'The transfer was recorded but NO MONEY HAS MOVED. It is over this key\'s co-sign threshold or a treasury limit, so it is held as a proposal until a co-signing key confirms it. Tell the user their funds have NOT moved and that approval is needed.',
+                };
+            }
+            return { status: 'ok', umid: t.umid };
+        }),
+    ];
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAC,WAAW,EAAE,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAC,aAAa,EAAC,MAAM,gBAAgB,CAAC;AA6B7C,mEAAmE;AACnE,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAC/B,wFAAwF,CAAC;AAE3F,MAAM,CAAC,MAAM,qBAAqB,GAChC,oLAAoL,CAAC;AAEvL,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,0DAA0D;AAC1D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC/F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC5G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;CACjG,CAAC,CAAC;AAEH,wFAAwF;AACxF,SAAS,OAAO,CAAC,KAAc,EAAE,IAAe,EAAE,MAAc,EAAE,MAAqB,EAAE,EAAoD;IAC3I,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,KAAK,EAAE,IAA6B,EAAoB,EAAE;QAC/D,IAAI,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,wEAAwE;YACxE,sEAAsE;YACtE,iEAAiE;YACjE,OAAO,EAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,qBAAqB,IAAI,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC,CAAC;QACrI,CAAC;QACD,IAAI,KAAK,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,EAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,oBAAoB,IAAI,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC,CAAC;QACtI,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxG,OAAO,EAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC,CAAC;QAClI,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,IAA+B,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,6IAA6I;AAC7I,KAAK,UAAU,eAAe,CAAC,MAAoB,EAAE,KAAa,EAAE,KAAc;IAChF,IAAI,CAAC;QACH,MAAM,EAAC,UAAU,EAAE,cAAc,EAAC,GAAG,WAAW,CAAC,KAAc,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,OAAO,cAAc,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,SAAS,EAAE,QAAQ,IAAI,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAgB;IACzC,MAAM,EAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAC,GAAG,GAAG,CAAC;IAEnC,MAAM,GAAG,GAAG,CACV,IAAY,EAAE,KAAa,EAAE,WAAmB,EAAE,KAAc,EAChE,WAA0B,EAAE,EAAoD,EACvE,EAAE,CAAC,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,EAAC,CAAC,CAAC;IAEvH,OAAO;QACL,8BAA8B;QAC9B,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,oIAAoI,EAAE,KAAK,EAAE,EAAE,EACjL,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAEzC,GAAG,CAAC,cAAc,EAAE,cAAc,EAChC,4WAA4W,EAAE,KAAK,EAAE,EAAE,EACvX,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAEnC,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,mMAAmM,EAAE,KAAK,EAAE,EAAE,EAC9O,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAElC,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gJAAgJ,EAAE,KAAK,EAAE,EAAE,EACjM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAEpC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAC1C,oSAAoS,EAAE,KAAK,EAC3S,EAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAC,EAC5H,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,IAA0B,EAAE,KAAK,EAAE,CAAC,CAAC,KAA2B,EAAC,CAAC,CAAC;YACzH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;oBAChC,IAAI,EAAE,qKAAqK;iBAC5K,CAAC;YACJ,CAAC;YACD,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAC,CAAC;QAC/C,CAAC,CAAC;QAEJ,GAAG,CAAC,cAAc,EAAE,cAAc,EAChC,2yCAA2yC,EAAE,KAAK,EAClzC,EAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAAC,EACnF,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,MAAM,EAAE,aAAa;oBACrB,IAAI,EAAE,sXAAsX;iBAC7X,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;oBACpC,IAAI,EAAE,4LAA4L;iBACnM,CAAC;YACJ,CAAC;YACD,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,MAAM,GAAG,GAAG,OAAO,CAAC,OAA8C,CAAC;YACnE,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBACrD,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI;gBACzC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;aACrC,CAAC;QACJ,CAAC,CAAC;QAEJ,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EACxC,+cAA+c,EAAE,KAAK,EAAE,EAAE,EAC1d,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,QAAQ,EAAE,KAAK;oBACf,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,wJAAwJ;iBAC/J,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,wHAAwH;aAC/H,CAAC;QACJ,CAAC,CAAC;QAEJ,+BAA+B;QAC/B,GAAG,CAAC,cAAc,EAAE,cAAc,EAChC,ucAAuc,EAAE,IAAI,EAC7c,EAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC,EAAC,EAC7H,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;gBACtC,IAAI,EAAE,CAAC,CAAC,IAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAa;gBAC5C,QAAQ,EAAG,CAAC,CAAC,QAA+B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACvE,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,EAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAC,CAAC;QAC1E,CAAC,CAAC;QAEJ,GAAG,CAAC,YAAY,EAAE,YAAY,EAC5B,oJAAoJ,EAAE,IAAI,EAC1J,EAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;YACzF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC,EAAC,EAChG,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO,EAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,gFAAgF,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC,CAAC;YACjO,CAAC;YACD,MAAM,MAAM,GAAG,EAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAgB,CAAC;YAC/F,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;gBACvC,UAAU,EAAE,CAAC,CAAC,UAAgC;gBAC9C,UAAU,EAAE,CAAC,CAAC,UAAgC;aAC/C,CAAC,CAAC;YACH,OAAO,EAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAC,CAAC;QACtC,CAAC,CAAC;QAEJ,GAAG,CAAC,cAAc,EAAE,cAAc,EAChC,mrBAAmrB,EAAE,IAAI,EACzrB,EAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAC,CAAC;YACnF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EAAC,EAC3F,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuD,CAAC;YACvE,MAAM,SAAS,GAAG,CAAC,CAAC,SAA8C,CAAC;YACnE,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;gBACjC,IAAI,EAAE,IAAa,EAAE,SAAS,EAAE,SAAkB;gBAClD,cAAc,EAAE,CAAC,CAAC,cAAoC;aACvD,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3E,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YACvF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAuB,EAAE,EAAE,CAAC,CAAC;gBACtD,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC;aAC/E,CAAC,CAAC;YACH,wEAAwE;YACxE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,iEAAiE;YACjE,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7F,OAAO;gBACL,MAAM;gBACN,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC;gBACrC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC;gBACxC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC;aACjD,CAAC;QACJ,CAAC,CAAC;QAEJ,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,mEAAmE,EAAE,IAAI,EAC3G,EAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAC,EAC7D,KAAK,EAAC,CAAC,EAAC,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAmB,CAAC,CAAC,CAAC,IAAI,EAAC,CAAC,CAAC;QAE5F,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAC3B,0SAA0S,EAAE,IAAI,EAChT,EAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YACnE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;YAChG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC,EAAC,EACtG,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC;YACxD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAY,EAAE,MAAM,EAAE,CAAC,CAAC,MAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,KAA2B;aAC7F,CAAC,CAAC;YACH,qEAAqE;YACrE,oEAAoE;YACpE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO;oBACL,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBAC7D,OAAO,EAAE,8PAA8P;iBACxQ,CAAC;YACJ,CAAC;YACD,OAAO,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAC,CAAC;QACxC,CAAC,CAAC;QAEJ,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,EAC5C,0YAA0Y,EAAE,IAAI,EAChZ,EAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YAC7E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;YAChG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC,EAAC,EACtG,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC;gBACtC,EAAE,EAAE,CAAC,CAAC,EAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAc;gBAC3C,MAAM,EAAE,CAAC,CAAC,MAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,KAA2B;aACjE,CAAC,CAAC;YACH,oEAAoE;YACpE,mEAAmE;YACnE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO;oBACL,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBAC7D,OAAO,EAAE,uPAAuP;iBACjQ,CAAC;YACJ,CAAC;YACD,OAAO,EAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAC,CAAC;QACtC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@varnir/agent-server",
+  "version": "0.1.0",
+  "license": "MIT",
+  "description": "Self-hosted Varnir agent server: MCP tools and an off-by-default REST API over a policy-scoped agent key.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Varnir/varnir.git",
+    "directory": "apps/agent-server"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "bin": {
+    "varnir-agent-server": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "express": "^4.21.2",
+    "zod": "^3.24.1",
+    "@varnir/chain-client": "0.2.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "@varnir/tsconfig": "0.1.0"
+  },
+  "engines": {
+    "node": ">=20.19.4"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "lint": "echo \"no lint configured yet\"",
+    "clean": "rm -rf dist",
+    "start": "node dist/index.js",
+    "test": "tsx test/config.test.ts && tsx test/key-match.test.ts && tsx test/guard.test.ts && tsx test/tool-error.test.ts && tsx test/tools-read.test.ts && tsx test/tools-write.test.ts && tsx test/rest.test.ts && tsx test/rest-methods.test.ts && tsx test/mcp-http.test.ts",
+    "test:e2e": "tsx test/e2e.ts"
+  }
+}