@zerodust/mcp-server 0.2.1 → 0.3.0

package/README.md

@@ -53,9 +53,18 @@ Add to your `.claude/settings.json`:
 | `ZERODUST_API_URL` | Custom API URL | `https://api.zerodust.xyz` |
 | `ZERODUST_API_KEY` | API key for higher rate limits | - |
 | `ZERODUST_ALLOW_EXECUTE` | Set to `true` to enable sweeping | `false` |
-| `ZERODUST_PRIVATE_KEY` | Signing key for the agent's wallet | - |
 | `ZERODUST_ALLOWED_DESTINATIONS` | Comma-separated destination allowlist | own address only |
 
+Signing keys have their own section below — there are four ways to supply one,
+and exactly one may be set at a time.
+
+| Variable | Description |
+|----------|-------------|
+| `ZERODUST_SIGNER_MODULE` | Module returning a viem `LocalAccount` (Turnkey, Privy, KMS, ...) |
+| `ZERODUST_KEYSTORE_FILE` | Encrypted V3 keystore, with `ZERODUST_KEYSTORE_PASSWORD_FILE` or `ZERODUST_KEYSTORE_PASSWORD` |
+| `ZERODUST_PRIVATE_KEY_FILE` | File containing a hex private key |
+| `ZERODUST_PRIVATE_KEY` | Hex private key inline |
+
 ## Available Tools
 
 Read-only by default:
@@ -68,6 +77,7 @@ Read-only by default:
 | `zerodust_get_quote` | Get a quote for sweeping a chain |
 | `zerodust_get_sweep_status` | Check status of a submitted sweep |
 | `zerodust_list_sweeps` | List past sweeps for an address |
+| `zerodust_register_api_key` | Issue this agent its own API key, no human signup |
 
 Added when execution is enabled (see below):
 
@@ -77,27 +87,91 @@ Added when execution is enabled (see below):
 | `zerodust_sweep` | Sweep one chain to exactly zero |
 | `zerodust_sweep_all` | Sweep every chain with a balance to one destination |
 
+## Try it without moving funds
+
+Every sweep tool accepts `dryRun`. It fetches a real quote, requests the real
+EIP-712 typed data, and produces all three real signatures with your key, then
+stops before submitting. Nothing is broadcast and no balance changes.
+
+> "Do a dry run of sweeping my Arbitrum balance to Base"
+
+Use this first. It exercises the entire path an actual sweep takes — key
+handling, chain support, fee limits, signature construction — so anything
+misconfigured surfaces while your funds are still where they were.
+
+There is deliberately no testnet mode: the ZeroDust API currently serves no
+testnet chains, so a testnet flag would only produce empty chain lists and
+failing quotes. `dryRun` gives you the same confidence against production.
+
 ## Enabling sweeps
 
-Sweeping moves real funds, so it is off unless you turn it on. Set **both**:
+Sweeping moves real funds, so it is off unless you turn it on. Set
+`ZERODUST_ALLOW_EXECUTE=true` **and** exactly one signing key.
+
+Whichever you choose, the key is used locally to sign an EIP-7702 authorization
+and an EIP-712 sweep intent. It is never transmitted — only signatures reach the
+ZeroDust API.
+
+### Option 1: a signer module (recommended for production)
+
+Point ZeroDust at a module that returns a viem `LocalAccount`. This is how you
+use Turnkey, Privy, AWS KMS, or any other custody service: ZeroDust never sees a
+raw key, and it does not need to know which vendor you use.
+
+```js
+// my-signer.mjs
+export default async function createAccount() {
+  // Build a viem LocalAccount however your custody provider prefers.
+  // Any account that can sign EIP-712 typed data and EIP-7702
+  // authorizations works.
+  return await myProvider.toViemAccount();
+}
+```
 
 ```json
-{
-  "mcpServers": {
-    "zerodust": {
-      "command": "npx",
-      "args": ["@zerodust/mcp-server"],
-      "env": {
-        "ZERODUST_ALLOW_EXECUTE": "true",
-        "ZERODUST_PRIVATE_KEY": "0x..."
-      }
-    }
-  }
+"env": {
+  "ZERODUST_ALLOW_EXECUTE": "true",
+  "ZERODUST_SIGNER_MODULE": "./my-signer.mjs"
+}
+```
+
+The module is validated when it loads: if the account it returns cannot sign an
+EIP-7702 authorization, the server says so immediately rather than failing part
+way through a sweep.
+
+### Option 2: an encrypted keystore
+
+The V3 keystore format produced by `cast wallet import` and geth. Keep the
+password in a file so neither the key nor the password lives in your MCP config.
+
+```json
+"env": {
+  "ZERODUST_ALLOW_EXECUTE": "true",
+  "ZERODUST_KEYSTORE_FILE": "./agent-keystore.json",
+  "ZERODUST_KEYSTORE_PASSWORD_FILE": "./agent-keystore.pass"
+}
+```
+
+### Option 3: a key file
+
+```json
+"env": {
+  "ZERODUST_ALLOW_EXECUTE": "true",
+  "ZERODUST_PRIVATE_KEY_FILE": "./agent.key"
 }
 ```
 
-The key is used locally to sign an EIP-7702 authorization and an EIP-712 sweep
-intent. It is never transmitted — only signatures reach the ZeroDust API.
+### Option 4: an inline key
+
+Simplest, and the least private — the key sits in a config file you may well
+commit. Fine for a throwaway wallet, not for one holding anything you care about.
+
+```json
+"env": {
+  "ZERODUST_ALLOW_EXECUTE": "true",
+  "ZERODUST_PRIVATE_KEY": "0x..."
+}
+```
 
 ### Destination allowlist
 
@@ -125,9 +199,30 @@ Once configured, you can ask Claude:
 
 With execution enabled:
 
+- "Do a dry run of sweeping my Arbitrum balance to Base" (moves nothing)
 - "Sweep my Arbitrum balance to Base"
 - "Exit every chain and consolidate everything on Base"
 
+## No install: the hosted server
+
+If you only need the read-only tools, there is nothing to install. Connect to
+the hosted server by URL:
+
+```
+https://api.zerodust.xyz/mcp
+```
+
+It exposes the same tool names as this package. Sweeping is not available there,
+because sweeping needs a key and the hosted server does not have yours.
+
+## Development
+
+```bash
+npm install
+npm test        # unit tests
+npm run build
+```
+
 ## License
 
 MIT

package/dist/execute.d.ts

@@ -5,9 +5,9 @@
  * This module adds the tools that actually perform a sweep, which requires a
  * signing key and is therefore opt-in.
  *
- * Execution is disabled unless BOTH of these are set:
- *   ZERODUST_PRIVATE_KEY   - hex private key for the agent's own wallet
- *   ZERODUST_ALLOW_EXECUTE - must be exactly "true"
+ * Execution is disabled unless BOTH of these are true:
+ *   ZERODUST_ALLOW_EXECUTE=true  - explicit acknowledgement that funds can move
+ *   a signing key is configured  - see signer.ts for the four accepted forms
  *
  * Optional:
  *   ZERODUST_ALLOWED_DESTINATIONS - comma-separated address allowlist.
@@ -16,11 +16,17 @@
  * The allowlist is the main defence against prompt injection: an agent that is
  * talked into sweeping somewhere it shouldn't still cannot send funds to an
  * address the operator never approved.
+ *
+ * Every sweep tool also accepts `dryRun`, which runs the whole flow and stops
+ * before submission. That exists because there is no testnet backend to point
+ * at, so without it the only way to evaluate ZeroDust is to move real money.
  */
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type SignerSource } from "./signer.js";
 /** Resolved execution configuration, or null when execution is not enabled. */
 export interface ExecuteConfig {
-    privateKey: `0x${string}`;
+    /** Where the signing key comes from. Resolved lazily, on first use. */
+    signer: SignerSource;
     /** Lowercased allowlist. Empty means "agent's own address only". */
     allowedDestinations: string[];
 }
@@ -41,8 +47,12 @@ export declare function checkDestination(destination: string, agentAddress: stri
 /**
  * Registers the sweep-execution tools on an MCP server.
  *
- * Call only when {@link readExecuteConfig} returned a config; the read-only
- * server is fully functional without these tools.
+ * Pass the result of {@link readExecuteConfig}, including null. The tools are
+ * registered either way: an agent has to be able to *see* that sweeping exists
+ * in order to tell the user how to turn it on, and a directory that introspects
+ * the server with no environment set should still discover the real tool
+ * surface. When config is null every handler refuses before touching a key, so
+ * advertising the tool grants no capability.
  */
-export declare function registerExecuteTools(server: McpServer, config: ExecuteConfig): void;
+export declare function registerExecuteTools(server: McpServer, config: ExecuteConfig | null): void;
 //# sourceMappingURL=execute.d.ts.map

package/dist/execute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAqBzE,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IAC1B,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,GAAG,IAAI,CAoC5F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,MAAM,GAAG,IAAI,CAgBf;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CA+InF"}
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAmBnF,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,MAAM,EAAE,YAAY,CAAC;IACrB,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,GAAG,IAAI,CAwC5F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,MAAM,GAAG,IAAI,CAgBf;AA2CD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,GAAG,IAAI,CAiO1F"}

package/dist/execute.js

@@ -5,9 +5,9 @@
  * This module adds the tools that actually perform a sweep, which requires a
  * signing key and is therefore opt-in.
  *
- * Execution is disabled unless BOTH of these are set:
- *   ZERODUST_PRIVATE_KEY   - hex private key for the agent's own wallet
- *   ZERODUST_ALLOW_EXECUTE - must be exactly "true"
+ * Execution is disabled unless BOTH of these are true:
+ *   ZERODUST_ALLOW_EXECUTE=true  - explicit acknowledgement that funds can move
+ *   a signing key is configured  - see signer.ts for the four accepted forms
  *
  * Optional:
  *   ZERODUST_ALLOWED_DESTINATIONS - comma-separated address allowlist.
@@ -16,10 +16,14 @@
  * The allowlist is the main defence against prompt injection: an agent that is
  * talked into sweeping somewhere it shouldn't still cannot send funds to an
  * address the operator never approved.
+ *
+ * Every sweep tool also accepts `dryRun`, which runs the whole flow and stops
+ * before submission. That exists because there is no testnet backend to point
+ * at, so without it the only way to evaluate ZeroDust is to move real money.
  */
 import { z } from "zod";
+import { hasSignerEnv, resolveSignerSource } from "./signer.js";
 const ADDRESS_RE = /^0x[a-fA-F0-9]{40}$/;
-const PRIVATE_KEY_RE = /^0x[a-fA-F0-9]{64}$/;
 function text(body, isError = false) {
     const result = { content: [{ type: "text", text: body }] };
     if (isError)
@@ -37,21 +41,23 @@ function errorText(prefix, error) {
  * because the agent discovers it only mid-task.
  */
 export function readExecuteConfig(env = process.env) {
-    const privateKey = env.ZERODUST_PRIVATE_KEY?.trim();
     const allowExecute = env.ZERODUST_ALLOW_EXECUTE?.trim() === "true";
-    if (!privateKey && !allowExecute)
+    const signerConfigured = hasSignerEnv(env);
+    if (!signerConfigured && !allowExecute)
         return null;
     if (!allowExecute) {
-        throw new Error("ZERODUST_PRIVATE_KEY is set but ZERODUST_ALLOW_EXECUTE is not \"true\". " +
+        throw new Error("A ZeroDust signing key is configured but ZERODUST_ALLOW_EXECUTE is not \"true\". " +
             "Sweeping moves real funds, so it must be enabled explicitly.");
     }
-    if (!privateKey) {
-        throw new Error("ZERODUST_ALLOW_EXECUTE is \"true\" but ZERODUST_PRIVATE_KEY is not set.");
-    }
-    const normalizedKey = (privateKey.startsWith("0x") ? privateKey : `0x${privateKey}`);
-    if (!PRIVATE_KEY_RE.test(normalizedKey)) {
-        throw new Error("ZERODUST_PRIVATE_KEY must be a 32-byte hex private key.");
+    if (!signerConfigured) {
+        throw new Error("ZERODUST_ALLOW_EXECUTE is \"true\" but no signing key is configured. Set exactly one of:\n" +
+            "  ZERODUST_SIGNER_MODULE     module returning a viem LocalAccount (Turnkey, Privy, KMS, ...)\n" +
+            "  ZERODUST_KEYSTORE_FILE     encrypted V3 keystore, with ZERODUST_KEYSTORE_PASSWORD_FILE\n" +
+            "  ZERODUST_PRIVATE_KEY_FILE  file containing a hex private key\n" +
+            "  ZERODUST_PRIVATE_KEY       hex private key inline");
     }
+    // Throws on a partial or ambiguous signer setup.
+    const signer = resolveSignerSource(env);
     const allowedDestinations = (env.ZERODUST_ALLOWED_DESTINATIONS ?? "")
         .split(",")
         .map((entry) => entry.trim())
@@ -62,7 +68,7 @@ export function readExecuteConfig(env = process.env) {
         }
     }
     return {
-        privateKey: normalizedKey,
+        signer,
         allowedDestinations: allowedDestinations.map((entry) => entry.toLowerCase()),
     };
 }
@@ -84,33 +90,96 @@ export function checkDestination(destination, agentAddress, allowedDestinations)
     return (`Destination ${destination} is not in ZERODUST_ALLOWED_DESTINATIONS. ` +
         `Permitted: ${agentAddress} (own address), ${allowedDestinations.join(", ")}.`);
 }
+/** Suffix appended to every sweep tool description so the gate is self-documenting. */
+const GATE_NOTE = " Requires ZERODUST_ALLOW_EXECUTE=true plus a signing key; without them this tool returns an " +
+    "error and moves no funds. Pass dryRun=true to rehearse the whole flow without moving anything.";
+const DISABLED_MESSAGE = [
+    "Sweep execution is disabled on this ZeroDust MCP server, so nothing was moved.",
+    "",
+    "To enable it, restart the server with ZERODUST_ALLOW_EXECUTE=true and exactly",
+    "one signing key:",
+    "",
+    "  ZERODUST_SIGNER_MODULE=./my-signer.js",
+    "      A module whose default export returns a viem LocalAccount. This is how",
+    "      you use Turnkey, Privy, AWS KMS or any other custody service without",
+    "      putting a raw key anywhere.",
+    "",
+    "  ZERODUST_KEYSTORE_FILE=./agent-keystore.json",
+    "  ZERODUST_KEYSTORE_PASSWORD_FILE=./agent-keystore.pass",
+    "      An encrypted V3 keystore, as produced by `cast wallet import` or geth.",
+    "",
+    "  ZERODUST_PRIVATE_KEY_FILE=./agent.key",
+    "      A file containing a hex private key, so the key stays out of configs.",
+    "",
+    "  ZERODUST_PRIVATE_KEY=0x...",
+    "      A hex key inline. Simplest, and the least private of the four.",
+    "",
+    "Optionally set ZERODUST_ALLOWED_DESTINATIONS to permit sweeping to addresses",
+    "other than the agent's own. The read-only tools (balances, quotes, status)",
+    "work without any of this.",
+].join("\n");
+/** Shared shape of the dryRun parameter, so both sweep tools describe it identically. */
+const dryRunSchema = z
+    .boolean()
+    .optional()
+    .describe("Rehearse without moving funds (default false). Fetches a real quote and produces " +
+    "the real signatures, then stops before submitting. Use this to prove the setup " +
+    "works before sweeping a real balance.");
 /**
  * Registers the sweep-execution tools on an MCP server.
  *
- * Call only when {@link readExecuteConfig} returned a config; the read-only
- * server is fully functional without these tools.
+ * Pass the result of {@link readExecuteConfig}, including null. The tools are
+ * registered either way: an agent has to be able to *see* that sweeping exists
+ * in order to tell the user how to turn it on, and a directory that introspects
+ * the server with no environment set should still discover the real tool
+ * surface. When config is null every handler refuses before touching a key, so
+ * advertising the tool grants no capability.
  */
 export function registerExecuteTools(server, config) {
-    // The agent is constructed lazily so a bad key surfaces on first use with a
-    // clear message, rather than crashing the whole server at startup.
+    // The agent is constructed lazily so a bad key or an unreachable remote
+    // signer surfaces on first use with a clear message, rather than crashing the
+    // whole server at startup.
     let agentPromise = null;
-    async function getAgent() {
+    async function getAgent(enabled) {
         if (!agentPromise) {
-            agentPromise = import("@zerodust/sdk").then(({ createAgentFromPrivateKey }) => createAgentFromPrivateKey(config.privateKey, { environment: "mainnet" }));
+            agentPromise = (async () => {
+                const [{ ZeroDustAgent }, account] = await Promise.all([
+                    import("@zerodust/sdk"),
+                    enabled.signer.load(),
+                ]);
+                return new ZeroDustAgent({ account, environment: "mainnet" });
+            })();
+            // A failed load must not be cached, or a transient signer outage would
+            // wedge the server until restart.
+            agentPromise.catch(() => {
+                agentPromise = null;
+            });
         }
         return agentPromise;
     }
+    const disabled = () => text(DISABLED_MESSAGE, true);
     server.registerTool("zerodust_get_agent_address", {
-        description: "Get the wallet address this ZeroDust MCP server signs with, plus which sweep destinations are permitted. Use before sweeping to confirm which wallet will be swept.",
+        description: "Show which wallet this ZeroDust server signs with, where its key comes from, and " +
+            "which destinations it is allowed to sweep to. Call this before any sweep to confirm " +
+            "the right wallet is about to be emptied." +
+            GATE_NOTE,
+        annotations: {
+            title: "Show the signing wallet",
+            readOnlyHint: true,
+            openWorldHint: false,
+        },
         inputSchema: {},
     }, async () => {
+        if (!config)
+            return disabled();
         try {
-            const agent = await getAgent();
+            const agent = await getAgent(config);
             const allowed = config.allowedDestinations.length === 0
                 ? "own address only"
                 : `own address, ${config.allowedDestinations.join(", ")}`;
             return text([
                 `Agent address: ${agent.address}`,
+                `Signing key: ${config.signer.description}`,
                 `Execution: enabled`,
                 `Permitted destinations: ${allowed}`,
             ].join("\n"));
@@ -120,9 +189,22 @@ export function registerExecuteTools(server, config) {
         }
     });
     server.registerTool("zerodust_sweep", {
-        description: "Sweep 100% of the native gas token from one chain, leaving exactly zero balance. Moves real funds. Call zerodust_get_quote first to show the user what they will receive.",
+        description: "Empty one chain completely: move 100% of the native gas token off it and leave the " +
+            "balance at exactly zero. This is the operation an ordinary transfer cannot do, because " +
+            "sending the gas token requires keeping some gas token back to pay for the send. Use " +
+            "when the goal is to close out, wind down, decommission or fully exit a chain, or to " +
+            "recover a leftover or stranded balance that is too small to move normally. Moves real " +
+            "funds. Call zerodust_get_quote first to show the user what they will receive." +
+            GATE_NOTE,
+        annotations: {
+            title: "Empty a chain to exactly zero",
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
         inputSchema: {
-            fromChainId: z.number().int().positive().describe("Chain to sweep from"),
+            fromChainId: z.number().int().positive().describe("Chain to empty"),
             toChainId: z
                 .number()
                 .int()
@@ -133,10 +215,13 @@ export function registerExecuteTools(server, config) {
                 .regex(ADDRESS_RE)
                 .optional()
                 .describe("Destination address (defaults to the agent's own address)"),
+            dryRun: dryRunSchema,
         },
-    }, async ({ fromChainId, toChainId, destination }) => {
+    }, async ({ fromChainId, toChainId, destination, dryRun }) => {
+        if (!config)
+            return disabled();
         try {
-            const agent = await getAgent();
+            const agent = await getAgent(config);
             const target = destination ?? agent.address;
             const denial = checkDestination(target, agent.address, config.allowedDestinations);
             if (denial)
@@ -145,10 +230,26 @@ export function registerExecuteTools(server, config) {
                 fromChainId,
                 toChainId,
                 destination: target,
-            });
+            }, dryRun ? { dryRun: true } : {});
             if (!result.success) {
                 return text(`Sweep failed: ${result.error ?? "unknown error"}`, true);
             }
+            if (result.dryRun) {
+                return text([
+                    `Dry run only - nothing was submitted and chain ${fromChainId} is untouched.`,
+                    `Would send to: ${target} (chain ${toChainId})`,
+                    result.quote
+                        ? `Current balance: ${result.quote.userBalance} wei`
+                        : null,
+                    result.quote
+                        ? `Would receive: ${result.quote.estimatedReceive} wei`
+                        : null,
+                    `Signatures produced: intent, delegation, revoke (all valid, none broadcast)`,
+                    `Re-run without dryRun to execute for real.`,
+                ]
+                    .filter(Boolean)
+                    .join("\n"));
+            }
             const lines = [
                 `Sweep complete. Chain ${fromChainId} balance is now exactly zero.`,
                 `Sweep ID: ${result.sweepId}`,
@@ -163,7 +264,19 @@ export function registerExecuteTools(server, config) {
         }
     });
     server.registerTool("zerodust_sweep_all", {
-        description: "Sweep every chain that holds a sweepable balance, consolidating to one destination chain. Moves real funds across multiple chains. Call zerodust_get_balances first to show the user what will be swept.",
+        description: "Empty every chain that still holds a native gas balance, consolidating all of it onto " +
+            "one destination chain and leaving each source at exactly zero. Use when the goal is to " +
+            "clean up a wallet across chains, collect scattered leftover gas, or retire a wallet " +
+            "entirely. Moves real funds across multiple chains. Call zerodust_get_balances first to " +
+            "show the user what will be swept." +
+            GATE_NOTE,
+        annotations: {
+            title: "Empty every chain with a balance",
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
         inputSchema: {
             toChainId: z
                 .number()
@@ -175,10 +288,13 @@ export function registerExecuteTools(server, config) {
                 .regex(ADDRESS_RE)
                 .optional()
                 .describe("Destination address (defaults to the agent's own address)"),
+            dryRun: dryRunSchema,
         },
-    }, async ({ toChainId, destination }) => {
+    }, async ({ toChainId, destination, dryRun }) => {
+        if (!config)
+            return disabled();
         try {
-            const agent = await getAgent();
+            const agent = await getAgent(config);
             const target = destination ?? agent.address;
             const denial = checkDestination(target, agent.address, config.allowedDestinations);
             if (denial)
@@ -186,16 +302,23 @@ export function registerExecuteTools(server, config) {
             const result = await agent.sweepAll({
                 toChainId,
                 destination: target,
-            });
+            }, dryRun ? { dryRun: true } : {});
             const summary = result.results
-                .map((sweep) => sweep.success
-                ? `  chain ${sweep.fromChainId}: swept${sweep.txHash ? ` (${sweep.txHash})` : ""}`
-                : `  chain ${sweep.fromChainId}: failed - ${sweep.error ?? "unknown error"}`)
+                .map((sweep) => {
+                if (!sweep.success) {
+                    return `  chain ${sweep.fromChainId}: failed - ${sweep.error ?? "unknown error"}`;
+                }
+                if (sweep.dryRun) {
+                    const receive = sweep.quote ? ` (would receive ${sweep.quote.estimatedReceive} wei)` : "";
+                    return `  chain ${sweep.fromChainId}: would sweep${receive}`;
+                }
+                return `  chain ${sweep.fromChainId}: swept${sweep.txHash ? ` (${sweep.txHash})` : ""}`;
+            })
                 .join("\n");
-            return text([
-                `Swept ${result.successful}/${result.total} chains to ${target} on chain ${toChainId}.`,
-                summary,
-            ]
+            const headline = dryRun
+                ? `Dry run only - nothing was submitted. ${result.successful}/${result.total} chains would sweep to ${target} on chain ${toChainId}.`
+                : `Swept ${result.successful}/${result.total} chains to ${target} on chain ${toChainId}.`;
+            return text([headline, summary, dryRun ? "Re-run without dryRun to execute for real." : null]
                 .filter(Boolean)
                 .join("\n"));
         }

package/dist/execute.js.map

@@ -1 +1 @@
-{"version":3,"file":"execute.js","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAO7C,SAAS,IAAI,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IACzC,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChF,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAc;IAC/C,OAAO,IAAI,CAAC,GAAG,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAC5F,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC;IAEnE,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE9C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,8DAA8D,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAkB,CAAC;IACtG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,mBAAmB,GAAG,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;SAClE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,8DAA8D,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,aAAa;QACzB,mBAAmB,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,YAAoB,EACpB,mBAA6B;IAE7B,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAEzC,IAAI,MAAM,KAAK,YAAY,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CACL,eAAe,WAAW,kDAAkD;YAC5E,IAAI,YAAY,sEAAsE,CACvF,CAAC;IACJ,CAAC;IACD,OAAO,CACL,eAAe,WAAW,4CAA4C;QACtE,cAAc,YAAY,mBAAmB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAqB;IAC3E,4EAA4E;IAC5E,mEAAmE;IACnE,IAAI,YAAY,GAA0D,IAAI,CAAC;IAE/E,KAAK,UAAU,QAAQ;QACrB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,yBAAyB,EAAE,EAAE,EAAE,CAC5E,yBAAyB,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CACzE,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;QACE,WAAW,EACT,qKAAqK;QACvK,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GACX,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;gBACrC,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,gBAAgB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CACT;gBACE,kBAAkB,KAAK,CAAC,OAAO,EAAE;gBACjC,oBAAoB;gBACpB,2BAA2B,OAAO,EAAE;aACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,2KAA2K;QAC7K,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACxE,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,wEAAwE,CAAC;YACrF,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,KAAK,CAAC,UAAU,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,2DAA2D,CAAC;SACzE;KACF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;YAE5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACnF,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;gBAC/B,WAAW;gBACX,SAAS;gBACT,WAAW,EAAE,MAAuB;aACrC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,iBAAiB,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,IAAI,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,KAAK,GAAG;gBACZ,yBAAyB,WAAW,+BAA+B;gBACnE,aAAa,MAAM,CAAC,OAAO,EAAE;gBAC7B,gBAAgB,MAAM,WAAW,SAAS,GAAG;aAC9C,CAAC;YACF,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,WAAW,EACT,0MAA0M;QAC5M,WAAW,EAAE;YACX,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,qCAAqC,CAAC;YAClD,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,KAAK,CAAC,UAAU,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,2DAA2D,CAAC;SACzE;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;YAE5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACnF,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC;gBAClC,SAAS;gBACT,WAAW,EAAE,MAAuB;aACrC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;iBAC3B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,KAAK,CAAC,OAAO;gBACX,CAAC,CAAC,WAAW,KAAK,CAAC,WAAW,UAAU,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClF,CAAC,CAAC,WAAW,KAAK,CAAC,WAAW,cAAc,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAC/E;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,OAAO,IAAI,CACT;gBACE,SAAS,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,cAAc,MAAM,aAAa,SAAS,GAAG;gBACvF,OAAO;aACR;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAqB,MAAM,aAAa,CAAC;AAEnF,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAOzC,SAAS,IAAI,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IACzC,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChF,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAc;IAC/C,OAAO,IAAI,CAAC,GAAG,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAC5F,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,YAAY,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC;IACnE,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,8DAA8D,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,4FAA4F;YAC1F,gGAAgG;YAChG,4FAA4F;YAC5F,kEAAkE;YAClE,qDAAqD,CACxD,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAE,CAAC;IAEzC,MAAM,mBAAmB,GAAG,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;SAClE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,8DAA8D,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,mBAAmB,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,YAAoB,EACpB,mBAA6B;IAE7B,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAEzC,IAAI,MAAM,KAAK,YAAY,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CACL,eAAe,WAAW,kDAAkD;YAC5E,IAAI,YAAY,sEAAsE,CACvF,CAAC;IACJ,CAAC;IACD,OAAO,CACL,eAAe,WAAW,4CAA4C;QACtE,cAAc,YAAY,mBAAmB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,SAAS,GACb,8FAA8F;IAC9F,gGAAgG,CAAC;AAEnG,MAAM,gBAAgB,GAAG;IACvB,gFAAgF;IAChF,EAAE;IACF,+EAA+E;IAC/E,kBAAkB;IAClB,EAAE;IACF,yCAAyC;IACzC,8EAA8E;IAC9E,4EAA4E;IAC5E,mCAAmC;IACnC,EAAE;IACF,gDAAgD;IAChD,yDAAyD;IACzD,8EAA8E;IAC9E,EAAE;IACF,yCAAyC;IACzC,6EAA6E;IAC7E,EAAE;IACF,8BAA8B;IAC9B,sEAAsE;IACtE,EAAE;IACF,8EAA8E;IAC9E,4EAA4E;IAC5E,2BAA2B;CAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,yFAAyF;AACzF,MAAM,YAAY,GAAG,CAAC;KACnB,OAAO,EAAE;KACT,QAAQ,EAAE;KACV,QAAQ,CACP,mFAAmF;IACjF,iFAAiF;IACjF,uCAAuC,CAC1C,CAAC;AAEJ;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAA4B;IAClF,wEAAwE;IACxE,8EAA8E;IAC9E,2BAA2B;IAC3B,IAAI,YAAY,GAA0D,IAAI,CAAC;IAE/E,KAAK,UAAU,QAAQ,CAAC,OAAsB;QAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,MAAM,CAAC,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACrD,MAAM,CAAC,eAAe,CAAC;oBACvB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;iBACtB,CAAC,CAAC;gBACH,OAAO,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,CAAC,CAAC,EAAE,CAAC;YACL,uEAAuE;YACvE,kCAAkC;YAClC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE;gBACtB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAEpD,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;QACE,WAAW,EACT,mFAAmF;YACnF,sFAAsF;YACtF,0CAA0C;YAC1C,SAAS;QACX,WAAW,EAAE;YACX,KAAK,EAAE,yBAAyB;YAChC,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,KAAK;SACrB;QACD,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,OAAO,GACX,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;gBACrC,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,gBAAgB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CACT;gBACE,kBAAkB,KAAK,CAAC,OAAO,EAAE;gBACjC,gBAAgB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC3C,oBAAoB;gBACpB,2BAA2B,OAAO,EAAE;aACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,qFAAqF;YACrF,yFAAyF;YACzF,sFAAsF;YACtF,sFAAsF;YACtF,wFAAwF;YACxF,+EAA+E;YAC/E,SAAS;QACX,WAAW,EAAE;YACX,KAAK,EAAE,+BAA+B;YACtC,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACnE,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,wEAAwE,CAAC;YACrF,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,KAAK,CAAC,UAAU,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,2DAA2D,CAAC;YACxE,MAAM,EAAE,YAAY;SACrB;KACF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QACxD,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;YAE5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACnF,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAC9B;gBACE,WAAW;gBACX,SAAS;gBACT,WAAW,EAAE,MAAuB;aACrC,EACD,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,iBAAiB,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,IAAI,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,IAAI,CACT;oBACE,kDAAkD,WAAW,gBAAgB;oBAC7E,kBAAkB,MAAM,WAAW,SAAS,GAAG;oBAC/C,MAAM,CAAC,KAAK;wBACV,CAAC,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM;wBACpD,CAAC,CAAC,IAAI;oBACR,MAAM,CAAC,KAAK;wBACV,CAAC,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,gBAAgB,MAAM;wBACvD,CAAC,CAAC,IAAI;oBACR,6EAA6E;oBAC7E,4CAA4C;iBAC7C;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG;gBACZ,yBAAyB,WAAW,+BAA+B;gBACnE,aAAa,MAAM,CAAC,OAAO,EAAE;gBAC7B,gBAAgB,MAAM,WAAW,SAAS,GAAG;aAC9C,CAAC;YACF,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,WAAW,EACT,wFAAwF;YACxF,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;YACzF,mCAAmC;YACnC,SAAS;QACX,WAAW,EAAE;YACX,KAAK,EAAE,kCAAkC;YACzC,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE;YACX,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,qCAAqC,CAAC;YAClD,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,KAAK,CAAC,UAAU,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,2DAA2D,CAAC;YACxE,MAAM,EAAE,YAAY;SACrB;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;YAE5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACnF,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CACjC;gBACE,SAAS;gBACT,WAAW,EAAE,MAAuB;aACrC,EACD,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;iBAC3B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACb,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,WAAW,KAAK,CAAC,WAAW,cAAc,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;gBACpF,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,KAAK,CAAC,gBAAgB,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1F,OAAO,WAAW,KAAK,CAAC,WAAW,gBAAgB,OAAO,EAAE,CAAC;gBAC/D,CAAC;gBACD,OAAO,WAAW,KAAK,CAAC,WAAW,UAAU,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC1F,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,QAAQ,GAAG,MAAM;gBACrB,CAAC,CAAC,yCAAyC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,0BAA0B,MAAM,aAAa,SAAS,GAAG;gBACrI,CAAC,CAAC,SAAS,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,cAAc,MAAM,aAAa,SAAS,GAAG,CAAC;YAE5F,OAAO,IAAI,CACT,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,IAAI,CAAC;iBAC9E,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -14,7 +14,23 @@
  *   ZERODUST_API_KEY - Optional API key for higher rate limits
  *
  * Sweeping is read-only by default. To let an agent actually move funds, see
- * `execute.ts` for the ZERODUST_ALLOW_EXECUTE / ZERODUST_PRIVATE_KEY opt-in.
+ * `execute.ts` for the ZERODUST_ALLOW_EXECUTE opt-in and `signer.ts` for the
+ * four accepted ways to supply a signing key.
+ *
+ * Tool descriptions here lead with the problem rather than the product. An
+ * agent picks a tool by matching the user's words against a description, and
+ * "check balances" collides with every other balance tool in the client. What
+ * is actually distinctive is the impossibility ZeroDust removes: you cannot
+ * send 100% of a native gas token, because sending it costs it.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+declare const server: McpServer;
+/**
+ * The server instance with every read-only tool registered.
+ *
+ * Exported so tests can attach the execution tools and introspect the real tool
+ * surface over an in-memory transport, rather than asserting against a copy of
+ * the tool list that could drift from what agents actually see.
  */
-export {};
+export { server };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;GAgBG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAepE,QAAA,MAAM,MAAM,WAGV,CAAC;AAkjBH;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,CAAC"}