@zerodust/mcp-server 0.2.1 → 0.3.0

package/dist/signer.js

@@ -0,0 +1,270 @@
+/**
+ * @fileoverview Signer resolution for the ZeroDust MCP server
+ *
+ * Sweeping requires a key that can produce an EIP-712 signature and two
+ * EIP-7702 authorizations. The original server accepted exactly one form of
+ * that key: a raw hex private key in an environment variable, which in practice
+ * means pasting a hot key into an MCP client's JSON config. Operators running
+ * agents with real balances decline to do that, which is precisely the
+ * population with the most stranded gas.
+ *
+ * So there are four ways in, in descending order of precedence:
+ *
+ *   ZERODUST_SIGNER_MODULE     a module that returns a viem LocalAccount
+ *   ZERODUST_KEYSTORE_FILE     an encrypted V3 keystore + password
+ *   ZERODUST_PRIVATE_KEY_FILE  a file containing a hex key
+ *   ZERODUST_PRIVATE_KEY       a hex key inline (unchanged, still supported)
+ *
+ * The module hook is the important one. Rather than depending on Turnkey,
+ * Privy, AWS KMS and every future custody vendor, this server loads any module
+ * that hands back a viem `LocalAccount` — which every one of those vendors
+ * already knows how to produce. ZeroDust stays out of the custody business and
+ * the integration surface stops growing.
+ */
+import { readFile } from "node:fs/promises";
+import { createDecipheriv, pbkdf2 as pbkdf2Cb, scrypt as scryptCb, timingSafeEqual, } from "node:crypto";
+import { pathToFileURL } from "node:url";
+import { isAbsolute, resolve as resolvePath } from "node:path";
+import { keccak256 } from "viem";
+// Hand-rolled rather than promisify()'d: both functions are overloaded, and
+// promisify resolves to the shortest overload, which drops the options argument
+// scrypt needs for its memory limit.
+function scrypt(secret, salt, keylen, options) {
+    return new Promise((resolve, reject) => {
+        scryptCb(secret, salt, keylen, options, (error, key) => error ? reject(error) : resolve(key));
+    });
+}
+function pbkdf2(secret, salt, iterations, keylen, digest) {
+    return new Promise((resolve, reject) => {
+        pbkdf2Cb(secret, salt, iterations, keylen, digest, (error, key) => error ? reject(error) : resolve(key));
+    });
+}
+const PRIVATE_KEY_RE = /^0x[a-fA-F0-9]{64}$/;
+/** Env var names that supply a key, in precedence order. */
+const SIGNER_ENV_VARS = [
+    "ZERODUST_SIGNER_MODULE",
+    "ZERODUST_KEYSTORE_FILE",
+    "ZERODUST_PRIVATE_KEY_FILE",
+    "ZERODUST_PRIVATE_KEY",
+];
+/** True when any signer variable is present, used to detect a partial setup. */
+export function hasSignerEnv(env) {
+    return SIGNER_ENV_VARS.some((name) => Boolean(env[name]?.trim()));
+}
+/**
+ * Picks the signer source from the environment.
+ *
+ * @returns the source, or null when no signer variable is set
+ * @throws when more than one is set, or when the chosen one is incomplete
+ */
+export function resolveSignerSource(env = process.env) {
+    const present = SIGNER_ENV_VARS.filter((name) => Boolean(env[name]?.trim()));
+    if (present.length === 0)
+        return null;
+    if (present.length > 1) {
+        throw new Error(`Multiple signing keys configured (${present.join(", ")}). ` +
+            "Set exactly one so it is unambiguous which key signs.");
+    }
+    const [chosen] = present;
+    switch (chosen) {
+        case "ZERODUST_SIGNER_MODULE":
+            return moduleSource(env.ZERODUST_SIGNER_MODULE.trim());
+        case "ZERODUST_KEYSTORE_FILE":
+            return keystoreSource(env);
+        case "ZERODUST_PRIVATE_KEY_FILE":
+            return keyFileSource(env.ZERODUST_PRIVATE_KEY_FILE.trim());
+        default:
+            return keyEnvSource(env.ZERODUST_PRIVATE_KEY.trim());
+    }
+}
+// ============ Sources ============
+/**
+ * Loads a caller-supplied module and uses whatever account it returns.
+ *
+ * Accepted shapes, in order: a default export that is a function, a named
+ * `createAccount` function, or a default export that is already an account.
+ * Functions may be async, which is what lets a remote signer do a round trip
+ * (fetch a Turnkey/Privy session, resolve a KMS key) before returning.
+ */
+function moduleSource(specifier) {
+    return {
+        kind: "module",
+        description: `signer module ${specifier}`,
+        load: async () => {
+            // Relative paths resolve against cwd, not against this file, because the
+            // operator writes them relative to where they launch the server.
+            const target = specifier.startsWith(".") || isAbsolute(specifier)
+                ? pathToFileURL(resolvePath(process.cwd(), specifier)).href
+                : specifier;
+            let mod;
+            try {
+                mod = (await import(target));
+            }
+            catch (error) {
+                throw new Error(`ZERODUST_SIGNER_MODULE could not be loaded (${specifier}): ` +
+                    `${error instanceof Error ? error.message : String(error)}`);
+            }
+            const factory = mod.default ?? mod.createAccount;
+            const candidate = typeof factory === "function" ? await factory() : factory;
+            return assertLocalAccount(candidate, specifier);
+        },
+    };
+}
+/**
+ * Decrypts a Web3 Secret Storage (V3) keystore — the format produced by
+ * `cast wallet import`, geth, and most key management tooling. The password can
+ * come from a variable or, better, from a file that never enters the MCP config.
+ */
+function keystoreSource(env) {
+    const file = env.ZERODUST_KEYSTORE_FILE.trim();
+    const inlinePassword = env.ZERODUST_KEYSTORE_PASSWORD;
+    const passwordFile = env.ZERODUST_KEYSTORE_PASSWORD_FILE?.trim();
+    if (inlinePassword === undefined && !passwordFile) {
+        throw new Error("ZERODUST_KEYSTORE_FILE is set but no password was provided. " +
+            "Set ZERODUST_KEYSTORE_PASSWORD_FILE (preferred) or ZERODUST_KEYSTORE_PASSWORD.");
+    }
+    if (inlinePassword !== undefined && passwordFile) {
+        throw new Error("Both ZERODUST_KEYSTORE_PASSWORD and ZERODUST_KEYSTORE_PASSWORD_FILE are set. Choose one.");
+    }
+    return {
+        kind: "keystore",
+        description: `keystore ${file}`,
+        load: async () => {
+            const password = passwordFile
+                ? // Trailing newlines are near-universal in password files and are
+                    // essentially never part of the password.
+                    (await readFileText(passwordFile, "ZERODUST_KEYSTORE_PASSWORD_FILE")).replace(/\r?\n$/, "")
+                : inlinePassword;
+            const raw = await readFileText(file, "ZERODUST_KEYSTORE_FILE");
+            const privateKey = await decryptV3Keystore(raw, password);
+            return toAccount(privateKey);
+        },
+    };
+}
+/** Reads a hex private key from a file, so it never appears in a config file. */
+function keyFileSource(file) {
+    return {
+        kind: "key-file",
+        description: `key file ${file}`,
+        load: async () => {
+            const contents = (await readFileText(file, "ZERODUST_PRIVATE_KEY_FILE")).trim();
+            return toAccount(normalizeKey(contents, `the contents of ${file}`));
+        },
+    };
+}
+function keyEnvSource(value) {
+    return {
+        kind: "key-env",
+        description: "ZERODUST_PRIVATE_KEY (inline)",
+        load: async () => toAccount(normalizeKey(value, "ZERODUST_PRIVATE_KEY")),
+    };
+}
+// ============ Helpers ============
+async function readFileText(file, label) {
+    try {
+        return await readFile(file, "utf8");
+    }
+    catch (error) {
+        throw new Error(`${label} could not be read (${file}): ` +
+            `${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+function normalizeKey(value, label) {
+    const candidate = (value.startsWith("0x") ? value : `0x${value}`);
+    if (!PRIVATE_KEY_RE.test(candidate)) {
+        throw new Error(`${label} must be a 32-byte hex private key.`);
+    }
+    return candidate;
+}
+async function toAccount(privateKey) {
+    const { privateKeyToAccount } = await import("viem/accounts");
+    return privateKeyToAccount(privateKey);
+}
+/**
+ * Verifies a module returned something that can actually sign a sweep.
+ *
+ * `signAuthorization` is the load-bearing one: without it the EIP-7702
+ * delegation cannot be produced, and a signer missing it would otherwise fail
+ * deep inside a sweep instead of at startup.
+ */
+function assertLocalAccount(candidate, specifier) {
+    const account = candidate;
+    if (!account || typeof account !== "object") {
+        throw new Error(`ZERODUST_SIGNER_MODULE (${specifier}) did not return an account. ` +
+            "Export a default function returning a viem LocalAccount.");
+    }
+    const missing = ["address", "signTypedData", "signAuthorization"].filter((key) => {
+        const value = account[key];
+        return key === "address" ? typeof value !== "string" : typeof value !== "function";
+    });
+    if (missing.length > 0) {
+        throw new Error(`ZERODUST_SIGNER_MODULE (${specifier}) returned an object missing ${missing.join(", ")}. ` +
+            "ZeroDust needs a viem LocalAccount that can sign EIP-712 typed data and " +
+            "EIP-7702 authorizations.");
+    }
+    return account;
+}
+/**
+ * Decrypts a V3 keystore to its private key.
+ *
+ * Implemented directly on node:crypto rather than pulling in a keystore
+ * library, because the whole format is one KDF, one AES-CTR decryption, and one
+ * keccak MAC check, and this server's dependency surface is worth keeping thin.
+ */
+async function decryptV3Keystore(raw, password) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("Keystore file is not valid JSON.");
+    }
+    // Older tooling capitalises the key.
+    const crypto = parsed.crypto ?? parsed.Crypto;
+    if (!crypto)
+        throw new Error("Keystore file has no \"crypto\" section.");
+    if (parsed.version !== 3) {
+        throw new Error(`Unsupported keystore version ${parsed.version}. Only V3 is supported.`);
+    }
+    if (crypto.cipher !== "aes-128-ctr") {
+        throw new Error(`Unsupported keystore cipher "${crypto.cipher}". Expected aes-128-ctr.`);
+    }
+    const derived = await deriveKey(crypto, password);
+    const ciphertext = Buffer.from(crypto.ciphertext, "hex");
+    // MAC covers the second half of the derived key plus the ciphertext. A
+    // mismatch means the password is wrong (or the file was tampered with).
+    const mac = keccak256(Buffer.concat([derived.subarray(16, 32), ciphertext])).slice(2);
+    const expected = Buffer.from(crypto.mac.replace(/^0x/, ""), "hex");
+    const actual = Buffer.from(mac, "hex");
+    if (expected.length !== actual.length || !timingSafeEqual(expected, actual)) {
+        throw new Error("Keystore MAC mismatch - the password is incorrect.");
+    }
+    const decipher = createDecipheriv("aes-128-ctr", derived.subarray(0, 16), Buffer.from(crypto.cipherparams.iv, "hex"));
+    const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return normalizeKey(plaintext.toString("hex"), "The decrypted keystore key");
+}
+async function deriveKey(crypto, password) {
+    const params = crypto.kdfparams;
+    const salt = Buffer.from(String(params.salt), "hex");
+    const dklen = Number(params.dklen ?? 32);
+    const secret = Buffer.from(password, "utf8");
+    if (crypto.kdf === "scrypt") {
+        const N = Number(params.n);
+        const r = Number(params.r);
+        const p = Number(params.p);
+        // Node caps scrypt memory at 32MB by default, which the standard geth
+        // parameters (N=262144, r=8) blow straight through. Size it from the
+        // parameters instead of failing with an opaque error.
+        const maxmem = 256 * N * r;
+        return scrypt(secret, salt, dklen, { N, r, p, maxmem });
+    }
+    if (crypto.kdf === "pbkdf2") {
+        const prf = String(params.prf ?? "hmac-sha256");
+        if (prf !== "hmac-sha256") {
+            throw new Error(`Unsupported keystore PRF "${prf}". Expected hmac-sha256.`);
+        }
+        return pbkdf2(secret, salt, Number(params.c), dklen, "sha256");
+    }
+    throw new Error(`Unsupported keystore KDF "${crypto.kdf}". Expected scrypt or pbkdf2.`);
+}
+//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,MAAM,IAAI,QAAQ,EAClB,MAAM,IAAI,QAAQ,EAClB,eAAe,GAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,SAAS,EAA+B,MAAM,MAAM,CAAC;AAE9D,4EAA4E;AAC5E,gFAAgF;AAChF,qCAAqC;AACrC,SAAS,MAAM,CACb,MAAc,EACd,IAAY,EACZ,MAAc,EACd,OAAsB;IAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACrD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CACrC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CACb,MAAc,EACd,IAAY,EACZ,UAAkB,EAClB,MAAc,EACd,MAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAChE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CACrC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAa7C,4DAA4D;AAC5D,MAAM,eAAe,GAAG;IACtB,wBAAwB;IACxB,wBAAwB;IACxB,2BAA2B;IAC3B,sBAAsB;CACd,CAAC;AAEX,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,GAAsB;IACjD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,qCAAqC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAC1D,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC;IAEzB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,wBAAwB;YAC3B,OAAO,YAAY,CAAC,GAAG,CAAC,sBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,wBAAwB;YAC3B,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7B,KAAK,2BAA2B;YAC9B,OAAO,aAAa,CAAC,GAAG,CAAC,yBAA0B,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D;YACE,OAAO,YAAY,CAAC,GAAG,CAAC,oBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,oCAAoC;AAEpC;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,SAAiB;IACrC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,iBAAiB,SAAS,EAAE;QACzC,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,yEAAyE;YACzE,iEAAiE;YACjE,MAAM,MAAM,GACV,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAChD,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI;gBAC3D,CAAC,CAAC,SAAS,CAAC;YAEhB,IAAI,GAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAA4B,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+CAA+C,SAAS,KAAK;oBAC3D,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,aAAa,CAAC;YACjD,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAE5E,OAAO,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,sBAAuB,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,GAAG,CAAC,0BAA0B,CAAC;IACtD,MAAM,YAAY,GAAG,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE,CAAC;IAEjE,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,YAAY,IAAI,EAAE;QAC/B,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,YAAY;gBAC3B,CAAC,CAAC,iEAAiE;oBACjE,0CAA0C;oBAC1C,CAAC,MAAM,YAAY,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC7F,CAAC,CAAC,cAAe,CAAC;YAEpB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,YAAY,IAAI,EAAE;QAC/B,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChF,OAAO,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,oCAAoC;AAEpC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,uBAAuB,IAAI,KAAK;YACtC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAQ,CAAC;IACzE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAAe;IACtC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9D,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,SAAkB,EAAE,SAAiB;IAC/D,MAAM,OAAO,GAAG,SAA8C,CAAC;IAE/D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,+BAA+B;YACjE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAI,CAAC,SAAS,EAAE,eAAe,EAAE,mBAAmB,CAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1F,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACxF,0EAA0E;YAC1E,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IAED,OAAO,OAAuB,CAAC;AACjC,CAAC;AAmBD;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,QAAgB;IAC5D,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,qCAAqC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,0BAA0B,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEzD,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,aAAa,EACb,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EACvB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAC3C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEjF,OAAO,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,4BAA4B,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAsB,EAAE,QAAgB;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE7C,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAE3B,sEAAsE;QACtE,qEAAqE;QACrE,sDAAsD;QACtD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3B,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,0BAA0B,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,GAAG,+BAA+B,CAAC,CAAC;AAC1F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zerodust/mcp-server",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "mcpName": "io.github.andresdefi/zerodust",
   "description": "MCP server that lets an AI agent sweep its own wallet to exactly zero on 25+ EVM chains, with no gas left stranded.",
   "type": "module",
@@ -18,7 +18,9 @@
     "dev": "tsc --watch",
     "start": "node dist/index.js",
     "clean": "rm -rf dist",
-    "prepublishOnly": "npm run clean && npm run build"
+    "prepublishOnly": "npm run clean && npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest"
   },
   "keywords": [
     "zerodust",
@@ -58,12 +60,13 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.2.0",
-    "@zerodust/sdk": "^0.1.0",
+    "@zerodust/sdk": "^0.2.0",
     "viem": "^2.21.0",
     "zod": "^3.22.0"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",
-    "typescript": "^5.3.3"
+    "typescript": "^5.3.3",
+    "vitest": "^1.6.1"
   }
 }