aotrust-mcp 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GitSerge-crypto
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,107 @@
-# Temporary Holding Version
+# aotrust-mcp
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<!-- mcp-name: aotrust-mcp -->
+
+Local stdio MCP server for **AOTrust** notarization: cryptographic
+proof-of-existence for AI artifacts, wired into any MCP-capable agent
+(Claude Code, Codex, and friends) with a one-line config.
+
+Five tools over the AOTrust HTTP API (`https://api.aotrust.link`):
+
+| Tool | Cost | What it does |
+|---|---|---|
+| `notary_status` | free | job_id → `{status, result{pdr_b64, payment_hash, near_anchor_tx,...}}` (upstream JSON verbatim) |
+| `notary_verify` | free | full server-side PDR verification by base64 bundle |
+| `notary_lookup` | free | 8-hex Shield ID → record (server-form 400 guard locally for bad shape) |
+| `notary_free` | free | UNPAID notarization, no wallet, 5/IP/24h — pass `work_hash` OR `content` (≤60KB) |
+| `notary_notarize` | **$0.01 USDC per receipt** | PAID via x402 (challenge → EIP-3009 sign → retry); **requires `AOTRUST_EVM_PRIVATE_KEY`** |
+
+All tool replies pass the upstream JSON through **verbatim** — no invented
+fields, error codes unmodified (`FREE_TIER_LIMIT_REACHED` on free tier is
+quota, not a defect).
+
+## Install & run
+
+```bash
+npm install -g aotrust-mcp   # or: npx aotrust-mcp
+aotrust-mcp                  # starts the stdio MCP server
+aotrust-mcp --tools          # print tool-spec JSON and exit
+aotrust-mcp --version        # 0.1.0
+```
+
+## Claude Code config
+
+```json
+{
+  "mcpServers": {
+    "aotrust": {
+      "command": "npx",
+      "args": ["-y", "aotrust-mcp"],
+      "env": {
+        "AOTRUST_EVM_PRIVATE_KEY": "0x..."
+      }
+    }
+  }
+}
+```
+
+Free tools work with no env at all; only `notary_notarize` needs the key.
+
+## Environment variables
+
+| Var | Required | Meaning |
+|---|---|---|
+| `AOTRUST_EVM_PRIVATE_KEY` | only for `notary_notarize` | EVM wallet private key (0x-prefixed). Consumed by the x402 EIP-3009 signer. **Never logged or shipped in errors.** |
+| `AOTRUST_BASE_URL` | optional | API base, default `https://api.aotrust.link` (no `/v1` suffix — the client appends paths) |
+
+## Paid path notes (v0.1)
+
+- **Base-only.** The HTTP `/notarize` rail settles EIP-3009 USDC on Base
+  (`eip155:8453`). Solana payments exist only on the remote MCP server
+  (`link.aotrust/notary` in the registry) and are out of scope for this
+  stdio wrapper in v0.1 — point Solana-capable agents at the remote server.
+- challenge/sign/retry is done by `@x402/fetch` (challenge from the server's
+  402 response, EIP-3009 signature, retry with the `x-payment` header).
+  No facilitator client-side.
+- `AOTRUST_EVM_PRIVATE_KEY` never appears in logs, error messages, or
+  tool output. A missing key yields a plain
+  `MISSING_PRIVATE_KEY / set AOTRUST_EVM_PRIVATE_KEY ...` reply before any
+  network call.
+
+## Limits
+
+- Free tier: **5 notarizations per IP per 24h** (1000/day global). 429 →
+  wait, or switch to the paid rail.
+- Paid: flat **$0.01** per receipt, no subscription.
+- Verification: free forever, offline-capable via the 239-byte PDR format.
+
+## Verification of proofs
+
+PDRs are Ed25519-signed 239-byte bundles anchored daily in Merkle trees on
+NEAR mainnet. Verify any receipt at <https://verify.aotrust.link>, or with
+`notary_verify` / `notary_lookup` from this server.
+
+## Docs
+
+- AOTrust docs: <https://docs.aotrust.link>
+- Python SDK: <https://pypi.org/project/aotrust-protocol/>
+- x402: <https://x402.org>
+
+## License
+
+MIT
+
+---
+
+## aotrust-mcp (кратко, RU)
+
+Локальный stdio MCP-сервер нотариата AOTrust — 5 инструментов поверх HTTP API:
+`notary_status`, `notary_verify`, `notary_lookup` (бесплатные, read-only),
+`notary_free` (бесплатный PDR, лимит 5/IP/24h) и `notary_notarize`
+(**$0.01 USDC за PDR**, платный; требует `AOTRUST_EVM_PRIVATE_KEY`).
+Ключ расходуется только на EIP-3009-подпись через x402 и никогда не попадает
+в логи/ошибки. Платная рельса v0.1 — **только Base**; Solana доступна через
+удалённый MCP-сервер из registry (`link.aotrust/notary`). Конфиг Claude Code —
+одна строка (`npx aotrust-mcp`) + env-ключ. Ответы тулов — upstream JSON
+без изменений; коды ошибок (`FREE_TIER_LIMIT_REACHED` и др.) пробрасываются
+как есть.

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+/**
+ * cli.ts — stdio bootstrap for aotrust-mcp.
+ *
+ * Flags:
+ *   --tools    print JSON tool-specs and exit 0
+ *   --version  print package version and exit 0
+ * default: start the MCP stdio server (src/index.ts).
+ */
+import { createRequire } from "node:module";
+import { TOOL_SPECS } from "./tools.js";
+import { runServer } from "./index.js";
+const require = createRequire(import.meta.url);
+const args = process.argv.slice(2);
+if (args.includes("--version")) {
+    const pkg = require("../package.json");
+    process.stdout.write(`${pkg.version}\n`);
+    process.exit(0);
+}
+if (args.includes("--tools")) {
+    process.stdout.write(`${JSON.stringify({ tools: TOOL_SPECS }, null, 2)}\n`);
+    process.exit(0);
+}
+await runServer();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;IAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,SAAS,EAAE,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,29 @@
+export declare class ApiError extends Error {
+    /** HTTP status of the failed call. */
+    readonly status: number;
+    /** Upstream error code, verbatim (never rephrased). */
+    readonly code: string;
+    /** Upstream raw body, verbatim JSON if parseable. */
+    readonly body: unknown;
+    constructor(status: number, code: string, body: unknown);
+}
+export declare function getBaseUrl(): string;
+/** quote_plus equivalent: '+' → %2B, '/' → %2F, '=' → %3D (percent-tolerant path). */
+export declare function encodePdrB64(pdr_b64: string): string;
+export type UpstreamResponse = {
+    status: number;
+    body: unknown;
+};
+/** GET /v1/status/{job_id} — passthrough, never touched. */
+export declare function getStatus(jobId: string): Promise<UpstreamResponse>;
+/** GET /v1/pdr/verify/{pdr_b64} — pdr_b64 quote_plus-encoded. */
+export declare function verifyPdr(pdrB64: string): Promise<UpstreamResponse>;
+/**
+ * GET /v1/shield/lookup/{shield_id} — shield_id must be EXACTLY 8 hex.
+ * Non-conforming shape is rejected LOCALLY with the server's verbatim error
+ * form (400/INVALID_SHIELD_ID/"Shield ID must be 8 hexadecimal characters")
+ * — zero network for a call the server would reject anyway.
+ */
+export declare function shieldLookup(shieldId: string): Promise<UpstreamResponse>;
+/** POST /v1/shield/free — body verbatim from the tool layer. */
+export declare function shieldFree(body: Record<string, unknown>): Promise<UpstreamResponse>;

package/dist/client.js

@@ -0,0 +1,104 @@
+/**
+ * client.ts — HTTP layer for the AOTrust API.
+ *
+ * Base URL comes from env AOTRUST_BASE_URL (default https://api.aotrust.link).
+ * No host constants live in tool code — env-aware, same pattern as the server.
+ *
+ * URL-encoding contract (verified against the live API, 16.10):
+ *   /v1/pdr/verify/{pdr_b64} expects Python quote_plus equivalents:
+ *   '+' → %2B, '/' → %2F, '=' → '%3D'. The API regex tolerates the percent
+ *   escapes; encodeURI/encodeURIComponent default sets are NOT sufficient
+ *   (encodeURIComponent leaves '+' intact and encodes '/' as %2F — that part
+ *   matches, but '+' must be escaped too because '+' in a URL path decodes
+ *   to a space in some frontends).
+ *
+ * Everything about response bodies is passed through verbatim: the AOTrust
+ * error fields (error / message / detail) are load-bearing for clients.
+ */
+import { AOTRUST_BASE_URL_ENV, DEFAULT_BASE_URL, INVALID_SHIELD_ID_ERR, INVALID_SHIELD_ID_MSG, USER_AGENT } from "./env.js";
+export class ApiError extends Error {
+    /** HTTP status of the failed call. */
+    status;
+    /** Upstream error code, verbatim (never rephrased). */
+    code;
+    /** Upstream raw body, verbatim JSON if parseable. */
+    body;
+    constructor(status, code, body) {
+        super(code);
+        this.name = "ApiError";
+        this.status = status;
+        this.code = code;
+        this.body = body;
+    }
+}
+export function getBaseUrl() {
+    const env = process.env[AOTRUST_BASE_URL_ENV];
+    const raw = env && env.trim().length > 0 ? env : DEFAULT_BASE_URL;
+    return raw.replace(/\/+$/, "");
+}
+/** quote_plus equivalent: '+' → %2B, '/' → %2F, '=' → %3D (percent-tolerant path). */
+export function encodePdrB64(pdr_b64) {
+    return pdr_b64
+        .replace(/\+/g, "%2B")
+        .replace(/\//g, "%2F")
+        .replace(/=/g, "%3D");
+}
+async function requestJson(method, path, body, extraHeaders) {
+    const url = `${getBaseUrl()}${path}`;
+    const headers = {
+        "User-Agent": USER_AGENT,
+        ...(extraHeaders ?? {}),
+    };
+    let payload;
+    if (body !== undefined) {
+        headers["Content-Type"] = "application/json";
+        payload = JSON.stringify(body);
+    }
+    const res = await fetch(url, {
+        method,
+        headers,
+        body: payload,
+    });
+    let parsed = null;
+    const text = await res.text();
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        parsed = text;
+    }
+    if (!res.ok) {
+        const obj = (parsed && typeof parsed === "object" ? parsed : {});
+        const code = typeof obj["error"] === "string" ? obj["error"] : `HTTP_${res.status}`;
+        throw new ApiError(res.status, code, parsed);
+    }
+    return { status: res.status, body: parsed };
+}
+/** GET /v1/status/{job_id} — passthrough, never touched. */
+export async function getStatus(jobId) {
+    return requestJson("GET", `/v1/status/${encodeURIComponent(jobId)}`);
+}
+/** GET /v1/pdr/verify/{pdr_b64} — pdr_b64 quote_plus-encoded. */
+export async function verifyPdr(pdrB64) {
+    return requestJson("GET", `/v1/pdr/verify/${encodePdrB64(pdrB64)}`);
+}
+/**
+ * GET /v1/shield/lookup/{shield_id} — shield_id must be EXACTLY 8 hex.
+ * Non-conforming shape is rejected LOCALLY with the server's verbatim error
+ * form (400/INVALID_SHIELD_ID/"Shield ID must be 8 hexadecimal characters")
+ * — zero network for a call the server would reject anyway.
+ */
+export async function shieldLookup(shieldId) {
+    if (!/^[0-9a-fA-F]{8}$/.test(shieldId)) {
+        throw new ApiError(400, INVALID_SHIELD_ID_ERR, {
+            error: INVALID_SHIELD_ID_ERR,
+            message: INVALID_SHIELD_ID_MSG,
+        });
+    }
+    return requestJson("GET", `/v1/shield/lookup/${encodeURIComponent(shieldId)}`);
+}
+/** POST /v1/shield/free — body verbatim from the tool layer. */
+export async function shieldFree(body) {
+    return requestJson("POST", "/v1/shield/free", body);
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE5H,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,sCAAsC;IAC7B,MAAM,CAAS;IACxB,uDAAuD;IAC9C,IAAI,CAAS;IACtB,qDAAqD;IAC5C,IAAI,CAAU;IAEvB,YAAY,MAAc,EAAE,IAAY,EAAE,IAAa;QACrD,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAClE,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,OAAO;SACX,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAOD,KAAK,UAAU,WAAW,CACxB,MAAsB,EACtB,IAAY,EACZ,IAAc,EACd,YAAqC;IAErC,MAAM,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAA2B;QACtC,YAAY,EAAE,UAAU;QACxB,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;KACxB,CAAC;IACF,IAAI,OAA2B,CAAC;IAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM;QACN,OAAO;QACP,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;QAC5F,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACpF,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa;IAC3C,OAAO,WAAW,CAAC,KAAK,EAAE,cAAc,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc;IAC5C,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAkB,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE;YAC7C,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,EAAE,qBAAqB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA6B;IAC5D,OAAO,WAAW,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC"}

package/dist/env.d.ts

@@ -0,0 +1,13 @@
+/**
+ * env.ts — env-var names and defaults (single source of truth).
+ *
+ * AOTRUST_EVM_PRIVATE_KEY is NEVER read into a string here or printed
+ * anywhere; the x402 wrapper consumes it through its own signer.
+ */
+export declare const DEFAULT_BASE_URL = "https://api.aotrust.link";
+export declare const AOTRUST_BASE_URL_ENV = "AOTRUST_BASE_URL";
+export declare const AOTRUST_EVM_PRIVATE_KEY_ENV = "AOTRUST_EVM_PRIVATE_KEY";
+export declare const USER_AGENT = "aotrust-mcp/0.1.0 (+https://aotrust.link)";
+/** Server-form error for an invalid shield_id (verbatim, load-bearing). */
+export declare const INVALID_SHIELD_ID_ERR = "INVALID_SHIELD_ID";
+export declare const INVALID_SHIELD_ID_MSG = "Shield ID must be 8 hexadecimal characters";

package/dist/env.js

@@ -0,0 +1,14 @@
+/**
+ * env.ts — env-var names and defaults (single source of truth).
+ *
+ * AOTRUST_EVM_PRIVATE_KEY is NEVER read into a string here or printed
+ * anywhere; the x402 wrapper consumes it through its own signer.
+ */
+export const DEFAULT_BASE_URL = "https://api.aotrust.link";
+export const AOTRUST_BASE_URL_ENV = "AOTRUST_BASE_URL";
+export const AOTRUST_EVM_PRIVATE_KEY_ENV = "AOTRUST_EVM_PRIVATE_KEY";
+export const USER_AGENT = "aotrust-mcp/0.1.0 (+https://aotrust.link)";
+/** Server-form error for an invalid shield_id (verbatim, load-bearing). */
+export const INVALID_SHIELD_ID_ERR = "INVALID_SHIELD_ID";
+export const INVALID_SHIELD_ID_MSG = "Shield ID must be 8 hexadecimal characters";
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,2CAA2C,CAAC;AAEtE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,4CAA4C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1 @@
+export declare function runServer(): Promise<void>;

package/dist/index.js

@@ -0,0 +1,181 @@
+/**
+ * index.ts — MCP stdio server registration (five tools).
+ *
+ * Responses follow src/tools.ts: upstream JSON verbatim in structuredContent
+ * + content[0]; errors passed through with code + message (no rephrasing).
+ * Registration uses ZodRawShape (plain objects) — the @modelcontextprotocol/sdk
+ * 1.32 `registerTool` contract (not z.object wrappers).
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { toolNotaryFree, toolNotaryLookup, toolNotaryStatus, toolNotaryVerify, toolNotaryNotarize, } from "./tools.js";
+const RAW_STATUS = { job_id: z.string().min(1).describe("Job id from notarization response") };
+const RAW_VERIFY = { pdr_b64: z.string().min(1).describe("PDR bundle in base64") };
+const RAW_LOOKUP = { shield_id: z.string().min(1).describe("Shield ID — 8 hex characters") };
+const RAW_FREE = {
+    work_hash: z.string().optional().describe("sha256 hex (64 chars) — Mode A"),
+    content: z.string().optional().describe("raw text/code ≤60KB — Mode B"),
+    agent_sig: z.string().optional().describe("optional bilateral signature"),
+    agent_pubkey: z.string().optional().describe("optional bilateral public key"),
+};
+const RAW_NOTARIZE = RAW_FREE;
+function validateFree(raw, toolName) {
+    const r = (raw ?? {});
+    const hasWh = typeof r["work_hash"] === "string" && r["work_hash"] !== "";
+    const hasContent = typeof r["content"] === "string" && r["content"] !== "";
+    if (hasWh === hasContent) {
+        return {
+            errorReply: {
+                error: "VALIDATION_ERROR",
+                message: `${toolName}: exactly one of work_hash or content is required`,
+            },
+        };
+    }
+    const out = {};
+    if (hasWh)
+        out["work_hash"] = r["work_hash"];
+    if (hasContent)
+        out["content"] = r["content"];
+    for (const k of ["agent_sig", "agent_pubkey"]) {
+        const v = r[k];
+        if (typeof v === "string" && v !== "")
+            out[k] = v;
+    }
+    return out;
+}
+export async function runServer() {
+    const server = new McpServer({ name: "aotrust-mcp", version: "0.1.1" }, {
+        instructions: "AOTrust notary: cryptographic proof-of-existence for AI artifacts. " +
+            "Start with notary_free (no wallet) or notary_notarize ($0.01 USDC, Base). " +
+            "notary_status / notary_verify / notary_lookup are read-only.",
+    });
+    const okReply = (structured) => ({
+        content: [
+            {
+                type: "text",
+                text: typeof structured === "string" ? structured : JSON.stringify(structured, null, 2),
+            },
+        ],
+        structuredContent: structured,
+        isError: false,
+    });
+    const errReply = (structured) => ({
+        content: [
+            {
+                type: "text",
+                text: typeof structured === "string" ? structured : JSON.stringify(structured, null, 2),
+            },
+        ],
+        structuredContent: structured,
+        isError: true,
+    });
+    server.registerTool("notary_status", {
+        description: TOOL_DESC_STATUS,
+        inputSchema: RAW_STATUS,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: true },
+    }, async (args) => {
+        try {
+            const out = await toolNotaryStatus(args);
+            return okReply(out.structuredContent ?? out.content[0]?.text ?? null);
+        }
+        catch (e) {
+            return errReply(structuredFromError(e));
+        }
+    });
+    server.registerTool("notary_verify", {
+        description: TOOL_DESC_VERIFY,
+        inputSchema: RAW_VERIFY,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: true },
+    }, async (args) => {
+        try {
+            const out = await toolNotaryVerify(args);
+            return okReply(out.structuredContent ?? out.content[0]?.text ?? null);
+        }
+        catch (e) {
+            return errReply(structuredFromError(e));
+        }
+    });
+    server.registerTool("notary_lookup", {
+        description: TOOL_DESC_LOOKUP,
+        inputSchema: RAW_LOOKUP,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: true },
+    }, async (args) => {
+        try {
+            const out = await toolNotaryLookup(args);
+            return okReply(out.structuredContent ?? out.content[0]?.text ?? null);
+        }
+        catch (e) {
+            return errReply(structuredFromError(e));
+        }
+    });
+    server.registerTool("notary_free", {
+        description: TOOL_DESC_FREE,
+        inputSchema: RAW_FREE,
+        annotations: { openWorldHint: true },
+    }, async (raw) => {
+        const v = validateFree(raw, "notary_free");
+        if ("errorReply" in v) {
+            return errReply(v.errorReply);
+        }
+        try {
+            const out = await toolNotaryFree(v);
+            return okReply(out.structuredContent ?? out.content[0]?.text ?? null);
+        }
+        catch (e) {
+            return errReply(structuredFromError(e));
+        }
+    });
+    server.registerTool("notary_notarize", {
+        description: TOOL_DESC_NOTARIZE,
+        inputSchema: RAW_NOTARIZE,
+        annotations: { openWorldHint: true },
+    }, async (raw) => {
+        const v = validateFree(raw, "notary_notarize");
+        if ("errorReply" in v) {
+            return errReply(v.errorReply);
+        }
+        try {
+            const out = await toolNotaryNotarize(v);
+            return okReply(out.structuredContent ?? out.content[0]?.text ?? null);
+        }
+        catch (e) {
+            return errReply(structuredFromError(e));
+        }
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // Keep the event loop alive while the client holds stdin open. Without a
+    // ref-anchored handle the process exits immediately after connect() when
+    // spawned programmatically (vitest / child_process) — the stdio transport
+    // leaves no other active handle. Closing stdin ends the server naturally.
+    const keepAlive = setInterval(() => { }, 60_000);
+    process.stdin.on("close", () => {
+        clearInterval(keepAlive);
+        void server.close().catch(() => { });
+        process.exit(0);
+    });
+}
+import { ApiError, } from "./client.js";
+import { PaymentConfigError } from "./payment.js";
+import { TOOL_SPECS } from "./tools.js";
+const TOOL_DESC_STATUS = TOOL_SPECS[0]?.description ?? "Check notarization status by job_id";
+const TOOL_DESC_VERIFY = TOOL_SPECS[1]?.description ?? "Server-side PDR verification";
+const TOOL_DESC_LOOKUP = TOOL_SPECS[2]?.description ?? "Find record by Shield ID (8 hex)";
+const TOOL_DESC_FREE = TOOL_SPECS[3]?.description ?? "Free UNPAID notarization (5/IP/24h)";
+const TOOL_DESC_NOTARIZE = TOOL_SPECS[4]?.description ??
+    "PAID notarization $0.01 USDC on Base; requires AOTRUST_EVM_PRIVATE_KEY";
+/** Error → verbatim upstream code+message (never rephrased, never key-revealing). */
+function structuredFromError(e) {
+    if (e instanceof PaymentConfigError) {
+        return { error: "MISSING_PRIVATE_KEY", message: e.message };
+    }
+    if (e instanceof ApiError) {
+        if (e.body && typeof e.body === "object" && !Array.isArray(e.body)) {
+            return e.body;
+        }
+        return { error: e.code };
+    }
+    return { error: "LOCAL_ERROR", message: e instanceof Error ? e.message : String(e) };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;AAC/F,MAAM,UAAU,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;AACnF,MAAM,UAAU,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;AAC7F,MAAM,QAAQ,GAAG;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACzE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CAC9E,CAAC;AACF,MAAM,YAAY,GAAG,QAAQ,CAAC;AAK9B,SAAS,YAAY,CAAC,GAAY,EAAE,QAAgB;IAClD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3E,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACzB,OAAO;YACL,UAAU,EAAE;gBACV,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,GAAG,QAAQ,mDAAmD;aACxE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK;QAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAW,CAAC;IACvD,IAAI,UAAU;QAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,CAAW,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAU,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,EACzC;QACE,YAAY,EACV,qEAAqE;YACrE,4EAA4E;YAC5E,8DAA8D;KACjE,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,UAAmB,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;aACxF;SACF;QACD,iBAAiB,EAAE,UAAqC;QACxD,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,UAAmB,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;aACxF;SACF;QACD,iBAAiB,EAAE,UAAqC;QACxD,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KAC/E,EACD,KAAK,EAAE,IAAwB,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KAC/E,EACD,KAAK,EAAE,IAAyB,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KAC/E,EACD,KAAK,EAAE,IAA2B,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;KACrC,EACD,KAAK,EAAE,GAAY,EAAE,EAAE;QACrB,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC3C,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;KACrC,EACD,KAAK,EAAE,GAAY,EAAE,EAAE;QACrB,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC/C,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC7B,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EACL,QAAQ,GACT,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,qCAAqC,CAAC;AAC7F,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,8BAA8B,CAAC;AACtF,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,kCAAkC,CAAC;AAC1F,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,qCAAqC,CAAC;AAC3F,MAAM,kBAAkB,GACtB,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW;IAC1B,wEAAwE,CAAC;AAE3E,qFAAqF;AACrF,SAAS,mBAAmB,CAAC,CAAU;IACrC,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACvF,CAAC"}

package/dist/payment.d.ts

@@ -0,0 +1,13 @@
+export type PaidResult = {
+    status: number;
+    body: unknown;
+};
+export declare class PaymentConfigError extends Error {
+    readonly code = "MISSING_PRIVATE_KEY";
+    constructor(message: string);
+}
+export declare function buildPaidFetch(): Promise<typeof fetch>;
+/** Test seam: reset the cached wrapper (tests never hold a real key). */
+export declare function resetPaidFetchCache(): void;
+/** One paid POST against {base}/notarize. Response passed through verbatim. */
+export declare function paidPost(baseUrl: string, body: Record<string, unknown>, fetchFn?: typeof fetch): Promise<PaidResult>;

package/dist/payment.js

@@ -0,0 +1,97 @@
+/**
+ * payment.ts — paid notarize via @x402/fetch (challenge → EIP-3009 sign → retry).
+ *
+ * Real installed surface (verified in node_modules, @x402/fetch 2.28.0 +
+ * @x402/evm 2.28.0):
+ *   x402Client from "@x402/core/client"
+ *   registerExactEvmScheme from "@x402/evm/exact/client"   ← root index does
+ *     NOT re-export it; the README example points at ".../exact/client/register"
+ *     which does not exist in the package exports of 2.28.0 — use ./exact/client.
+ *   toClientEvmSigner from "@x402/evm"
+ *   privateKeyToAccount from "viem/accounts"
+ *   wrapFetchWithPayment from "@x402/fetch"
+ *
+ * The private key comes from env AOTRUST_EVM_PRIVATE_KEY and flows only into
+ * the viem signer factory — it is NEVER printed, logged, or embedded in error
+ * messages (a missing key produces a plain instruction, never the value).
+ */
+import { x402Client } from "@x402/core/client";
+import { registerExactEvmScheme } from "@x402/evm/exact/client";
+import { toClientEvmSigner } from "@x402/evm";
+import { privateKeyToAccount } from "viem/accounts";
+import { wrapFetchWithPayment } from "@x402/fetch";
+import { AOTRUST_EVM_PRIVATE_KEY_ENV, USER_AGENT, } from "./env.js";
+export class PaymentConfigError extends Error {
+    code = "MISSING_PRIVATE_KEY";
+    constructor(message) {
+        super(message);
+        this.name = "PaymentConfigError";
+    }
+}
+/**
+ * Build the x402 fetch wrapper once per process (lazy).
+ * Returns a fetch-like callable: POST → 402 challenge → EIP-3009 sign →
+ * retry with x-payment header — all inside the wrapper.
+ */
+let _paidFetch = null;
+export async function buildPaidFetch() {
+    if (_paidFetch) {
+        return _paidFetch;
+    }
+    const keyEnv = process.env[AOTRUST_EVM_PRIVATE_KEY_ENV];
+    if (!keyEnv || keyEnv.trim().length === 0) {
+        throw new PaymentConfigError("set AOTRUST_EVM_PRIVATE_KEY (EVM wallet private key, 0x-prefixed) to use notary_notarize");
+    }
+    const account = privateKeyToAccount(trimKey(keyEnv));
+    const signer = toClientEvmSigner(account);
+    const client = new x402Client();
+    // Base mainnet = eip155:8453 — the ONLY paid rail in v0.1 (HTTP /notarize
+    // is Base by server design; Solana = remote-MCP-only, see README).
+    registerExactEvmScheme(client, { signer });
+    _paidFetch = wrapFetchWithPayment(globalThis.fetch, client);
+    return _paidFetch;
+}
+/** Strip whitespace/quotes; never echo the value. */
+function trimKey(raw) {
+    let k = raw.trim().replace(/^["']|["']$/g, "");
+    if (!k.startsWith("0x")) {
+        k = `0x${k}`;
+    }
+    return k;
+}
+/** Test seam: reset the cached wrapper (tests never hold a real key). */
+export function resetPaidFetchCache() {
+    _paidFetch = null;
+}
+/** One paid POST against {base}/notarize. Response passed through verbatim. */
+export async function paidPost(baseUrl, body, fetchFn) {
+    const paidFetch = fetchFn ?? (await buildPaidFetch());
+    const res = await paidFetch(`${baseUrl}/notarize`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            "User-Agent": USER_AGENT,
+        },
+        body: JSON.stringify(body),
+    });
+    let parsed = null;
+    const text = await res.text();
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        parsed = text;
+    }
+    if (!res.ok) {
+        const obj = (parsed && typeof parsed === "object" ? parsed : {});
+        const code = typeof obj["error"] === "string" ? obj["error"] : `HTTP_${res.status}`;
+        throw Object.assign(new Error(code), {
+            name: "ApiError",
+            status: res.status,
+            code,
+            body: parsed,
+        });
+    }
+    return { status: res.status, body: parsed };
+}
+//# sourceMappingURL=payment.js.map

package/dist/payment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.js","sourceRoot":"","sources":["../src/payment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,UAAU,GACX,MAAM,UAAU,CAAC;AAOlB,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,GAAG,qBAAqB,CAAC;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;GAIG;AACH,IAAI,UAAU,GAAwB,IAAI,CAAC;AAC3C,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,kBAAkB,CAC1B,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,0EAA0E;IAC1E,mEAAmE;IACnE,sBAAsB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3C,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,qDAAqD;AACrD,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IACf,CAAC;IACD,OAAO,CAAkB,CAAC;AAC5B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB;IACjC,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAe,EACf,IAA6B,EAC7B,OAAsB;IAEtB,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,WAAW,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,UAAU;SACzB;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAG9D,CAAC;QACF,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACzE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE;YACnC,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI;YACJ,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,63 @@
+/**
+ * tools.ts — the five AOTrust MCP tools.
+ *
+ * Every tool returns the upstream JSON VERBATIM in structuredContent/content:
+ * no invented fields, error codes passed through unmodified (clients parse
+ * `error`). The only allowed addition is `verify_url` derived from an
+ * already-present field.
+ *
+ * Network policy v0.1: paid notarize is Base-only (the HTTP /notarize rail is
+ * Base by server design; Solana exists only on the remote MCP server, not here).
+ */
+import { z } from "zod";
+import { encodePdrB64 } from "./client.js";
+import { INVALID_SHIELD_ID_ERR, USER_AGENT } from "./env.js";
+export type ToolContent = {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    structuredContent?: unknown;
+};
+export declare function contentFromError(e: unknown): ToolContent;
+export declare const NotaryStatusArgs: z.ZodObject<{
+    job_id: z.ZodString;
+}, z.core.$strip>;
+export declare function toolNotaryStatus(args: {
+    job_id: string;
+}): Promise<ToolContent>;
+export declare const NotaryVerifyArgs: z.ZodObject<{
+    pdr_b64: z.ZodString;
+}, z.core.$strip>;
+export declare function toolNotaryVerify(args: {
+    pdr_b64: string;
+}): Promise<ToolContent>;
+export declare const NotaryLookupArgs: z.ZodObject<{
+    shield_id: z.ZodString;
+}, z.core.$strip>;
+export declare function toolNotaryLookup(args: {
+    shield_id: string;
+}): Promise<ToolContent>;
+export declare const NotaryFreeArgs: z.ZodObject<{
+    work_hash: z.ZodOptional<z.ZodString>;
+    content: z.ZodOptional<z.ZodString>;
+    agent_sig: z.ZodOptional<z.ZodString>;
+    agent_pubkey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare function toolNotaryFree(args: z.infer<typeof NotaryFreeArgs>): Promise<ToolContent>;
+export declare const NotaryNotarizeArgs: z.ZodObject<{
+    work_hash: z.ZodOptional<z.ZodString>;
+    content: z.ZodOptional<z.ZodString>;
+    agent_sig: z.ZodOptional<z.ZodString>;
+    agent_pubkey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare function toolNotaryNotarize(args: z.infer<typeof NotaryNotarizeArgs>): Promise<ToolContent>;
+export type ToolSpec = {
+    name: string;
+    description: string;
+    inputSchema: unknown;
+    read_only: boolean;
+    env_notes?: string;
+};
+export declare const TOOL_SPECS: ToolSpec[];
+export { INVALID_SHIELD_ID_ERR, USER_AGENT, encodePdrB64 };

package/dist/tools.js

@@ -0,0 +1,213 @@
+/**
+ * tools.ts — the five AOTrust MCP tools.
+ *
+ * Every tool returns the upstream JSON VERBATIM in structuredContent/content:
+ * no invented fields, error codes passed through unmodified (clients parse
+ * `error`). The only allowed addition is `verify_url` derived from an
+ * already-present field.
+ *
+ * Network policy v0.1: paid notarize is Base-only (the HTTP /notarize rail is
+ * Base by server design; Solana exists only on the remote MCP server, not here).
+ */
+import { z } from "zod";
+import { ApiError, encodePdrB64, getBaseUrl, getStatus, shieldFree, shieldLookup, verifyPdr, } from "./client.js";
+import { paidPost } from "./payment.js";
+import { INVALID_SHIELD_ID_ERR, INVALID_SHIELD_ID_MSG, USER_AGENT, } from "./env.js";
+const FREE_TIER_LIMIT_CODE = "FREE_TIER_LIMIT_REACHED";
+const SHIELD_ID_HEX_RE = /^[0-9a-fA-F]{8}$/;
+/** MCP tool content from an upstream response, verbatim body + error passthrough. */
+function contentFromBody(body) {
+    const text = typeof body === "string" ? body : JSON.stringify(body, null, 2);
+    return {
+        content: [{ type: "text", text }],
+        structuredContent: body,
+    };
+}
+export function contentFromError(e) {
+    if (e instanceof ApiError) {
+        const bodyObj = e.body && typeof e.body === "object" && !Array.isArray(e.body)
+            ? e.body
+            : { error: e.code };
+        // Verbatim upstream body (error/message/detail are load-bearing).
+        return contentFromBody(bodyObj);
+    }
+    const message = e instanceof Error ? e.message : String(e);
+    return contentFromBody({ error: "LOCAL_ERROR", message });
+}
+// ── tool #1: notary_status ────────────────────────────────────────────────────
+export const NotaryStatusArgs = z.object({
+    job_id: z.string().min(1).describe("Job id returned by a notarization call"),
+});
+export async function toolNotaryStatus(args) {
+    const { status, body } = await getStatus(args.job_id);
+    return contentFromBody(body);
+}
+// ── tool #2: notary_verify ───────────────────────────────────────────────────
+export const NotaryVerifyArgs = z.object({
+    pdr_b64: z.string().min(1).describe("PDR bundle in base64 (239 bytes)"),
+});
+export async function toolNotaryVerify(args) {
+    const { body } = await verifyPdr(args.pdr_b64);
+    return contentFromBody(body);
+}
+// ── tool #3: notary_lookup ───────────────────────────────────────────────────
+export const NotaryLookupArgs = z.object({
+    shield_id: z
+        .string()
+        .regex(SHIELD_ID_HEX_RE)
+        .describe("Shield ID — exactly 8 hexadecimal characters"),
+});
+export async function toolNotaryLookup(args) {
+    if (!SHIELD_ID_HEX_RE.test(args.shield_id)) {
+        // Local guard mirrors the server response form verbatim (throw, not return:
+        // the registration layer maps thrown ApiError → isError reply). Zero network
+        // for a shape the server would reject anyway.
+        throw new ApiError(400, INVALID_SHIELD_ID_ERR, {
+            error: INVALID_SHIELD_ID_ERR,
+            message: INVALID_SHIELD_ID_MSG,
+        });
+    }
+    const { body } = await shieldLookup(args.shield_id);
+    return contentFromBody(body);
+}
+// ── tool #4: notary_free ─────────────────────────────────────────────────────
+export const NotaryFreeArgs = z
+    .object({
+    work_hash: z
+        .string()
+        .optional()
+        .describe("SHA-256 hex (64 chars) of the artifact — Mode A"),
+    content: z
+        .string()
+        .optional()
+        .describe("Raw text/code up to 60KB — Mode B (server hashes it, zero retention)"),
+    agent_sig: z.string().optional().describe("Optional base64 Ed25519 signature (bilateral)"),
+    agent_pubkey: z.string().optional().describe("Optional hex Ed25519 public key (bilateral)"),
+})
+    .refine((v) => Boolean(v.work_hash) !== Boolean(v.content), {
+    message: "exactly one of work_hash or content is required",
+});
+export async function toolNotaryFree(args) {
+    const body = {};
+    if (args.work_hash !== undefined && args.work_hash !== "") {
+        body["work_hash"] = args.work_hash;
+    }
+    if (args.content !== undefined && args.content !== "") {
+        body["content"] = args.content;
+    }
+    if (args.agent_sig) {
+        body["agent_sig"] = args.agent_sig;
+    }
+    if (args.agent_pubkey) {
+        body["agent_pubkey"] = args.agent_pubkey;
+    }
+    const { body: upstream } = await shieldFree(body);
+    if (typeof upstream === "object" && upstream !== null) {
+        const rec = upstream;
+        const workHash = typeof rec["work_hash"] === "string" ? rec["work_hash"] : null;
+        if (workHash && (workHash.length === 64 || workHash.length === 66)) {
+            // Allowed additive field: derived from an already-present work_hash.
+            rec["verify_url"] = `https://verify.aotrust.link/s/${workHash.slice(0, 8)}`;
+        }
+    }
+    return contentFromBody(upstream);
+}
+// ── tool #5: notary_notarize (PAID, x402 over HTTP) ─────────────────────────
+export const NotaryNotarizeArgs = z
+    .object({
+    work_hash: z
+        .string()
+        .optional()
+        .describe("SHA-256 hex (64 chars) of the artifact — Mode A"),
+    content: z
+        .string()
+        .optional()
+        .describe("Raw text/code up to 60KB — Mode B (server hashes it)"),
+    agent_sig: z.string().optional().describe("Optional base64 Ed25519 signature (bilateral)"),
+    agent_pubkey: z.string().optional().describe("Optional hex Ed25519 public key (bilateral)"),
+})
+    .refine((v) => Boolean(v.work_hash) !== Boolean(v.content), {
+    message: "exactly one of work_hash or content is required",
+});
+export async function toolNotaryNotarize(args) {
+    const body = {};
+    if (args.work_hash !== undefined && args.work_hash !== "") {
+        body["work_hash"] = args.work_hash;
+    }
+    if (args.content !== undefined && args.content !== "") {
+        body["content"] = args.content;
+    }
+    if (args.agent_sig) {
+        body["agent_sig"] = args.agent_sig;
+    }
+    if (args.agent_pubkey) {
+        body["agent_pubkey"] = args.agent_pubkey;
+    }
+    // x402 wrapper handles: 402 challenge → EIP-3009 sign → retry with x-payment.
+    // No facilitator client-side. Key comes from env, never logged.
+    const { body: upstream } = await paidPost(getBaseUrl(), body);
+    return contentFromBody(upstream);
+}
+export const TOOL_SPECS = [
+    {
+        name: "notary_status",
+        description: "Check notarization status by job_id. Free. GET /v1/status/{job_id}. Upstream JSON passthrough (status, result.pdr_b64, result.payment_hash, ...).",
+        inputSchema: {
+            type: "object",
+            properties: { job_id: { type: "string", description: "Job id from notarization response" } },
+            required: ["job_id"],
+        },
+        read_only: true,
+    },
+    {
+        name: "notary_verify",
+        description: "Full server-side PDR verification by base64 bundle. Free. GET /v1/pdr/verify/{pdr_b64} (the b64 is quote_plus-encoded in the URL path).",
+        inputSchema: {
+            type: "object",
+            properties: { pdr_b64: { type: "string", description: "PDR bundle in base64" } },
+            required: ["pdr_b64"],
+        },
+        read_only: true,
+    },
+    {
+        name: "notary_lookup",
+        description: "Find a notarization record by Shield ID (8 hex chars returned by the free tier). Free. Local 8-hex guard mirrors the server 400 INVALID_SHIELD_ID form.",
+        inputSchema: {
+            type: "object",
+            properties: { shield_id: { type: "string", description: "8 hex characters" } },
+            required: ["shield_id"],
+        },
+        read_only: true,
+    },
+    {
+        name: "notary_free",
+        description: "Free UNPAID notarization (PDR proof-of-existence, no wallet). Rate limited 5/IP/24h (429 FREE_TIER_LIMIT_REACHED is quota, not a defect). Pass work_hash OR content.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                work_hash: { type: "string", description: "sha256 hex (64 chars)" },
+                content: { type: "string", description: "raw text/code ≤60KB" },
+                agent_sig: { type: "string", description: "optional bilateral signature" },
+                agent_pubkey: { type: "string", description: "optional bilateral public key" },
+            },
+        },
+        read_only: false,
+    },
+    {
+        name: "notary_notarize",
+        description: "PAID notarization, $0.01 USDC on Base (EIP-3009 via x402; HTTP rail is Base-only — Solana exists only via the remote MCP server). Requires AOTRUST_EVM_PRIVATE_KEY in env. Free-tier body shape; the x402 wrapper takes the 402 challenge, signs, and retries.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                work_hash: { type: "string", description: "sha256 hex (64 chars)" },
+                content: { type: "string", description: "raw text/code ≤60KB" },
+                agent_sig: { type: "string", description: "optional bilateral signature" },
+                agent_pubkey: { type: "string", description: "optional bilateral public key" },
+            },
+        },
+        read_only: false,
+        env_notes: "AOTRUST_EVM_PRIVATE_KEY required; AOTRUST_BASE_URL optional (default https://api.aotrust.link)",
+    },
+];
+export { INVALID_SHIELD_ID_ERR, USER_AGENT, encodePdrB64 };
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,UAAU,GACX,MAAM,UAAU,CAAC;AAOlB,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AACvD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,qFAAqF;AACrF,SAAS,eAAe,CAAC,IAAa;IACpC,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GACX,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,CAAC,CAAE,CAAC,CAAC,IAAgC;YACrC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,kEAAkE;QAClE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CAC7E,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAwB;IAC7D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAyB;IAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,KAAK,CAAC,gBAAgB,CAAC;SACvB,QAAQ,CAAC,8CAA8C,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA2B;IAChE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,4EAA4E;QAC5E,6EAA6E;QAC7E,8CAA8C;QAC9C,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE;YAC7C,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC1F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC5F,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;IAC1D,OAAO,EAAE,iDAAiD;CAC3D,CAAC,CAAC;AAEL,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAoC;IAEpC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;IAC3C,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,QAAmC,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;YACnE,qEAAqE;YACrE,GAAG,CAAC,YAAY,CAAC,GAAG,iCAAiC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC1F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC5F,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;IAC1D,OAAO,EAAE,iDAAiD;CAC3D,CAAC,CAAC;AAEL,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAwC;IAExC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;IAC3C,CAAC;IACD,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAYD,MAAM,CAAC,MAAM,UAAU,GAAe;IACpC;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,mJAAmJ;QACrJ,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE,EAAE;YAC5F,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;QACD,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,yIAAyI;QAC3I,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE,EAAE;YAChF,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;QACD,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,yJAAyJ;QAC3J,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE;YAC9E,QAAQ,EAAE,CAAC,WAAW,CAAC;SACxB;QACD,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,sKAAsK;QACxK,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBACnE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;gBAC/D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;gBAC1E,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;aAC/E;SACF;QACD,SAAS,EAAE,KAAK;KACjB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,gQAAgQ;QAClQ,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBACnE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;gBAC/D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;gBAC1E,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;aAC/E;SACF;QACD,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,gGAAgG;KAC5G;CACF,CAAC;AAEF,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,42 @@
 {
   "name": "aotrust-mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1",
+  "description": "AOTrust notary MCP stdio server — 5 tools over the AOTrust HTTP API: status, verify, shield lookup, free notarization, and $0.01 x402 paid notarization (Base).",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "bin": {
+    "aotrust-mcp": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "smoke": "node dist/cli.js --tools"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@x402/evm": ">=2.19 <2.29",
+    "@x402/fetch": ">=2.19 <2.29",
+    "viem": "^2.57.7",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "typescript": "^5.9.3",
+    "@types/node": "^26.6.5",
+    "vitest": "^5.0.5"
+  },
+  "keywords": [
+    "mcp",
+    "aotrust",
+    "x402",
+    "notarization",
+    "modelcontextprotocol"
+  ]
 }