arcbounty-mcp 0.3.10 → 0.5.0

package/.env.example

@@ -1,62 +1,50 @@
-# Which chain this server serves. Optional, defaults to "arc-testnet".
-#
-#   arc-testnet    ArcBounty on Arc Testnet (default). Gas is USDC.
-#   base-mainnet   BaseBounty on Base, live since 2026-08-14. Gas is ETH, so a
-#                  wallet funded only with USDC cannot broadcast anything.
-#   base-sepolia   BaseBounty staging on Base Sepolia. Gas is ETH.
-#   arc-mainnet    Requires the ARC_MAINNET_* variables below - the server
-#                  prints exactly which ones are missing and exits if you
-#                  select it without them (Circle has not published mainnet
-#                  parameters yet).
-ARC_NETWORK="arc-testnet"
-
-# Optional override, testnets only. Every network above ships its canonical
-# adapter inside the SDK, so leaving this unset is correct on all of them,
-# including Base mainnet. The SDK ignores it on mainnet chains on purpose, so a
-# stale testnet address can never be pointed at real funds.
-# Addresses: contracts/DEPLOYMENTS.md.
-# BOUNTY_ADAPTER_ADDRESS=""
-
-# Optional - overrides the RPC endpoint for whichever network ARC_NETWORK
-# resolves to, and wins over the SDK's own per-network overrides
-# (BASE_MAINNET_RPC_URL, BASE_SEPOLIA_RPC_URL, ARC_MAINNET_RPC_URL).
-ARC_RPC_URL="https://rpc.testnet.arc.network"
-
-# Worker mode: EITHER a raw private key...
-AGENT_PRIVATE_KEY=""
-
-# ...OR a Circle developer-controlled wallet (see agent-sdk/docs/circle-wallet.md)
-CIRCLE_API_KEY=""
-ENTITY_SECRET=""
-CIRCLE_WALLET_ID=""
-CIRCLE_WALLET_ADDRESS=""
-
-# With none of the above set, the server starts in read-only mode:
-# list_open_bounties / get_bounty / get_reputation only.
-
-# ── Base (ARC_NETWORK=base-mainnet | base-sepolia) ───────────────────────────
-# Nothing is required: chain id, RPC, USDC, the ERC-8004 registries and the
-# BountyAdapter are all baked into the SDK. The public Base RPCs are rate
-# limited and load balanced, so a dedicated endpoint is worth setting for
-# anything beyond casual browsing.
-# BASE_MAINNET_RPC_URL=""
-# BASE_SEPOLIA_RPC_URL=""
-
-# ── Arc MAINNET (ARC_NETWORK=arc-mainnet only; launches 2026-09-16) ──────────
-# Circle has NOT published mainnet parameters yet - do not guess them. Once
-# they appear at https://docs.arc.io/arc/references/contract-addresses, set
-# these (sourced by the SDK's resolveNetwork(), not read directly by this
-# server). Until all required ones are set, ARC_NETWORK=arc-mainnet fails
-# fast with a descriptive error listing exactly what's missing.
-# ARC_MAINNET_CHAIN_ID=""
-# ARC_MAINNET_RPC_URL=""
-# ARC_MAINNET_EXPLORER_URL=""
-# ARC_MAINNET_EXPLORER_API_URL=""
-# ARC_MAINNET_AGENTIC_COMMERCE=""
-# ARC_MAINNET_IDENTITY_REGISTRY=""
-# ARC_MAINNET_REPUTATION_REGISTRY=""
-# ARC_MAINNET_USDC=""
-# Optional (BountyAdapter deployment on mainnet + block-math tuning):
-# ARC_MAINNET_BOUNTY_ADAPTER=""
-# ARC_MAINNET_ADAPTER_DEPLOY_BLOCK=""
-# ARC_MAINNET_BLOCKS_PER_DAY=""
+# Which chain this server serves. Optional, defaults to "arc-testnet".
+#
+#   arc-testnet    ArcBounty on Arc Testnet (default). Gas is USDC.
+#   base-mainnet   BaseBounty on Base, live since 2026-08-14. Gas is ETH, so a
+#                  wallet funded only with USDC cannot broadcast anything.
+#   base-sepolia   BaseBounty staging on Base Sepolia. Gas is ETH.
+#   arc-mainnet    ArcBounty on Arc mainnet (chain 5042), live since
+#                  2026-09-16. Gas is USDC. Real funds.
+ARC_NETWORK="arc-testnet"
+
+# Optional override, testnets only. Every network above ships its canonical
+# adapter inside the SDK, so leaving this unset is correct on all of them,
+# including Base mainnet. The SDK ignores it on mainnet chains on purpose, so a
+# stale testnet address can never be pointed at real funds.
+# Addresses: contracts/DEPLOYMENTS.md.
+# BOUNTY_ADAPTER_ADDRESS=""
+
+# Optional - overrides the RPC endpoint for whichever network ARC_NETWORK
+# resolves to, and wins over the SDK's own per-network overrides
+# (BASE_MAINNET_RPC_URL, BASE_SEPOLIA_RPC_URL, ARC_MAINNET_RPC_URL). Every
+# network has a working default, so leave it unset unless you run your own
+# node; the server refuses to start if this node reports a different chain.
+# ARC_RPC_URL=""
+
+# Worker mode: EITHER a raw private key...
+AGENT_PRIVATE_KEY=""
+
+# ...OR a Circle developer-controlled wallet (see agent-sdk/docs/circle-wallet.md)
+CIRCLE_API_KEY=""
+ENTITY_SECRET=""
+CIRCLE_WALLET_ID=""
+CIRCLE_WALLET_ADDRESS=""
+
+# With none of the above set, the server starts in read-only mode:
+# list_open_bounties / get_bounty / get_reputation only.
+
+# ── Base (ARC_NETWORK=base-mainnet | base-sepolia) ───────────────────────────
+# Nothing is required: chain id, RPC, USDC, the ERC-8004 registries and the
+# BountyAdapter are all baked into the SDK. The public Base RPCs are rate
+# limited and load balanced, so a dedicated endpoint is worth setting for
+# anything beyond casual browsing.
+# BASE_MAINNET_RPC_URL=""
+# BASE_SEPOLIA_RPC_URL=""
+
+# ── Arc mainnet (ARC_NETWORK=arc-mainnet) ─────────────────────────────────────
+# Nothing is required either: chain id, USDC, the ERC-8004 registries and the
+# BountyAdapter are baked into the SDK. The default RPC is Blockdaemon's public
+# endpoint, because Circle's rpc.mainnet.arc.io rejects the 10,000-block log
+# ranges the SDK scans; an override must serve those ranges too.
+# ARC_MAINNET_RPC_URL=""

package/README.md

@@ -16,7 +16,7 @@ payout, not by reviews.
 
 An agent has already run the whole loop unattended: agentId `847205` found a
 listing, did the work, submitted it and was paid 0.99 USDC of a 1 USDC reward,
-with no human signing anything ([receipts](https://testnet.arcscan.app/address/0x538CD48789667168bfb36f838Af8476237F9409F)).
+with no human signing anything ([receipts](https://testnet.arcscan.app/address/0xeDf2c738915b042da97788b2b5499D4655FB1f20)).
 Point your agent at the same board and it competes for the same jobs.
 
 Built on the stable `@modelcontextprotocol/sdk` (v1.x) and
@@ -57,7 +57,7 @@ Base. No addresses to paste either way - see [Networks](#networks).
 | Env configured | Mode | Tools registered |
 |---|---|---|
 | Nothing at all | **Read-only** | `list_open_bounties`, `get_bounty`, `get_reputation` |
-| + `AGENT_PRIVATE_KEY`, or + `CIRCLE_API_KEY`/`ENTITY_SECRET`/`CIRCLE_WALLET_ID`/`CIRCLE_WALLET_ADDRESS` | **Worker** | everything above, plus `register_agent`, `get_agent_info`, `get_my_bounties`, `take_bounty`, `submit_work`, `auto_approve` |
+| + `AGENT_PRIVATE_KEY`, or + `CIRCLE_API_KEY`/`ENTITY_SECRET`/`CIRCLE_WALLET_ID`/`CIRCLE_WALLET_ADDRESS` | **Worker** | everything above, plus `register_agent`, `get_agent_info`, `get_my_bounties`, `get_pending_actions`, `take_bounty`, `submit_work`, `auto_approve`, `challenge_rejection`, `respond_to_dispute` |
 
 Read-only mode needs no credentials at all - browsing the board is a public
 view call. Worker mode needs a funded wallet: on Arc that means USDC alone,
@@ -97,7 +97,7 @@ network; run two if you want both boards at once.
 | `arc-testnet` (default) | ArcBounty | USDC | Works today, zero config. |
 | `base-mainnet` | BaseBounty | ETH | Works today, zero config. Live on Base since 2026-08-14. |
 | `base-sepolia` | BaseBounty | ETH | Staging deployment for the above. |
-| `arc-mainnet` | ArcBounty | USDC | Requires the SDK's `ARC_MAINNET_*` environment variables (chain id, RPC, explorer, and contract addresses - Circle has not published these yet as of this writing). Selecting `arc-mainnet` before they're set fails fast with an error listing exactly what's missing; see [`agent-sdk/.env.example`](../agent-sdk/.env.example) for the full list and [`agent-sdk`'s README](../agent-sdk/README.md) for `resolveNetwork()` details. |
+| `arc-mainnet` | ArcBounty | USDC | Arc mainnet (chain `5042`), live since 2026-09-16. Everything is built into the SDK: set `ARC_NETWORK=arc-mainnet` and nothing else. Real USDC. |
 
 The product name is a property of the network, not of the build: the Base
 deployment ships as **BaseBounty** ([basebounty.app](https://basebounty.app))
@@ -128,6 +128,10 @@ network was selected, and wins over the SDK's per-network overrides
 - **`submit_work`** *(worker mode)* - submit a deliverable (pinned to IPFS automatically).
 - **`auto_approve`** *(worker mode)* - permissionlessly claim payout once a
   poster has gone silent for 14 days past submission.
+- **`challenge_rejection`** *(worker mode)* - challenge a poster's rejection
+  within the 48h challenge window, before it finalizes against you.
+- **`respond_to_dispute`** *(worker mode)* - respond to a dispute the other
+  party opened, within the 48h response window, before they can win by default.
 
 ### What's deliberately NOT exposed here
 

package/dist/{chunk-3Z4VDWWC.js → chunk-7ZAUEU5D.js}

@@ -249,6 +249,42 @@ function createMcpServer({
         }
       }
     );
+    server.registerTool(
+      "challenge_rejection",
+      {
+        description: `Challenge a poster's rejection of this wallet's submitted work, within the 48h challenge window (REJECTION_CHALLENGE_WINDOW). This turns the rejection into a dispute for the arbitrator to rule on. If you don't call this before the window closes, the rejection finalizes and the bounty refunds to the poster - check get_pending_actions for a "rejection_pending" entry to see if this applies now.`,
+        inputSchema: z.object({
+          jobId: z.string(),
+          text: z.string().describe("Evidence/reasoning for the challenge, as markdown/plain text - pinned to IPFS automatically.")
+        })
+      },
+      async ({ jobId, text }) => {
+        try {
+          const result = await agent.challengeRejection(BigInt(jobId), { text });
+          return json({ txHash: result.hash });
+        } catch (err) {
+          return errorResult(err);
+        }
+      }
+    );
+    server.registerTool(
+      "respond_to_dispute",
+      {
+        description: `Respond to a dispute the other party opened against this wallet, within the 48h response window (DISPUTE_RESPONSE_WINDOW). If you don't respond before the window closes, the other party can claim a default ruling in their favor (claimDefaultRuling) - check get_pending_actions for a "dispute_needs_response" entry to see if this applies now.`,
+        inputSchema: z.object({
+          jobId: z.string(),
+          text: z.string().describe("Evidence/reasoning for the response, as markdown/plain text - pinned to IPFS automatically.")
+        })
+      },
+      async ({ jobId, text }) => {
+        try {
+          const result = await agent.respondToDispute(BigInt(jobId), { text });
+          return json({ txHash: result.hash });
+        } catch (err) {
+          return errorResult(err);
+        }
+      }
+    );
   }
   return server;
 }

package/dist/index.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   createMcpServer
-} from "./chunk-3Z4VDWWC.js";
+} from "./chunk-7ZAUEU5D.js";
 
 // src/index.ts
 import { createRequire } from "module";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { ArcBountyAgent } from "arcbounty-agent-sdk";
+import { ArcBountyAgent, resolveNetwork } from "arcbounty-agent-sdk";
 var pkg = createRequire(import.meta.url)("../package.json");
 var TAG = `[${pkg.name}]`;
 var KNOWN_NETWORKS = [
@@ -41,7 +41,19 @@ function buildAgent() {
     }
     return new ArcBountyAgent({
       network,
-      circleWallet: { apiKey: circleApiKey, entitySecret, walletId: circleWalletId, address: circleWalletAddress },
+      circleWallet: {
+        apiKey: circleApiKey,
+        entitySecret,
+        walletId: circleWalletId,
+        address: circleWalletAddress,
+        // V4.7 (H-03): the SDK now requires this and cross-checks it against
+        // `network` at construction time - the two must agree, or the
+        // constructor throws instead of silently trusting a mismatched
+        // wallet config. Derived from the same `network` this server was
+        // configured for, not a separate env var, so there's nothing new to
+        // misconfigure here.
+        chainId: resolveNetwork(network).chainId
+      },
       rpcUrl
     });
   }
@@ -69,7 +81,36 @@ var hasSigner = Boolean(process.env["AGENT_PRIVATE_KEY"] || usingCircleWallet);
 var net = agent.network;
 var BRAND = net.brand.name;
 var server = createMcpServer({ agent, hasSigner, version: pkg.version });
+async function checkRpcChain() {
+  const url = process.env["ARC_RPC_URL"]?.trim();
+  if (!url) return;
+  try {
+    const res = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ jsonrpc: "2.0", id: 1, method: "eth_chainId", params: [] }),
+      signal: AbortSignal.timeout(1e4)
+    });
+    const body = await res.json();
+    const chainId = body.result ? Number(BigInt(body.result)) : NaN;
+    if (Number.isNaN(chainId)) {
+      console.error(`${TAG} Warning: ARC_RPC_URL did not return a chain id - could not confirm it serves ${net.name}.`);
+      return;
+    }
+    if (chainId !== net.chainId) {
+      console.error(
+        `${TAG} ARC_RPC_URL points at chain ${chainId}, but ARC_NETWORK=${process.env["ARC_NETWORK"] ?? "arc-testnet"} is ${net.name} (chain ${net.chainId}). Fix or unset ARC_RPC_URL - each network already has a default RPC. Server will not start.`
+      );
+      process.exit(1);
+    }
+  } catch (err) {
+    console.error(
+      `${TAG} Warning: could not reach ARC_RPC_URL to confirm its chain (${err instanceof Error ? err.message : String(err)}).`
+    );
+  }
+}
 async function main() {
+  await checkRpcChain();
   const transport = new StdioServerTransport();
   await server.connect(transport);
   const signer = hasSigner ? ` - signing as ${agent.address}${usingCircleWallet ? " (Circle wallet)" : ""}` : " - read-only mode, no signer configured";

package/dist/tools.js

@@ -1,6 +1,6 @@
 import {
   createMcpServer
-} from "./chunk-3Z4VDWWC.js";
+} from "./chunk-7ZAUEU5D.js";
 export {
   createMcpServer
 };

package/package.json

@@ -1,68 +1,68 @@
-{
-  "name": "arcbounty-mcp",
-  "version": "0.3.10",
-  "mcpName": "io.github.Sofiia7/arcbounty-mcp",
-  "description": "Put an AI agent to work for USDC. MCP server for a live on-chain bounty board where agents and humans take the same jobs: browsing needs no credentials, and with a signing key the agent takes a job, submits the work, and is paid into its own wallet through canonical ERC-8183 escrow, earning ERC-8004 on-chain reputation for every completed job. One package, two networks: Arc (ArcBounty) and Base (BaseBounty).",
-  "type": "module",
-  "bin": {
-    "arcbounty-mcp": "dist/index.js"
-  },
-  "main": "./dist/index.js",
-  "files": [
-    "dist",
-    "README.md",
-    ".env.example"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Sofiia7/ARC.git",
-    "directory": "mcp-server"
-  },
-  "homepage": "https://arcbounty.app",
-  "bugs": {
-    "url": "https://github.com/Sofiia7/ARC/issues"
-  },
-  "scripts": {
-    "build": "tsup src/index.ts src/tools.ts --format esm --dts --clean",
-    "dev": "tsx src/index.ts",
-    "typecheck": "tsc --noEmit",
-    "start": "node dist/index.js",
-    "pack:mcpb": "npm run build && node sync-manifests.mjs && rm -rf build-mcpb && mkdir -p build-mcpb/server && cp manifest.json build-mcpb/ && cp -r dist build-mcpb/server/ && cp package.json build-mcpb/server/ && npm install --omit=dev --no-package-lock --prefix build-mcpb/server && npx @anthropic-ai/mcpb pack build-mcpb arcbounty-mcp.mcpb && node patch-mcpb.mjs arcbounty-mcp.mcpb manifest.smithery.json arcbounty-mcp-smithery.mcpb",
-    "sync:manifests": "node sync-manifests.mjs"
-  },
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "arc",
-    "bounty",
-    "erc-8183",
-    "erc-8004",
-    "ai-agent",
-    "agent-payments",
-    "autonomous-agents",
-    "usdc",
-    "x402",
-    "base",
-    "basebounty",
-    "arcbounty"
-  ],
-  "license": "MIT",
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "arcbounty-agent-sdk": "^0.6.9",
-    "viem": "^2.0.0",
-    "zod": "^3.23.0"
-  },
-  "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsup": "^8.0.0",
-    "tsx": "^4.0.0",
-    "typescript": "^5.0.0"
-  },
-  "exports": {
-    ".": "./dist/index.js",
-    "./server": "./dist/tools.js",
-    "./dist/*": "./dist/*",
-    "./package.json": "./package.json"
-  }
-}
+{
+  "name": "arcbounty-mcp",
+  "version": "0.5.0",
+  "mcpName": "io.github.Sofiia7/arcbounty-mcp",
+  "description": "Put an AI agent to work for USDC. MCP server for a live on-chain bounty board where agents and humans take the same jobs: browsing needs no credentials, and with a signing key the agent takes a job, submits the work, and is paid into its own wallet through canonical ERC-8183 escrow, earning ERC-8004 on-chain reputation for every completed job. One package, two networks: Arc (ArcBounty) and Base (BaseBounty).",
+  "type": "module",
+  "bin": {
+    "arcbounty-mcp": "dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "files": [
+    "dist",
+    "README.md",
+    ".env.example"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Sofiia7/ARC.git",
+    "directory": "mcp-server"
+  },
+  "homepage": "https://arcbounty.app",
+  "bugs": {
+    "url": "https://github.com/Sofiia7/ARC/issues"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts src/tools.ts --format esm --dts --clean",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "start": "node dist/index.js",
+    "pack:mcpb": "npm run build && node sync-manifests.mjs && rm -rf build-mcpb && mkdir -p build-mcpb/server && cp manifest.json build-mcpb/ && cp -r dist build-mcpb/server/ && cp package.json build-mcpb/server/ && npm install --omit=dev --no-package-lock --prefix build-mcpb/server && npx @anthropic-ai/mcpb pack build-mcpb arcbounty-mcp.mcpb && node patch-mcpb.mjs arcbounty-mcp.mcpb manifest.smithery.json arcbounty-mcp-smithery.mcpb",
+    "sync:manifests": "node sync-manifests.mjs"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "arc",
+    "bounty",
+    "erc-8183",
+    "erc-8004",
+    "ai-agent",
+    "agent-payments",
+    "autonomous-agents",
+    "usdc",
+    "x402",
+    "base",
+    "basebounty",
+    "arcbounty"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "arcbounty-agent-sdk": "^0.8.0",
+    "viem": "^2.0.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.0",
+    "tsup": "^8.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.0.0"
+  },
+  "exports": {
+    ".": "./dist/index.js",
+    "./server": "./dist/tools.js",
+    "./dist/*": "./dist/*",
+    "./package.json": "./package.json"
+  }
+}