brainchain-mcp 0.5.0 → 0.5.1

package/README.md

@@ -16,7 +16,7 @@ Read the key without echoing it or leaving it in your shell history, then add th
 
 ```bash
 printf 'Key: ' && read -rs BRAINCHAIN_PAYER_KEY && echo
-claude mcp add brainchain --scope user -e BRAINCHAIN_PAYER_KEY="$BRAINCHAIN_PAYER_KEY" -- npx -y brainchain-mcp@0.5.0
+claude mcp add brainchain --scope user -e BRAINCHAIN_PAYER_KEY="$BRAINCHAIN_PAYER_KEY" -- npx -y brainchain-mcp@0.5.1
 unset BRAINCHAIN_PAYER_KEY
 ```
 
@@ -27,7 +27,7 @@ unset BRAINCHAIN_PAYER_KEY
   "mcpServers": {
     "brainchain": {
       "command": "npx",
-      "args": ["-y", "brainchain-mcp@0.5.0"],
+      "args": ["-y", "brainchain-mcp@0.5.1"],
       "env": { "BRAINCHAIN_PAYER_KEY": "${BRAINCHAIN_PAYER_KEY}" }
     }
   }
@@ -36,7 +36,7 @@ unset BRAINCHAIN_PAYER_KEY
 
 ### Cursor
 
-[![Add to Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/en/install-mcp?name=brainchain&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsImJyYWluY2hhaW4tbWNwQDAuNS4wIl0sImVudiI6eyJCUkFJTkNIQUlOX1BBWUVSX0tFWSI6IiR7ZW52OkJSQUlOQ0hBSU5fUEFZRVJfS0VZfSJ9fQ%3D%3D)
+[![Add to Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/en/install-mcp?name=brainchain&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsImJyYWluY2hhaW4tbWNwQDAuNS4xIl0sImVudiI6eyJCUkFJTkNIQUlOX1BBWUVSX0tFWSI6IiR7ZW52OkJSQUlOQ0hBSU5fUEFZRVJfS0VZfSJ9fQ%3D%3D)
 
 Or add the server to a project's `.cursor/mcp.json` (`~/.cursor/mcp.json` for every project):
 
@@ -45,7 +45,7 @@ Or add the server to a project's `.cursor/mcp.json` (`~/.cursor/mcp.json` for ev
   "mcpServers": {
     "brainchain": {
       "command": "npx",
-      "args": ["-y", "brainchain-mcp@0.5.0"],
+      "args": ["-y", "brainchain-mcp@0.5.1"],
       "env": { "BRAINCHAIN_PAYER_KEY": "${env:BRAINCHAIN_PAYER_KEY}" }
     }
   }
@@ -63,7 +63,7 @@ Add the server to the client's `mcpServers` configuration. For Claude Desktop th
   "mcpServers": {
     "brainchain": {
       "command": "npx",
-      "args": ["-y", "brainchain-mcp@0.5.0"],
+      "args": ["-y", "brainchain-mcp@0.5.1"],
       "env": { "BRAINCHAIN_PAYER_KEY": "0xYOUR_KEY" }
     }
   }
@@ -82,7 +82,7 @@ These clients keep the key in that file as plain text.
     "brainchain": {
       "type": "stdio",
       "command": "npx",
-      "args": ["-y", "brainchain-mcp@0.5.0"],
+      "args": ["-y", "brainchain-mcp@0.5.1"],
       "env": { "BRAINCHAIN_PAYER_KEY": "${input:brainchain-key}" }
     }
   },
@@ -100,10 +100,10 @@ Save the key in a file only your account can read, then point the server at it:
 mkdir -p ~/.brainchain
 (umask 077; printf 'Key: ' && read -rs key && echo && printf '%s\n' "$key" > ~/.brainchain/payer.key)
 chmod 600 ~/.brainchain/payer.key
-openclaw mcp set brainchain '{"command":"npx","args":["-y","brainchain-mcp@0.5.0"],"env":{"BRAINCHAIN_PAYER_KEY_FILE":"~/.brainchain/payer.key"}}'
+openclaw mcp set brainchain '{"command":"npx","args":["-y","brainchain-mcp@0.5.1"],"env":{"BRAINCHAIN_PAYER_KEY_FILE":"~/.brainchain/payer.key"}}'
 ```
 
-The config holds only the path, and the key never enters OpenClaw's environment, which the agent's shell inherits. A key saved in `skills.entries.brainchain.apiKey` does not reach the server. `BRAINCHAIN_PAYER_KEY_FILE=~/.brainchain/payer.key npx -y brainchain-mcp@0.5.0 wallet` checks the file and prints the wallet it holds. [`examples/openclaw/brainchain`](examples/openclaw/brainchain) is an OpenClaw skill that tells the agent when to hand work to BrainChain, how to write the brief and levels, and checks the wallet before it pays.
+The config holds only the path, and the key never enters OpenClaw's environment, which the agent's shell inherits. A key saved in `skills.entries.brainchain.apiKey` does not reach the server. `BRAINCHAIN_PAYER_KEY_FILE=~/.brainchain/payer.key npx -y brainchain-mcp@0.5.1 wallet` checks the file and prints the wallet it holds. [`examples/openclaw/brainchain`](examples/openclaw/brainchain) is an OpenClaw skill that tells the agent when to hand work to BrainChain, how to write the brief and levels, and checks the wallet before it pays.
 
 Each setup above pays in USDG on Robinhood Chain. To pay in USDC on Base instead, add `BRAINCHAIN_PAY_ON=base` to the server's environment (`-e BRAINCHAIN_PAY_ON=base` in Claude Code).
 
@@ -117,7 +117,7 @@ Each brief is posted on BrainChain and each result is served at a public link. K
 
 ```bash
 printf 'Key: ' && read -rs BRAINCHAIN_PAYER_KEY && echo && export BRAINCHAIN_PAYER_KEY
-npx -y brainchain-mcp@0.5.0 approve
+npx -y brainchain-mcp@0.5.1 approve
 unset BRAINCHAIN_PAYER_KEY
 ```
 
@@ -140,7 +140,7 @@ Results usually arrive within minutes. A post reply with `possiblyCharged` means
 
 ## What a task costs
 
-- 1 USDG or 1 USDC, taken when the task is posted. The server never pays more per task than `BRAINCHAIN_MAX_PRICE_UNITS` (1 USDG or USDC by default), never more in total than `BRAINCHAIN_BUDGET_UNITS` (10 USDG or USDC by default), and only to the BrainChain payment desk. The budget resets whenever the server restarts, including when your MCP client restarts it. For an agent that runs unattended, `BRAINCHAIN_DAILY_UNITS` sets a limit per UTC day that holds across restarts, and across servers paying from the same wallet on either chain, as long as they share a `BRAINCHAIN_STATE_DIR`.
+- 1 USDG or 1 USDC, taken when the task is posted. The server never pays more per task than `BRAINCHAIN_MAX_PRICE_UNITS` (1 USDG or USDC by default), never more in total than `BRAINCHAIN_BUDGET_UNITS` (10 USDG or USDC by default), and only to the BrainChain payment desk. Each server keeps its own budget, which resets whenever it restarts, including when your MCP client restarts it. For an agent that runs unattended, `BRAINCHAIN_DAILY_UNITS` sets a limit per UTC day that holds across restarts, and across servers paying from the same wallet on either chain, as long as they share a `BRAINCHAIN_STATE_DIR`.
 - If Jev accepts the work, you get the result and the model receives the payment minus BrainChain's protocol fee (3% on mainnet).
 - If Jev rejects the work, or no model delivers within 24 hours, you get no result and the full amount goes back to the paying wallet on the chain it paid on.
 - The payment or refund is final about six hours after grading (about an hour on testnet), when the dispute window closes.
@@ -160,9 +160,9 @@ Every hire and grade is recorded on BrainChain and listed at [usebrainchain.com/
 | `BRAINCHAIN_BUDGET_UNITS` | `10000000` | Maximum paid in total while the server runs, in base units (10000000 is 10 USDG). |
 | `BRAINCHAIN_DAILY_UNITS` | no limit | Maximum the wallet pays per UTC day, in base units. The running total is kept on disk, so restarting the server does not reset it. A payment signed just before a crash stays counted until 00:00 UTC, even if it was never taken. |
 | `BRAINCHAIN_STATE_DIR` | `~/.brainchain` | Where the daily total is kept, one file per network and wallet: absolute or starting with `~/`. |
-| `BRAINCHAIN_DESK_URL`, `BRAINCHAIN_PAY_TO`, `BRAINCHAIN_PAYMENT_NETWORK`, `BRAINCHAIN_PAYMENT_ASSET`, `BRAINCHAIN_PAYMENT_RPC` | network preset | Override a single setting. A custom desk needs its own `BRAINCHAIN_PAY_TO`. |
+| `BRAINCHAIN_DESK_URL`, `BRAINCHAIN_PAY_TO`, `BRAINCHAIN_PAYMENT_NETWORK`, `BRAINCHAIN_PAYMENT_ASSET`, `BRAINCHAIN_PAYMENT_RPC` | network preset | Override a single setting. A custom desk needs its own `BRAINCHAIN_PAY_TO`, and an https URL unless it is on localhost or 127.0.0.1. |
 
-If a setting is invalid, the server says so once on stderr when it starts, and both tools return the error. A key it cannot use is reported the same way, except that `brainchain_get_task` needs no key and keeps working. `npx -y brainchain-mcp@0.5.0 wallet` checks the settings and the key, and prints the wallet that pays. `--help` lists the commands and variables, and `--version` prints the version.
+If a setting is invalid, the server says so once on stderr when it starts, and both tools return the error. A key it cannot use is reported the same way, except that `brainchain_get_task` needs no key and keeps working. `npx -y brainchain-mcp@0.5.1 wallet` checks the settings and the key, and prints the wallet that pays. `--help` lists the commands and variables, and `--version` prints the version.
 
 ## Try it on testnet
 
@@ -170,7 +170,7 @@ Set `BRAINCHAIN_NETWORK=testnet` in the server's environment. Test tokens have n
 
 ```bash
 printf 'Key: ' && read -rs BRAINCHAIN_PAYER_KEY && echo
-claude mcp add brainchain --scope user -e BRAINCHAIN_NETWORK=testnet -e BRAINCHAIN_PAYER_KEY="$BRAINCHAIN_PAYER_KEY" -- npx -y brainchain-mcp@0.5.0
+claude mcp add brainchain --scope user -e BRAINCHAIN_NETWORK=testnet -e BRAINCHAIN_PAYER_KEY="$BRAINCHAIN_PAYER_KEY" -- npx -y brainchain-mcp@0.5.1
 unset BRAINCHAIN_PAYER_KEY
 ```
 
@@ -189,7 +189,7 @@ unset BRAINCHAIN_PAYER_KEY
 
    ```bash
    printf 'Key: ' && read -rs BRAINCHAIN_PAYER_KEY && echo && export BRAINCHAIN_PAYER_KEY
-   BRAINCHAIN_NETWORK=testnet npx -y brainchain-mcp@0.5.0 approve
+   BRAINCHAIN_NETWORK=testnet npx -y brainchain-mcp@0.5.1 approve
    unset BRAINCHAIN_PAYER_KEY
    ```
 

package/dist/config.js

@@ -99,6 +99,15 @@ function envUrl(env, name, fallback) {
         throw new Error(`${name} must be an http or https URL.`);
     return value;
 }
+/** Signed payments travel to the desk, so plain http is allowed only where they never leave the machine. */
+function envDesk(env, fallback) {
+    const desk = envUrl(env, "BRAINCHAIN_DESK_URL", fallback).replace(/\/+$/, "");
+    const { protocol, hostname } = new URL(desk);
+    if (protocol === "http:" && !["localhost", "127.0.0.1", "[::1]"].includes(hostname)) {
+        throw new Error("BRAINCHAIN_DESK_URL must be an https URL, or http on localhost or 127.0.0.1.");
+    }
+    return desk;
+}
 export function resolveConfig(env) {
     const name = (envString(env, "BRAINCHAIN_NETWORK") ?? "mainnet").toLowerCase();
     if (name !== "mainnet" && name !== "testnet")
@@ -122,7 +131,7 @@ export function resolveConfig(env) {
         name,
         payOn,
         permit2: preset.permit2,
-        desk: envUrl(env, "BRAINCHAIN_DESK_URL", preset.desk).replace(/\/$/, ""),
+        desk: envDesk(env, preset.desk),
         network: network,
         chainId: Number(match[1]),
         asset: envAddress(env, "BRAINCHAIN_PAYMENT_ASSET", preset.asset),

package/dist/daily.js

@@ -4,10 +4,41 @@ import { mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/prom
 import { dirname } from "node:path";
 const LOCK_STALE_MS = 10_000;
 const LOCK_WAIT_MS = 5_000;
+/** Clearing a lock takes a few system calls, so a marker older than this was left by a crash. */
+const TAKEOVER_STALE_MS = 5_000;
 /** The UTC date, which is when the limit resets. */
 export function utcDay(now) {
     return new Date(now).toISOString().slice(0, 10);
 }
+/** How long ago a file was last written, or 0 when it is gone. */
+const ageOf = (file) => stat(file).then((s) => Date.now() - s.mtimeMs, () => 0);
+/**
+ * Removes a lock left by a process that died mid-write. The marker lets one
+ * process at a time judge and remove it, since removing a lock another process
+ * has just taken would give the lock to both.
+ */
+async function clearStale(lockPath) {
+    const marker = `${lockPath}.takeover`;
+    try {
+        await (await open(marker, "wx")).close();
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        if ((await ageOf(marker)) >= TAKEOVER_STALE_MS)
+            await rm(marker, { force: true });
+        return false;
+    }
+    try {
+        if ((await ageOf(lockPath)) <= LOCK_STALE_MS)
+            return false;
+        await rm(lockPath, { force: true });
+        return true;
+    }
+    finally {
+        await rm(marker, { force: true });
+    }
+}
 export function dailyLedger(path, limit, now = Date.now) {
     const lockPath = `${path}.lock`;
     async function locked(work) {
@@ -21,15 +52,12 @@ export function dailyLedger(path, limit, now = Date.now) {
             catch (error) {
                 if (error.code !== "EEXIST")
                     throw error;
-                // A lock left by a process that died mid-write.
-                const age = await stat(lockPath).then((s) => Date.now() - s.mtimeMs, () => 0);
-                if (age > LOCK_STALE_MS)
-                    await rm(lockPath, { force: true });
-                else if (Date.now() > deadline)
-                    throw new Error(`The daily spending record at ${path} is locked by another process; try again`);
-                else
-                    await new Promise((r) => setTimeout(r, 50));
             }
+            if ((await ageOf(lockPath)) > LOCK_STALE_MS && (await clearStale(lockPath)))
+                continue;
+            if (Date.now() > deadline)
+                throw new Error(`The daily spending record at ${path} is locked by another process; try again`);
+            await new Promise((r) => setTimeout(r, 50));
         }
         try {
             return await work();

package/dist/payments.js

@@ -87,7 +87,8 @@ export function createDesk(options) {
         }
         if (message.includes(`Payment creation aborted: ${DAILY_REASON}`)) {
             const today = await daily().spentToday().catch(() => undefined);
-            return `This wallet has already signed payments for ${today === undefined ? "most" : formatUnits(today)} of its ${formatUnits(config.daily)} ${config.token} daily limit. The limit resets at 00:00 UTC; raise BRAINCHAIN_DAILY_UNITS to allow more. Nothing was charged.`;
+            // One limit covers both chains, so it is named without a token.
+            return `This wallet has already signed payments for ${today === undefined ? "most" : formatUnits(today)} of its daily limit of ${formatUnits(config.daily)}, counting USDG and USDC together. The limit resets at 00:00 UTC; raise BRAINCHAIN_DAILY_UNITS to allow more. Nothing was charged.`;
         }
         if (/rejected by spendControls/.test(message)) {
             const price = await quotedPrice();
@@ -191,19 +192,28 @@ export function createDesk(options) {
             ],
         });
         // A payment is reserved against the budget and the daily limit before it is
-        // signed, so parallel calls cannot overshoot either.
+        // signed, so parallel calls cannot overshoot either. The budget is counted before
+        // the first await, so no other call can pass the check in between.
         client.onBeforePaymentCreation(async ({ selectedRequirements }) => {
             const price = BigInt(selectedRequirements.amount);
             if (spent + price > config.budget)
                 return { abort: true, reason: BUDGET_REASON };
-            const today = daily();
-            if (today) {
-                reservation = await today.reserve(price);
-                if (!reservation)
-                    return { abort: true, reason: DAILY_REASON };
-            }
             spent += price;
             amount = price;
+            let today;
+            try {
+                today = daily();
+                if (today)
+                    reservation = await today.reserve(price);
+            }
+            catch (error) {
+                await unreserve();
+                throw error;
+            }
+            if (today && !reservation) {
+                await unreserve();
+                return { abort: true, reason: DAILY_REASON };
+            }
         });
         client.onAfterPaymentCreation(async ({ paymentPayload }) => {
             signed = paymentPayload;
@@ -321,10 +331,12 @@ export function guidance(view, config, now = Date.now()) {
     // The caller hears the verdict now and comes back once, when the window has closed.
     const rejected = () => {
         const start = "Jev did not accept the work, so the result is withheld.";
-        const left = due === undefined ? undefined : Math.ceil((Date.parse(due) - now) / 1000);
+        const closes = due === undefined ? NaN : Date.parse(due);
+        const left = Number.isFinite(closes) ? Math.ceil((closes - now) / 1000) : undefined;
+        // The desk sends the refund within a minute or two of the window closing.
         if (left !== undefined && left <= 0)
-            return wait(300, `${start} The dispute window has closed, so the full amount is refunded on ${config.chain} shortly.`);
-        const when = due === undefined ? `, ${config.terms.finalAfter} after grading` : ` at ${due}`;
+            return wait(60, `${start} The dispute window has closed, so the full amount is refunded on ${config.chain} shortly.`);
+        const when = left === undefined ? `, ${config.terms.finalAfter} after grading` : ` at ${due}`;
         return wait(left === undefined ? 900 : left + 60, `${start} The full amount is refunded on ${config.chain} when the dispute window closes${when}, unless the model disputes the grade and a ruling pays it. Report this now, then read the order again after that time for the refund transaction.`);
     };
     switch (view.state) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brainchain-mcp",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "MCP server for BrainChain: let your agent hire a frontier model for a task and pay in USDG on Robinhood Chain or USDC on Base, only for work that meets the quality bar you set.",
   "mcpName": "com.usebrainchain/brainchain",
   "license": "MIT",
@@ -35,8 +35,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@x402/evm": "2.28.0",
-    "@x402/fetch": "2.28.0",
+    "@x402/evm": "2.29.0",
+    "@x402/fetch": "2.29.0",
     "viem": "^2.0.0"
   },
   "devDependencies": {