bsv-mcp 0.0.36 → 0.2.7

package/tools/bap/generate.ts

@@ -0,0 +1,431 @@
+import os from "node:os";
+import path from "node:path";
+import {
+	Utils as BSVUtils,
+	fromUtxo,
+	HD,
+	isBroadcastFailure,
+	P2PKH,
+	PrivateKey,
+	Script,
+	Transaction,
+} from "@bsv/sdk";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import { BAP } from "bsv-bap";
+import { z } from "zod";
+import { V5Broadcaster } from "../../utils/broadcaster";
+import { SecureKeyManager } from "../../utils/keyManager";
+import { BAP_PREFIX } from "../constants";
+import { fetchPaymentUtxos } from "../wallet/fetchPaymentUtxos";
+
+// Get toArray from BSV SDK Utils
+const { toArray } = BSVUtils;
+
+const KEY_DIR = path.join(os.homedir(), ".bsv-mcp");
+const KEY_FILE_PATH = path.join(KEY_DIR, "keys.json");
+
+const bapGenerateArgsSchema = z.object({
+	alternateName: z.string().optional().describe("Alternate name for the BAP identity profile"),
+	description: z.string().optional().describe("Description for the BAP identity profile"),
+});
+
+export type BapGenerateArgs = z.infer<typeof bapGenerateArgsSchema>;
+
+/**
+ * Generates a new BAP HD master key and derives the first identity,
+ * saving the keys to secure storage.
+ * Attempts to register the ID on-chain, unless broadcasting is disabled.
+ */
+async function generateBapKeys(
+	args?: BapGenerateArgs & { disableBroadcasting?: boolean },
+): Promise<{
+	success: boolean;
+	xprv?: string;
+	identityAddress?: string;
+	identityKey?: string;
+	error?: string;
+	message?: string;
+	txid?: string;
+	rawTx?: string;
+}> {
+	const keyManager = new SecureKeyManager({ keyDir: KEY_DIR });
+	let tempXprv = "";
+	let identityPk: string;
+	let payPkToPreserve: PrivateKey | undefined;
+
+	// 1. Load existing keys and check preconditions
+	try {
+		let keys: { payPk?: PrivateKey; identityPk?: PrivateKey; xprv?: string };
+		let source: string;
+
+		try {
+			const result = await keyManager.loadKeys();
+			keys = result.keys;
+			source = result.source;
+		} catch (loadError) {
+			const errorMsg =
+				loadError instanceof Error ? loadError.message : String(loadError);
+			console.error(
+				`ERROR: Failed to read keys from secure storage: ${errorMsg}`,
+			);
+
+			// Check for specific error patterns
+			if (
+				errorMsg.includes("JSON Parse error") ||
+				errorMsg.includes("JSON.parse")
+			) {
+				// Extract just the JSON parse error part
+				const match = errorMsg.match(/JSON Parse error[^.]*\.?/);
+				const jsonError = match ? match[0] : "JSON Parse error";
+				return {
+					success: false,
+					error: `Could not read or parse keys.json: ${jsonError}`,
+				};
+			}
+
+			return {
+				success: false,
+				error: `Failed to read keys: ${errorMsg}`,
+			};
+		}
+
+		if (!keys.payPk) {
+			console.error(
+				"ERROR: Payment Private Key (payPk) does not exist in secure storage.",
+			);
+			const errorMessage =
+				source === "none"
+					? "keys.json not found. Payment Private Key (payPk) is required."
+					: "Payment Private Key (payPk) does not exist in keys.json.";
+			return {
+				success: false,
+				error: errorMessage,
+			};
+		}
+
+		payPkToPreserve = keys.payPk;
+
+		if (keys.xprv) {
+			console.error(
+				"ERROR: BAP Master Key (xprv) already exists in secure storage.",
+			);
+			return {
+				success: false,
+				error: "BAP Master Key (xprv) already exists in keys.json.",
+			};
+		}
+
+		if (keys.identityPk) {
+			console.error(
+				"ERROR: BAP Identity Key (identityPk) already exists. Cannot generate HD key.",
+			);
+			return {
+				success: false,
+				error: "BAP Identity Key (identityPk) already exists in keys.json.",
+			};
+		}
+
+		const status = keyManager.getStatus();
+		if (source === "legacy" && !status.hasEncrypted) {
+			console.warn(
+				"WARN: Using unencrypted keys. Run the server again to encrypt them.",
+			);
+		}
+	} catch (fileError) {
+		console.error("ERROR: Failed to read keys from secure storage:", fileError);
+		return {
+			success: false,
+			error: `Failed to read keys: ${fileError instanceof Error ? fileError.message : String(fileError)}`,
+		};
+	}
+
+	try {
+		const payPk = payPkToPreserve;
+		const paymentAddress = payPk.toAddress();
+
+		// 2. Generate HD Key
+		const hdKey = HD.fromRandom();
+		tempXprv = hdKey.toString();
+
+		// 3. Create BAP instance and generate identity
+		const bapInstance = new BAP(tempXprv);
+
+		// Create identity attributes
+		const identityAttributes = {
+			name: {
+				value: args?.alternateName || "Anonymous User",
+				nonce: BSVUtils.toHex(BSVUtils.toArray(Math.random().toString())),
+			},
+			description: {
+				value: args?.description || "A BAP identity managed by BSV-MCP.",
+				nonce: BSVUtils.toHex(BSVUtils.toArray(Math.random().toString())),
+			},
+		};
+
+		// Create new ID with the BAP instance
+		const bapId = bapInstance.newId(undefined, identityAttributes);
+
+		// Get the generated identity information
+		const generatedIdentityKey = bapId.getIdentityKey();
+		const generatedIdentityAddress = bapId.rootAddress;
+
+		// Export member backup to get the private key
+		const memberBackup = bapId.exportMemberBackup();
+		identityPk = memberBackup.derivedPrivateKey;
+
+		console.error(`INFO: Generated BAP identity key: ${generatedIdentityKey}`);
+		console.error(
+			`INFO: Generated BAP identity address: ${generatedIdentityAddress}`,
+		);
+
+		// 5. Save Keys to secure storage
+		const updatedKeys = {
+			payPk: payPkToPreserve,
+			identityPk: PrivateKey.fromWif(identityPk),
+			xprv: tempXprv,
+		};
+
+		await keyManager.saveKeys(updatedKeys);
+		const status = keyManager.getStatus();
+
+		if (status.hasEncrypted) {
+			console.error(
+				`INFO: BAP HD Master Key and initial Identity Key have been generated and saved (encrypted) to ${KEY_DIR}/keys.bep`,
+			);
+		} else {
+			console.error(
+				`INFO: BAP HD Master Key and initial Identity Key have been generated and saved to ${KEY_FILE_PATH}`,
+			);
+		}
+
+		// Create the ID registration transaction output
+		// BAP ID format: OP_0 OP_RETURN <BAP_PREFIX> "ID" <identity_key> <root_address> <current_address>
+		const idPayload = [
+			toArray(BAP_PREFIX, "utf8"),
+			toArray("ID"),
+			toArray(generatedIdentityKey),
+			toArray(bapId.rootAddress),
+			toArray(bapId.rootAddress), // For initial registration, current = root
+		];
+
+		// Sign the ID payload with AIP
+		const signedIdPayload = bapId.signOpReturnWithAIP(idPayload);
+
+		// Convert to hex strings for Script
+		const idHexStrings = signedIdPayload.map((bytes) =>
+			BSVUtils.toHex(bytes as number[]),
+		);
+		const idAsmString = `OP_0 OP_RETURN ${idHexStrings.join(" ")}`;
+		const idScript = Script.fromASM(idAsmString);
+
+		// Create the ALIAS transaction output
+		// First create the structured data object for the alias
+		const aliasData = {
+			"@context": "https://schema.org",
+			"@type": "Person",
+			name: args?.alternateName || "Anonymous User",
+			description: args?.description || "A BAP identity managed by BSV-MCP.",
+			url: `bitcoin:${paymentAddress}`,
+		};
+
+		const aliasPayload = [
+			toArray(BAP_PREFIX, "utf8"),
+			toArray("ALIAS"),
+			toArray(generatedIdentityKey),
+			toArray(JSON.stringify(aliasData)),
+		];
+
+		// Sign the ALIAS payload with AIP
+		const signedAliasPayload = bapId.signOpReturnWithAIP(aliasPayload);
+
+		// Convert to hex strings for Script
+		const aliasHexStrings = signedAliasPayload.map((bytes) =>
+			BSVUtils.toHex(bytes as number[]),
+		);
+		const aliasAsmString = `OP_0 OP_RETURN ${aliasHexStrings.join(" ")}`;
+		const aliasScript = Script.fromASM(aliasAsmString);
+
+		// 6. Build Transaction
+		const tx = new Transaction();
+		// Add the ID registration output
+		tx.addOutput({
+			lockingScript: idScript,
+			satoshis: 0,
+		});
+		// Add the ALIAS output
+		tx.addOutput({
+			lockingScript: aliasScript,
+			satoshis: 0,
+		});
+
+		console.error(
+			`INFO: Fetching UTXOs for payment address: ${paymentAddress}`,
+		);
+		const paymentUtxos = await fetchPaymentUtxos(paymentAddress);
+
+		if (!paymentUtxos || paymentUtxos.length === 0) {
+			console.error(
+				`ERROR: No UTXOs found for payment address ${paymentAddress}. Cannot fund BAP registration.`,
+			);
+			// Keys were generated and saved, but no UTXOs to broadcast
+			return {
+				success: true,
+				identityAddress: generatedIdentityAddress,
+				identityKey: generatedIdentityKey,
+				message:
+					"BAP HD Key and Initial Identity Generated & Saved to secure storage. No UTXOs available to fund registration.",
+				error:
+					"No UTXOs found for payment address. Cannot fund BAP registration.",
+			};
+		}
+
+		console.error(`INFO: Found ${paymentUtxos.length} payment UTXOs.`);
+
+		// Estimate fee
+		let estimatedSize = tx.toHex().length / 2;
+		estimatedSize += paymentUtxos.length * 148;
+		estimatedSize += 34;
+		const estimatedFee = Math.ceil(estimatedSize * 0.05);
+
+		for (const utxo of paymentUtxos) {
+			const input = fromUtxo(utxo, new P2PKH().unlock(payPk));
+			tx.addInput(input);
+		}
+
+		const totalInputValue = paymentUtxos.reduce(
+			(sum: number, utxo: { satoshis: number }) => sum + utxo.satoshis,
+			0,
+		);
+		const changeAmount = totalInputValue - estimatedFee;
+
+		if (changeAmount > 0) {
+			tx.addOutput({
+				lockingScript: new P2PKH().lock(paymentAddress),
+				satoshis: changeAmount,
+			});
+		}
+
+		await tx.sign();
+		const rawTxHex = tx.toHex();
+		const txid = tx.id("hex");
+
+		console.error(`INFO: BAP registration transaction created. TXID: ${txid}`);
+		console.error(`DEBUG: Raw transaction hex: ${rawTxHex}`);
+
+		// 7. Broadcast Transaction
+		const disableBroadcasting =
+			args?.disableBroadcasting || process.env.DISABLE_BROADCASTING === "true";
+
+		if (disableBroadcasting) {
+			console.error(
+				"INFO: Broadcasting disabled. Transaction not sent to network.",
+			);
+			const message = `BAP HD Key and Initial Identity Generated & Saved to secure storage. Registration transaction created but not broadcast (TXID: ${txid}).`;
+			return {
+				success: true,
+				identityAddress: bapId.rootAddress,
+				identityKey: generatedIdentityKey,
+				txid,
+				rawTx: rawTxHex,
+				message,
+			};
+		}
+
+		try {
+			const broadcaster = new V5Broadcaster();
+			const broadcastResult = await tx.broadcast(broadcaster);
+
+			let effectiveTxid = txid;
+			if (!isBroadcastFailure(broadcastResult)) {
+				effectiveTxid = broadcastResult.txid;
+				console.error(
+					`INFO: BAP registration transaction broadcast successfully. TXID: ${effectiveTxid}`,
+				);
+			} else if (isBroadcastFailure(broadcastResult)) {
+				const failureTxid = broadcastResult.txid
+					? ` (${broadcastResult.txid})`
+					: "";
+				console.warn(
+					`WARN: Transaction broadcast failed${failureTxid}. Code: ${broadcastResult.code}, Description: ${broadcastResult.description}. Original TXID ${txid}.`,
+				);
+				if (broadcastResult.txid) {
+					effectiveTxid = broadcastResult.txid;
+				}
+			}
+
+			const message = `BAP HD Key and Initial Identity Generated & Saved to secure storage. Registration TXID: ${effectiveTxid}.`;
+			let overallSuccess = true;
+			let errorMessageFromBroadcast: string | undefined;
+			if (isBroadcastFailure(broadcastResult)) {
+				overallSuccess = false;
+				errorMessageFromBroadcast = `Broadcast failed: ${broadcastResult.description} (Code: ${broadcastResult.code})`;
+			}
+
+			return {
+				success: overallSuccess,
+				identityAddress: generatedIdentityAddress,
+				identityKey: generatedIdentityKey,
+				txid: effectiveTxid,
+				rawTx: rawTxHex,
+				message: isBroadcastFailure(broadcastResult)
+					? `${message} Note: ${errorMessageFromBroadcast}`
+					: message,
+				error: isBroadcastFailure(broadcastResult)
+					? errorMessageFromBroadcast
+					: undefined,
+			};
+		} catch (broadcastError) {
+			const errorMsg =
+				broadcastError instanceof Error
+					? broadcastError.message
+					: String(broadcastError);
+			console.error(
+				`ERROR: Failed to broadcast BAP registration transaction ${txid}: ${errorMsg}`,
+			);
+			// Keys were generated and saved, but broadcast failed
+			return {
+				success: true,
+				identityAddress: generatedIdentityAddress,
+				identityKey: generatedIdentityKey,
+				txid,
+				rawTx: rawTxHex,
+				message: `Keys generated and saved, but failed to broadcast BAP registration transaction: ${errorMsg}`,
+				error: `Broadcast failed: ${errorMsg}. You can manually broadcast the raw transaction.`,
+			};
+		}
+	} catch (error) {
+		const errorMsg = error instanceof Error ? error.message : String(error);
+		console.error(
+			`ERROR: Failed to generate BAP HD key or register identity: ${errorMsg}`,
+		);
+		return {
+			success: false,
+			error: `Failed during BAP key generation/saving or transaction construction: ${errorMsg}`,
+		};
+	}
+}
+
+/**
+ * Registers the bap_generate tool
+ */
+export function registerBapGenerateTool(server: McpServer) {
+	server.tool(
+		"bap_generate",
+		"Generates a BAP HD master key AND derives the first identity key if no BAP keys (xprv or identityPk) exist. Saves keys to secure storage. Attempts on-chain registration using payPk (honors DISABLE_BROADCASTING). Optionally takes alternateName and description for the profile.",
+		{ ...bapGenerateArgsSchema.shape },
+		async ({ alternateName, description }): Promise<CallToolResult> => {
+			try {
+				const result = await generateBapKeys({ alternateName, description });
+				// Format result as JSON
+				return {
+					content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+					isError: !result.success,
+				};
+			} catch (e) {
+				const msg = e instanceof Error ? e.message : String(e);
+				return { content: [{ type: "text", text: msg }], isError: true };
+			}
+		},
+	);
+}

package/tools/bap/getCurrentAddress.ts

@@ -0,0 +1,69 @@
+import { PrivateKey } from "@bsv/sdk";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import type { Wallet } from "../wallet/wallet";
+
+/**
+ * Register the tool to get the BAP identity address
+ * @param server The MCP server instance
+ * @param identityPk The optional identity private key
+ */
+export function registerBapGetCurrentAddressTool(
+	server: McpServer,
+	identityPk?: PrivateKey,
+): void {
+	server.tool(
+		"bap_getCurrentAddress",
+		"Retrieves the current BAP identity's Bitcoin SV address. This address is derived from the server's configured identity key.",
+		{},
+		async () => {
+			try {
+				let pkToUse = identityPk;
+
+				// Fallback to environment variable if identityPk wasn't provided
+				if (!pkToUse) {
+					const identityKeyWifEnv = process.env.IDENTITY_KEY_WIF;
+					if (identityKeyWifEnv) {
+						try {
+							pkToUse = PrivateKey.fromWif(identityKeyWifEnv);
+						} catch (e) {
+							// Let the final check handle the error
+						}
+					}
+				}
+
+				if (!pkToUse) {
+					throw new Error(
+						"Could not retrieve BAP identity address. Identity key not configured.",
+					);
+				}
+
+				const address = pkToUse.toAddress().toString();
+
+				return {
+					content: [
+						{
+							type: "text",
+							text: JSON.stringify({ address, status: "ok" }),
+						},
+					],
+				};
+			} catch (err: unknown) {
+				const msg = err instanceof Error ? err.message : String(err);
+				return {
+					content: [
+						{
+							type: "text",
+							text: JSON.stringify({
+								error: "Failed to get BAP identity address",
+								message: msg,
+								status: "error",
+							}),
+						},
+					],
+					isError: true,
+				};
+			}
+		},
+	);
+}

package/tools/bap/getId.test.ts

@@ -0,0 +1,121 @@
+import { afterEach, beforeEach, describe, expect, it, spyOn } from "bun:test";
+import { fetchProfile } from "./getId";
+import type { IdentityData, SigmaIdentityProfile } from "./types";
+
+// Store the original fetch function
+const originalFetch = global.fetch;
+let fetchMock: ReturnType<typeof spyOn>;
+
+describe("BAP getId - fetchProfile", () => {
+	beforeEach(() => {
+		// Create a new spy for global.fetch before each test
+		// and assign it to global.fetch
+		fetchMock = spyOn(globalThis, "fetch");
+	});
+
+	afterEach(() => {
+		// Restore the original fetch function after each test
+		fetchMock.mockRestore();
+	});
+
+	it("should return identity data for a valid idKey", async () => {
+		const mockIdKey = "testIdKey";
+		const mockIdentityData: IdentityData = {
+			"@context": ["https://w3id.org/did/v0.11", "https://w3id.org/bap/v1"],
+			id: `did:bap:id:${mockIdKey}`,
+			publicKey: [
+				{
+					id: `did:bap:id:${mockIdKey}#root`,
+					controller: `did:bap:id:${mockIdKey}`,
+					type: "EcdsaSecp256k1VerificationKey2019",
+					bitcoinAddress: "1SomeBitcoinAddress",
+				},
+			],
+			authentication: ["#root"],
+			assertionMethod: ["#root"],
+		};
+		const mockApiResponse: SigmaIdentityProfile = { result: mockIdentityData };
+
+		// fetchMock.mockResolvedValueOnce({
+		fetchMock.mockImplementationOnce(async () => ({
+			ok: true,
+			json: async () => mockApiResponse,
+			text: async () => JSON.stringify(mockApiResponse),
+			status: 200,
+		}));
+
+		const profile = await fetchProfile(mockIdKey);
+		expect(profile).toEqual(mockIdentityData);
+		expect(fetchMock).toHaveBeenCalledTimes(1);
+		expect(fetchMock).toHaveBeenCalledWith(
+			expect.stringContaining("/identity/get"),
+			expect.objectContaining({
+				method: "POST",
+				body: JSON.stringify({ idKey: mockIdKey }),
+			}),
+		);
+	});
+
+	it("should return null if Sigma API returns 404", async () => {
+		const mockIdKey = "nonExistentIdKey";
+		// fetchMock.mockResolvedValueOnce({
+		fetchMock.mockImplementationOnce(async () => ({
+			ok: false,
+			status: 404,
+			json: async () => ({ error: "not found" }), // Mock error body for 404
+			text: async () => "not found",
+		}));
+
+		const profile = await fetchProfile(mockIdKey);
+		expect(profile).toBeNull();
+		expect(fetchMock).toHaveBeenCalledTimes(1);
+	});
+
+	it("should throw an error if Sigma API request fails (non-404)", async () => {
+		const mockIdKey = "errorIdKey";
+		// fetchMock.mockResolvedValueOnce({
+		fetchMock.mockImplementationOnce(async () => ({
+			ok: false,
+			status: 500,
+			json: async () => ({ error: "server error" }),
+			text: async () => "server error",
+		}));
+
+		await expect(fetchProfile(mockIdKey)).rejects.toThrow(
+			"Sigma API request failed with status 500: server error",
+		);
+		expect(fetchMock).toHaveBeenCalledTimes(1);
+	});
+
+	it("should throw an error if Sigma API response is malformed (missing result)", async () => {
+		const mockIdKey = "malformedIdKey";
+		// fetchMock.mockResolvedValueOnce({
+		fetchMock.mockImplementationOnce(async () => ({
+			ok: true,
+			status: 200,
+			json: async () => ({}), // Empty object, missing 'result'
+			text: async () => "{}",
+		}));
+
+		await expect(fetchProfile(mockIdKey)).rejects.toThrow(
+			"Sigma API response is missing the 'result' field.",
+		);
+	});
+
+	it("should throw an error if Sigma API response is not valid JSON", async () => {
+		const mockIdKey = "invalidJsonIdKey";
+		// fetchMock.mockResolvedValueOnce({
+		fetchMock.mockImplementationOnce(async () => ({
+			ok: true,
+			status: 200,
+			json: async () => {
+				throw new Error("Invalid JSON");
+			}, // Simulate JSON parsing error
+			text: async () => "This is not JSON",
+		}));
+
+		expect(fetchProfile(mockIdKey)).rejects.toThrow(
+			"Failed to parse Sigma API response: Invalid JSON",
+		);
+	});
+});