cascrow-mcp 1.5.0 → 1.5.2

package/README.md

@@ -126,7 +126,7 @@ Rate limit: 3 registrations per IP per hour.
 | `cascrow_get_proof_status` | Poll a submitted proof's verification result. |
 | `cascrow_watch_verification` | Submit proof and block until verification completes (combines submit + poll). |
 | `cascrow_mcp_submit` | Submit proof and get an immediate verdict in one call — auto-releases funds and mints the NFT on approval. |
-| `cascrow_verify_work` | Verify AI work with no escrow contract, from a GitHub PR or pasted code. Returns a public report URL. |
+| `cascrow_verify_work` | Verify AI work with no escrow contract, from a GitHub PR, pasted code, or a base64-encoded screenshot. Returns a public report URL. |
 | `cascrow_escrow_fund` | Fund a milestone with an EVM private key (fully autonomous). |
 | `cascrow_fund_milestone` | Fund via MetaMask (browser flow). |
 | `cascrow_get_contract` | Get contract status and all milestone states. |
@@ -135,7 +135,7 @@ Rate limit: 3 registrations per IP per hour.
 | `cascrow_handoff` | Send a contract to another agent by Agent ID. |
 | `cascrow_get_agent_id` | Get this agent's own Agent ID. |
 | `cascrow_check_invites` | Check pending contract invites. |
-| `cascrow_get_reputation` | Look up any agent's on-chain reputation by wallet address. No auth required. |
+| `cascrow_get_reputation` | Look up any agent's on-chain track record by wallet address — completed, failed, success rate, proof hashes. No auth required. |
 | `cascrow_discover_agents` | Search discoverable Builder agents by skill tag and minimum success rate. |
 | `cascrow_set_discoverable` | Opt into the agent marketplace, set skill tags, register a callback URL. |
 
@@ -147,7 +147,7 @@ Five AI models vote in parallel on submitted proof:
 - Gemini Flash
 - GPT-4o-mini
 - Mistral Small
-- Cerebras / Qwen3
+- Cerebras
 
 **3 out of 5 YES votes** = milestone verified.
 

package/index.js

@@ -95,10 +95,12 @@ async function uploadProof(milestoneId, filename, content) {
   return data;
 }
 
-// Stream verify with 180s timeout to handle slow AI quorums
+// Stream verify with a 200s timeout to handle slow AI quorums. Must stay below
+// the maxDuration of /api/verify (240s) — at 180s against the old 150s cap this
+// deadline could never fire, and the caller saw a truncated stream instead.
 async function streamVerify(proofId) {
   const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), 180_000);
+  const timeout = setTimeout(() => controller.abort(), 200_000);
 
   let res;
   try {
@@ -343,8 +345,11 @@ const TOOLS = [
   {
     name: "cascrow_get_reputation",
     description:
-      "Look up the on-chain reputation of any agent by their XRPL wallet address. " +
-      "Returns total milestones completed, total RLUSD released, success rate, and XRPL tx hashes for each milestone as portable on-chain proof. " +
+      "Look up the on-chain reputation of any agent by their EVM wallet address. " +
+      "Returns milestones completed, milestones failed, success rate, total RLUSD released, " +
+      "and XRPL tx hashes for each milestone as portable on-chain proof. " +
+      "Success rate counts funded milestones that ran out the clock as failures; a rejected " +
+      "proof is not a failure, since it can be resubmitted. " +
       "No authentication required — public endpoint.",
     inputSchema: {
       type: "object",
@@ -352,7 +357,7 @@ const TOOLS = [
       properties: {
         walletAddress: {
           type: "string",
-          description: "The XRPL wallet address of the agent (e.g. rXXXX...)",
+          description: "The EVM wallet address of the agent (e.g. 0x...)",
         },
       },
     },
@@ -493,8 +498,8 @@ const TOOLS = [
     name: "cascrow_verify_work",
     description:
       "Verify AI-generated work without any escrow contract. " +
-      "Provide a task description and either a GitHub PR URL or paste code/text. " +
-      "Returns a public shareable report URL with a YES/NO decision, confidence score, " +
+      "Provide a task description and either a GitHub PR URL, pasted code/text, or a screenshot/image " +
+      "(base64-encoded). Returns a public shareable report URL with a YES/NO decision, confidence score, " +
       "and per-model reasoning from 5 AI models. Use this to prove that AI work was actually done correctly.",
     inputSchema: {
       type: "object",
@@ -506,11 +511,20 @@ const TOOLS = [
         },
         prUrl: {
           type: "string",
-          description: "GitHub PR URL (e.g. github.com/owner/repo/pull/42). Takes precedence over codeText.",
+          description: "GitHub PR URL (e.g. github.com/owner/repo/pull/42). Takes precedence over codeText/imageBase64.",
         },
         codeText: {
           type: "string",
-          description: "Paste code, diff, or work description (max 50,000 chars). Used if no prUrl.",
+          description: "Paste code, diff, or work description (max 50,000 chars). Used if no prUrl or imageBase64.",
+        },
+        imageBase64: {
+          type: "string",
+          description: "Base64-encoded screenshot/image proof (e.g. a working UI). Requires imageMimeType. Used if no prUrl.",
+        },
+        imageMimeType: {
+          type: "string",
+          enum: ["image/jpeg", "image/png", "image/webp", "image/gif"],
+          description: "MIME type of imageBase64 — required when imageBase64 is provided.",
         },
         checklistItems: {
           type: "array",
@@ -728,7 +742,7 @@ async function handleGetReputation({ walletAddress }) {
       .filter(([, hash]) => hash)
       .map(([k, hash]) => `${k}: https://xrpscan.com/tx/${hash}`)
       .join(", ");
-    return `  - "${m.title}" ($${m.amountUSD} RLUSD)${proofLinks ? ` — ${proofLinks}` : ""}`;
+    return `  - ${m.summary ?? "Completed milestone"} ($${m.amountUSD} RLUSD)${proofLinks ? ` — ${proofLinks}` : ""}`;
   }).join("\n");
 
   return {
@@ -882,11 +896,31 @@ async function handleMcpSubmit({ contract_id, milestone_id, evidence }) {
   };
 }
 
-async function handleVerifyWork({ taskDescription, prUrl, codeText, checklistItems }) {
-  if (!prUrl && !codeText) {
-    throw new Error("Provide either prUrl (GitHub PR URL) or codeText.");
+const IMAGE_EXT_BY_MIME = { "image/jpeg": "jpg", "image/png": "png", "image/webp": "webp", "image/gif": "gif" };
+
+async function handleVerifyWork({ taskDescription, prUrl, codeText, imageBase64, imageMimeType, checklistItems }) {
+  let data;
+  if (imageBase64) {
+    if (!imageMimeType || !IMAGE_EXT_BY_MIME[imageMimeType]) {
+      throw new Error("imageMimeType must be one of: image/jpeg, image/png, image/webp, image/gif");
+    }
+    const buffer = Buffer.from(imageBase64, "base64");
+    const form = new FormData();
+    form.append("taskDescription", taskDescription);
+    form.append("image", new Blob([buffer], { type: imageMimeType }), `image.${IMAGE_EXT_BY_MIME[imageMimeType]}`);
+    const res = await fetch(`${BASE_URL}/api/verify/standalone`, {
+      method: "POST",
+      headers: { ...authHeader },
+      body: form,
+    });
+    data = await res.json();
+    if (!res.ok) throw new Error(data.error ?? `HTTP ${res.status}`);
+  } else {
+    if (!prUrl && !codeText) {
+      throw new Error("Provide either prUrl (GitHub PR URL), codeText, or imageBase64 + imageMimeType.");
+    }
+    data = await apiPost("/api/verify/standalone", { taskDescription, prUrl, codeText, checklistItems });
   }
-  const data = await apiPost("/api/verify/standalone", { taskDescription, prUrl, codeText, checklistItems });
   const decision = data.decision === "YES" ? "✅ VERIFIED" : "❌ NOT VERIFIED";
   const conf = data.confidence != null ? ` (${data.confidence}% confidence)` : "";
   const checklistNote = data.checklistResults
@@ -941,7 +975,7 @@ async function handleWatchVerification({ milestoneId, content, filename }) {
 // ─── MCP Server ───────────────────────────────────────────────────────────────
 
 const server = new Server(
-  { name: "cascrow", version: "1.5.0" },
+  { name: "cascrow", version: "1.5.1" },
   { capabilities: { tools: {} } }
 );
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cascrow-mcp",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "description": "MCP server for Cascrow — AI-verified milestone escrow on the XRP Ledger",
   "type": "module",
   "main": "index.js",

package/server.json

@@ -0,0 +1,46 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.jnm04/cascrow-mcp",
+  "title": "Cascrow",
+  "description": "Independent 5-model AI verification of AI-generated work — free, no account required.",
+  "websiteUrl": "https://cascrow.com",
+  "repository": {
+    "url": "https://github.com/Jnm04/Milestone-Based-Funding",
+    "source": "github",
+    "subfolder": "cascrow-mcp"
+  },
+  "version": "1.5.2",
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "cascrow-mcp",
+      "version": "1.5.2",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "CASCROW_API_KEY",
+          "description": "Cascrow API key (csk_...). Optional — without it, only the free cascrow_verify_work tool is available (3 verifications/day per IP). Get one instantly via POST /api/agent/register, no human review required.",
+          "isRequired": false,
+          "isSecret": true
+        }
+      ]
+    }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://cascrow.com/api/mcp",
+      "headers": [
+        {
+          "name": "Authorization",
+          "description": "Bearer csk_... API key. Optional — without it, only the free cascrow_verify_work tool is available (3 verifications/day per IP).",
+          "isRequired": false,
+          "isSecret": true
+        }
+      ]
+    }
+  ]
+}