dexe-mcp 0.5.3 → 0.5.7

package/CHANGELOG.md

@@ -1,5 +1,154 @@
 # Changelog
 
+## 0.5.7
+
+Last broadcast sweep: **57 / 57 green** on Polaris (BSC testnet 97), 2026-05-12.
+
+### Swarm coverage — 41 → 57 scenarios
+
+- New broadcast-lifecycle scenarios for the three v0.5.6 builder rewrites: `S52-withdraw-treasury-execute`, `S53-apply-to-dao-execute`, `S54-reward-multiplier-execute`. Each runs the wrapper builder → `dexe_proposal_create` custom flow on the swarm fixture DAO and asserts the proposal lands in Voting / SucceededFor / ExecutedFor. Validates the Bug #29 / #30 / #31 fixes end-to-end against on-chain state, not just calldata shape.
+- New broadcast scenarios for the most-used proposal types: `S55-token-transfer-execute`, `S56-blacklist-execute`, `S57-add-expert-execute`. Same build → create → state pattern.
+- Refreshed `S18-withdraw-treasury-build` to pass the now-required `token` argument; refreshed `S31-reward-multiplier-build` to use Polaris's `nftMultiplier` (replacing retired Glacier address) and PRECISION-scaled multipliers (`1.5x => 1.5e25`) per v0.5.6's stricter validator.
+- Replaced retired Glacier fixture with fresh **Polaris** testnet DAO (LINEAR, 50% quorum, deployed 2026-05-12). Sentinel (validator chamber) unchanged. README updated.
+
+### Swarm tooling
+
+- **`scripts/swarm/preflight.ts` now counts deposited tokens alongside the wallet balance.** A wallet with funds locked behind in-flight proposals had `ERC20.balanceOf=0` even though its governance power was intact in UserKeeper; the old check aborted nightly runs on a non-issue. Each token row now also reads `UserKeeper.tokenBalance(user, Personal)` from the parallel DAO and adds the deposited surplus to the threshold check. Falls back to wallet-only when the helper call reverts.
+- **`scripts/swarm/nightly.sh` sanitizes the SUMMARY_LINE before posting to public targets.** The orchestrator's machine-greppable summary line ends with the absolute report path, which leaks the operator's filesystem layout when the repo is public. Local stdout still gets the full line; webhook + GitHub-issue posts get a stripped variant (runId + N/M + mode + chainTag, no path).
+
+### Multi-chain config (chain-mixup guard)
+
+- New optional env vars `DEXE_RPC_URL_TESTNET` + `DEXE_RPC_URL_MAINNET` + `DEXE_DEFAULT_CHAIN_ID`. Configure one or both; the MCP can now route reads and broadcasts to whichever chain a tool call requests, without an MCP restart.
+- Write/composite tools accept an optional `chainId` arg: `dexe_tx_send`, `dexe_tx_status`, `dexe_dao_build_deploy`, `dexe_proposal_create`, `dexe_proposal_vote_and_execute`, `dexe_otc_dao_open_sale`, `dexe_otc_buyer_buy`, `dexe_otc_buyer_claim_all`. Omitting the arg uses the default chain. Requesting a chain with no configured RPC fails fast with a clear error before any tx is built or signed.
+- Legacy `DEXE_RPC_URL` + `DEXE_CHAIN_ID` still works and stacks with the new vars — the legacy entry registers as one more chain in the pool. When `DEXE_CHAIN_ID` is omitted, the chain id is best-effort inferred from the URL hostname.
+- New `dexe_get_config` diagnostic tool: returns the resolved chain set, the default chain, signer status, and IPFS/subgraph configuration. Call it at session start to orient before any write.
+- Provider and signer are now per-chain caches (`RpcProvider`, `SignerManager`) so multi-chain usage doesn't churn through new connections.
+
+## 0.5.6
+
+Three Stage A mainnet bug fixes — all surfaced on `DexeClientDemo`
+(BSC `0xCAe3…5B41`) and tracked as bugs #29 / #30 / #31.
+
+### Fixed
+
+- **Bug #30 — `dexe_proposal_build_withdraw_treasury` emitted wrong
+  selector.** Builder targeted `GovPool.withdraw(address,uint256,uint256[])`
+  (selector `0xfb8c5ef0`), which is the user-deposit-withdraw function on
+  GovPool, not a treasury transfer. `proposal_create` rejected it with
+  `Gov: invalid internal data`. Rewritten to emit one external
+  `ERC20.transfer(receiver, amount)` action per token and/or one
+  `ERC721.transferFrom(govPool, receiver, tokenId)` action per NFT —
+  treasury sits in the GovPool address as a regular ERC20/721 balance, so
+  withdrawal is just a plain external token call. New schema: drop the
+  single `(amount, nftIds)` shape; supply `token`+`amount` and/or
+  `nftAddress`+`nftIds`. At least one must be non-empty.
+
+- **Bug #29 — `apply_to_dao` / `token_transfer` / `withdraw_treasury` had
+  no blacklist precheck.** `ERC20Gov.transfer` reverts on a blacklisted
+  recipient, and a proposal that passes voting then fails `execute()` sits
+  in `SucceededFor` permanently with no recovery. When `DEXE_RPC_URL` is
+  set, the three builders now `isBlacklisted(receiver)` against the token
+  before encoding and refuse to build with a clear error if the recipient
+  is blacklisted. When the token isn't ERC20Gov (call reverts) or RPC is
+  absent, the precheck soft-skips with a note in the result detail —
+  build always proceeds. New helper: `src/lib/blacklist.ts`.
+
+- **Bug #31 — `dexe_proposal_build_reward_multiplier` mint/change_token
+  reverted silently.** `ERC721_MULTIPLIER_ABI` declared `duration` as
+  `uint256`, but `ERC721Multiplier.mint(address,uint256,uint64,string)`
+  uses `uint64`. ethers derives the selector from the canonical signature,
+  so the wrong-typed arg produced a different selector → no-match →
+  silent revert with no returndata when GovPool.execute called into the
+  multiplier (the contract has no `MAX_MULTIPLIER` check, so the original
+  scale-mismatch hypothesis was wrong). Fixed the ABI to `uint64
+  duration`. Builder now also rejects `multiplier=0`, multiplier values
+  below `PRECISION/100` (likely forgot the 1e25 scale), `duration > 2^64
+  − 1`, and `duration=0` for mint. Tool description spells out
+  `PRECISION = 1e25` and `duration = seconds (uint64)`.
+
+## 0.5.5
+
+Doc + RPC hygiene. Two issues surfaced after publishing 0.5.4:
+
+### Fixed
+
+- **Internal RPC URL leaked into examples.** Three files referenced
+  `https://mbsc1.dexe.io/rpc`, an internal DeXe endpoint not intended for
+  public traffic. Replaced with the canonical public BSC RPC
+  `https://bsc-dataseed.binance.org` in:
+  - `docs/ENVIRONMENT.md` (3 occurrences — quick-start block, env table
+    example, BSC mainnet chain config)
+  - `tests/swarm/README.md` (`SWARM_RPC_URL_MAINNET` example)
+  - `tests/compat/FORM-GUIDE.md` (network-capture hint)
+  - `.env.example` (2 occurrences — `DEXE_RPC_URL` core block,
+    `SWARM_RPC_URL_MAINNET` swarm block)
+  - `scripts/swarm/test-mainnet-deploy.mjs` + `test-offchain-mainnet.mjs`
+    (now read `process.env.DEXE_RPC_URL` first, fall back to public BSC RPC)
+  Existing installs that copy-pasted the snippet still work — both URLs
+  serve BSC mainnet — but the public one carries no internal-infra hint.
+- **README links broken on npmjs.com.** Relative links like
+  `./docs/TOOLS.md` work on GitHub but npm does NOT resolve them against the
+  repo URL — npm renders the README at the package home and a relative link
+  resolves to a non-existent path on `npmjs.com`. Converted all in-README
+  links to absolute GitHub URLs:
+  `./docs/X.md` → `https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/X.md`
+  Same pattern applied to the swarm-runbook + LICENSE links.
+
+### Scope of exposure
+
+Verified via `npm pack --dry-run`: the internal URL was **never shipped in
+any npm tarball**. `package.json`'s `files` array only includes `dist/`,
+`README.md`, `CHANGELOG.md`, `FUTURE.md`, and `.mcp.example.json` — all of
+which used the public BSC RPC. The leak was confined to GitHub-only
+artifacts (`docs/`, `tests/`, gitignored `.env.example` + swarm probe
+scripts). No npm-deprecation needed.
+
+### Notes
+
+- Git history retains the original URL — full history rewrite via
+  `git filter-repo` was considered and declined: rewrites every commit SHA,
+  breaks PR refs and external clones, and the URL is an endpoint, not a
+  credential. Forward-fix is sufficient.
+
+## 0.5.4
+
+Off-chain backend + DAO deploy hardening. Two latent bugs surfaced during
+mainnet client-demo lifecycle on `0xCAe32Fa6e6D1C223Ed1047caA58F7fC0b2D65B41`
+(BSC) — both fixed at the boundary so callers don't have to know.
+
+### Fixed
+
+- **`dexe_dao_build_deploy`** (`src/tools/daoDeploy.ts`) — pre-flight reject
+  when `tokenParams.cap == mintedTotal` while creating a new gov token.
+  ERC20Gov init reverted silently inside `_initGovPool` with the generic
+  `Address: low-level delegate call failed`, hiding the real cause behind a
+  10M-gas wasted tx. The validator now throws a clear message:
+  `cap must be strictly greater than mintedTotal; pass cap=0 for uncapped, or
+  cap > mintedTotal`. Tool description updated.
+- **`dexe_proposal_build_offchain_single_option` / `_multi_option` /
+  `_for_against`** (`src/tools/proposalBuildOffchain.ts`) — backend rejected
+  every off-chain proposal with HTTP 400 `proposal type was not found` because
+  the builders sent `attributes.type = String(Math.floor(Date.now()/1000))`
+  (unix timestamp) instead of a registered template name. Constants now wired
+  per voting type:
+  - `default_single_option_type` for `voting_type=one_of`
+  - `default_multi_option_type` for `voting_type=multiple_of`
+  - `default_for_against_type` for `voting_type=for_against`
+- **Off-chain quorum percentages** — same three builders. The backend stores
+  `*_percent` as fractions (`0.5` = 50%), but the inputs accept whole-number
+  percentages (`50` = 50%) for ergonomic parity with the frontend form.
+  Boundary now divides by 100 once, via a new `pctToFraction` helper.
+
+### Verified
+
+- Smoke-tested all three off-chain builders: `outer.type` and
+  `custom_parameters.type` carry the correct constants; quorum fractions match
+  backend examples (live proposal #58 created end-to-end against
+  `https://api.dexe.io`).
+- DAO deploy: `cap == mintedTotal` rejected pre-flight with the new message;
+  `cap > mintedTotal` and `cap == 0` (uncapped) pass the check.
+- `tsc` clean, no project-test regressions.
+
 ## 0.5.3
 
 `getProposals` ABI fix for the post-upgrade GovPool layout. On-chain

package/README.md

@@ -6,9 +6,9 @@ MCP server that gives AI agents **full DeXe Protocol DAO operations coverage**
 
 **Two write modes, calldata-default.** Every write tool returns a ready-to-sign `TxPayload = { to, data, value, chainId, description }` that the agent's wallet (MetaMask, Safe, hardware, etc.) signs and submits — no key in the MCP. Power users who *want* the server to sign and broadcast can opt in by setting `DEXE_PRIVATE_KEY`; that unlocks `dexe_tx_send`, `dexe_tx_status`, and the auto-broadcast branch of `dexe_proposal_create` / `dexe_proposal_vote_and_execute`. Default stays calldata-only.
 
-**125 tools** across 14 groups. Call `dexe_proposal_catalog` at runtime for the full proposal-type map, or browse the [catalog](#tool-catalog) below.
+**126 tools** across 14 groups. Call `dexe_proposal_catalog` at runtime for the full proposal-type map, or browse the [catalog](#tool-catalog) below.
 
-> **End-to-end coverage.** Every proposal-builder tool ships with a swarm-test scenario that exercises it on BSC testnet. Latest pass: **41/41 scenarios green**, ~200 broadcasts validated against two fixture DAOs (Glacier 50%-quorum + Sentinel 5%-quorum-with-validators). See [Swarm test harness](#swarm-test-harness) below.
+> **End-to-end coverage.** Every proposal-builder tool ships with a swarm-test scenario that exercises it on BSC testnet. Latest pass (2026-05-12): **57 scenarios shipped**, broadcasts validated against two fixture DAOs (Polaris 50%-quorum + Sentinel 5%-quorum-with-validators). See [Swarm test harness](#swarm-test-harness) below.
 
 ## Prerequisites
 
@@ -66,9 +66,9 @@ Minimum config to get **read-only** access to a BSC mainnet DAO:
 }
 ```
 
-Add `DEXE_PINATA_JWT` for IPFS uploads, `DEXE_BACKEND_API_URL` for off-chain proposals, and per-chain subgraph URLs for `dexe_proposal_voters` and the DAO-list reads. Full matrix → [`docs/ENVIRONMENT.md`](./docs/ENVIRONMENT.md).
+Add `DEXE_PINATA_JWT` for IPFS uploads, `DEXE_BACKEND_API_URL` for off-chain proposals, and per-chain subgraph URLs for `dexe_proposal_voters` and the DAO-list reads. Full matrix → [`docs/ENVIRONMENT.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/ENVIRONMENT.md).
 
-Three first-call examples (full set in [`docs/USAGE.md`](./docs/USAGE.md)):
+Three first-call examples (full set in [`docs/USAGE.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/USAGE.md)):
 
 ```jsonc
 // 1) discover available proposal types
@@ -94,7 +94,7 @@ Most tools don't need the protocol checkout at all — read/proposal/vote/deploy
 
 ## Environment variables
 
-All optional. Tools that need a missing variable fail with a clear message pointing at exactly what to set. Full matrix + per-tool requirements → [`docs/ENVIRONMENT.md`](./docs/ENVIRONMENT.md).
+All optional. Tools that need a missing variable fail with a clear message pointing at exactly what to set. Full matrix + per-tool requirements → [`docs/ENVIRONMENT.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/ENVIRONMENT.md).
 
 | Variable | Required for | Purpose |
 |----------|--------------|---------|
@@ -113,11 +113,11 @@ All optional. Tools that need a missing variable fail with a clear message point
 
 ## Documentation
 
-Full docs in [`docs/`](./docs):
+Full docs in [`docs/`](https://github.com/edward-arinin-web-dev/dexe-mcp/tree/main/docs):
 
-- [`docs/TOOLS.md`](./docs/TOOLS.md) — complete catalog of all 125 tools, organized by category, with one-line descriptions and required envs per tool.
-- [`docs/USAGE.md`](./docs/USAGE.md) — 10 worked examples (deploy DAO, create proposals, vote, delegate, validator chamber, decode calldata, off-chain proposals, multicall batching). Copy-pasteable JSON.
-- [`docs/ENVIRONMENT.md`](./docs/ENVIRONMENT.md) — full env-var reference: minimum block to get started, per-category requirements, calldata vs signer mode, chain-specific config, IPFS gateway rationale, subgraph migration, swarm harness envs, common pitfalls.
+- [`docs/TOOLS.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/TOOLS.md) — complete catalog of all 126 tools, organized by category, with one-line descriptions and required envs per tool.
+- [`docs/USAGE.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/USAGE.md) — 10 worked examples (deploy DAO, create proposals, vote, delegate, validator chamber, decode calldata, off-chain proposals, multicall batching). Copy-pasteable JSON.
+- [`docs/ENVIRONMENT.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/ENVIRONMENT.md) — full env-var reference: minimum block to get started, per-category requirements, calldata vs signer mode, chain-specific config, IPFS gateway rationale, subgraph migration, swarm harness envs, common pitfalls.
 
 ## Tool surface (high-level)
 
@@ -133,14 +133,14 @@ Full docs in [`docs/`](./docs):
 | Internal validator wrappers | 4 | `_change_validator_balances`, `_change_validator_settings`, `_monthly_withdraw`, `_offchain_internal_proposal` |
 | Off-chain backend | 8 | `_offchain_single_option/_multi_option/_for_against/_settings`, auth flow (`_auth_request_nonce`, `_auth_login_request`), `_offchain_build_vote/_cancel_vote` |
 | Vote / stake / delegate / execute / claim | 16 | `_vote_build_*` family — every direct EOA write on GovPool / Validators |
-| Composite signing flows | 4 | `_proposal_create`, `_proposal_vote_and_execute`, `_tx_send`, `_tx_status` (all opt-in via `DEXE_PRIVATE_KEY`) |
+| Composite signing flows | 5 | `_proposal_create`, `_proposal_vote_and_execute`, `_tx_send`, `_tx_status`, `_get_config` (signing tools opt-in via `DEXE_PRIVATE_KEY`; `_get_config` is read-only diagnostic for the multi-chain config) |
 | Subgraph reads | 7 | DAO list, members, experts, user activity, delegation map, distribution status, OTC sale tiers per DAO (decentralized network endpoints + RPC fallback) |
 | Merkle utility | 2 | `dexe_merkle_build`, `dexe_merkle_proof` — OZ `StandardMerkleTree`-compatible (sorted-pair commutative keccak, double-hash leaf) |
-| OTC composites | 4 | `dexe_otc_dao_open_sale`, `_buyer_status`, `_buyer_buy`, `_buyer_claim_all` — full project-owner + buyer flows over `TokenSaleProposal`. See [`docs/OTC.md`](./docs/OTC.md) |
-| Simulator | 3 | `dexe_sim_calldata`, `_sim_proposal`, `_sim_buy` — `eth_call`-based preflight with revert-reason decoding. See [`docs/SIMULATOR.md`](./docs/SIMULATOR.md) |
-| Multi-DAO inbox + forecast | 2 | `dexe_user_inbox` — pending items across N DAOs (unvoted proposals, claimable rewards, locked deposits). `_proposal_forecast` — pass-rate prediction with quorum projection + risk flags. See [`docs/INBOX.md`](./docs/INBOX.md) |
+| OTC composites | 4 | `dexe_otc_dao_open_sale`, `_buyer_status`, `_buyer_buy`, `_buyer_claim_all` — full project-owner + buyer flows over `TokenSaleProposal`. See [`docs/OTC.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/OTC.md) |
+| Simulator | 3 | `dexe_sim_calldata`, `_sim_proposal`, `_sim_buy` — `eth_call`-based preflight with revert-reason decoding. See [`docs/SIMULATOR.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/SIMULATOR.md) |
+| Multi-DAO inbox + forecast | 2 | `dexe_user_inbox` — pending items across N DAOs (unvoted proposals, claimable rewards, locked deposits). `_proposal_forecast` — pass-rate prediction with quorum projection + risk flags. See [`docs/INBOX.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/INBOX.md) |
 
-Total: **125**. Per-tool descriptions, args, return shapes → [`docs/TOOLS.md`](./docs/TOOLS.md).
+Total: **126**. Per-tool descriptions, args, return shapes → [`docs/TOOLS.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/docs/TOOLS.md).
 
 ## Swarm test harness
 
@@ -149,7 +149,7 @@ tool against real BSC-testnet DAOs. Scenarios are JSON specs; the orchestrator
 loads them, resolves agent wallets, and runs each step through either an inline
 ethers dispatcher or the dexe-mcp stdio bridge.
 
-**41 scenarios shipped** covering:
+**57 scenarios shipped** covering:
 
 - Reset + delegation chains (S00, S01, S06, S14)
 - Validator chamber pass / veto / full lifecycle (S02, S03, S07)
@@ -163,6 +163,12 @@ ethers dispatcher or the dexe-mcp stdio bridge.
   delegate/revoke from expert, reward multiplier (4 modes), change voting
   settings, new proposal type, change math model, custom ABI, manual calldata,
   create staking tier, off-chain validator + for/against + settings) (S16–S40)
+- OTC multi-tier sale flows: open sale, buyer buy native + merkle (S41–S46)
+- Simulator + inbox + per-DAO reads (S47, S48, S50, S51)
+- **Broadcast lifecycle for the v0.5.6 builder rewrites: `withdraw_treasury`,
+  `apply_to_dao`, `reward_multiplier mint` (S52–S54)**
+- **Broadcast lifecycle for the most-used proposal types: `token_transfer`,
+  `blacklist`, `add_expert` (S55–S57)**
 
 ```bash
 # 1) generate 9 wallets (8 agents + funder), fund the funder from your wallet
@@ -174,8 +180,8 @@ npm run swarm:run                      # full sweep, all scenarios
 npm run swarm:run -- --scenarios=S00-reset,S01-delegation-chain-3hop --dry-run
 ```
 
-Setup runbook: [`tests/swarm/README.md`](tests/swarm/README.md).
-Scenario schema: [`tests/swarm/scenarios/_schema.md`](tests/swarm/scenarios/_schema.md).
+Setup runbook: [`tests/swarm/README.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/tests/swarm/README.md).
+Scenario schema: [`tests/swarm/scenarios/_schema.md`](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/tests/swarm/scenarios/_schema.md).
 Per-role agent prompts: `tests/swarm/prompts/`.
 
 ## Contributing
@@ -191,4 +197,4 @@ npm run dev          # watch mode
 
 ## License
 
-MIT. See [LICENSE](./LICENSE).
+MIT. See [LICENSE](https://github.com/edward-arinin-web-dev/dexe-mcp/blob/main/LICENSE).

package/dist/config.d.ts

@@ -1,15 +1,32 @@
+export interface ChainConfig {
+    chainId: number;
+    rpcUrl: string;
+    /** Optional `ContractsRegistry` override scoped to this chain. */
+    registryOverride?: string;
+}
 export interface DexeConfig {
     /** Absolute, normalized path to the DeXe-Protocol checkout (may not exist yet). */
     protocolPath: string;
-    /** Optional JSON-RPC endpoint for on-chain gov tools. */
+    /** All chains configured via env. Empty when no RPC is set. Frozen. */
+    chains: ReadonlyMap<number, ChainConfig>;
+    /**
+     * Default chain id used when a tool call omits `chainId`. Always resolves to
+     * a configured chain when `chains` is non-empty. When `chains` is empty,
+     * defaults to 56 for legacy single-chain code paths that don't need an RPC.
+     */
+    defaultChainId: number;
+    /**
+     * Back-compat alias for `chains.get(defaultChainId)?.rpcUrl`. Always reflects
+     * the default chain's RPC. New code should call `getProvider(chainId)` instead.
+     */
     rpcUrl?: string;
-    /** Chain id the RPC points at. Defaults to 56 (BSC mainnet, DeXe home). */
+    /** Back-compat alias for `defaultChainId`. */
     chainId: number;
-    /** Override for `ContractsRegistry` root address. */
+    /** Back-compat: registry override resolved against the default chain. */
     registryOverride?: string;
     /** Pinata JWT for IPFS uploads (reads work without it via gateway). */
     pinataJwt?: string;
-    /** GraphQL endpoint URLs for The Graph subgraphs. */
+    /** GraphQL endpoint URLs for The Graph subgraphs (chain-agnostic in env). */
     subgraphPoolsUrl?: string;
     subgraphValidatorsUrl?: string;
     subgraphInteractionsUrl?: string;
@@ -25,4 +42,10 @@ export interface DexeConfig {
  * that lazily from inside build/test tools.
  */
 export declare function loadConfig(): Promise<DexeConfig>;
+/**
+ * Resolve a chain config given an optional `chainId`. When omitted, returns
+ * the default chain. Throws with a clear message when the requested chain is
+ * not configured.
+ */
+export declare function resolveChain(config: DexeConfig, chainId?: number): ChainConfig;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAgEtD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAC;IAErB,uEAAuE;IACvE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzC;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CA4ItD;AAcD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAW9E"}

package/dist/config.js

@@ -18,23 +18,88 @@ export async function loadConfig() {
     else if (!isBuildReady(protocolPath)) {
         process.stderr.write(`[dexe-mcp] DeXe-Protocol checkout at ${protocolPath} is incomplete (missing node_modules or hardhat.config) — will be prepared on first dexe_compile call.\n`);
     }
-    const rpcUrl = process.env.DEXE_RPC_URL?.trim() || undefined;
-    let chainId = 56;
+    // ---- collect every configured chain ------------------------------------
+    // Priority:
+    //   1) DEXE_RPC_URL_TESTNET → chain 97
+    //   2) DEXE_RPC_URL_MAINNET → chain 56
+    //   3) Legacy DEXE_RPC_URL + DEXE_CHAIN_ID → register that chain
+    // All three may coexist; later entries with the same chainId override earlier.
+    const chains = new Map();
+    const registryOverride = process.env.DEXE_CONTRACTS_REGISTRY?.trim() || undefined;
+    const rpcTestnet = process.env.DEXE_RPC_URL_TESTNET?.trim() || undefined;
+    if (rpcTestnet) {
+        chains.set(97, { chainId: 97, rpcUrl: rpcTestnet });
+    }
+    const rpcMainnet = process.env.DEXE_RPC_URL_MAINNET?.trim() || undefined;
+    if (rpcMainnet) {
+        chains.set(56, { chainId: 56, rpcUrl: rpcMainnet });
+    }
+    // Legacy single-chain env (still supported)
+    const legacyRpc = process.env.DEXE_RPC_URL?.trim() || undefined;
+    let legacyChainId;
     if (process.env.DEXE_CHAIN_ID) {
         const n = Number(process.env.DEXE_CHAIN_ID);
         if (!Number.isFinite(n) || n <= 0) {
             fatal(`DEXE_CHAIN_ID must be a positive integer, got: ${process.env.DEXE_CHAIN_ID}`);
         }
-        chainId = n;
+        legacyChainId = n;
+    }
+    if (legacyRpc) {
+        // Resolve legacy chainId. If unset, infer from URL hostname; fall back to 56.
+        const inferred = legacyChainId ?? inferChainIdFromRpcUrl(legacyRpc) ?? 56;
+        // Apply registryOverride only when this is the legacy chain (per-chain
+        // override via DEXE_CONTRACTS_REGISTRY has always been single-chain).
+        chains.set(inferred, {
+            chainId: inferred,
+            rpcUrl: legacyRpc,
+            registryOverride,
+        });
+    }
+    // ---- resolve default chain ---------------------------------------------
+    let defaultChainId;
+    const explicitDefault = process.env.DEXE_DEFAULT_CHAIN_ID?.trim();
+    if (explicitDefault) {
+        const n = Number(explicitDefault);
+        if (!Number.isFinite(n) || n <= 0) {
+            fatal(`DEXE_DEFAULT_CHAIN_ID must be a positive integer, got: ${explicitDefault}`);
+        }
+        if (!chains.has(n)) {
+            const configured = [...chains.keys()].sort().join(", ") || "none";
+            fatal(`DEXE_DEFAULT_CHAIN_ID=${n} but no RPC configured for that chain. Configured: [${configured}]. Set DEXE_RPC_URL_${n === 97 ? "TESTNET" : n === 56 ? "MAINNET" : "<chain>"} or legacy DEXE_RPC_URL.`);
+        }
+        defaultChainId = n;
+    }
+    else if (chains.size === 1) {
+        defaultChainId = [...chains.keys()][0];
+    }
+    else if (chains.size > 1) {
+        // Multi-chain without explicit default → prefer testnet for safety, else lowest chainId.
+        const sorted = [...chains.keys()].sort((a, b) => a - b);
+        defaultChainId = chains.has(97) ? 97 : sorted[0];
+        process.stderr.write(`[dexe-mcp] multiple chains configured without DEXE_DEFAULT_CHAIN_ID; defaulting to ${defaultChainId === 97 ? "testnet (97)" : `chain ${defaultChainId}`} for safety. Set DEXE_DEFAULT_CHAIN_ID to override.\n`);
+    }
+    else {
+        // No chains configured — keep legacy fallback so non-RPC tools still load.
+        defaultChainId = legacyChainId ?? 56;
+    }
+    // ---- emit one-line summary of the resolved chain set --------------------
+    if (chains.size > 0) {
+        const summary = [...chains.values()]
+            .sort((a, b) => a.chainId - b.chainId)
+            .map(c => `${c.chainId}${c.chainId === defaultChainId ? "*" : ""}`)
+            .join(", ");
+        process.stderr.write(`[dexe-mcp] chains: [${summary}] (default marked with *)\n`);
+    }
+    else {
+        process.stderr.write("[dexe-mcp] no RPC configured — read/write tools that touch a chain will fail with a clear error.\n");
     }
-    const registryOverride = process.env.DEXE_CONTRACTS_REGISTRY?.trim() || undefined;
     const pinataJwt = process.env.DEXE_PINATA_JWT?.trim() || undefined;
     const subgraphPoolsUrl = process.env.DEXE_SUBGRAPH_POOLS_URL?.trim() || undefined;
     const subgraphValidatorsUrl = process.env.DEXE_SUBGRAPH_VALIDATORS_URL?.trim() || undefined;
     const subgraphInteractionsUrl = process.env.DEXE_SUBGRAPH_INTERACTIONS_URL?.trim() || undefined;
     const privateKey = process.env.DEXE_PRIVATE_KEY?.trim() || undefined;
-    if (privateKey && !rpcUrl) {
-        fatal("DEXE_PRIVATE_KEY requires DEXE_RPC_URL to be set (signing needs an RPC endpoint).");
+    if (privateKey && chains.size === 0) {
+        fatal("DEXE_PRIVATE_KEY requires at least one of DEXE_RPC_URL / DEXE_RPC_URL_TESTNET / DEXE_RPC_URL_MAINNET to be set (signing needs an RPC endpoint).");
     }
     if (privateKey) {
         const { Wallet } = await import("ethers");
@@ -49,11 +114,14 @@ export async function loadConfig() {
         }
         forkBlock = n;
     }
+    const defaultChain = chains.get(defaultChainId);
     return Object.freeze({
         protocolPath,
-        rpcUrl,
-        chainId,
-        registryOverride,
+        chains: Object.freeze(new Map(chains)),
+        defaultChainId,
+        chainId: defaultChainId,
+        rpcUrl: defaultChain?.rpcUrl,
+        registryOverride: defaultChain?.registryOverride ?? registryOverride,
         pinataJwt,
         subgraphPoolsUrl,
         subgraphValidatorsUrl,
@@ -62,6 +130,34 @@ export async function loadConfig() {
         privateKey,
     });
 }
+/**
+ * Best-effort chain-id inference from a JSON-RPC URL. Used only when legacy
+ * `DEXE_RPC_URL` is set without `DEXE_CHAIN_ID`. Returns undefined when
+ * unknown — caller falls back to 56.
+ */
+function inferChainIdFromRpcUrl(url) {
+    const u = url.toLowerCase();
+    if (u.includes("prebsc") || u.includes("testnet"))
+        return 97;
+    if (u.includes("bsc") || u.includes("binance"))
+        return 56;
+    return undefined;
+}
+/**
+ * Resolve a chain config given an optional `chainId`. When omitted, returns
+ * the default chain. Throws with a clear message when the requested chain is
+ * not configured.
+ */
+export function resolveChain(config, chainId) {
+    const target = chainId ?? config.defaultChainId;
+    const chain = config.chains.get(target);
+    if (!chain) {
+        const configured = [...config.chains.keys()].sort().join(", ") || "none";
+        throw new Error(`No RPC configured for chainId=${target}. Configured chains: [${configured}]. ` +
+            `Set DEXE_RPC_URL_${target === 97 ? "TESTNET" : target === 56 ? "MAINNET" : "<chain>"} in the MCP env block.`);
+    }
+    return chain;
+}
 function fatal(msg) {
     // stderr only — stdout is the MCP protocol channel.
     process.stderr.write(`[dexe-mcp] fatal: ${msg}\n`);

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAuBnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAEpD,0EAA0E;IAC1E,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,YAAY,mDAAmD,CAClH,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,YAAY,0GAA0G,CAC/J,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE7D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,kDAAkD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,GAAG,CAAC,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACnE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAClF,MAAM,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5F,MAAM,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAEhG,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACrE,IAAI,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,mFAAmF,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,IAAI,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,SAA6B,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,wDAAwD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,SAAS,GAAG,CAAC,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY;QACZ,MAAM;QACN,OAAO;QACP,gBAAgB;QAChB,SAAS;QACT,gBAAgB;QAChB,qBAAqB;QACrB,uBAAuB;QACvB,SAAS;QACT,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,oDAAoD;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AA4CnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAEpD,0EAA0E;IAC1E,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,YAAY,mDAAmD,CAClH,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,YAAY,0GAA0G,CAC/J,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,YAAY;IACZ,uCAAuC;IACvC,uCAAuC;IACvC,iEAAiE;IACjE,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAElF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACzE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACzE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,4CAA4C;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChE,IAAI,aAAiC,CAAC;IACtC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,kDAAkD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,aAAa,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,aAAa,IAAI,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC1E,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;YACnB,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,SAAS;YACjB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,IAAI,cAAsB,CAAC;IAC3B,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,0DAA0D,eAAe,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;YAClE,KAAK,CACH,yBAAyB,CAAC,uDAAuD,UAAU,uBAAuB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,0BAA0B,CACpM,CAAC;QACJ,CAAC;QACD,cAAc,GAAG,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7B,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1C,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC3B,yFAAyF;QACzF,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sFAAsF,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,cAAc,EAAE,uDAAuD,CAChN,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,2EAA2E;QAC3E,cAAc,GAAG,aAAa,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,4EAA4E;IAC5E,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;aAClE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,6BAA6B,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACnE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAClF,MAAM,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5F,MAAM,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAEhG,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACrE,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpC,KAAK,CACH,iJAAiJ,CAClJ,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,IAAI,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,SAA6B,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,wDAAwD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,SAAS,GAAG,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAEhD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,cAAc;QACd,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,YAAY,EAAE,MAAM;QAC5B,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,IAAI,gBAAgB;QACpE,SAAS;QACT,gBAAgB;QAChB,qBAAqB;QACrB,uBAAuB;QACvB,SAAS;QACT,UAAU;KACX,CAAe,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,OAAgB;IAC/D,MAAM,MAAM,GAAG,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,yBAAyB,UAAU,KAAK;YAC7E,oBAAoB,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,wBAAwB,CAChH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,oDAAoD;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/lib/blacklist.d.ts

@@ -0,0 +1,22 @@
+import type { DexeConfig } from "../config.js";
+export type BlacklistCheck = {
+    status: "blacklisted";
+    token: string;
+    account: string;
+} | {
+    status: "clean";
+    token: string;
+    account: string;
+} | {
+    status: "skipped";
+    reason: string;
+};
+/**
+ * Best-effort `isBlacklisted(account)` lookup. Returns `skipped` when the RPC
+ * is unset or the call reverts (e.g. token isn't ERC20Gov). Build steps that
+ * use this should treat `skipped` as "go ahead" and only block on
+ * `blacklisted`.
+ */
+export declare function checkBlacklist(config: DexeConfig, token: string, account: string): Promise<BlacklistCheck>;
+export declare function blacklistError(token: string, account: string): string;
+//# sourceMappingURL=blacklist.d.ts.map

package/dist/lib/blacklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blacklist.d.ts","sourceRoot":"","sources":["../../src/lib/blacklist.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAM/C,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAwBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAOrE"}

package/dist/lib/blacklist.js

@@ -0,0 +1,43 @@
+import { Contract } from "ethers";
+import { RpcProvider } from "../rpc.js";
+const ERC20_GOV_BLACKLIST_ABI = [
+    "function isBlacklisted(address account) view returns (bool)",
+];
+/**
+ * Best-effort `isBlacklisted(account)` lookup. Returns `skipped` when the RPC
+ * is unset or the call reverts (e.g. token isn't ERC20Gov). Build steps that
+ * use this should treat `skipped` as "go ahead" and only block on
+ * `blacklisted`.
+ */
+export async function checkBlacklist(config, token, account) {
+    if (!config.rpcUrl) {
+        return { status: "skipped", reason: "DEXE_RPC_URL not set — skipping blacklist precheck" };
+    }
+    let provider;
+    try {
+        provider = new RpcProvider(config).requireProvider();
+    }
+    catch (err) {
+        return { status: "skipped", reason: err instanceof Error ? err.message : String(err) };
+    }
+    try {
+        const contract = new Contract(token, ERC20_GOV_BLACKLIST_ABI, provider);
+        const flag = await contract.isBlacklisted(account);
+        return flag
+            ? { status: "blacklisted", token, account }
+            : { status: "clean", token, account };
+    }
+    catch (err) {
+        return {
+            status: "skipped",
+            reason: `isBlacklisted() unavailable on ${token} (${err instanceof Error ? err.message : String(err)})`,
+        };
+    }
+}
+export function blacklistError(token, account) {
+    return (`Refusing to build: recipient ${account} is blacklisted on ERC20Gov ${token}. ` +
+        `If broadcast, GovPool.execute would revert with "ERC20Gov: account is blacklisted" ` +
+        `and the proposal would sit in SucceededFor permanently. Un-blacklist first ` +
+        `(dexe_proposal_build_blacklist with isBlacklisted=false) or pick a different recipient.`);
+}
+//# sourceMappingURL=blacklist.js.map

package/dist/lib/blacklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blacklist.js","sourceRoot":"","sources":["../../src/lib/blacklist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,QAAQ,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC,MAAM,uBAAuB,GAAG;IAC9B,6DAA6D;CACrD,CAAC;AAOX;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAkB,EAClB,KAAa,EACb,OAAe;IAEf,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,QAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,uBAA8C,EAAE,QAAQ,CAE5F,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,IAAI;YACT,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE;YAC3C,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,kCAAkC,KAAK,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;SACxG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe;IAC3D,OAAO,CACL,gCAAgC,OAAO,+BAA+B,KAAK,IAAI;QAC/E,qFAAqF;QACrF,6EAA6E;QAC7E,yFAAyF,CAC1F,CAAC;AACJ,CAAC"}

package/dist/lib/signer.d.ts

@@ -1,12 +1,25 @@
 import { Wallet } from "ethers";
-import type { DexeConfig } from "../config.js";
+import { type DexeConfig } from "../config.js";
+/**
+ * Per-chain signer cache. The private key is chain-agnostic; only the
+ * provider differs per chain.
+ */
 export declare class SignerManager {
-    private wallet;
+    private readonly cache;
     private readonly key;
-    private readonly rpcUrl;
+    private readonly config;
     constructor(config: DexeConfig);
     hasSigner(): boolean;
+    /**
+     * Address of the configured signer (chain-agnostic — same EOA across chains).
+     * Throws if no `DEXE_PRIVATE_KEY` is set.
+     */
     getAddress(): string;
-    requireSigner(): Wallet;
+    /**
+     * Return a signer bound to the requested chain's RPC. When `chainId` is
+     * omitted the default chain is used.
+     */
+    requireSigner(chainId?: number): Wallet;
+    private failNoKey;
 }
 //# sourceMappingURL=signer.d.ts.map

package/dist/lib/signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/lib/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,MAAM,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEhC,MAAM,EAAE,UAAU;IAK9B,SAAS,IAAI,OAAO;IAIpB,UAAU,IAAI,MAAM;IAIpB,aAAa,IAAI,MAAM;CAgBxB"}
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/lib/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,MAAM,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAE7D;;;GAGG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAExB,MAAM,EAAE,UAAU;IAK9B,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,UAAU,IAAI,MAAM;IAKpB;;;OAGG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IAYvC,OAAO,CAAC,SAAS;CAMlB"}