indelible-mcp 5.5.0 → 5.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "indelible-mcp",
-  "version": "5.5.0",
+  "version": "5.5.1",
   "description": "Blockchain-backed memory and code storage for Claude Code. Save AI conversations and source code permanently on BSV.",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -7924,6 +7924,97 @@ var init_agent_recipes = __esm({
   }
 });
 
+// mcp-server/lib/agent-register.js
+var agent_register_exports = {};
+__export(agent_register_exports, {
+  mintSession: () => mintSession,
+  publicAgentRecord: () => publicAgentRecord,
+  registerAgentWithServer: () => registerAgentWithServer
+});
+async function mintSession(apiUrl, address) {
+  const wif = await getWif();
+  if (!wif) return { ok: false, reason: "wallet_locked", detail: "no key available to prove ownership" };
+  try {
+    const { PrivateKey: PrivateKey16 } = await import("@bsv/sdk");
+    const priv = PrivateKey16.fromWif(wif);
+    const own = priv.toPublicKey().toAddress();
+    if (address && address !== own) {
+      return { ok: false, reason: "address_key_mismatch", detail: `this box's key proves ${own}, not ${address}` };
+    }
+    const ch = await fetch(`${apiUrl}/api/auth/wif/challenge?address=${own}`, { signal: AbortSignal.timeout(15e3) }).then((r2) => r2.json());
+    if (!ch?.nonce) return { ok: false, reason: "no_challenge", detail: JSON.stringify(ch).slice(0, 160) };
+    const sig = Buffer.from(priv.sign(Array.from(Buffer.from(`indelible-auth:${ch.nonce}`, "utf8"))).toDER()).toString("hex");
+    const r = await fetch(`${apiUrl}/api/auth/wif`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ address: own, signature: sig, nonce: ch.nonce, publicKey: priv.toPublicKey().toString() }),
+      signal: AbortSignal.timeout(15e3)
+    });
+    const j = await r.json().catch(() => ({}));
+    if (!j?.token) return { ok: false, reason: `login_${r.status}`, detail: JSON.stringify(j).slice(0, 160) };
+    return { ok: true, token: j.token };
+  } catch (e) {
+    return { ok: false, reason: "network", detail: String(e.message || e).slice(0, 160) };
+  }
+}
+function publicAgentRecord(born, extra = {}) {
+  const rec = {
+    name: String(born?.name || "").toLowerCase(),
+    domain: born?.domain,
+    address: born?.address,
+    identity_key_hex: born?.identity_key_hex || born?.identityKey
+  };
+  if (extra.role || born?.role) rec.role = String(extra.role || born.role).slice(0, 200);
+  if (extra.display_name || born?.display_name) rec.display_name = String(extra.display_name || born.display_name).slice(0, 64);
+  return rec;
+}
+async function registerAgentWithServer(born, { apiUrl, apiKey, token, anchorAddress, tenantId, masterPubkey, role, displayName } = {}) {
+  let cfg2 = {};
+  try {
+    cfg2 = await loadConfig();
+  } catch {
+  }
+  const base2 = (process.env.INDELIBLE_API_URL || apiUrl || cfg2.api_url || "").replace(/\/$/, "");
+  const anchor = anchorAddress || cfg2.address;
+  if (!base2) return { ok: false, reason: "no_api_url", detail: "no server configured for this box" };
+  if (!anchor) return { ok: false, reason: "no_address", detail: "no wallet address on this box" };
+  let auth = token;
+  if (!auth) {
+    const s = await mintSession(base2, anchor);
+    if (!s.ok) return { ok: false, reason: `session_${s.reason}`, detail: s.detail };
+    auth = s.token;
+  }
+  const agent = publicAgentRecord(born, { role, display_name: displayName });
+  if (!agent.name || !agent.domain || !agent.identity_key_hex || !agent.address) {
+    return { ok: false, reason: "incomplete_record", detail: "birth result lacked name/domain/identity key/address" };
+  }
+  const body = { anchor_address: anchor, tenant_id: tenantId, master_pubkey: masterPubkey, agent };
+  try {
+    const r = await fetch(`${base2}/api/sanctuary/agent`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Authorization: `Bearer ${auth}` },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (r.ok) return { ok: true, status: r.status };
+    const detail = await r.text().catch(() => "");
+    let reason = `http_${r.status}`;
+    try {
+      const j = JSON.parse(detail);
+      reason = j.error || reason;
+    } catch {
+    }
+    return { ok: false, status: r.status, reason, detail: detail.slice(0, 300) };
+  } catch (e) {
+    return { ok: false, reason: "network", detail: String(e.message || e).slice(0, 200) };
+  }
+}
+var init_agent_register = __esm({
+  "mcp-server/lib/agent-register.js"() {
+    init_config_customer();
+  }
+});
+
 // cli-sandbox/src/index.js
 init_config_customer();
 init_api_client();
@@ -11888,6 +11979,10 @@ async function provisionCustomAgentForCustomer({ address, wallet, scope = "", ag
   const persona = await writePersona(scope, canonical, agent);
   return {
     tenant_id: root.tenant_id,
+    // PUBLIC master pubkey — the server's MASTER_MISMATCH gate needs it to confirm
+    // this agent came from the wallet that sealed the crew (added 2026-08-09 so the
+    // box can register what it births; the master PRIVATE key never leaves).
+    master_pubkey: root.master_pubkey,
     name: canonical,
     domain: agent.domain,
     identity_key_hex: identity.identity_key_hex,
@@ -13575,7 +13670,7 @@ Commands:
 }
 function printHelp() {
   console.log(`
-Indelible MCP \u2014 Blockchain memory for Claude Code (v5.5.0)
+Indelible MCP \u2014 Blockchain memory for Claude Code (v5.5.1)
 
 Setup:
   indelible-mcp setup --wif=KEY --pin=PIN    Import and encrypt your private key
@@ -13895,7 +13990,7 @@ function readStdin() {
 }
 var SERVER_INFO = {
   name: "indelible",
-  version: "5.5.0",
+  version: "5.5.1",
   description: "Blockchain-backed memory and code storage for Claude Code"
 };
 var TOOLS = [
@@ -14476,7 +14571,25 @@ async function handleMcpRequest(request) {
               scope,
               agent: agentArgs
             });
-            result = born;
+            let registration = null;
+            try {
+              const { registerAgentWithServer: registerAgentWithServer2 } = await Promise.resolve().then(() => (init_agent_register(), agent_register_exports));
+              registration = await registerAgentWithServer2(born, {
+                anchorAddress: cfg2.address,
+                tenantId: born.tenant_id,
+                masterPubkey: born.master_pubkey
+              });
+            } catch (e) {
+              registration = { ok: false, reason: "register_threw", detail: String(e.message || e).slice(0, 200) };
+            }
+            result = {
+              ...born,
+              registered_with_server: registration?.ok === true,
+              ...registration?.ok ? {} : {
+                registration_note: `born on this box, but NOT registered with your Sanctuary (${registration?.reason || "unknown"}) \u2014 it can run locally; the Counter will not list it until registration succeeds`,
+                registration_detail: registration?.detail || null
+              }
+            };
             break;
           }
           case "run_custom_agent": {