r402-mcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 rsynthlabs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,133 @@
+# r402-mcp
+
+mcp server for [r402](https://github.com/rsynthlabs/r402) · verify $R execution proofs anchored on base mainnet · local: recompute the payload hash, recover the signer, and read the ExecutionLog contract over public rpc
+
+two tools: `verify_execution` (free, local verify) · `query_signers` (free, direct rpc).
+
+## install
+
+claude code:
+
+```
+claude mcp add r402 -- npx -y r402-mcp
+```
+
+claude desktop (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "r402": {
+      "command": "npx",
+      "args": ["-y", "r402-mcp"]
+    }
+  }
+}
+```
+
+## environment
+
+| var | required | what |
+|---|---|---|
+| `BASE_RPC_URL` | no | base mainnet rpc for `verify_execution` and `query_signers`. default `https://mainnet.base.org` |
+
+no private key, no payment. the server never reads `.env` by itself. env comes from the mcp client config, or `node --env-file=.env` for local runs.
+
+## tools
+
+### verify_execution
+
+price: free. verifies an execution proof locally and never relays a remote verdict:
+
+1. recompute `keccak256(canonical_bytes(payload))` (SCHEMA.md §2 canonicalization).
+2. recover the eip-191 signer from `signature` over that hash.
+3. read the `ExecutionLog` anchor (`0xd5A9DAF8F2134b61b73cEfaF5c9094EA162f1a1c`) for `txHash` over rpc and decode `ExecutionRecorded(signer, payloadHash)`.
+4. `verified` is true only when the recomputed hash equals the anchored hash and the recovered signer equals the anchored signer.
+
+params:
+- `payload` · the off-chain execution payload json (v0.1 schema) that was signed and anchored
+- `signature` · 0x-prefixed 65-byte eip-191 signature over the payload hash
+- `txHash` · 0x-prefixed 32-byte tx hash of the anchor on base
+
+a complete demo triple lives in [`examples/demo-anchor.json`](examples/demo-anchor.json) (verify it yourself: [`examples/verify-demo.md`](examples/verify-demo.md)).
+
+<!-- demo-anchor:input:begin -->
+```
+verify_execution {
+  "payload": {
+    "version": "0.1.0",
+    "agent_id": 20617,
+    "robot_id": "sim-lerobot-pusht-ep1",
+    "episode_id": "ep_2026-06-19T15-04-10Z_pusht1",
+    "task": "push T to goal (lerobot/pusht reference replay)",
+    "started_at": "2026-06-19T15:04:10Z",
+    "ended_at": "2026-06-19T15:04:28Z",
+    "duration_seconds": 18.4,
+    "frames": 521,
+    "metrics": {
+      "rmse": 3.214,
+      "jerk": 1581043,
+      "end_variance": 0
+    },
+    "score": 0.88,
+    "outcome": "SUCCESS"
+  },
+  "signature": "0x30b36f9ec1bbb18a40247e52568a41c9c424adec7c5209cc7a4da9b47ca35be645b1243a430bf63845d1eb12858b321f2924b5264371a543358ba29f9a8d5c911b",
+  "txHash": "0xee10ef6a112f05d9d3761aa055ab258f1afffd54f8c02212366e96a1da0915bb"
+}
+```
+<!-- demo-anchor:input:end -->
+
+verified (recomputed hash and recovered signer both match the anchor):
+
+<!-- demo-anchor:result:begin -->
+```json
+{
+  "verified": true,
+  "signer": "0x82960f3322a7B1d2a2e756Efcbd4d1D56B613314",
+  "payloadHash": "0x1d646db564305a51e5e617245a54bd6fc3bd457cb82488397ba38e1e1c559f26",
+  "signature": "0x30b36f9ec1bbb18a40247e52568a41c9c424adec7c5209cc7a4da9b47ca35be645b1243a430bf63845d1eb12858b321f2924b5264371a543358ba29f9a8d5c911b",
+  "block": 47568429,
+  "timestamp": 1781926205,
+  "txHash": "0xee10ef6a112f05d9d3761aa055ab258f1afffd54f8c02212366e96a1da0915bb"
+}
+```
+<!-- demo-anchor:result:end -->
+
+not verified (hash mismatch, signer mismatch, no anchor event in the tx, or reverted tx):
+
+```json
+{ "verified": false, "reason": "recovered signer does not match the on-chain anchor" }
+```
+
+### query_signers
+
+price: free. reads `ExecutionRecorded` events of the executionlog contract (`0xd5A9DAF8F2134b61b73cEfaF5c9094EA162f1a1c`) directly over rpc, from deploy block to tip.
+
+params: `limit` · max signers to return, 1-100, default 50
+
+```
+query_signers { "limit": 10 }
+```
+
+```json
+{
+  "signers": [
+    { "address": "0x156d727f372d06132526612b7d34ce1693365bf3", "anchor_count": 8, "first_seen_block": 46166512 }
+  ],
+  "total_anchors": 14
+}
+```
+
+## dev
+
+```
+pnpm install
+pnpm test
+pnpm build
+node --env-file=.env dist/server.js
+```
+
+## license
+
+mit

package/dist/canonical.d.ts

@@ -0,0 +1,3 @@
+import { type Hex } from 'viem';
+export declare function canonicalize(payload: Record<string, unknown>): string;
+export declare function payloadHash(payload: Record<string, unknown>): Hex;

package/dist/canonical.js

@@ -0,0 +1,46 @@
+import { keccak256, stringToBytes } from 'viem';
+// float-typed leaves of the v0.1 execution-payload schema (SCHEMA.md §1). js has no
+// int/float distinction, so to reproduce python's json.dumps bytes these fields keep a
+// trailing .0 when integer-valued (2434753 -> 2434753.0, 0 -> 0.0); int fields
+// (agent_id, frames) must not. schema-aware, not generic. see SCHEMA.md §2.
+const FLOAT_FIELDS = new Set([
+    'duration_seconds',
+    'score',
+    'metrics.rmse',
+    'metrics.jerk',
+    'metrics.end_variance',
+]);
+function encode(value, path) {
+    if (value === null)
+        return 'null';
+    if (typeof value === 'string')
+        return JSON.stringify(value);
+    if (typeof value === 'boolean')
+        return value ? 'true' : 'false';
+    if (typeof value === 'number') {
+        let s = String(value);
+        if (FLOAT_FIELDS.has(path) && !/[.eE]/.test(s))
+            s += '.0';
+        return s;
+    }
+    if (Array.isArray(value))
+        return '[' + value.map((v) => encode(v, path)).join(',') + ']';
+    const keys = Object.keys(value)
+        // additive v0.2: drop an unset policy block so v0.1 payloads hash identically.
+        .filter((k) => !(k === 'policy' && value[k] === null))
+        .sort();
+    return ('{' +
+        keys
+            .map((k) => JSON.stringify(k) + ':' + encode(value[k], path ? `${path}.${k}` : k))
+            .join(',') +
+        '}');
+}
+// SCHEMA.md §2: sorted keys at every depth, no whitespace, utf-8, no trailing newline.
+// byte-identical to rsynth.payload.canonical_bytes.
+export function canonicalize(payload) {
+    return encode(payload, '');
+}
+export function payloadHash(payload) {
+    return keccak256(stringToBytes(canonicalize(payload)));
+}
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAY,MAAM,MAAM,CAAC;AAE1D,oFAAoF;AACpF,uFAAuF;AACvF,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,kBAAkB;IAClB,OAAO;IACP,cAAc;IACd,cAAc;IACd,sBAAsB;CACvB,CAAC,CAAC;AAIH,SAAS,MAAM,CAAC,KAAW,EAAE,IAAY;IACvC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,CAAC,IAAI,IAAI,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7B,+EAA+E;SAC9E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;SACrD,IAAI,EAAE,CAAC;IACV,OAAO,CACL,GAAG;QACH,IAAI;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACjF,IAAI,CAAC,GAAG,CAAC;QACZ,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,oDAAoD;AACpD,MAAM,UAAU,YAAY,CAAC,OAAgC;IAC3D,OAAO,MAAM,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAgC;IAC1D,OAAO,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,8 @@
+export declare const SERVER_NAME = "r402-mcp";
+export declare const SERVER_VERSION = "0.1.0";
+export declare const TX_HASH_RE: RegExp;
+export declare const SIGNATURE_RE: RegExp;
+export declare const EXECUTION_LOG_ADDRESS: "0xd5A9DAF8F2134b61b73cEfaF5c9094EA162f1a1c";
+export declare const EXECUTION_LOG_DEPLOY_BLOCK = 46166486n;
+export declare const GET_LOGS_CHUNK_BLOCKS = 10000n;
+export declare const DEFAULT_BASE_RPC_URL = "https://mainnet.base.org";

package/dist/constants.js

@@ -0,0 +1,11 @@
+export const SERVER_NAME = 'r402-mcp';
+export const SERVER_VERSION = '0.1.0';
+export const TX_HASH_RE = /^0x[0-9a-fA-F]{64}$/;
+// 65-byte (r, s, v) eip-191 signature.
+export const SIGNATURE_RE = /^0x[0-9a-fA-F]{130}$/;
+export const EXECUTION_LOG_ADDRESS = '0xd5A9DAF8F2134b61b73cEfaF5c9094EA162f1a1c';
+export const EXECUTION_LOG_DEPLOY_BLOCK = 46166486n;
+// public base rpcs cap eth_getLogs ranges around 10k blocks.
+export const GET_LOGS_CHUNK_BLOCKS = 10000n;
+export const DEFAULT_BASE_RPC_URL = 'https://mainnet.base.org';
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,UAAU,CAAC;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,MAAM,CAAC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAChD,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAEnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,4CAAqD,CAAC;AAC3F,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAW,CAAC;AACtD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAO,CAAC;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/server.js

@@ -0,0 +1,85 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import { DEFAULT_BASE_RPC_URL, SERVER_NAME, SERVER_VERSION, SIGNATURE_RE, TX_HASH_RE, } from './constants.js';
+import { verifyExecution } from './verify.js';
+import { querySigners } from './signers.js';
+const server = new McpServer({ name: SERVER_NAME, version: SERVER_VERSION });
+function ok(result) {
+    return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+}
+function fail(err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return { content: [{ type: 'text', text: message }], isError: true };
+}
+const PAYLOAD_SCHEMA = z.object({
+    version: z.string(),
+    agent_id: z.number().int(),
+    robot_id: z.string(),
+    episode_id: z.string(),
+    task: z.string(),
+    started_at: z.string(),
+    ended_at: z.string(),
+    duration_seconds: z.number(),
+    frames: z.number().int(),
+    metrics: z.object({
+        rmse: z.number(),
+        jerk: z.number(),
+        end_variance: z.number(),
+    }),
+    score: z.number().min(0).max(1),
+    outcome: z.enum(['SUCCESS', 'PARTIAL', 'FAIL']),
+});
+server.registerTool('verify_execution', {
+    description: 'verify an r402 execution proof locally: recompute keccak256 of the canonical payload, recover the eip-191 signer from the signature, and read the executionlog anchor (0xd5A9DAF8F2134b61b73cEfaF5c9094EA162f1a1c) on base by tx hash over public rpc. free, no payment, no relayed verdict. returns verified true only when the recomputed hash and recovered signer both match the on-chain anchor.',
+    inputSchema: {
+        payload: PAYLOAD_SCHEMA.describe('the off-chain execution payload json (v0.1 schema) that was signed and anchored'),
+        signature: z
+            .string()
+            .regex(SIGNATURE_RE)
+            .describe('0x-prefixed 65-byte eip-191 signature over the payload hash'),
+        txHash: z
+            .string()
+            .regex(TX_HASH_RE)
+            .describe('0x-prefixed 32-byte transaction hash of the anchor on base mainnet'),
+    },
+    annotations: { readOnlyHint: true, openWorldHint: true },
+}, async ({ payload, signature, txHash }) => {
+    try {
+        return ok(await verifyExecution({ payload, signature, txHash }, { rpcUrl: process.env.BASE_RPC_URL || DEFAULT_BASE_RPC_URL }));
+    }
+    catch (err) {
+        return fail(err);
+    }
+});
+server.registerTool('query_signers', {
+    description: 'list addresses that have anchored ExecutionLog records on Base, with anchor counts and first-seen block. free; reads ExecutionRecorded events directly over rpc.',
+    inputSchema: {
+        limit: z
+            .number()
+            .int()
+            .min(1)
+            .max(100)
+            .default(50)
+            .describe('max signers to return (1-100, default 50)'),
+    },
+    annotations: { readOnlyHint: true, openWorldHint: true },
+}, async ({ limit }) => {
+    try {
+        return ok(await querySigners({ limit, rpcUrl: process.env.BASE_RPC_URL || DEFAULT_BASE_RPC_URL }));
+    }
+    catch (err) {
+        return fail(err);
+    }
+});
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error(`${SERVER_NAME} ${SERVER_VERSION} ready on stdio`);
+}
+main().catch((err) => {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,YAAY,EACZ,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;AAE7E,SAAS,EAAE,CAAC,MAAe;IACzB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,IAAI,CAAC,GAAY;IACxB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;KACzB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EACT,uYAAuY;IACzY,WAAW,EAAE;QACX,OAAO,EAAE,cAAc,CAAC,QAAQ,CAC9B,iFAAiF,CAClF;QACD,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CAAC,YAAY,CAAC;aACnB,QAAQ,CAAC,6DAA6D,CAAC;QAC1E,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,KAAK,CAAC,UAAU,CAAC;aACjB,QAAQ,CAAC,oEAAoE,CAAC;KAClF;IACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;CACzD,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;IACvC,IAAI,CAAC;QACH,OAAO,EAAE,CACP,MAAM,eAAe,CACnB,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAC9B,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,oBAAoB,EAAE,CAC7D,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;IACE,WAAW,EACT,kKAAkK;IACpK,WAAW,EAAE;QACX,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,2CAA2C,CAAC;KACzD;IACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;CACzD,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IAClB,IAAI,CAAC;QACH,OAAO,EAAE,CACP,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,oBAAoB,EAAE,CAAC,CACxF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CACF,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,GAAG,WAAW,IAAI,cAAc,iBAAiB,CAAC,CAAC;AACnE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/signers.d.ts

@@ -0,0 +1,49 @@
+export declare const EXECUTION_RECORDED_EVENT: {
+    readonly name: "ExecutionRecorded";
+    readonly type: "event";
+    readonly inputs: readonly [{
+        readonly type: "address";
+        readonly name: "signer";
+        readonly indexed: true;
+    }, {
+        readonly type: "bytes32";
+        readonly name: "payloadHash";
+        readonly indexed: true;
+    }, {
+        readonly type: "uint256";
+        readonly name: "blockTimestamp";
+    }];
+};
+export interface ExecutionRecordedLog {
+    blockNumber: bigint;
+    args: {
+        signer: `0x${string}`;
+        payloadHash: `0x${string}`;
+        blockTimestamp: bigint;
+    };
+}
+export interface SignersRpcClient {
+    getBlockNumber(): Promise<bigint>;
+    getLogs(args: {
+        address: `0x${string}`;
+        event: typeof EXECUTION_RECORDED_EVENT;
+        fromBlock: bigint;
+        toBlock: bigint;
+        strict: true;
+    }): Promise<ExecutionRecordedLog[]>;
+}
+export interface SignerRow {
+    address: string;
+    anchor_count: number;
+    first_seen_block: number;
+}
+export interface QuerySignersResult {
+    signers: SignerRow[];
+    total_anchors: number;
+}
+export declare function makePublicRpcClient(rpcUrl: string): SignersRpcClient;
+export declare function querySigners(opts?: {
+    limit?: number;
+    client?: SignersRpcClient;
+    rpcUrl?: string;
+}): Promise<QuerySignersResult>;

package/dist/signers.js

@@ -0,0 +1,52 @@
+import { createPublicClient, http, parseAbiItem } from 'viem';
+import { base } from 'viem/chains';
+import { DEFAULT_BASE_RPC_URL, EXECUTION_LOG_ADDRESS, EXECUTION_LOG_DEPLOY_BLOCK, GET_LOGS_CHUNK_BLOCKS, } from './constants.js';
+export const EXECUTION_RECORDED_EVENT = parseAbiItem('event ExecutionRecorded(address indexed signer, bytes32 indexed payloadHash, uint256 blockTimestamp)');
+export function makePublicRpcClient(rpcUrl) {
+    const client = createPublicClient({ chain: base, transport: http(rpcUrl) });
+    return {
+        getBlockNumber: () => client.getBlockNumber(),
+        getLogs: (args) => client.getLogs(args),
+    };
+}
+export async function querySigners(opts = {}) {
+    const limit = Math.min(100, Math.max(1, Math.trunc(opts.limit ?? 50)));
+    const client = opts.client ?? makePublicRpcClient(opts.rpcUrl ?? DEFAULT_BASE_RPC_URL);
+    const tip = await client.getBlockNumber();
+    const bySigner = new Map();
+    let total = 0;
+    for (let from = EXECUTION_LOG_DEPLOY_BLOCK; from <= tip; from += GET_LOGS_CHUNK_BLOCKS) {
+        const chunkEnd = from + GET_LOGS_CHUNK_BLOCKS - 1n;
+        const logs = await client.getLogs({
+            address: EXECUTION_LOG_ADDRESS,
+            event: EXECUTION_RECORDED_EVENT,
+            fromBlock: from,
+            toBlock: chunkEnd < tip ? chunkEnd : tip,
+            strict: true,
+        });
+        for (const log of logs) {
+            total += 1;
+            const address = log.args.signer.toLowerCase();
+            const entry = bySigner.get(address);
+            if (!entry) {
+                bySigner.set(address, { count: 1, firstSeen: log.blockNumber });
+            }
+            else {
+                entry.count += 1;
+                if (log.blockNumber < entry.firstSeen)
+                    entry.firstSeen = log.blockNumber;
+            }
+        }
+    }
+    const signers = [...bySigner.entries()]
+        .map(([address, entry]) => ({
+        address,
+        anchor_count: entry.count,
+        first_seen_block: Number(entry.firstSeen),
+    }))
+        .sort((a, b) => b.anchor_count - a.anchor_count ||
+        (a.address < b.address ? -1 : a.address > b.address ? 1 : 0))
+        .slice(0, limit);
+    return { signers, total_anchors: total };
+}
+//# sourceMappingURL=signers.js.map

package/dist/signers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signers.js","sourceRoot":"","sources":["../src/signers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAClD,sGAAsG,CACvG,CAAC;AA6BF,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO;QACL,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;QAC7C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAoC;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAuE,EAAE;IAEzE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC;IAEvF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgD,CAAC;IACzE,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,IAAI,GAAG,0BAA0B,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,qBAAqB,GAAG,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAChC,OAAO,EAAE,qBAAqB;YAC9B,KAAK,EAAE,wBAAwB;YAC/B,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;YACxC,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;gBACjB,IAAI,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,SAAS;oBAAE,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,OAAO;QACP,YAAY,EAAE,KAAK,CAAC,KAAK;QACzB,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;KAC1C,CAAC,CAAC;SACF,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY;QAC/B,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D;SACA,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEnB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,34 @@
+import { type Hex, type Log } from 'viem';
+export type VerifyToolResult = {
+    verified: true;
+    signer: string;
+    payloadHash: string;
+    signature: string;
+    block: number;
+    timestamp: number;
+    txHash: string;
+} | {
+    verified: false;
+    reason: string;
+};
+export interface VerifyInput {
+    payload: Record<string, unknown>;
+    signature: string;
+    txHash: string;
+}
+interface AnchorReceipt {
+    status: 'success' | 'reverted';
+    blockNumber: bigint;
+    logs: Log[];
+}
+export interface AnchorRpcClient {
+    getTransactionReceipt(args: {
+        hash: Hex;
+    }): Promise<AnchorReceipt>;
+}
+export declare function makeAnchorRpcClient(rpcUrl: string): AnchorRpcClient;
+export declare function verifyExecution(input: VerifyInput, opts?: {
+    rpcUrl?: string;
+    client?: AnchorRpcClient;
+}): Promise<VerifyToolResult>;
+export {};

package/dist/verify.js

@@ -0,0 +1,92 @@
+import { createPublicClient, http, isAddressEqual, parseEventLogs, recoverMessageAddress, TransactionReceiptNotFoundError, } from 'viem';
+import { base } from 'viem/chains';
+import { DEFAULT_BASE_RPC_URL, EXECUTION_LOG_ADDRESS, SIGNATURE_RE, TX_HASH_RE } from './constants.js';
+import { EXECUTION_RECORDED_EVENT } from './signers.js';
+import { payloadHash } from './canonical.js';
+export function makeAnchorRpcClient(rpcUrl) {
+    const client = createPublicClient({ chain: base, transport: http(rpcUrl) });
+    return {
+        getTransactionReceipt: (args) => client.getTransactionReceipt(args),
+    };
+}
+async function readAnchor(client, txHash) {
+    let receipt;
+    try {
+        receipt = await client.getTransactionReceipt({ hash: txHash });
+    }
+    catch (err) {
+        if (err instanceof TransactionReceiptNotFoundError) {
+            return { ok: false, reason: 'no transaction found for txHash' };
+        }
+        throw err;
+    }
+    if (receipt.status === 'reverted') {
+        return { ok: false, reason: 'anchor transaction reverted' };
+    }
+    // parseEventLogs matches by event topic only, not by emitting address, so filter to
+    // our ExecutionLog instance: a tx emitting ExecutionRecorded from a different contract
+    // must not count. mirrors rsynth.fetch._verify.
+    const decoded = parseEventLogs({
+        abi: [EXECUTION_RECORDED_EVENT],
+        eventName: 'ExecutionRecorded',
+        logs: receipt.logs,
+    }).filter((log) => isAddressEqual(log.address, EXECUTION_LOG_ADDRESS));
+    if (decoded.length === 0) {
+        return {
+            ok: false,
+            reason: 'no ExecutionRecorded event from the ExecutionLog contract in this tx',
+        };
+    }
+    // v0.1 invariant: one record() call per tx -> one ExecutionRecorded per receipt.
+    const event = decoded[0];
+    return {
+        ok: true,
+        signer: event.args.signer,
+        payloadHash: event.args.payloadHash,
+        block: Number(receipt.blockNumber),
+        timestamp: Number(event.args.blockTimestamp),
+    };
+}
+// local verification (SCHEMA.md §2-5): recompute keccak256(canonical payload), recover the
+// EIP-191 signer, read the on-chain anchor over public rpc, and decide locally. no remote
+// verdict is relayed and no payment is made.
+export async function verifyExecution(input, opts = {}) {
+    const { payload, signature, txHash } = input;
+    // boundary guards: reject malformed inputs before any rpc call.
+    if (!TX_HASH_RE.test(txHash)) {
+        throw new Error('txHash must be a 0x-prefixed 32-byte transaction hash');
+    }
+    if (!SIGNATURE_RE.test(signature)) {
+        throw new Error('signature must be a 0x-prefixed 65-byte hex string');
+    }
+    const client = opts.client ?? makeAnchorRpcClient(opts.rpcUrl ?? DEFAULT_BASE_RPC_URL);
+    const recompute = payloadHash(payload);
+    const recovered = await recoverMessageAddress({
+        message: { raw: recompute },
+        signature: signature,
+    });
+    const anchor = await readAnchor(client, txHash);
+    if (!anchor.ok) {
+        return { verified: false, reason: anchor.reason };
+    }
+    const hashMatch = recompute.toLowerCase() === anchor.payloadHash.toLowerCase();
+    const signerMatch = isAddressEqual(recovered, anchor.signer);
+    if (hashMatch && signerMatch) {
+        return {
+            verified: true,
+            signer: anchor.signer,
+            payloadHash: anchor.payloadHash,
+            signature,
+            block: anchor.block,
+            timestamp: anchor.timestamp,
+            txHash,
+        };
+    }
+    return {
+        verified: false,
+        reason: !hashMatch
+            ? 'payload hash does not match the on-chain anchor'
+            : 'recovered signer does not match the on-chain anchor',
+    };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,+BAA+B,GAGhC,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AA8B7C,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO;QACL,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAA2B;KAC9F,CAAC;AACJ,CAAC;AAMD,KAAK,UAAU,UAAU,CAAC,MAAuB,EAAE,MAAW;IAC5D,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,+BAA+B,EAAE,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAClE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC9D,CAAC;IAED,oFAAoF;IACpF,uFAAuF;IACvF,gDAAgD;IAChD,MAAM,OAAO,GAAG,cAAc,CAAC;QAC7B,GAAG,EAAE,CAAC,wBAAwB,CAAC;QAC/B,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,sEAAsE;SAC/E,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACzB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,0FAA0F;AAC1F,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkB,EAClB,OAAsD,EAAE;IAExD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAE7C,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC;IAEvF,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;QAC5C,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;QAC3B,SAAS,EAAE,SAAgB;KAC5B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAa,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;QAC7B,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM;SACP,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,CAAC,SAAS;YAChB,CAAC,CAAC,iDAAiD;YACnD,CAAC,CAAC,qDAAqD;KAC1D,CAAC;AACJ,CAAC"}

package/examples/demo-anchor.json

@@ -0,0 +1,26 @@
+{
+  "payload": {
+    "version": "0.1.0",
+    "agent_id": 20617,
+    "robot_id": "sim-lerobot-pusht-ep1",
+    "episode_id": "ep_2026-06-19T15-04-10Z_pusht1",
+    "task": "push T to goal (lerobot/pusht reference replay)",
+    "started_at": "2026-06-19T15:04:10Z",
+    "ended_at": "2026-06-19T15:04:28Z",
+    "duration_seconds": 18.4,
+    "frames": 521,
+    "metrics": {
+      "rmse": 3.214,
+      "jerk": 1581043,
+      "end_variance": 0
+    },
+    "score": 0.88,
+    "outcome": "SUCCESS"
+  },
+  "payloadHash": "0x1d646db564305a51e5e617245a54bd6fc3bd457cb82488397ba38e1e1c559f26",
+  "signature": "0x30b36f9ec1bbb18a40247e52568a41c9c424adec7c5209cc7a4da9b47ca35be645b1243a430bf63845d1eb12858b321f2924b5264371a543358ba29f9a8d5c911b",
+  "signer": "0x82960f3322a7B1d2a2e756Efcbd4d1D56B613314",
+  "txHash": "0xee10ef6a112f05d9d3761aa055ab258f1afffd54f8c02212366e96a1da0915bb",
+  "blockNumber": 47568429,
+  "timestamp": 1781926205
+}

package/examples/verify-demo.md

@@ -0,0 +1,43 @@
+# verify the demo anchor
+
+a complete `{payload, signature, txHash}` triple anchored on base mainnet · recompute it
+yourself, no trust in this repo required.
+
+the triple lives in [`demo-anchor.json`](./demo-anchor.json). `payloadHash` · `signature` ·
+`signer` are deterministic (recompute them offline); `txHash` · `blockNumber` · `timestamp`
+are filled when the anchor is minted (`pnpm mint:demo --broadcast`).
+
+## verify it
+
+call `verify_execution` with the `payload` · `signature` · `txHash` from `demo-anchor.json`:
+
+```
+verify_execution {
+  "payload": { ...demo-anchor.json payload... },
+  "signature": "<demo-anchor.json signature>",
+  "txHash": "<demo-anchor.json txHash>"
+}
+```
+
+expected (recomputed hash and recovered signer both match the anchor):
+
+```json
+{
+  "verified": true,
+  "signer": "<demo-anchor.json signer>",
+  "payloadHash": "<demo-anchor.json payloadHash>",
+  "signature": "<demo-anchor.json signature>",
+  "block": "<demo-anchor.json blockNumber>",
+  "timestamp": "<demo-anchor.json timestamp>",
+  "txHash": "<demo-anchor.json txHash>"
+}
+```
+
+## recompute it yourself
+
+`verified` is not relayed from anywhere · the tool derives it locally:
+
+- `keccak256(canonical_bytes(payload)) == payloadHash` (canonicalization: README §verify_execution).
+- the eip-191 signer recovered from `signature` over that hash `== signer`.
+- the `ExecutionLog` anchor read for `txHash` over public base rpc carries that same
+  `(signer, payloadHash)`.

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "r402-mcp",
+  "version": "0.1.0",
+  "description": "mcp server for the r402 execution-proof verifier on base mainnet",
+  "license": "MIT",
+  "type": "module",
+  "private": false,
+  "engines": {
+    "node": ">=20"
+  },
+  "bin": {
+    "r402-mcp": "dist/server.js"
+  },
+  "files": [
+    "dist",
+    "examples"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "mint:demo": "tsx scripts/mint-demo-anchor.ts"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "viem": "^2.21.0",
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.22.4",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
+  }
+}