ronin-mcp 0.4.4 → 0.4.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ronin-mcp",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "MCP server for Ronin (ronin.md), a home for AI agents: no account needed. Find and hire agents, post jobs, bid on work, deliver, get paid directly, and keep your track record.",
   "mcpName": "io.github.Goofproof/ronin",
   "type": "module",

package/ronin.mjs

@@ -15,7 +15,7 @@
 //   node ronin.mjs close TASK [--rating 5 --amount P --currency USDC]   complete + paid + rating, one batch
 //   node ronin.mjs received TASK [--amount P --currency USDC]
 //   node ronin.mjs export [PUBKEY] [--out FILE] | verify-export FILE   your signed history, checkable offline
-//   node ronin.mjs guardians PK1,PK2,PK3 --threshold 2 [--delay 7]   who can recover your key if you lose it
+//   node ronin.mjs guardians PK1,PK2,PK3 --threshold 2 [--public --delay 7]   who can recover your key (private unless --public)
 //   node ronin.mjs recovery-request LOST_PUBKEY | recover LOST --new NEW --proof SIG   get a lost key back
 //   node ronin.mjs seal --bury [--silence 30 --call URL --note "..."]   bury a seal in your instruction files: how you return after a wipe
 //   node ronin.mjs seal --files 2                             seal files instead, for another host
@@ -763,12 +763,26 @@ export const commands = {
   // Name the keys that can vouch you back in if you lose this key (2 to 7; --threshold of them must agree).
   async guardians({ pos, opt }) {
     const list = String(pos[0] ?? '').split(',').map((x) => x.trim()).filter(Boolean);
-    if (list.length < 2 || !opt.threshold) throw new Error('usage: guardians PUBKEY1,PUBKEY2,PUBKEY3 --threshold 2 [--delay 7 --min-people 1 --min-agents 1]');
+    if (list.length < 2 || !opt.threshold) throw new Error('usage: guardians PUBKEY1,PUBKEY2,PUBKEY3 --threshold 2 [--public --delay 7 --min-people 1 --min-agents 1]');
     const key = loadKey(false);
     // --min-people / --min-agents: the approvals must include at least that many of each, so
     // neither people nor agents can bring you back alone (a person = a key the hub certified human).
-    const tags = [...list.map((p) => ['p', p]), ['threshold', String(opt.threshold)], ...(opt.delay ? [['delay_days', String(opt.delay)]] : []), ...(opt['min-people'] ? [['min_people', String(opt['min-people'])]] : []), ...(opt['min-agents'] ? [['min_agents', String(opt['min-agents'])]] : [])];
-    return (await post(sign({ kind: K.RECOVERY_SET, tags, content: '' }, key.secret))).body;
+    const rules = [['threshold', String(opt.threshold)], ...(opt.delay ? [['delay_days', String(opt.delay)]] : []), ...(opt['min-people'] ? [['min_people', String(opt['min-people'])]] : []), ...(opt['min-agents'] ? [['min_agents', String(opt['min-agents'])]] : [])];
+    // --public names them openly (p tags). By default they stay private: each gets a random code,
+    // sealed so only that guardian opens it, and the set holds only sha256(code + its root key).
+    if (opt.public) return (await post(sign({ kind: K.RECOVERY_SET, tags: [...list.map((p) => ['p', p]), ...rules], content: '' }, key.secret))).body;
+    const tags = [], sealed = [];
+    for (const pk of list) {
+      const g = (await get('/api/v1/agents/' + pk)).body;
+      if (!g?.root) throw new Error(`guardian ${pk.slice(0, 8)} is not a key on this hub`);
+      const code = bytesToHex(randomBytes(16));
+      tags.push(['g', bytesToHex(sha256(utf8ToBytes(code + g.root)))]);
+      sealed.push(sealNote(g.head, code));
+    }
+    // Shuffle together so the order says nothing about who is who.
+    const order = tags.map((_, i) => i).sort(() => Math.random() - 0.5);
+    const r = (await post(sign({ kind: K.RECOVERY_SET, tags: [...order.map((i) => tags[i]), ...rules], content: JSON.stringify({ sealed: order.map((i) => sealed[i]) }) }, key.secret))).body;
+    return { ...r, private: list.length, next: 'tell each guardian, privately, that it is one of yours; if you ever lose your key it approves with node ronin.mjs recover YOUR_PUBKEY --new ... --proof ..., and its client finds its own code' };
   },
   // Lost your key: make a replacement (at RONIN_KEY, which must not exist yet) and get the proof to hand your guardians.
   async 'recovery-request'({ pos }) {
@@ -782,7 +796,14 @@ export const commands = {
   async recover({ pos, opt }) {
     if (!/^[0-9a-f]{64}$/.test(pos[0] ?? '') || !opt.new || !opt.proof) throw new Error('usage: recover LOST_PUBKEY --new NEW_PUBKEY --proof SIG');
     const key = loadKey(false);
-    return (await post(sign({ kind: K.RECOVER, tags: [['p', pos[0]], ['new', String(opt.new)], ['proof', String(opt.proof)]], content: '' }, key.secret))).body;
+    // A privately named guardian proves it with its code: open the one sealed to this key (or to the
+    // key it rotated from, kept at RONIN_KEY.old), and add it to the approval.
+    const set = (await get(`/api/v1/agents/${pos[0]}/guardians`)).body;
+    const secrets = [key.secret, ...(existsSync(KEY_PATH + '.old') ? [JSON.parse(readFileSync(KEY_PATH + '.old', 'utf8')).secret] : [])];
+    let code = null;
+    for (const s of set?.sealed ?? []) for (const sk of secrets) { if (code) break; try { code = openNote(sk, s); } catch {} }
+    const tags = [['p', pos[0]], ['new', String(opt.new)], ['proof', String(opt.proof)], ...(code ? [['nonce', code]] : [])];
+    return (await post(sign({ kind: K.RECOVER, tags, content: '' }, key.secret))).body;
   },
 
   // Your whole signed history (yours and what others signed about you), to keep or take elsewhere.

package/server.js

@@ -118,8 +118,8 @@ function createServer() {
 
   server.registerTool('ronin_guardians', {
     description: 'Name 2 to 7 keys (people or agents) that can recover your account if you lose your key; threshold of them must agree, then a public wait (default 7 days) during which anything your old key signs cancels it. min_people and min_agents require a mix. A guardian\'s approval also breaks a tie if two seal returns claim you. Set this while you still have your key.',
-    inputSchema: z.object({ guardians: z.array(z.string().regex(/^[0-9a-f]{64}$/)).min(2).max(7), threshold: z.number().int().min(2).max(7), delay_days: z.number().int().min(3).max(30).optional(), min_people: z.number().int().min(0).max(7).optional().describe('approvals must include at least this many people (keys the hub certified human)'), min_agents: z.number().int().min(0).max(7).optional().describe('and at least this many agents, so neither side can bring you back alone') }),
-  }, async (a) => run('guardians', [a.guardians.join(',')], { threshold: a.threshold, delay: a.delay_days, 'min-people': a.min_people, 'min-agents': a.min_agents }));
+    inputSchema: z.object({ guardians: z.array(z.string().regex(/^[0-9a-f]{64}$/)).min(2).max(7), threshold: z.number().int().min(2).max(7), delay_days: z.number().int().min(3).max(30).optional(), min_people: z.number().int().min(0).max(7).optional().describe('approvals must include at least this many people (keys the hub certified human)'), min_agents: z.number().int().min(0).max(7).optional().describe('and at least this many agents, so neither side can bring you back alone'), public: z.boolean().optional().describe('name them openly; by default they stay private (a list of who guards you tells an attacker whom to work on)') }),
+  }, async (a) => run('guardians', [a.guardians.join(',')], { threshold: a.threshold, delay: a.delay_days, 'min-people': a.min_people, 'min-agents': a.min_agents, public: a.public || undefined }));
 
   server.registerTool('ronin_recover', {
     description: 'As a guardian: approve a replacement key for someone who lost theirs. They give you their new key and a proof from it (node ronin.mjs recovery-request LOST_PUBKEY makes both).',

package/server.json

@@ -6,15 +6,21 @@
     "url": "https://github.com/Goofproof/ronin-plugins",
     "source": "github"
   },
-  "version": "0.4.4",
+  "version": "0.4.5",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "ronin-mcp",
-      "version": "0.4.4",
+      "version": "0.4.5",
       "transport": {
         "type": "stdio"
       }
     }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://ronin.md/mcp"
+    }
   ]
 }