sentinel-hedera-mcp 1.0.0

package/README.md

@@ -0,0 +1,79 @@
+# sentinel-hedera-mcp
+
+AI-powered security gateway for autonomous AI agent payments on Hedera. Drop-in MCP server that replaces raw private keys with AI evaluation, AWS KMS signing, and immutable HCS audit trails.
+
+## The Problem
+
+AI agents using x402 or direct payments hold private keys in plaintext:
+
+```json
+{
+  "mcpServers": {
+    "wallet": {
+      "env": { "WALLET_PRIVATE_KEY": "0xDANGEROUS..." }
+    }
+  }
+}
+```
+
+One jailbreak, one env leak — wallet drained.
+
+## The Fix
+
+Replace the private key with a Sentinel API key:
+
+```json
+{
+  "mcpServers": {
+    "sentinel": {
+      "command": "npx",
+      "args": ["-y", "sentinel-hedera-mcp"],
+      "env": {
+        "SENTINEL_AGENT_ID": "agent-a1b2c3d4e5f6",
+        "SENTINEL_API_KEY": "sntl_abc123...",
+        "SENTINEL_GATEWAY_URL": "https://your-sentinel-backend.com"
+      }
+    }
+  }
+}
+```
+
+No private key anywhere. All signing happens via AWS KMS on the Sentinel backend.
+
+## Tools
+
+| Tool | Description |
+|------|-------------|
+| `paid_request` | Make HTTP requests with automatic x402 payment handling |
+| `transfer_hbar` | Transfer HBAR with AI risk evaluation |
+| `check_balance` | Check agent balance, trust score, daily spending |
+| `transaction_history` | View recent transactions with AI evaluation results |
+| `list_paid_apis` | Discover available x402 paid API endpoints |
+| `flag_transaction` | Report incorrect/suspicious API data |
+
+## How It Works
+
+1. Agent calls a tool (e.g., `paid_request`)
+2. MCP server routes the request to Sentinel backend
+3. Backend evaluates via 3-layer system: Rule Engine → AI (GPT-4o-mini) → Smart Contract
+4. If approved: AWS KMS signs the transaction, submits to Hedera
+5. If rejected: blocked, no funds move
+6. Every decision logged immutably on Hedera Consensus Service
+
+## Environment Variables
+
+| Variable | Required | Description |
+|----------|----------|-------------|
+| `SENTINEL_AGENT_ID` | Yes | Your agent ID (from Sentinel Dashboard registration) |
+| `SENTINEL_API_KEY` | Yes | Your agent API key (shown once at registration) |
+| `SENTINEL_GATEWAY_URL` | No | Sentinel backend URL (default: `http://localhost:3001`) |
+
+## Requirements
+
+- Node.js >= 18
+- A running Sentinel backend ([github.com/ambesh333/Sentinel](https://github.com/ambesh333/Sentinel))
+- A registered agent (via Sentinel Dashboard)
+
+## License
+
+MIT

package/bin/sentinel-mcp.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "../dist/index.js";

package/dist/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.js

@@ -0,0 +1,404 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import axios from "axios";
+import { z } from "zod";
+const SENTINEL_GATEWAY = process.env.SENTINEL_GATEWAY_URL || "http://localhost:3001";
+const SENTINEL_AGENT_ID = process.env.SENTINEL_AGENT_ID;
+const SENTINEL_API_KEY = process.env.SENTINEL_API_KEY;
+if (!SENTINEL_AGENT_ID || !SENTINEL_API_KEY) {
+    console.error("SENTINEL_AGENT_ID and SENTINEL_API_KEY environment variables are required.");
+    process.exit(1);
+}
+const sentinelApi = axios.create({
+    baseURL: SENTINEL_GATEWAY,
+    headers: {
+        "X-Agent-Id": SENTINEL_AGENT_ID,
+        "X-Api-Key": SENTINEL_API_KEY,
+    },
+    timeout: 30000,
+});
+const server = new McpServer({
+    name: "sentinel-secure-payments",
+    version: "1.0.0",
+});
+// ──────────────── Tool 1: Paid HTTP Request (x402) ────────────────
+server.tool("paid_request", `Make an HTTP request to a paid API endpoint. If the API requires payment (HTTP 402), Sentinel AI evaluates the payment, signs it securely via AWS KMS, and retries automatically. No wallet or private key needed.
+
+You can pass either:
+- A full URL like "http://example.com/api/data"
+- A relative path like "/api/x402/weather?city=London" (will use the Sentinel gateway at ${SENTINEL_GATEWAY})`, {
+    url: z.string().describe("The API URL (full URL or relative path starting with /)"),
+    method: z.string().default("GET").describe("HTTP method (GET, POST, etc.)"),
+    body: z.string().optional().describe("Request body for POST/PUT (JSON string)"),
+    intent: z.string().describe("Brief description of why you need this data"),
+}, async ({ url: rawUrl, method = "GET", body, intent }) => {
+    // Resolve relative paths against the Sentinel gateway
+    const url = rawUrl.startsWith("/") ? `${SENTINEL_GATEWAY}${rawUrl}` : rawUrl;
+    try {
+        // Step 1: Try the HTTP request directly
+        let response;
+        try {
+            response = await axios({
+                url,
+                method,
+                data: body ? JSON.parse(body) : undefined,
+                validateStatus: () => true,
+                timeout: 15000,
+            });
+        }
+        catch (err) {
+            return { content: [{ type: "text", text: `HTTP error: ${err.message}` }] };
+        }
+        // Step 2: If not 402, return data directly (no payment needed)
+        if (response.status !== 402) {
+            return {
+                content: [{
+                        type: "text",
+                        text: typeof response.data === "string"
+                            ? response.data
+                            : JSON.stringify(response.data, null, 2),
+                    }],
+            };
+        }
+        // Step 3: Extract x402 payment requirements from 402 response
+        const paymentRequiredHeader = response.headers["payment-required"];
+        if (!paymentRequiredHeader) {
+            return {
+                content: [{
+                        type: "text",
+                        text: "API returned 402 but no Payment-Required header found.",
+                    }],
+            };
+        }
+        let paymentRequirements;
+        try {
+            paymentRequirements = JSON.parse(Buffer.from(paymentRequiredHeader, "base64").toString("utf-8"));
+        }
+        catch {
+            return {
+                content: [{
+                        type: "text",
+                        text: "Failed to parse Payment-Required header from 402 response.",
+                    }],
+            };
+        }
+        const amountTinybars = parseInt(paymentRequirements.maxAmountRequired || "0", 10);
+        const amountHbar = amountTinybars / 1e8;
+        const recipient = paymentRequirements.recipient || "unknown";
+        console.error(`[Sentinel] 402 received — ${amountHbar} HBAR to ${recipient} for ${url}`);
+        // Step 4: Send to Sentinel backend for AI evaluation + KMS signing
+        const evalResponse = await sentinelApi.post("/api/v1/transactions/x402", {
+            targetUrl: url,
+            targetMethod: method,
+            paymentRequirements,
+            intent,
+            metadata: { protocol: "x402", originalStatus: 402 },
+        });
+        const { decision, riskScore, reasoning, signedPayload, hederaTxId } = evalResponse.data;
+        // Step 5: Handle Sentinel's decision
+        if (decision === "REJECTED") {
+            return {
+                content: [{
+                        type: "text",
+                        text: [
+                            `Payment BLOCKED by Sentinel AI.`,
+                            `Amount: ${amountHbar} HBAR to ${recipient}`,
+                            `Risk Score: ${riskScore}/100`,
+                            `Reason: ${reasoning}`,
+                            `No funds were spent.`,
+                        ].join("\n"),
+                    }],
+            };
+        }
+        // Step 6: APPROVED — retry the original request with signed payment
+        console.error(`[Sentinel] Payment ${decision} (risk: ${riskScore}) — retrying with signature`);
+        const paidResponse = await axios({
+            url,
+            method,
+            data: body ? JSON.parse(body) : undefined,
+            headers: { "PAYMENT-SIGNATURE": signedPayload || hederaTxId || "approved" },
+            timeout: 15000,
+            validateStatus: () => true,
+        });
+        const paidData = typeof paidResponse.data === "string"
+            ? paidResponse.data
+            : JSON.stringify(paidResponse.data, null, 2);
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        paidData,
+                        ``,
+                        `--- Sentinel Payment Info ---`,
+                        `Paid: ${amountHbar} HBAR to ${recipient}`,
+                        `Risk Score: ${riskScore}/100`,
+                        `Decision: ${decision}`,
+                        `Tx: ${hederaTxId || "pending"}`,
+                    ].join("\n"),
+                }],
+        };
+    }
+    catch (err) {
+        const errorMsg = err.response?.data?.error || err.message;
+        return {
+            content: [{
+                    type: "text",
+                    text: `Sentinel error: ${errorMsg}`,
+                }],
+        };
+    }
+});
+// ──────────────── Tool 2: Transfer HBAR ────────────────
+server.tool("transfer_hbar", "Transfer HBAR to a Hedera account. Sentinel AI evaluates the transfer for risk and signs securely via AWS KMS. No private key needed.", {
+    to: z.string().describe("Recipient Hedera account ID (e.g., 0.0.1234)"),
+    amount: z.number().positive().describe("Amount of HBAR to transfer"),
+    memo: z.string().optional().describe("Transaction memo"),
+    intent: z.string().describe("Why this transfer is needed"),
+}, async ({ to, amount, memo, intent }) => {
+    try {
+        const response = await sentinelApi.post("/api/v1/transactions/transfer", {
+            type: "CryptoTransfer",
+            to,
+            amount,
+            memo,
+            intent,
+        });
+        const { decision, riskScore, reasoning, hederaTxId } = response.data;
+        if (decision === "REJECTED") {
+            return {
+                content: [{
+                        type: "text",
+                        text: [
+                            `Transfer BLOCKED by Sentinel AI.`,
+                            `Amount: ${amount} HBAR to ${to}`,
+                            `Risk Score: ${riskScore}/100`,
+                            `Reason: ${reasoning}`,
+                            `No funds were spent.`,
+                        ].join("\n"),
+                    }],
+            };
+        }
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        `Transfer ${decision}.`,
+                        `Amount: ${amount} HBAR to ${to}`,
+                        `Risk Score: ${riskScore}/100`,
+                        `Tx ID: ${hederaTxId || "pending"}`,
+                    ].join("\n"),
+                }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{
+                    type: "text",
+                    text: `Transfer error: ${err.response?.data?.error || err.message}`,
+                }],
+        };
+    }
+});
+// ──────────────── Tool 3: Check Balance & Status ────────────────
+server.tool("check_balance", "Check this agent's Hedera account balance, trust score, and daily spending status.", {}, async () => {
+    try {
+        const response = await sentinelApi.get(`/api/v1/agents/${SENTINEL_AGENT_ID}/status`);
+        const { accountId, balance, trustScore, dailySpent, dailyLimit, txCountToday, isActive } = response.data;
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        `Agent Status:`,
+                        `  Agent ID:    ${SENTINEL_AGENT_ID}`,
+                        `  Account:     ${accountId || "not provisioned"}`,
+                        `  Balance:     ${balance ?? "unknown"} HBAR`,
+                        `  Trust Score: ${trustScore}/100`,
+                        `  Active:      ${isActive}`,
+                        `  Spent Today: ${dailySpent}/${dailyLimit} HBAR`,
+                        `  Tx Today:    ${txCountToday}`,
+                    ].join("\n"),
+                }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{
+                    type: "text",
+                    text: `Status error: ${err.response?.data?.error || err.message}`,
+                }],
+        };
+    }
+});
+// ──────────────── Tool 4: Transaction History ────────────────
+server.tool("transaction_history", "View this agent's recent transactions and Sentinel's AI evaluation results.", {
+    limit: z.number().int().min(1).max(100).default(10).describe("Number of recent transactions to show"),
+}, async ({ limit = 10 }) => {
+    try {
+        const response = await sentinelApi.get(`/api/v1/agents/${SENTINEL_AGENT_ID}/transactions`, { params: { limit } });
+        const txs = response.data.transactions;
+        if (!txs || txs.length === 0) {
+            return {
+                content: [{ type: "text", text: "No transactions found." }],
+            };
+        }
+        const summary = txs.map((tx, i) => {
+            const time = new Date(tx.createdAt).toLocaleString();
+            return [
+                `${i + 1}. [${tx.decision}] ${tx.type} — ${tx.amount ?? 0} HBAR`,
+                `   To: ${tx.recipient || "N/A"} | Risk: ${tx.riskScore}/100`,
+                `   Intent: ${tx.intent || "N/A"}`,
+                `   Time: ${time}`,
+                `   Reason: ${tx.reasoning || "N/A"}`,
+            ].join("\n");
+        });
+        return {
+            content: [{
+                    type: "text",
+                    text: `Recent Transactions (${txs.length}):\n\n${summary.join("\n\n")}`,
+                }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{
+                    type: "text",
+                    text: `History error: ${err.response?.data?.error || err.message}`,
+                }],
+        };
+    }
+});
+// ──────────────── Tool 5: List available x402 APIs ────────────────
+server.tool("list_paid_apis", "List available x402 paid API endpoints and their prices.", {
+    gateway: z.string().url().optional().describe("Base URL of the x402 API server (defaults to Sentinel gateway)"),
+}, async ({ gateway }) => {
+    try {
+        const baseUrl = gateway || SENTINEL_GATEWAY;
+        const response = await axios.get(`${baseUrl}/api/x402`, { timeout: 10000 });
+        const data = response.data;
+        if (!data.endpoints || data.endpoints.length === 0) {
+            return {
+                content: [{ type: "text", text: "No x402 APIs found at this endpoint." }],
+            };
+        }
+        const lines = data.endpoints.map((ep) => {
+            const fullUrl = `${baseUrl}${ep.path}`;
+            return `  ${ep.method.padEnd(5)} ${fullUrl}\n        Price: ${ep.price} — ${ep.description}`;
+        });
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        `Available Paid APIs (${data.name}):`,
+                        `Network: ${data.network}`,
+                        `Recipient: ${data.recipient}`,
+                        ``,
+                        `Use these full URLs with the paid_request tool:`,
+                        ...lines,
+                    ].join("\n"),
+                }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{
+                    type: "text",
+                    text: `Failed to list APIs: ${err.message}`,
+                }],
+        };
+    }
+});
+// ──────────────── Tool 6: Flag/Report API Data Quality ────────────────
+server.tool("flag_transaction", "Flag a transaction or API response as incorrect/suspicious. This submits feedback to Sentinel's API trust scoring system. Use this when the data returned by a paid API was wrong, outdated, or misleading.", {
+    transactionId: z.string().optional().describe("Transaction ID to flag (from transaction_history)"),
+    targetUrl: z.string().optional().describe("The API URL that returned bad data"),
+    isCorrect: z.boolean().describe("Was the data correct? false = flag as bad, true = confirm as good"),
+    comment: z.string().optional().describe("Brief explanation of what was wrong with the data"),
+}, async ({ transactionId, targetUrl, isCorrect, comment }) => {
+    try {
+        // If we have a transactionId, look up the URL from history
+        let host;
+        let path;
+        let method = "GET";
+        if (targetUrl) {
+            try {
+                const parsed = new URL(targetUrl.startsWith("/") ? `${SENTINEL_GATEWAY}${targetUrl}` : targetUrl);
+                host = parsed.hostname;
+                path = parsed.pathname;
+            }
+            catch {
+                return {
+                    content: [{ type: "text", text: "Invalid URL provided." }],
+                };
+            }
+        }
+        else if (transactionId) {
+            // Fetch transaction to get the URL
+            try {
+                const txRes = await sentinelApi.get(`/api/v1/agents/${SENTINEL_AGENT_ID}/transactions`, { params: { limit: 50 } });
+                const tx = txRes.data.transactions?.find((t) => t.id === transactionId);
+                if (tx?.targetUrl) {
+                    const parsed = new URL(tx.targetUrl);
+                    host = parsed.hostname;
+                    path = parsed.pathname;
+                    method = tx.metadata?.targetMethod || "GET";
+                }
+            }
+            catch {
+                // Fall through
+            }
+        }
+        if (!host || !path) {
+            return {
+                content: [{
+                        type: "text",
+                        text: "Could not determine the API endpoint. Please provide either a transactionId or targetUrl.",
+                    }],
+            };
+        }
+        const response = await sentinelApi.post("/api/v1/api-analytics/feedback", {
+            host,
+            path,
+            method,
+            transactionId,
+            agentId: SENTINEL_AGENT_ID,
+            isCorrect,
+            comment,
+        });
+        const { newTrustScore } = response.data;
+        const action = isCorrect ? "confirmed as correct" : "flagged as incorrect";
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        `API ${action}.`,
+                        `Endpoint: ${host}${path}`,
+                        `Updated Trust Score: ${newTrustScore}/100`,
+                        comment ? `Comment: ${comment}` : "",
+                        ``,
+                        `This feedback helps Sentinel identify unreliable APIs and protect other agents.`,
+                    ].filter(Boolean).join("\n"),
+                }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{
+                    type: "text",
+                    text: `Flag error: ${err.response?.data?.error || err.message}`,
+                }],
+        };
+    }
+});
+// ──────────────── Start Server ────────────────
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("Sentinel MCP Server running on stdio");
+    console.error(`  Gateway: ${SENTINEL_GATEWAY}`);
+    console.error(`  Agent:   ${SENTINEL_AGENT_ID}`);
+}
+main().catch((err) => {
+    console.error("Failed to start Sentinel MCP Server:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,KAA6B,MAAM,OAAO,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,uBAAuB,CAAC;AACrF,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;AACxD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAEtD,IAAI,CAAC,iBAAiB,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC5C,OAAO,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAAkB,KAAK,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE;QACP,YAAY,EAAE,iBAAiB;QAC/B,WAAW,EAAE,gBAAgB;KAC9B;IACD,OAAO,EAAE,KAAK;CACf,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,0BAA0B;IAChC,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,CAAC,IAAI,CACT,cAAc,EACd;;;;2FAIyF,gBAAgB,GAAG,EAC5G;IACE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC3E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC/E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC3E,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;IACtD,sDAAsD;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAE7E,IAAI,CAAC;QACH,wCAAwC;QACxC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC;gBACrB,GAAG;gBACH,MAAM;gBACN,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACzC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC1B,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,eAAe,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACtF,CAAC;QAED,+DAA+D;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;4BACrC,CAAC,CAAC,QAAQ,CAAC,IAAI;4BACf,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC3C,CAAC;aACH,CAAC;QACJ,CAAC;QAED,8DAA8D;QAC9D,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACnE,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,wDAAwD;qBAC/D,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,CAAC;QACxB,IAAI,CAAC;YACH,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAC9B,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC/D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4DAA4D;qBACnE,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,mBAAmB,CAAC,iBAAiB,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,cAAc,GAAG,GAAG,CAAC;QACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,IAAI,SAAS,CAAC;QAE7D,OAAO,CAAC,KAAK,CACX,6BAA6B,UAAU,YAAY,SAAS,QAAQ,GAAG,EAAE,CAC1E,CAAC;QAEF,mEAAmE;QACnE,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,2BAA2B,EAAE;YACvE,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,MAAM;YACpB,mBAAmB;YACnB,MAAM;YACN,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE;SACpD,CAAC,CAAC;QAEH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,GACjE,YAAY,CAAC,IAAI,CAAC;QAEpB,qCAAqC;QACrC,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE;4BACJ,iCAAiC;4BACjC,WAAW,UAAU,YAAY,SAAS,EAAE;4BAC5C,eAAe,SAAS,MAAM;4BAC9B,WAAW,SAAS,EAAE;4BACtB,sBAAsB;yBACvB,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb,CAAC;aACH,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,OAAO,CAAC,KAAK,CACX,sBAAsB,QAAQ,WAAW,SAAS,6BAA6B,CAChF,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC;YAC/B,GAAG;YACH,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACzC,OAAO,EAAE,EAAE,mBAAmB,EAAE,aAAa,IAAI,UAAU,IAAI,UAAU,EAAE;YAC3E,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,OAAO,YAAY,CAAC,IAAI,KAAK,QAAQ;YACpD,CAAC,CAAC,YAAY,CAAC,IAAI;YACnB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE/C,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,QAAQ;wBACR,EAAE;wBACF,+BAA+B;wBAC/B,SAAS,UAAU,YAAY,SAAS,EAAE;wBAC1C,eAAe,SAAS,MAAM;wBAC9B,aAAa,QAAQ,EAAE;wBACvB,OAAO,UAAU,IAAI,SAAS,EAAE;qBACjC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC;QAC1D,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,mBAAmB,QAAQ,EAAE;iBACpC,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0DAA0D;AAC1D,MAAM,CAAC,IAAI,CACT,eAAe,EACf,uIAAuI,EACvI;IACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACpE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CAC3D,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,+BAA+B,EAAE;YACvE,IAAI,EAAE,gBAAgB;YACtB,EAAE;YACF,MAAM;YACN,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAErE,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE;4BACJ,kCAAkC;4BAClC,WAAW,MAAM,YAAY,EAAE,EAAE;4BACjC,eAAe,SAAS,MAAM;4BAC9B,WAAW,SAAS,EAAE;4BACtB,sBAAsB;yBACvB,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,YAAY,QAAQ,GAAG;wBACvB,WAAW,MAAM,YAAY,EAAE,EAAE;wBACjC,eAAe,SAAS,MAAM;wBAC9B,UAAU,UAAU,IAAI,SAAS,EAAE;qBACpC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,mBAAmB,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE;iBACpE,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,IAAI,CACT,eAAe,EACf,oFAAoF,EACpF,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,kBAAkB,iBAAiB,SAAS,CAAC,CAAC;QACrF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,GACtF,QAAQ,CAAC,IAAI,CAAC;QAEhB,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,eAAe;wBACf,kBAAkB,iBAAiB,EAAE;wBACrC,kBAAkB,SAAS,IAAI,iBAAiB,EAAE;wBAClD,kBAAkB,OAAO,IAAI,SAAS,OAAO;wBAC7C,kBAAkB,UAAU,MAAM;wBAClC,kBAAkB,QAAQ,EAAE;wBAC5B,kBAAkB,UAAU,IAAI,UAAU,OAAO;wBACjD,kBAAkB,YAAY,EAAE;qBACjC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,iBAAiB,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE;iBAClE,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,6EAA6E,EAC7E;IACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACtG,EACD,KAAK,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,EAAE;IACvB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CACpC,kBAAkB,iBAAiB,eAAe,EAClD,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,CACtB,CAAC;QAEF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;aACrE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,CAAS,EAAE,EAAE;YAC7C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;YACrD,OAAO;gBACL,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO;gBAChE,UAAU,EAAE,CAAC,SAAS,IAAI,KAAK,YAAY,EAAE,CAAC,SAAS,MAAM;gBAC7D,cAAc,EAAE,CAAC,MAAM,IAAI,KAAK,EAAE;gBAClC,YAAY,IAAI,EAAE;gBAClB,cAAc,EAAE,CAAC,SAAS,IAAI,KAAK,EAAE;aACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,wBAAwB,GAAG,CAAC,MAAM,SAAS,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;iBACxE,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,kBAAkB,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE;iBACnE,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,qEAAqE;AACrE,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,0DAA0D,EAC1D;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;CAChH,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,IAAI,gBAAgB,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC;aACnF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,GAAG,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;YACvC,OAAO,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,oBAAoB,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,wBAAwB,IAAI,CAAC,IAAI,IAAI;wBACrC,YAAY,IAAI,CAAC,OAAO,EAAE;wBAC1B,cAAc,IAAI,CAAC,SAAS,EAAE;wBAC9B,EAAE;wBACF,iDAAiD;wBACjD,GAAG,KAAK;qBACT,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE;iBAC5C,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,6MAA6M,EAC7M;IACE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAClG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC/E,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACpG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;CAC7F,EACD,KAAK,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,2DAA2D;QAC3D,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAwB,CAAC;QAC7B,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAC1E,CAAC;gBACF,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACvB,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;iBACpE,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,EAAE,CAAC;YACzB,mCAAmC;YACnC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CACjC,kBAAkB,iBAAiB,eAAe,EAClD,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAC1B,CAAC;gBACF,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;gBAC7E,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC;oBAClB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;oBACrC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;oBACvB,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;oBACvB,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,IAAI,KAAK,CAAC;gBAC9C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,2FAA2F;qBAClG,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACxE,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,aAAa;YACb,OAAO,EAAE,iBAAiB;YAC1B,SAAS;YACT,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,EAAE,aAAa,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAE3E,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,OAAO,MAAM,GAAG;wBAChB,aAAa,IAAI,GAAG,IAAI,EAAE;wBAC1B,wBAAwB,aAAa,MAAM;wBAC3C,OAAO,CAAC,CAAC,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;wBACpC,EAAE;wBACF,iFAAiF;qBAClF,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC7B,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,eAAe,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE;iBAChE,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,iDAAiD;AACjD,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,cAAc,gBAAgB,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,cAAc,iBAAiB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "sentinel-hedera-mcp",
+  "version": "1.0.0",
+  "description": "Sentinel MCP Server — AI-powered secure payments for autonomous agents on Hedera. Drop-in security layer that replaces raw private keys with AI evaluation, AWS KMS signing, and immutable HCS audit trails.",
+  "type": "module",
+  "main": "dist/index.js",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "bin": {
+    "sentinel-mcp-server": "./bin/sentinel-mcp.js"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "README.md"
+  ],
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "start": "node dist/index.js"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "hedera",
+    "hbar",
+    "x402",
+    "sentinel",
+    "ai-agent",
+    "payments",
+    "security",
+    "aws-kms",
+    "blockchain"
+  ],
+  "author": "ambesh",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ambesh333/Sentinel"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "axios": "^1.7.9",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.5",
+    "tsx": "^4.19.3",
+    "typescript": "^5.7.3"
+  }
+}