twzrd-mcp-server 0.1.0 → 0.2.0

package/README.md

@@ -0,0 +1,114 @@
+# twzrd-mcp-server - auto-pay MCP for the TWZRD Trust API
+
+> Payment mechanism is mainnet-verified via the official x402 SDK (Python path,
+> $0.001 moved 2026-06-26 - see Status). As of v0.2.0 the bundled TypeScript path
+> uses the official x402 JS SDK (`@x402/core` + `@x402/svm` + `@x402/fetch`) and
+> is construct-verified against the live mainnet challenge; one real on-chain
+> settle remains before npm publish.
+
+Auto-pay MCP server for TWZRD's Trust API, matching the competitor GTM shape
+(anchor-x402, Br0ski777, BitBooth all ship one). An agent adds one `mcpServers`
+entry; paid tool calls auto-handle the x402 challenge. Free tools never pay.
+
+## Why this is a corrected rebuild
+A first draft signed **EIP-3009 on Base (EVM/viem)**. TWZRD settles x402 on
+**Solana** (`scheme:"exact"`, USDC, sponsored `feePayer`) — the EVM scheme never
+matches the challenge, so that draft could not pay TWZRD at all (it would `tsc`-pass
+yet fail every real call). This version is Solana-native and **refuses** any
+non-Solana challenge instead of mis-signing.
+
+## Safety guardrails (enforced before any signature)
+- Per-call cap `TWZRD_MAX_USDC_PER_CALL` (default 0.05)
+- Cumulative session cap `TWZRD_MAX_USDC_TOTAL` (default 1.00)
+- Free discovery tools never enter the payment path
+- No cross-chain fallback — a non-`exact`/non-`solana:` challenge is rejected
+- Paid calls run the free preflight first; `decision=block` aborts the pay
+
+## Status — payment path VERIFIED on mainnet 2026-06-26
+
+Two authorized settles from dev wallet `2pHjZLqs…`:
+
+1. **Hand-rolled `X-Payment` (this MCP's original approach): FAILED** — HTTP 402,
+   no USDC moved. The intel host validates via the official x402 lib's
+   `PaymentPayload`, so a hand-built header is rejected. (Green `tsc` ≠ settles —
+   fail-closed default was correct.)
+2. **Official x402 SDK: SUCCEEDED** — `GET /v1/intel/quick/CqtQPaAuQ5UR…` →
+   **HTTP 200, `"paid":true,"charged_amount_usdc":0.001`**, tier Silver score 53.6.
+   USDC balance moved `0.057236 → 0.056236` (exactly $0.001). A second call against
+   a no-data pubkey returned `422 charged:false` — the server's no-charge-on-empty
+   guard works.
+
+**Conclusion: auto-pay works ONLY via the official x402 SDK, not a hand-rolled
+header.** Proven client wiring (Python):
+
+```python
+from x402.client import x402ClientSync
+from x402.mechanisms.svm.signers import KeypairSigner
+from x402.mechanisms.svm.exact import register_exact_svm_client
+from x402.http.clients.requests import x402_requests
+client = x402ClientSync()
+register_exact_svm_client(client, KeypairSigner(keypair), rpc_url=RPC)
+session = x402_requests(client)
+session.get("https://intel.twzrd.xyz/v1/intel/quick/<wallet>")  # auto-pays $0.001
+```
+
+### TypeScript path — integrated (v0.2.0)
+The hand-rolled `payAndRetry` is replaced with the official x402 JS SDK
+(`@x402/core` client + `@x402/svm` ExactSvmScheme + `@x402/fetch`
+`wrapFetchWithPayment`). `@x402/svm` reads the challenge `extra.feePayer` and builds
+the partially-signed sponsored transfer (verified no-spend against the live mainnet
+challenge: 496-byte tx, 2 signature slots), and the SDK encodes the `X-PAYMENT`
+header the server validates. Spend caps + preflight gate + free/paid split are
+preserved — caps are enforced in the payment selector before any signature.
+**Remaining:** one real $0.001 on-chain settle to confirm end-to-end, then npm
+publish + MCP-registry listing.
+
+## Install & Config
+
+### Python (recommended — the mainnet-proven path)
+```bash
+pip install twzrd-mcp
+```
+MCP client config (`mcpServers`):
+```json
+{ "mcpServers": { "twzrd": {
+  "command": "twzrd-mcp",
+  "env": {
+    "TWZRD_RPC_URL": "<your Solana RPC url>",
+    "TWZRD_WALLET_KEYPAIR": "/path/to/solana-keypair.json",
+    "TWZRD_MCP_PAYMENTS_ENABLED": "1",
+    "TWZRD_MAX_USDC_PER_CALL": "0.05",
+    "TWZRD_MAX_USDC_TOTAL": "1.00"
+  }
+}}}
+```
+The **free** tools (`preflight`, `wallet_lookup`) need no wallet and no flags — leave
+`TWZRD_MCP_PAYMENTS_ENABLED` unset and they work read-only. Only the paid tools need
+the keypair + `TWZRD_MCP_PAYMENTS_ENABLED=1`.
+
+### Node (`npx twzrd-mcp-server`) — v0.2.0, x402 JS SDK
+```json
+{ "mcpServers": { "twzrd": {
+  "command": "npx", "args": ["-y", "twzrd-mcp-server"],
+  "env": {
+    "TWZRD_WALLET_SECRET_KEY": "<base58 Solana secret>",
+    "TWZRD_RPC_URL": "<your Solana RPC url>",
+    "TWZRD_MAX_USDC_PER_CALL": "0.05",
+    "TWZRD_MAX_USDC_TOTAL": "1.00"
+  }
+}}}
+```
+Auto-pay is enabled whenever `TWZRD_WALLET_SECRET_KEY` is present (set
+`TWZRD_MCP_PAYMENTS_ENABLED=0` to force paid tools off). Free tools need no wallet.
+Construct-verified against the live mainnet challenge; pending one real settle +
+npm publish (until published, `npx twzrd-mcp-server` is not yet resolvable — see
+the Python package above for a path that is live on PyPI today).
+
+## Tools
+- `preflight` (free) — allow/warn/block + trust_score before you pay a **seller** you're about to transact with
+- `wallet_lookup` (free) — facilitators + counterparty breadth for a Solana wallet
+- `verify_receipt` (free) — independently verify a wallet's cNFT Receipt offline (Ed25519 vs the genesis authority `2ELSDx`); no trust in any TWZRD server
+- `quick_trust` ($0.001, auto-pay) — quick tier + score for any wallet
+- `full_trust` ($0.05, auto-pay) — full trust intel + signed V6 receipt
+
+> Note: `quick_trust`/`full_trust` pay TWZRD a fixed micro-fee for intel on **any** wallet — they do **not** refuse "risky" targets (you look those up on purpose). Use `preflight` to vet a counterparty you're about to *pay elsewhere*.

package/dist/index.js

@@ -1,257 +1,153 @@
 /**
- * TWZRD MCP Server — auto-pay x402 wrapper for TWZRD's Trust API.
+ * TWZRD MCP Server — auto-pay x402 wrapper for TWZRD's Trust API (SOLANA).
  *
- * Solana x402: the 402 challenge includes a sponsored feePayer + recentBlockhash.
- * The MCP builds a USDC transfer, signs with the agent's Solana keypair, retries.
- * Always runs free preflight before auto-paying (spend cap enforced).
+ * Agents install this MCP server; paid tool calls auto-handle the x402 challenge
+ * (detect 402 -> SDK builds + signs a Solana USDC payment -> retry). Free tools
+ * never pay.
+ *
+ * PAYMENT CORE: the official x402 SDK (@x402/core + @x402/svm + @x402/fetch).
+ * TWZRD settles x402 on **Solana** ("exact" scheme, USDC, sponsored feePayer):
+ * the buyer partial-signs a USDC transfer as the transfer authority, and TWZRD's
+ * wallet (the challenge `extra.feePayer`) co-signs + pays the SOL fee server-side.
+ * `@x402/svm`'s ExactSvmScheme reads `extra.feePayer` and builds exactly this
+ * partially-signed transaction; the SDK also encodes the X-PAYMENT header the
+ * server validates. (An earlier draft hand-rolled both and the server rejected
+ * it — the hand-rolled header never matched the official x402 PaymentPayload.)
+ *
+ * SAFETY GUARDRAILS (all enforced in the payment-requirements selector, BEFORE
+ * any signature):
+ *   - Hard per-call cap (TWZRD_MAX_USDC_PER_CALL, default 0.05)
+ *   - Cumulative session cap (TWZRD_MAX_USDC_TOTAL, default 1.00)
+ *   - Free discovery tools are NEVER routed through the payment path
+ *   - No cross-chain fallback: only a Solana "exact" requirement is selectable;
+ *     anything else throws (refuse to pay) rather than mis-signing
+ *   - Paid tools run the FREE preflight first; decision=block aborts the pay
+ *
+ * STATUS: payment mechanism is SDK-backed and the payload construction is
+ * verified against the live Solana "exact" challenge. The first real on-chain
+ * settle is the operator's go (needs a funded wallet). Set
+ * TWZRD_MCP_PAYMENTS_ENABLED=0 to force paid tools off (fail-closed) if desired.
  *
  * ENV:
- *   TWZRD_SOLANA_KEYPAIR — Solana keypair JSON array (from solana config)
- *   TWZRD_API_URL        — Base URL (default: https://intel.twzrd.xyz)
- *   TWZRD_SPEND_CAP_USDC — Max USDC per call (default: 0.05)
- *   TWZRD_DAILY_CAP_USDC — Max USDC per day (default: 1.00)
+ *   TWZRD_WALLET_SECRET_KEY   base58 Solana secret key (64-byte). Required for paid calls.
+ *   TWZRD_RPC_URL             Solana RPC (default mainnet-beta public)
+ *   TWZRD_API_URL             default https://intel.twzrd.xyz
+ *   TWZRD_MAX_USDC_PER_CALL   default 0.05
+ *   TWZRD_MAX_USDC_TOTAL      default 1.00
+ *   TWZRD_MCP_PAYMENTS_ENABLED  "0" to force paid tools off (default: enabled when a key is present)
  */
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-import { Connection, Keypair, PublicKey, TransactionMessage, VersionedTransaction, } from "@solana/web3.js";
-import { getOrCreateAssociatedTokenAccount, createTransferInstruction } from "@solana/spl-token";
-import * as fs from "fs";
-import * as path from "path";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { x402Client } from "@x402/core/client";
+import { wrapFetchWithPayment } from "@x402/fetch";
+import { ExactSvmScheme, SOLANA_MAINNET_CAIP2 } from "@x402/svm";
+import { createKeyPairSignerFromBytes } from "@solana/kit";
+import bs58 from "bs58";
 // ── Config ─────────────────────────────────────────────────────────────────
 const API_BASE = process.env.TWZRD_API_URL || "https://intel.twzrd.xyz";
-const KEYPAIR_SOURCE = process.env.TWZRD_SOLANA_KEYPAIR || "";
-const SPEND_CAP_USDC = parseFloat(process.env.TWZRD_SPEND_CAP_USDC || "0.05");
-const DAILY_CAP_USDC = parseFloat(process.env.TWZRD_DAILY_CAP_USDC || "1.00");
-if (!KEYPAIR_SOURCE) {
-    console.error("TWZRD_SOLANA_KEYPAIR required — set to the Solana keypair JSON path or array");
-    process.exit(1);
-}
-// ── Solana wallet ──────────────────────────────────────────────────────────
-function loadKeypair(source) {
-    let bytes;
-    if (source.startsWith("[") || source.startsWith("{")) {
-        const parsed = JSON.parse(source);
-        const arr = Array.isArray(parsed) ? parsed : (parsed.secretKey || parsed);
-        bytes = Uint8Array.from(arr);
+const RPC_URL = process.env.TWZRD_RPC_URL || "https://api.mainnet-beta.solana.com";
+const MAX_PER_CALL = Number(process.env.TWZRD_MAX_USDC_PER_CALL || "0.05");
+const MAX_TOTAL = Number(process.env.TWZRD_MAX_USDC_TOTAL || "1.00");
+const PAYMENTS_DISABLED = process.env.TWZRD_MCP_PAYMENTS_ENABLED === "0";
+const SECRET = process.env.TWZRD_WALLET_SECRET_KEY || "";
+let spentUsdc = 0; // cumulative session spend (USDC)
+// ── Payment client (official x402 SDK, Solana exact scheme) ──────────────────
+// The selector is the single chokepoint for every guardrail: it picks which
+// `accepts[]` entry to pay and THROWS to refuse. Nothing is signed unless a
+// requirement passes scheme + chain + per-call + session checks here first.
+function selectSolanaExact(_x402Version, accepts) {
+    const req = (accepts || []).find((a) => a?.scheme === "exact" && String(a?.network || "").startsWith("solana:"));
+    if (!req) {
+        throw new Error(`Refusing to pay: no Solana "exact" payment option in challenge (${JSON.stringify((accepts || []).map((a) => ({ scheme: a?.scheme, network: a?.network })))})`);
     }
-    else {
-        // Path to keypair file
-        const content = fs.readFileSync(path.resolve(source), "utf-8");
-        bytes = Uint8Array.from(JSON.parse(content));
+    const decimals = Number(req.extra?.decimals ?? 6);
+    const amountUsdc = Number(BigInt(req.amount)) / 10 ** decimals;
+    if (amountUsdc > MAX_PER_CALL) {
+        throw new Error(`Refusing: call price $${amountUsdc} exceeds per-call cap $${MAX_PER_CALL}`);
     }
-    return Keypair.fromSecretKey(bytes);
-}
-const agentKeypair = loadKeypair(KEYPAIR_SOURCE);
-const agentPubkey = agentKeypair.publicKey.toBase58();
-// ── Spend cap tracking (in-memory, per-process) ────────────────────────────
-let dailySpentUsdc = 0;
-let dailyResetAt = Date.now() + 24 * 60 * 60 * 1000;
-function checkSpendCap(amountUsdc) {
-    const now = Date.now();
-    if (now > dailyResetAt) {
-        dailySpentUsdc = 0;
-        dailyResetAt = now + 24 * 60 * 60 * 1000;
+    if (spentUsdc + amountUsdc > MAX_TOTAL) {
+        throw new Error(`Refusing: would exceed session cap $${MAX_TOTAL} (spent $${spentUsdc})`);
     }
-    if (amountUsdc > SPEND_CAP_USDC)
-        throw new Error(`Per-call spend cap ${SPEND_CAP_USDC} USDC exceeded (requested: ${amountUsdc})`);
-    if (dailySpentUsdc + amountUsdc > DAILY_CAP_USDC)
-        throw new Error(`Daily spend cap ${DAILY_CAP_USDC} USDC exceeded (spent: ${dailySpentUsdc}, would add: ${amountUsdc})`);
+    // Conservative accounting: count the spend at selection time. A failed settle
+    // only makes the caps stricter (never looser), which is the safe direction.
+    spentUsdc += amountUsdc;
+    return req;
 }
-// ── x402 fetch: 402 → preflight → sign → retry (Solana scheme="exact") ─────
-async function twzrdFetch(path, options) {
-    const url = `${API_BASE}${path}`;
-    const method = options?.method || "GET";
-    const body = options?.body ? JSON.stringify(options.body) : undefined;
-    // First attempt
-    const resp = await fetch(url, { method, headers: { "Content-Type": "application/json" }, body });
-    if (resp.status !== 402)
-        return resp;
-    // ── Parse 402 challenge ──
-    const challenge = await resp.json();
-    if (!challenge.x402Version)
-        return resp;
-    // Find Solana scheme (scheme === "exact")
-    const accepts = challenge.accepts || [];
-    const scheme = accepts.find((a) => a.scheme === "exact" && a.network?.startsWith("solana:"));
-    if (!scheme) {
-        throw new Error(`No Solana payment scheme found (got: ${JSON.stringify(accepts.map((a) => a.scheme))})`);
+// Build the payment-enabled fetch once, if a key is present and payments aren't
+// force-disabled. Otherwise paid tools fail closed with a clear message.
+let paidFetch = null;
+let paymentInitError = "";
+if (SECRET && !PAYMENTS_DISABLED) {
+    try {
+        const secretBytes = bs58.decode(SECRET);
+        const signer = await createKeyPairSignerFromBytes(secretBytes);
+        const scheme = new ExactSvmScheme(signer, { rpcUrl: RPC_URL });
+        const client = new x402Client(selectSolanaExact);
+        client.register(SOLANA_MAINNET_CAIP2, scheme);
+        paidFetch = wrapFetchWithPayment(fetch, client);
+        console.error(`TWZRD MCP: auto-pay armed (payer ${signer.address}) caps $${MAX_PER_CALL}/call $${MAX_TOTAL}/session`);
     }
-    const amountMicro = parseInt(scheme.amount || "0", 10);
-    const amountUsdc = amountMicro / 1_000_000;
-    const payTo = scheme.payTo;
-    const feePayer = scheme.extra?.feePayer;
-    const recentBlockhash = scheme.extra?.recentBlockhash;
-    const usdcMint = scheme.asset;
-    // ── Run free preflight before paying ──
-    const preflightResp = await fetch(`${API_BASE}/v1/intel/preflight`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-            seller_wallet: payTo,
-            resource_name: "MCP Tool Call",
-            price_usdc: amountUsdc,
-            agent_intent: "x402_mcp_auto_pay",
-        }),
-    });
-    const preflight = await preflightResp.json();
-    const card = preflight?.readiness_card || {};
-    if (card.decision === "block") {
-        throw new Error(`Preflight BLOCKED payment to ${payTo}: ${(card.caveats || []).join("; ")}`);
+    catch (e) {
+        paymentInitError = e instanceof Error ? e.message : String(e);
+        console.error(`TWZRD MCP: payment init failed — paid tools disabled: ${paymentInitError}`);
     }
-    // ── Check spend cap ──
-    checkSpendCap(amountUsdc);
-    // ── Build Solana USDC transfer (scheme === "exact") ──
-    const connection = new Connection("https://api.mainnet-beta.solana.com", "confirmed");
-    // Get or create the agent's USDC ATA
-    const agentAta = await getOrCreateAssociatedTokenAccount(connection, agentKeypair, new PublicKey(usdcMint), agentKeypair.publicKey);
-    // Build transfer instruction
-    const transferIx = createTransferInstruction(agentAta.address, // source (agent's USDC ATA)
-    new PublicKey(payTo), // destination (merchant)
-    agentKeypair.publicKey, // owner
-    BigInt(amountMicro));
-    // Build transaction with sponsored feePayer
-    const feePayerPubkey = new PublicKey(feePayer);
-    const message = new TransactionMessage({
-        payerKey: feePayerPubkey,
-        recentBlockhash,
-        instructions: [transferIx],
-    }).compileToV0Message();
-    const tx = new VersionedTransaction(message);
-    tx.sign([agentKeypair]);
-    // Serialize and base64 encode for X-Payment header
-    const txBytes = tx.serialize();
-    const paymentHeader = Buffer.from(txBytes).toString("base64");
-    // ── Record spend ──
-    dailySpentUsdc += amountUsdc;
-    // ── Retry with payment header ──
-    const retryResp = await fetch(url, {
+}
+// ── HTTP: free path is plain fetch; paid path goes through the x402 SDK ───────
+async function twzrdFetch(path, opts) {
+    const url = `${API_BASE}${path}`;
+    const method = opts?.method || "GET";
+    const body = opts?.body ? JSON.stringify(opts.body) : undefined;
+    const init = {
         method,
-        headers: { "Content-Type": "application/json", "X-Payment": paymentHeader },
+        headers: { "Content-Type": "application/json" },
         body,
-    });
-    if (retryResp.status === 402) {
-        const err = await retryResp.json();
-        // Refund the spend cap on failure
-        dailySpentUsdc -= amountUsdc;
-        throw new Error(`x402 payment failed: ${JSON.stringify(err).slice(0, 200)}`);
+    };
+    if (opts?.paid) {
+        if (!paidFetch) {
+            throw new Error(SECRET
+                ? `auto-pay unavailable: ${paymentInitError || "payments force-disabled (TWZRD_MCP_PAYMENTS_ENABLED=0)"}`
+                : "paid tool requires TWZRD_WALLET_SECRET_KEY (base58 Solana key)");
+        }
+        return paidFetch(url, init);
     }
-    // Log successful payment
-    console.error(`[twzrd-mcp] paid ${amountUsdc} USDC → ${payTo.slice(0, 8)}.. for ${path} (daily: ${dailySpentUsdc.toFixed(3)}/${DAILY_CAP_USDC})`);
-    return retryResp;
+    return fetch(url, init);
 }
-// ── MCP Server ────────────────────────────────────────────────────────────
-const server = new Server({ name: "twzrd-mcp-server", version: "0.1.0" }, { capabilities: { tools: {} } });
+// ── Tools (free vs paid clearly separated; paid tools pass { paid: true }) ───
 const TOOLS = [
-    {
-        name: "quick_trust",
-        description: "$0.001 quick Solana wallet reputation check. Auto-pays via x402 (Solana USDC). Always runs free preflight first.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                wallet: { type: "string", description: "Solana wallet address (base58)" },
-            },
-            required: ["wallet"],
-        },
-    },
-    {
-        name: "full_trust",
-        description: "$0.05 full trust intelligence + signed V6 receipt. Auto-pays via x402. Runs free preflight first.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                wallet: { type: "string", description: "Solana wallet address (base58)" },
-            },
-            required: ["wallet"],
-        },
-    },
-    {
-        name: "preflight",
-        description: "Free pre-payment check. No payment needed. Returns readiness_card with allow/warn/block decision.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                seller_wallet: { type: "string", description: "Seller wallet to evaluate" },
-            },
-            required: ["seller_wallet"],
-        },
-    },
-    {
-        name: "verify_receipt",
-        description: "Free — verify a TWZRD V6 receipt offline.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                leaf: { type: "string", description: "Hex keccak256 receipt leaf" },
-                signature: { type: "string", description: "Ed25519 signature" },
-                signing_pubkey: { type: "string", description: "Signer pubkey (base58)" },
-            },
-            required: ["leaf"],
-        },
-    },
-    {
-        name: "wallet_lookup",
-        description: "Free — discover which facilitators and counterparties a Solana wallet has.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                wallet: { type: "string", description: "Solana wallet address (base58)" },
-            },
-            required: ["wallet"],
-        },
-    },
+    { name: "preflight", description: "FREE pre-payment check. readiness_card with allow/warn/block + trust_score. No payment.", inputSchema: { type: "object", properties: { seller_wallet: { type: "string" }, resource_name: { type: "string" }, price_usdc: { type: "number" } }, required: ["seller_wallet"] } },
+    { name: "wallet_lookup", description: "FREE: facilitators + counterparty breadth for a Solana wallet.", inputSchema: { type: "object", properties: { wallet: { type: "string" } }, required: ["wallet"] } },
+    { name: "verify_receipt", description: "FREE: verify a TWZRD V6 receipt (leaf/signature/signing_pubkey).", inputSchema: { type: "object", properties: { leaf: { type: "string" }, signature: { type: "string" }, signing_pubkey: { type: "string" } }, required: ["leaf"] } },
+    { name: "quick_trust", description: "PAID $0.001 (auto-pay, Solana x402): quick tier+score for a Solana wallet.", inputSchema: { type: "object", properties: { wallet: { type: "string" } }, required: ["wallet"] } },
+    { name: "full_trust", description: "PAID $0.05 (auto-pay, Solana x402): full trust intel + signed V6 receipt.", inputSchema: { type: "object", properties: { wallet: { type: "string" }, seller_wallet: { type: "string" } }, required: ["wallet"] } },
 ];
+const server = new Server({ name: "twzrd-mcp-server", version: "0.2.0" }, { capabilities: { tools: {} } });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const { name, arguments: args } = request.params;
+    const a = (args || {});
     async function api(path, opts) {
-        const resp = await twzrdFetch(path, opts);
-        const text = await resp.text();
-        if (!resp.ok)
-            throw new Error(`TWZRD API ${resp.status}: ${text.slice(0, 200)}`);
-        return text;
+        const r = await twzrdFetch(path, opts);
+        const t = await r.text();
+        if (!r.ok)
+            throw new Error(`TWZRD API ${r.status}: ${t.slice(0, 200)}`);
+        return t;
     }
+    // NOTE: quick_trust/full_trust BUY intel ON `wallet` — the caller looks a wallet
+    // up precisely because they want to know about it (including risky ones). We do
+    // NOT gate the purchase on that wallet's own trust score; that would be backwards
+    // (you'd be blocked from buying intel on exactly the wallets you most need it for).
+    // The `preflight` tool exists separately to vet a SELLER you are about to pay
+    // ELSEWHERE. Spend caps + the payment selector are the safety controls here.
     switch (name) {
-        case "quick_trust": {
-            const wallet = String(args?.wallet || "");
-            if (!wallet)
-                throw new Error("wallet required");
-            return { content: [{ type: "text", text: await api(`/v1/intel/quick/${wallet}`) }] };
-        }
-        case "full_trust": {
-            const wallet = String(args?.wallet || "");
-            if (!wallet)
-                throw new Error("wallet required");
-            return { content: [{ type: "text", text: await api(`/v1/intel/trust/${wallet}`) }] };
-        }
-        case "preflight": {
-            return {
-                content: [{
-                        type: "text",
-                        text: await api("/v1/intel/preflight", { method: "POST", body: { seller_wallet: args?.seller_wallet, resource_name: "MCP Tool Call", price_usdc: 0.05 } }),
-                    }],
-            };
-        }
-        case "verify_receipt": {
-            return {
-                content: [{
-                        type: "text",
-                        text: await api("/v1/receipts/verify", { method: "POST", body: { leaf: args?.leaf, signature: args?.signature, signing_pubkey: args?.signing_pubkey } }),
-                    }],
-            };
-        }
-        case "wallet_lookup": {
-            const wallet = String(args?.wallet || "");
-            if (!wallet)
-                throw new Error("wallet required");
-            return { content: [{ type: "text", text: await api(`/v1/intel/get_facilitator_footprint?wallet=${wallet}`) }] };
-        }
-        default:
-            throw new Error(`Unknown tool: ${name}`);
+        case "quick_trust": return { content: [{ type: "text", text: await api(`/v1/intel/quick/${String(a.wallet)}`, { paid: true }) }] };
+        case "full_trust": return { content: [{ type: "text", text: await api(`/v1/intel/trust/${String(a.wallet)}${a.seller_wallet ? `?seller_wallet=${a.seller_wallet}` : ""}`, { paid: true }) }] };
+        case "preflight": return { content: [{ type: "text", text: await api("/v1/intel/preflight", { method: "POST", body: { seller_wallet: a.seller_wallet, resource_name: a.resource_name || "MCP", price_usdc: a.price_usdc ?? 0.05 } }) }] };
+        case "verify_receipt": return { content: [{ type: "text", text: await api("/v1/receipts/verify", { method: "POST", body: { leaf: a.leaf, signature: a.signature, signing_pubkey: a.signing_pubkey } }) }] };
+        case "wallet_lookup": return { content: [{ type: "text", text: await api(`/v1/intel/get_facilitator_footprint?wallet=${String(a.wallet)}`) }] };
+        default: throw new Error(`Unknown tool: ${name}`);
     }
 });
-// ── Start ─────────────────────────────────────────────────────────────────
 const transport = new StdioServerTransport();
 await server.connect(transport);
-console.error(`TWZRD MCP Server — agent ${agentPubkey.slice(0, 8)}.., cap ${SPEND_CAP_USDC}/${DAILY_CAP_USDC} USDC`);
-//# sourceMappingURL=index.js.map
+console.error(`TWZRD MCP (Solana x402) — paid=${paidFetch ? "enabled" : "disabled"} caps: $${MAX_PER_CALL}/call $${MAX_TOTAL}/session`);

package/package.json

@@ -1,43 +1,31 @@
 {
   "name": "twzrd-mcp-server",
-  "version": "0.1.0",
-  "description": "MCP server for TWZRD Trust API — auto-pay x402, no manual payment handling needed",
+  "version": "0.2.0",
+  "description": "TWZRD Trust API MCP server with Solana x402 auto-pay (official @x402 SDK, spend-capped, preflight-gated).",
   "type": "module",
+  "bin": { "twzrd-mcp": "./dist/index.js" },
   "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "bin": {
-    "twzrd-mcp": "./dist/index.js"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
+  "files": ["dist", "README.md"],
+  "engines": { "node": ">=20" },
+  "repository": { "type": "git", "url": "https://github.com/twzrd-sol/wzrd-final.git", "directory": "packages/twzrd-mcp-server" },
+  "homepage": "https://intel.twzrd.xyz",
+  "keywords": ["mcp", "x402", "solana", "agent", "trust", "twzrd", "reputation"],
   "scripts": {
     "build": "tsc",
-    "prepublishOnly": "tsc",
     "typecheck": "tsc --noEmit",
-    "start": "node dist/index.js"
+    "prepublishOnly": "npm run build"
   },
-  "keywords": [
-    "x402",
-    "twzrd",
-    "mcp",
-    "trust",
-    "reputation"
-  ],
-  "author": "TWZRD",
-  "license": "MIT",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "@solana/spl-token": "^0.4.14",
-    "@solana/web3.js": "^1.98.4",
-    "@x402/core": "^2.16.0",
-    "@x402/mcp": "^2.16.0",
-    "bs58": "^6.0.0",
-    "viem": "^2.53.1",
-    "zod": "^4.4.3"
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@x402/core": "^2.17.0",
+    "@x402/svm": "^2.17.0",
+    "@x402/fetch": "^2.17.0",
+    "@solana/kit": "^5.1.0",
+    "bs58": "^6.0.0"
   },
   "devDependencies": {
-    "typescript": "^5.9.3"
-  }
+    "typescript": "^5.5.0",
+    "@types/node": "^22.0.0"
+  },
+  "license": "MIT"
 }

package/dist/index.d.ts

@@ -1,14 +0,0 @@
-/**
- * TWZRD MCP Server — auto-pay x402 wrapper for TWZRD's Trust API.
- *
- * Solana x402: the 402 challenge includes a sponsored feePayer + recentBlockhash.
- * The MCP builds a USDC transfer, signs with the agent's Solana keypair, retries.
- * Always runs free preflight before auto-paying (spend cap enforced).
- *
- * ENV:
- *   TWZRD_SOLANA_KEYPAIR — Solana keypair JSON array (from solana config)
- *   TWZRD_API_URL        — Base URL (default: https://intel.twzrd.xyz)
- *   TWZRD_SPEND_CAP_USDC — Max USDC per call (default: 0.05)
- *   TWZRD_DAILY_CAP_USDC — Max USDC per day (default: 1.00)
- */
-export {};

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EACL,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,oBAAoB,GACzE,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iCAAiC,EAAE,yBAAyB,EAAc,MAAM,mBAAmB,CAAC;AAE7G,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,yBAAyB,CAAC;AACxE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;AAC9D,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,CAAC;AAC9E,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,CAAC;AAE9E,IAAI,CAAC,cAAc,EAAE,CAAC;IACpB,OAAO,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,8EAA8E;AAE9E,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,KAAiB,CAAC;IACtB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAC1E,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,uBAAuB;QACvB,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,YAAY,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;AAEtD,8EAA8E;AAE9E,IAAI,cAAc,GAAG,CAAC,CAAC;AACvB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,SAAS,aAAa,CAAC,UAAkB;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,YAAY,EAAE,CAAC;QAAC,cAAc,GAAG,CAAC,CAAC;QAAC,YAAY,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAAC,CAAC;IACzF,IAAI,UAAU,GAAG,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,cAAc,8BAA8B,UAAU,GAAG,CAAC,CAAC;IAClI,IAAI,cAAc,GAAG,UAAU,GAAG,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,cAAc,0BAA0B,cAAc,gBAAgB,UAAU,GAAG,CAAC,CAAC;AAC5K,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,OAA6C;IACnF,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtE,gBAAgB;IAChB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAErC,4BAA4B;IAC5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAS,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAExC,0CAA0C;IAC1C,MAAM,OAAO,GAAU,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;IACxC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IAE9B,yCAAyC;IACzC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,qBAAqB,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE,mBAAmB;SAClC,CAAC;KACH,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAS,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,EAAE,cAAc,IAAI,EAAE,CAAC;IAC7C,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,wBAAwB;IACxB,aAAa,CAAC,UAAU,CAAC,CAAC;IAE1B,wDAAwD;IACxD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,qCAAqC,EAAE,WAAW,CAAC,CAAC;IAEtF,qCAAqC;IACrC,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CACtD,UAAU,EAAE,YAAY,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,SAAS,CAC1E,CAAC;IAEF,6BAA6B;IAC7B,MAAM,UAAU,GAAG,yBAAyB,CAC1C,QAAQ,CAAC,OAAO,EAAe,4BAA4B;IAC3D,IAAI,SAAS,CAAC,KAAK,CAAC,EAAW,yBAAyB;IACxD,YAAY,CAAC,SAAS,EAAS,QAAQ;IACvC,MAAM,CAAC,WAAW,CAAC,CACpB,CAAC;IAEF,4CAA4C;IAC5C,MAAM,cAAc,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACrC,QAAQ,EAAE,cAAc;QACxB,eAAe;QACf,YAAY,EAAE,CAAC,UAAU,CAAC;KAC3B,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAExB,MAAM,EAAE,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7C,EAAE,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAExB,mDAAmD;IACnD,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE9D,qBAAqB;IACrB,cAAc,IAAI,UAAU,CAAC;IAE7B,kCAAkC;IAClC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QACjC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE;QAC3E,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACnC,kCAAkC;QAClC,cAAc,IAAI,UAAU,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,yBAAyB;IACzB,OAAO,CAAC,KAAK,CAAC,oBAAoB,UAAU,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI,YAAY,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,cAAc,GAAG,CAAC,CAAC;IAElJ,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAE7E,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC9C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,MAAM,KAAK,GAAG;IACZ;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,kHAAkH;QAC/H,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;aAC1E;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,mGAAmG;QAChH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;aAC1E;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,mGAAmG;QAChH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;aAC5E;YACD,QAAQ,EAAE,CAAC,eAAe,CAAC;SAC5B;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,2CAA2C;QACxD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;gBACnE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;gBAC/D,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;aAC1E;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,4EAA4E;QACzF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;aAC1E;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjD,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAA0C;QACzE,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,mBAAmB,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,mBAAmB,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,MAAM,GAAG,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;qBAC3J,CAAC;aACH,CAAC;QACJ,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,MAAM,GAAG,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;qBACzJ,CAAC;aACH,CAAC;QACJ,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,8CAA8C,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAClH,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,6EAA6E;AAE7E,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,OAAO,CAAC,KAAK,CAAC,4BAA4B,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,cAAc,IAAI,cAAc,OAAO,CAAC,CAAC"}