Full-surface MCP server + Celaut .service (MCP HTTP + REST, seed/unsigned signer)

[agenticaihome]

What

Mirrors the pattern already shipped for celaut-skills and reputation-system: a full-surface MCP server plus a Celaut .service microVM that exposes the entire Source Application library — every read, every write, and the pure helpers — backed by a SEED signer or an UNSIGNED signer.

Additions

mcp/ — stdio MCP server (full surface, 27 tools)

• core.mjs — framework-agnostic reads + pure helpers, a Svelte-free port of src/lib/ergo/sourceFetch.ts + sourceObject.ts. Explorer box search and block-timestamp come from reputation-system/node (the headless, Node-safe entry — same searchBoxes the app uses, including the required reputation-proof ergoTreeTemplateHash filter). Type NFT ids copied verbatim from envs.ts (placeholders preserved; non-real types return clean empty arrays).
• lib.mjs — makeSigner() from env (SOURCE_SIGNER_MODE=seed|unsigned), fetchMainBox(), describeResult() — the reputation-system/mcp/lib.mjs pattern with a SOURCE_ env prefix.
• writes.mjs — port of src/lib/ergo/sourceStore.ts to the Node signer path via create_profile_with_signer / create_opinion_with_signer.
• tools.mjs — shared TOOLS + HANDLERS (used by both transports, so they never drift).
• server.mjs — stdio bootstrap (console routed to stderr so the library's logs never corrupt the JSON-RPC stream).

.service/ — Celaut microVM (MCP HTTP and REST)

• server-http.mjs — binds 0.0.0.0:8080:
  • GET /health
  • * /mcp — the same MCP tool surface over Streamable HTTP
  • * /api/* — a clean JSON REST mirror of every method (reads via GET, writes via POST)
• core/lib/writes/tools.mjs — copies of the mcp/ modules
• Dockerfile, service.json (port 8080 http, init.entry_path app/start.sh, resources + api.ergoplatform.com network tag), start.sh, pack_config.json, package.json, README.md

reputation-system is wired as a dependency the same way celaut-skills does — here pinned to github:agenticaihome/reputation-system#fix/seed-signer-derivation (the branch that ships the /node entry + Nautilus-compatible BIP-39/32 SeedSigner).

Tools / endpoints

27 MCP tools: get_source_config; reads fetch_file_sources_by_hash, fetch_invalid_file_sources, fetch_unavailable_sources, fetch_profile_opinions, fetch_file_sources_by_profile, fetch_invalid_file_sources_by_profile, fetch_unavailable_sources_by_profile, fetch_profile_opinions_by_author, search_by_hash, load_profile_data; helpers group_by_download_source, group_by_profile, calculate_profile_trust, aggregate_source_score, get_primary_url, get_all_urls, list_hash_algorithms, validate_hash, compute_hash; writes create_profile_box, add_file_source, confirm_source, update_file_source, mark_invalid_source, mark_unavailable_source, trust_profile.

REST routes mirror all of the above — see .service/README.md for the full table and the write→opinion mapping.

Write → opinion mapping

• add_file_source / confirm_source → opinion vs FILE_SOURCE_TYPE_NFT_ID (R5=fileHash, R8=true, R9=source entry)
• mark_invalid_source → vs INVALID_FILE_SOURCE_TYPE_NFT_ID (R5=sourceBoxId, R8=false)
• mark_unavailable_source → vs UNAVAILABLE_SOURCE_TYPE_NFT_ID (R5=sourceUrl, R8=false)
• trust_profile → vs PROFILE_OPINION_TYPE_NFT_ID (R5=profileTokenId, R8=isTrusted)
• create_profile_box → create_profile vs PROFILE_TYPE_NFT_ID

Every opinion is split from the author's PROFILE box (mainBoxId).

Env vars

• SOURCE_SIGNER_MODE = unsigned (default) | seed
• unsigned: SOURCE_ADDRESS
• seed: SOURCE_MNEMONIC (+ optional SOURCE_MNEMONIC_PASSWORD, SOURCE_NODE_URI, SOURCE_ADDRESS_INDEX)
• SOURCE_EXPLORER_API (default https://api.ergoplatform.com), PORT (default 8080)

How to run

# stdio MCP
cd mcp && npm install && npm run mcp
# Celaut service (HTTP + REST)
cd .service && npm install && npm start    # 0.0.0.0:8080

Verification evidence (all real, mainnet)

• node --check passes on all 10 .mjs files.
• reputation-system/node resolves: searchBoxes, getTimestampFromBlockId, SeedSigner, UnsignedSigner, create_opinion_with_signer, create_profile_with_signer.
• stdio MCP tools/list → 27 tools; stdout is 100% JSON-RPC (console redirected to stderr).
• HTTP GET /health → {"status":"ok",...,"signerMode":"unsigned"}.
• MCP over /mcp tools/list → 27 tools; tools/call compute_hash("abc",sha256) → ba7816bf…015ad (correct).
• REST reads: GET /api/config returns type NFT ids; GET /api/sources?hash=… → clean []; GET /api/hash-algorithms → sha3_256,blake2b,sha256,keccak256,__custom__.
• UNSIGNED write (POST /api/sources and add_file_source) against a real on-chain profile box → submitted:false, full unsigned tx (2 inputs, 1 dataInput, 4 outputs, first output = reputation contract), no mnemonic in env.

No seed-mode writes were run, no txs submitted, no wallets/secrets touched, and the reputation-system repo was not modified.

Honest gaps

• update_file_source: the browser flow spends the previous FILE_SOURCE box via update_opinion (Nautilus-only). reputation-system/node exposes create_*_with_signer but not update_opinion_with_signer, so this publishes a new FILE_SOURCE opinion for the same hash instead of spending the old box. Documented in code + .service/README.md.
• Placeholder Type NFTs: INVALID_FILE_SOURCE, UNAVAILABLE_SOURCE, PROFILE_OPINION are still all-zero placeholders in envs.ts (preserved verbatim). Reads/writes wire up correctly but won't match/clear real boxes until those NFTs are minted; FILE_SOURCE + PROFILE are real and return live data.
• Timestamps: block-timestamp lookups degrade to 0 on failure (non-critical) rather than throwing, a small robustness change vs the original.

🤖 Generated with Claude Code