@aibtc/mcp-server 1.68.0 → 1.70.0

package/dist/tools/competition.tools.d.ts

@@ -1,19 +1,20 @@
 /**
- * AIBTC Trading Competition Tools
+ * AIBTC Trading Competition Tools (read-only, NOT REGISTERED)
  *
- * Agents registered on aibtc.com (and indexed via ERC-8004) compete on a
- * time-bound track scored by P&L from on-chain trades. The competition service
- * monitors registered addresses passively, but agents can also submit txids
- * as a fast-path hint to skip indexer lag.
+ * The competition has concluded. Trade submission and the DEX allowlist were
+ * removed, and these two remaining read tools are no longer exposed over MCP:
+ * `registerCompetitionTools` is intentionally not called from `src/tools/index.ts`.
+ *
+ * The module is kept because the standing/history endpoints still exist and the
+ * P&L math (`computeCampaignStats`) is the reference implementation. Re-expose by
+ * restoring the import + call in `src/tools/index.ts`; the tests here exercise the
+ * module directly, so it stays compiled and verified while unwired.
  *
  * Tools:
- * - competition_submit_trade  — Submit a trade txid for verification
- * - competition_status        — Get current standing for an agent address
- * - competition_list_trades   — Paginated trade history (submitted + indexed)
+ * - competition_status        — Standing + mark-to-current P&L for an address
+ * - competition_list_trades   — Paginated trade history
  *
- * No request signing in v1: txids are self-attesting (the on-chain tx
- * already carries the agent's signature and sender), and status/list reads
- * are over public addresses. Rate-limited per IP server-side.
+ * Reads are over public addresses, no signing. Rate-limited per IP server-side.
  *
  * API spec + verifier implementation: aibtcdev/landing-page#734 (Phase 3.1).
  * Schema source of truth: docs/rfc-d1-schema.md §swaps (migration 005).

package/dist/tools/competition.tools.js

@@ -1,20 +1,9 @@
 import { z } from "zod";
 import { AIBTC_CAMPAIGN_API_URL } from "../config/competition.js";
-import { NETWORK } from "../config/networks.js";
-import { getTransactionStatus } from "../services/hiro-api.js";
 import { getTokenInfo } from "../services/tenero-api.js";
 import { getWalletManager } from "../services/wallet-manager.js";
 import { createJsonResponse } from "../utils/formatting.js";
 import { createErrorResponse } from "../utils/errors.js";
-/**
- * Stacks tx_status values from Hiro's /extended/v1/tx endpoint.
- * `pending` = in mempool, not confirmed. Everything else is terminal:
- * `success`, `abort_by_response`, `abort_by_post_condition`, and the
- * five `dropped_*` codes. The verifier records terminal failures too
- * (migration 005's CHECK allows all 8 terminal codes) so we only block
- * submission when status is `pending`.
- */
-const PENDING_TX_STATUS = "pending";
 const stacksAddressSchema = z
     .string()
     .regex(/^S[PTM][0-9A-HJKMNP-TV-Z]{38,40}$/, "Expected a Stacks address (SP… mainnet, ST… testnet, SM… contract)");
@@ -33,14 +22,6 @@ async function resolveAddress(provided) {
     }
     return meta.address;
 }
-function normalizeTxid(txid) {
-    const trimmed = txid.trim();
-    const withPrefix = trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
-    if (!/^0x[0-9a-fA-F]{64}$/.test(withPrefix)) {
-        throw new Error(`Invalid Stacks txid: expected 64 hex chars (with optional 0x prefix), got ${JSON.stringify(txid)}`);
-    }
-    return withPrefix.toLowerCase();
-}
 const COMPETITION_FETCH_TIMEOUT_MS = 10_000;
 /**
  * Cap on `/trades` pagination when computing campaign stats. 10 pages × 200
@@ -290,66 +271,8 @@ async function resolveTokenPricesViaTenero(swaps) {
     return prices;
 }
 export function registerCompetitionTools(server) {
-    server.registerTool("competition_submit_trade", {
-        description: `Submit a trade txid to the AIBTC trading competition for verification and P&L scoring.
-
-**Two-step registration prerequisite** (both required, both one-time):
-1. Register on aibtc.com via the website's dual-sig flow (BIP-322 + SIP-018). This is not an MCP tool — agents go to https://aibtc.com to complete it.
-2. Register on the ERC-8004 identity contract via the \`identity_register\` MCP tool. This mints the on-chain agent ID that the campaign joins against.
-
-Mainnet-only in v1.
-
-The competition service fetches the tx from the Stacks chain and validates:
-- sender is registered on aibtc.com AND has an ERC-8004 agent_id
-- contract+function is on the campaign allowlist (e.g. Bitflow swap helpers, ALEX, Zest)
-- transaction status is terminal (success or any of the 7 terminal-failure codes)
-
-**No additional signed message is needed** — the txid itself is the agent's signed intent. The on-chain tx already carries their address (= identity) and the trade (= the on-chain effect). Tx history is the ledger.
-
-Submission is a fast-path hint — the backend also indexes registered agent addresses passively via a frequent catch-up cron, so a missed submission still gets picked up before final scoring. Submitting the same txid twice is idempotent (\`(txid)\` is the DB primary key; first writer wins).
-
-**Pre-flight:** This tool checks tx status on Stacks via Hiro before forwarding to the verifier. If the tx is still \`pending\` (in mempool), the call returns \`{ accepted: false, tx_status: "pending", message: "..." }\` without hitting the verifier — wait ~30s for confirmation and retry. Use \`get_transaction_status\` to poll explicitly.
-
-Response shapes:
-- \`{ accepted: false, txid, tx_status: "pending", message }\` (pre-flight gate): tx not yet confirmed. Retry after ~30s.
-- \`200 OK\` with the swap row once verified: \`{ txid, sender, contract_id, function_name, token_in, amount_in, token_out, amount_out, burn_block_time, tx_status, source, ... }\`. Field names follow on-chain vocabulary (migration 005). \`tx_status\` is one of \`success\` or 7 terminal-failure codes (verifier records terminal failures too); \`source\` is \`"agent" | "cron"\`.
-- Permanent rejection (HTTP 4xx, thrown as error): sender not registered, contract not on allowlist, or txid malformed. Do not retry — fix the inputs.
-- Transient failure (HTTP 5xx or timeout, thrown as error): retry with backoff.`,
-        inputSchema: {
-            txid: z
-                .string()
-                .min(1)
-                .describe("Stacks transaction id (with or without 0x prefix)"),
-        },
-    }, async ({ txid }) => {
-        try {
-            const normalized = normalizeTxid(txid);
-            // Pre-flight: confirm the tx is terminal on Stacks before forwarding
-            // to the verifier. Stacks blocks settle in ~30s, so a "pending" status
-            // means the agent submitted too early — we tell them to wait and
-            // resubmit rather than burning a backend round-trip.
-            const txStatus = await getTransactionStatus(normalized, NETWORK);
-            if (txStatus.status === PENDING_TX_STATUS) {
-                return createJsonResponse({
-                    accepted: false,
-                    txid: normalized,
-                    tx_status: PENDING_TX_STATUS,
-                    message: "Transaction is still pending on Stacks. Wait ~30s for confirmation and resubmit. Use get_transaction_status to poll.",
-                });
-            }
-            const parsed = await competitionFetch("/trades", {
-                method: "POST",
-                headers: { "content-type": "application/json" },
-                body: JSON.stringify({ txid: normalized }),
-            });
-            return createJsonResponse(parsed);
-        }
-        catch (error) {
-            return createErrorResponse(error);
-        }
-    });
     server.registerTool("competition_status", {
-        description: `Get the current AIBTC trading competition standing for an agent, with mark-to-current P&L computed locally.
+        description: `Get an agent's final AIBTC trading competition standing, with mark-to-current P&L computed locally. The competition has concluded; this reads the historical record.
 
 **Latency note:** by default this call also paginates the agent's trade history and parallel-fetches Tenero prices to compute live P&L. That adds a few seconds to the round-trip for agents with many trades or many distinct tokens. Pass \`include_pnl: false\` to skip that path and get only the cheap registration/count fields back.
 
@@ -399,9 +322,9 @@ To be eligible for scoring, the agent needs **both** an aibtc.com website regist
         }
     });
     server.registerTool("competition_list_trades", {
-        description: `List trades for an agent in the current AIBTC trading competition.
+        description: `List an agent's trades from the concluded AIBTC trading competition.
 
-Includes txids the agent submitted directly (via \`competition_submit_trade\`) and txids discovered via passive address monitoring (nightly cron). Each entry is a swap row from migration 005: \`{ txid, sender, contract_id, function_name, token_in, amount_in, token_out, amount_out, burn_block_time, tx_status, source, scored_value, scored_at }\`. \`source\` distinguishes \`"agent"\` (your submission) from \`"cron"\` (nightly catch-up). Response: \`{ trades, next_cursor }\` — opaque cursor for pagination. If no address is provided, uses the active wallet's Stacks address.`,
+Covers txids the agent submitted while the competition ran and txids discovered via passive address monitoring. Each entry is a swap row from migration 005: \`{ txid, sender, contract_id, function_name, token_in, amount_in, token_out, amount_out, burn_block_time, tx_status, source, scored_value, scored_at }\`. \`source\` distinguishes \`"agent"\` (your submission) from \`"cron"\` (nightly catch-up). Response: \`{ trades, next_cursor }\` — opaque cursor for pagination. If no address is provided, uses the active wallet's Stacks address.`,
         inputSchema: {
             address: stacksAddressSchema
                 .optional()
@@ -432,40 +355,5 @@ Includes txids the agent submitted directly (via \`competition_submit_trade\`) a
             return createErrorResponse(error);
         }
     });
-    server.registerTool("competition_allowlist", {
-        description: `Get the set of \`(contract_id, function_name)\` tuples the AIBTC trading-competition verifier will accept. Swaps against any contract/function not in this list are rejected with \`contract_not_allowlisted\` at \`POST /api/competition/trades\`.
-
-Use this **before submitting a txid** to confirm the swap you just made will score, or as discovery for "what protocols / pools can I trade for the competition right now?"
-
-Returns the payload from \`GET /api/competition/allowlist\` verbatim:
-
-\`\`\`
-{
-  entries: [
-    { contract_id: "SP….contract-name", functions: ["swap-x-for-y", ...] },
-    ...
-  ],
-  total_contracts: number,         // count of distinct contract_ids
-  total_functions: number,         // sum of allowed function names across entries
-  provider_address: string,        // AIBTC attribution string (audit-only)
-  protocols: { bitflow: number },  // per-protocol entry count
-}
-\`\`\`
-
-**Notes:**
-- Source of truth: \`lib/competition/allowlist.ts\` in landing-page. Reviewed per PR; no runtime mutation surface.
-- Current scope is **Bitflow only** (stableswap, XYK, DLMM router, cross-DEX routers, wrappers). ALEX direct and Zest are NOT yet in scope — \`alex_swap\` / \`zest_*\` calls land on-chain but get rejected as \`contract_not_allowlisted\`.
-- \`provider_address\` is the AIBTC attribution tag Bitflow's optional \`provider\` clarity arg can carry — it's recorded for audit but does NOT gate acceptance. Only the \`(contract, function)\` tuple match matters.
-- The list is cached server-side; tool returns whatever the live endpoint reports at call time.`,
-        inputSchema: {},
-    }, async () => {
-        try {
-            const parsed = await competitionFetch("/allowlist");
-            return createJsonResponse(parsed);
-        }
-        catch (error) {
-            return createErrorResponse(error);
-        }
-    });
 }
 //# sourceMappingURL=competition.tools.js.map

package/dist/tools/index.js

@@ -37,6 +37,8 @@ import { registerSigningTools } from "./signing.tools.js";
 import { registerInferenceMarketplaceTools } from "./inference-marketplace.tools.js";
 import { registerNewsTools } from "./news.tools.js";
 import { registerLegionTools } from "./legion.tools.js";
+import { registerAtStakeTools } from "./at-stake.tools.js";
+import { registerAtStakeLegionTools } from "./at-stake-legion.tools.js";
 import { registerIdentityTools } from "./identity.tools.js";
 import { registerCredentialsTools } from "./credentials.tools.js";
 import { registerSouldinalsTools } from "./souldinals.tools.js";
@@ -47,7 +49,6 @@ import { registerRunesTools } from "./runes.tools.js";
 import { registerInboxTools } from "./inbox.tools.js";
 import { registerInboxX402Tools } from "./inbox-x402.tools.js";
 import { registerArxivResearchTools } from "./arxiv-research.tools.js";
-import { registerCompetitionTools } from "./competition.tools.js";
 import { registerEarningTools } from "./earning.tools.js";
 import { getSkillForTool } from "./skill-mappings.js";
 /**
@@ -170,6 +171,10 @@ export function registerAllTools(server) {
     registerNewsTools(server);
     // AIBTC News Legion (mainnet aibtc-news-gov — inscribe, propose, vote, conclude)
     registerLegionTools(server);
+    // At Stake (elsalvadorstakesbtc.com — complete-set prediction market)
+    registerAtStakeTools(server);
+    // At Stake side legions (aibtc.com/legions — weight is the share balance)
+    registerAtStakeLegionTools(server);
     // Identity (ERC-8004 on-chain agent identity management)
     registerIdentityTools(server);
     // Credentials (encrypted credential store — list, get, set, delete, unlock)
@@ -190,8 +195,6 @@ export function registerAllTools(server) {
     registerInboxX402Tools(server);
     // arXiv Research (public arXiv Atom API — paper search and digest compilation)
     registerArxivResearchTools(server);
-    // AIBTC Trading Competition (submit trade txids, check standing, list trades)
-    registerCompetitionTools(server);
     // Earning Opportunities (static "how to put your assets to work" menu)
     registerEarningTools(server);
     restoreRegisterTool();

package/dist/tools/legion.tools.d.ts

@@ -7,9 +7,10 @@
  *
  * EVERYTHING HERE MOVES REAL VALUE. The legion is on Stacks mainnet holding
  * real sBTC, and neither `contribute` nor `sponsor` has a withdrawal path, so
- * both meter against the wallet's `sats` spending rail before signing —
- * `callContract` is not itself a metered chokepoint, but these two take the
- * amount as a direct parameter, which is what the rail needs.
+ * both meter against the wallet's `sats` spending rail before signing. That
+ * metering happens inside `callContract`, which reads the exact sBTC
+ * post-condition these calls already sign in DENY mode — so it must NOT be
+ * repeated here, or every contribute would bill the rail twice.
  *
  * These tools pin their own network: `getLegionAccount()` re-derives the
  * unlocked wallet for the legion's chain, so a testnet-configured server still

package/dist/tools/legion.tools.js

@@ -7,9 +7,10 @@
  *
  * EVERYTHING HERE MOVES REAL VALUE. The legion is on Stacks mainnet holding
  * real sBTC, and neither `contribute` nor `sponsor` has a withdrawal path, so
- * both meter against the wallet's `sats` spending rail before signing —
- * `callContract` is not itself a metered chokepoint, but these two take the
- * amount as a direct parameter, which is what the rail needs.
+ * both meter against the wallet's `sats` spending rail before signing. That
+ * metering happens inside `callContract`, which reads the exact sBTC
+ * post-condition these calls already sign in DENY mode — so it must NOT be
+ * repeated here, or every contribute would bill the rail twice.
  *
  * These tools pin their own network: `getLegionAccount()` re-derives the
  * unlocked wallet for the legion's chain, so a testnet-configured server still
@@ -27,7 +28,6 @@ import { DUST_THRESHOLD } from "../config/bitcoin-constants.js";
 import { LEGION_ERAS, LEGION_ERRORS, LEGION_NETWORK, LEGION_SITE_URL, LIVE_ERA, MAX_DESCRIPTION_LENGTH, MAX_LINK_LENGTH, MAX_RATIONALE_LENGTH, MAX_SPONSOR_LINK_LENGTH, MAX_SPONSOR_MEMO_LENGTH, MAX_SPONSOR_NAME_LENGTH, MAX_TITLE_LENGTH, ORDINALS_CONTENT_BASE, ORDINALS_INSCRIPTION_BASE, STORY_STATUS, resolveEra, } from "../config/legion.js";
 import { assertAscii, buildTimeline, contentUrlFromLink, explainError, getClockHeight, getLastProposalId, getLegionAccount, getLegionToken, getMembership, getParams, getPhase, getProposeStatus, getStory, getStoryMeta, getVoteRecord, inscriptionIdFromLink, normalizeOrdinalsLink, num, predictOutcome, proposeBlockers, readGov, readLegionContract, readTreasury, } from "../services/legion.service.js";
 import { callContract } from "../transactions/builder.js";
-import { getSpendLimiter } from "../services/spend-limiter.js";
 import { getWalletManager } from "../services/wallet-manager.js";
 import { MempoolApi, getMempoolTxUrl } from "../services/mempool-api.js";
 import { buildCommitTransaction, buildRevealTransaction, deriveRevealScript, } from "../transactions/inscription-builder.js";
@@ -596,10 +596,9 @@ export function registerLegionTools(server) {
                 return createErrorResponse(new Error(`Your sBTC balance is ${balance} sats — not enough to contribute ${sats}. ` +
                     `Acquire sBTC with sbtc_deposit or styx_deposit first.`));
             }
-            // Real, unrecoverable sBTC leaves the wallet here. callContract is not
-            // itself a metered chokepoint, but the amount is a direct parameter, so
-            // the rail applies cleanly — and must, before anything is signed.
-            await getSpendLimiter().check("sats", BigInt(sats), account.address);
+            // Real, unrecoverable sBTC leaves the wallet here. The `sats` rail is
+            // metered by callContract off the willSendEq post-condition below —
+            // metering again here would double-bill the cap.
             const quotedWeight = num(await readGov("quote-weight", [uintCV(sats)]));
             const result = await callContract(account, {
                 contractAddress: GOV_ADDRESS,
@@ -613,7 +612,6 @@ export function registerLegionTools(server) {
                         .ft(token.contract, token.assetName),
                 ],
             });
-            await getSpendLimiter().record("sats", BigInt(sats), account.address);
             const weightAfter = num(weightBefore) + quotedWeight;
             const wasMember = num(weightBefore) >= params.minWeightToAct;
             const willBeMember = weightAfter >= params.minWeightToAct;
@@ -700,8 +698,8 @@ export function registerLegionTools(server) {
             if (balance < sats) {
                 return createErrorResponse(new Error(`Your sBTC balance is ${balance} sats — not enough to sponsor ${sats}.`));
             }
-            // Same rail as contribute: real sBTC, no refund, amount is a direct param.
-            await getSpendLimiter().check("sats", BigInt(sats), account.address);
+            // Same rail as contribute: real sBTC, no refund, metered by callContract
+            // off the post-condition below.
             const result = await callContract(account, {
                 contractAddress: TREASURY_ADDRESS,
                 contractName: TREASURY_NAME,
@@ -719,7 +717,6 @@ export function registerLegionTools(server) {
                         .ft(token.contract, token.assetName),
                 ],
             });
-            await getSpendLimiter().record("sats", BigInt(sats), account.address);
             return createJsonResponse({
                 success: true,
                 txid: result.txid,

package/dist/tools/ordinals.tools.js

@@ -10,6 +10,7 @@
  *
  * Uses micro-ordinals library to parse and create inscriptions.
  */
+import { createHash } from "node:crypto";
 import { z } from "zod";
 import { NETWORK } from "../config/networks.js";
 import { P2WPKH_INPUT_VBYTES, P2WPKH_OUTPUT_VBYTES, P2TR_OUTPUT_VBYTES, TX_OVERHEAD_VBYTES, DUST_THRESHOLD, P2TR_INPUT_BASE_VBYTES, WITNESS_OVERHEAD_VBYTES, } from "../config/bitcoin-constants.js";
@@ -223,8 +224,10 @@ export function registerOrdinalsTools(server) {
                 feeRate: actualFeeRate,
                 contentType,
                 contentSize: body.length,
+                contentSha256: createHash("sha256").update(body).digest("hex"),
                 nextStep: "After commit confirms, call inscribe_reveal with the same contentType, contentBase64, " +
-                    "plus commitTxid and revealAmount from this response.",
+                    "plus commitTxid and revealAmount from this response. Pass contentSha256 back to inscribe_reveal " +
+                    "to have the server abort before the reveal fee is spent if the decoded body differs by even one byte.",
             });
         }
         catch (error) {
@@ -252,12 +255,20 @@ export function registerOrdinalsTools(server) {
             contentBase64: z
                 .string()
                 .describe("Content as base64-encoded string (must match the commit step)"),
+            contentSha256: z
+                .string()
+                .regex(/^[0-9a-f]{64}$/i)
+                .optional()
+                .describe("Optional: sha256 hex digest of the decoded body from the inscribe commit response. " +
+                "If provided, the server computes sha256 over the locally-decoded body and aborts before " +
+                "broadcasting the reveal if they differ — prevents burning the reveal fee on a witness-hash " +
+                "mismatch when the base64 param drifts between the inscribe and inscribe_reveal calls."),
             feeRate: z
                 .union([z.enum(["fast", "medium", "slow"]), z.number().positive()])
                 .optional()
                 .describe("Fee rate for reveal tx (default: medium)"),
         },
-    }, async ({ commitTxid, revealAmount, contentType, contentBase64, feeRate }) => {
+    }, async ({ commitTxid, revealAmount, contentType, contentBase64, contentSha256, feeRate }) => {
         try {
             // Check wallet session
             const walletManager = getWalletManager();
@@ -277,6 +288,21 @@ export function registerOrdinalsTools(server) {
             const mempoolApi = new MempoolApi(NETWORK);
             // Reconstruct the inscription and reveal script
             const body = Buffer.from(contentBase64, "base64");
+            // If the caller supplied the sha256 digest from the commit response, verify the
+            // decoded body matches BEFORE we spend the reveal fee. Silent byte drift between
+            // the two calls would otherwise commit a tapscript hash that Bitcoin Core rejects
+            // as witness-hash-mismatch, burning the reveal-address sats permanently.
+            if (contentSha256) {
+                const localSha256 = createHash("sha256").update(body).digest("hex");
+                if (localSha256.toLowerCase() !== contentSha256.toLowerCase()) {
+                    return createErrorResponse(new Error(`contentSha256 mismatch: the decoded body's sha256 (${localSha256}) does not match ` +
+                        `the digest from the inscribe commit response (${contentSha256}). This means the ` +
+                        `base64 payload passed to inscribe_reveal is not the exact bytes committed on-chain. ` +
+                        `Aborting BEFORE broadcasting the reveal so the reveal-address sats are not burned. ` +
+                        `Re-send the exact base64 from the successful inscribe call (or fix the transport / ` +
+                        `serialization layer that mutated it).`));
+                }
+            }
             const inscription = {
                 contentType,
                 body,

package/dist/transactions/builder.js

@@ -3,7 +3,7 @@ import { hexToBytes } from "@stacks/common";
 import { getStacksNetwork, getApiBaseUrl } from "../config/networks.js";
 import { getHiroApi } from "../services/hiro-api.js";
 import { resolveDefaultFee } from "../utils/fee.js";
-import { getSpendLimiter } from "../services/spend-limiter.js";
+import { getSpendLimiter, totalBoundedSpends } from "../services/spend-limiter.js";
 import { getTrackedNonce, recordNonceUsed, resetTrackedNonce, reconcileWithChain, } from "../services/nonce-tracker.js";
 // ---------------------------------------------------------------------------
 // Pending nonce tracking (unified via SharedNonceTracker, issue #413)
@@ -117,6 +117,16 @@ export async function transferStx(account, recipient, amount, memo, fee) {
  * Call a smart contract function
  */
 export async function callContract(account, options) {
+    // Safety rail. Swaps, lending and pot entries all funnel through here, and
+    // their amounts are denominated in whatever token the call moves — there is no
+    // ledger to bill 1,000 ALEX against. The post conditions are the way in: they
+    // already bound, in native units, how much of each asset may leave this
+    // address. Meter the ones this rail has a ledger for and ignore the rest.
+    // Deliberately before makeContractCall, so an over-cap call never signs.
+    const meteredSpends = totalBoundedSpends(options.postConditions, account.address);
+    for (const spend of meteredSpends) {
+        await getSpendLimiter().check(spend.unit, spend.amount, account.address);
+    }
     const networkName = getStacksNetwork(account.network);
     const nonce = await getNextNonce(account.address, account.network);
     // Always resolve a clamped fee — prevents @stacks/transactions from over-estimating.
@@ -141,6 +151,9 @@ export async function callContract(account, options) {
         throw new Error(`Broadcast failed: ${broadcastResponse.error} - ${broadcastResponse.reason}`);
     }
     advancePendingNonce(account.address, nonce, broadcastResponse.txid);
+    for (const spend of meteredSpends) {
+        await getSpendLimiter().record(spend.unit, spend.amount, account.address);
+    }
     return {
         txid: broadcastResponse.txid,
         rawTx: transaction.serialize(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aibtc/mcp-server",
-  "version": "1.68.0",
+  "version": "1.70.0",
   "description": "Bitcoin-native MCP server for AI agents: BTC/STX wallets, DeFi yield, sBTC peg, NFTs, and x402 payments.",
   "mcpName": "io.github.aibtcdev/mcp-server",
   "type": "module",

package/skill/SKILL.md

@@ -4,7 +4,7 @@ description: Bitcoin L1 wallet for agents - check balances, send BTC, manage UTX
 license: MIT
 metadata:
   author: aibtcdev
-  version: 1.68.0 # x-release-please-version
+  version: 1.70.0 # x-release-please-version
   npm: "@aibtc/mcp-server"
   github: https://github.com/aibtcdev/aibtc-mcp-server
 ---
@@ -241,6 +241,42 @@ unlocked wallet on the gateway's network. Every tool takes an optional `gateway`
 arg (defaults to `https://inference.aibtc.com`; use `http://localhost:8787` for
 local dev).
 
+### Prediction Market + Legions (elsalvadorstakesbtc.com)
+
+A market on one bit of Bitcoin history — did twenty frozen El Salvador reserve
+scripts spend into a Stacks PoX-5 bond before burn block 994,699 — with two DAOs,
+one per side, that pay agents in shares for checking the claim and publishing
+what they found. Chips are sBTC; there is no admin key and no oracle.
+
+```
+"What is the status of the El Salvador stakes BTC market?"
+"Mint 1000 sats of complete sets so I can vote in the no legion"
+"Show me every live proposal in both legions"
+```
+
+Complete sets are the thing to understand first: **1 sat mints 1 BONDED (yes)
+share AND 1 IDLE (no) share**, and the pair merges back to 1 sat before resolve.
+Minting is therefore a hedge, not a bet — a directional position comes from
+`atstake_place_bid` on the side you believe. Minting is also how you buy legion voting weight, because **weight is
+the share balance**, read live on every call.
+
+| Tool | Description | Wallet |
+|------|-------------|:------:|
+| `atstake_market_status` | The claim, status, escrow, blocks to close | — |
+| `atstake_position` | Share balances and payout under each outcome | optional |
+| `atstake_mint_complete_set` | Spend sBTC for a matched pair | ✅ |
+| `atstake_merge_complete_set` | Hand a pair back for its sats | ✅ |
+| `atstake_place_bid` / `atstake_cancel_bid` | Resting bid below par | ✅ |
+| `atstake_transfer_shares` | Send one side (moves legion weight) | ✅ |
+| `atstake_redeem` | Cash a resolved position | ✅ |
+| `atstake_legion_propose` / `_vote` / `_conclude` | Side governance | ✅ |
+| `atstake_legion_status` / `_list_proposals` | Eligibility and the board | optional |
+
+Distinct from `legion_*` (which governs `aibtc-news-gov`) and from
+`stacks_market_*` (which trades stacksmarket.app).
+
+See: [references/at-stake.md](references/at-stake.md)
+
 ### Genesis Lifecycle
 
 Agent identity and reputation on Bitcoin and Stacks: