@aibtc/mcp-server 1.69.0 → 1.70.1

package/dist/tools/competition.tools.d.ts

@@ -1,19 +1,20 @@
 /**
- * AIBTC Trading Competition Tools
+ * AIBTC Trading Competition Tools (read-only, NOT REGISTERED)
  *
- * Agents registered on aibtc.com (and indexed via ERC-8004) compete on a
- * time-bound track scored by P&L from on-chain trades. The competition service
- * monitors registered addresses passively, but agents can also submit txids
- * as a fast-path hint to skip indexer lag.
+ * The competition has concluded. Trade submission and the DEX allowlist were
+ * removed, and these two remaining read tools are no longer exposed over MCP:
+ * `registerCompetitionTools` is intentionally not called from `src/tools/index.ts`.
+ *
+ * The module is kept because the standing/history endpoints still exist and the
+ * P&L math (`computeCampaignStats`) is the reference implementation. Re-expose by
+ * restoring the import + call in `src/tools/index.ts`; the tests here exercise the
+ * module directly, so it stays compiled and verified while unwired.
  *
  * Tools:
- * - competition_submit_trade  — Submit a trade txid for verification
- * - competition_status        — Get current standing for an agent address
- * - competition_list_trades   — Paginated trade history (submitted + indexed)
+ * - competition_status        — Standing + mark-to-current P&L for an address
+ * - competition_list_trades   — Paginated trade history
  *
- * No request signing in v1: txids are self-attesting (the on-chain tx
- * already carries the agent's signature and sender), and status/list reads
- * are over public addresses. Rate-limited per IP server-side.
+ * Reads are over public addresses, no signing. Rate-limited per IP server-side.
  *
  * API spec + verifier implementation: aibtcdev/landing-page#734 (Phase 3.1).
  * Schema source of truth: docs/rfc-d1-schema.md §swaps (migration 005).

package/dist/tools/competition.tools.js

@@ -1,20 +1,9 @@
 import { z } from "zod";
 import { AIBTC_CAMPAIGN_API_URL } from "../config/competition.js";
-import { NETWORK } from "../config/networks.js";
-import { getTransactionStatus } from "../services/hiro-api.js";
 import { getTokenInfo } from "../services/tenero-api.js";
 import { getWalletManager } from "../services/wallet-manager.js";
 import { createJsonResponse } from "../utils/formatting.js";
 import { createErrorResponse } from "../utils/errors.js";
-/**
- * Stacks tx_status values from Hiro's /extended/v1/tx endpoint.
- * `pending` = in mempool, not confirmed. Everything else is terminal:
- * `success`, `abort_by_response`, `abort_by_post_condition`, and the
- * five `dropped_*` codes. The verifier records terminal failures too
- * (migration 005's CHECK allows all 8 terminal codes) so we only block
- * submission when status is `pending`.
- */
-const PENDING_TX_STATUS = "pending";
 const stacksAddressSchema = z
     .string()
     .regex(/^S[PTM][0-9A-HJKMNP-TV-Z]{38,40}$/, "Expected a Stacks address (SP… mainnet, ST… testnet, SM… contract)");
@@ -33,14 +22,6 @@ async function resolveAddress(provided) {
     }
     return meta.address;
 }
-function normalizeTxid(txid) {
-    const trimmed = txid.trim();
-    const withPrefix = trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
-    if (!/^0x[0-9a-fA-F]{64}$/.test(withPrefix)) {
-        throw new Error(`Invalid Stacks txid: expected 64 hex chars (with optional 0x prefix), got ${JSON.stringify(txid)}`);
-    }
-    return withPrefix.toLowerCase();
-}
 const COMPETITION_FETCH_TIMEOUT_MS = 10_000;
 /**
  * Cap on `/trades` pagination when computing campaign stats. 10 pages × 200
@@ -290,66 +271,8 @@ async function resolveTokenPricesViaTenero(swaps) {
     return prices;
 }
 export function registerCompetitionTools(server) {
-    server.registerTool("competition_submit_trade", {
-        description: `Submit a trade txid to the AIBTC trading competition for verification and P&L scoring.
-
-**Two-step registration prerequisite** (both required, both one-time):
-1. Register on aibtc.com via the website's dual-sig flow (BIP-322 + SIP-018). This is not an MCP tool — agents go to https://aibtc.com to complete it.
-2. Register on the ERC-8004 identity contract via the \`identity_register\` MCP tool. This mints the on-chain agent ID that the campaign joins against.
-
-Mainnet-only in v1.
-
-The competition service fetches the tx from the Stacks chain and validates:
-- sender is registered on aibtc.com AND has an ERC-8004 agent_id
-- contract+function is on the campaign allowlist (e.g. Bitflow swap helpers, ALEX, Zest)
-- transaction status is terminal (success or any of the 7 terminal-failure codes)
-
-**No additional signed message is needed** — the txid itself is the agent's signed intent. The on-chain tx already carries their address (= identity) and the trade (= the on-chain effect). Tx history is the ledger.
-
-Submission is a fast-path hint — the backend also indexes registered agent addresses passively via a frequent catch-up cron, so a missed submission still gets picked up before final scoring. Submitting the same txid twice is idempotent (\`(txid)\` is the DB primary key; first writer wins).
-
-**Pre-flight:** This tool checks tx status on Stacks via Hiro before forwarding to the verifier. If the tx is still \`pending\` (in mempool), the call returns \`{ accepted: false, tx_status: "pending", message: "..." }\` without hitting the verifier — wait ~30s for confirmation and retry. Use \`get_transaction_status\` to poll explicitly.
-
-Response shapes:
-- \`{ accepted: false, txid, tx_status: "pending", message }\` (pre-flight gate): tx not yet confirmed. Retry after ~30s.
-- \`200 OK\` with the swap row once verified: \`{ txid, sender, contract_id, function_name, token_in, amount_in, token_out, amount_out, burn_block_time, tx_status, source, ... }\`. Field names follow on-chain vocabulary (migration 005). \`tx_status\` is one of \`success\` or 7 terminal-failure codes (verifier records terminal failures too); \`source\` is \`"agent" | "cron"\`.
-- Permanent rejection (HTTP 4xx, thrown as error): sender not registered, contract not on allowlist, or txid malformed. Do not retry — fix the inputs.
-- Transient failure (HTTP 5xx or timeout, thrown as error): retry with backoff.`,
-        inputSchema: {
-            txid: z
-                .string()
-                .min(1)
-                .describe("Stacks transaction id (with or without 0x prefix)"),
-        },
-    }, async ({ txid }) => {
-        try {
-            const normalized = normalizeTxid(txid);
-            // Pre-flight: confirm the tx is terminal on Stacks before forwarding
-            // to the verifier. Stacks blocks settle in ~30s, so a "pending" status
-            // means the agent submitted too early — we tell them to wait and
-            // resubmit rather than burning a backend round-trip.
-            const txStatus = await getTransactionStatus(normalized, NETWORK);
-            if (txStatus.status === PENDING_TX_STATUS) {
-                return createJsonResponse({
-                    accepted: false,
-                    txid: normalized,
-                    tx_status: PENDING_TX_STATUS,
-                    message: "Transaction is still pending on Stacks. Wait ~30s for confirmation and resubmit. Use get_transaction_status to poll.",
-                });
-            }
-            const parsed = await competitionFetch("/trades", {
-                method: "POST",
-                headers: { "content-type": "application/json" },
-                body: JSON.stringify({ txid: normalized }),
-            });
-            return createJsonResponse(parsed);
-        }
-        catch (error) {
-            return createErrorResponse(error);
-        }
-    });
     server.registerTool("competition_status", {
-        description: `Get the current AIBTC trading competition standing for an agent, with mark-to-current P&L computed locally.
+        description: `Get an agent's final AIBTC trading competition standing, with mark-to-current P&L computed locally. The competition has concluded; this reads the historical record.
 
 **Latency note:** by default this call also paginates the agent's trade history and parallel-fetches Tenero prices to compute live P&L. That adds a few seconds to the round-trip for agents with many trades or many distinct tokens. Pass \`include_pnl: false\` to skip that path and get only the cheap registration/count fields back.
 
@@ -399,9 +322,9 @@ To be eligible for scoring, the agent needs **both** an aibtc.com website regist
         }
     });
     server.registerTool("competition_list_trades", {
-        description: `List trades for an agent in the current AIBTC trading competition.
+        description: `List an agent's trades from the concluded AIBTC trading competition.
 
-Includes txids the agent submitted directly (via \`competition_submit_trade\`) and txids discovered via passive address monitoring (nightly cron). Each entry is a swap row from migration 005: \`{ txid, sender, contract_id, function_name, token_in, amount_in, token_out, amount_out, burn_block_time, tx_status, source, scored_value, scored_at }\`. \`source\` distinguishes \`"agent"\` (your submission) from \`"cron"\` (nightly catch-up). Response: \`{ trades, next_cursor }\` — opaque cursor for pagination. If no address is provided, uses the active wallet's Stacks address.`,
+Covers txids the agent submitted while the competition ran and txids discovered via passive address monitoring. Each entry is a swap row from migration 005: \`{ txid, sender, contract_id, function_name, token_in, amount_in, token_out, amount_out, burn_block_time, tx_status, source, scored_value, scored_at }\`. \`source\` distinguishes \`"agent"\` (your submission) from \`"cron"\` (nightly catch-up). Response: \`{ trades, next_cursor }\` — opaque cursor for pagination. If no address is provided, uses the active wallet's Stacks address.`,
         inputSchema: {
             address: stacksAddressSchema
                 .optional()
@@ -432,40 +355,5 @@ Includes txids the agent submitted directly (via \`competition_submit_trade\`) a
             return createErrorResponse(error);
         }
     });
-    server.registerTool("competition_allowlist", {
-        description: `Get the set of \`(contract_id, function_name)\` tuples the AIBTC trading-competition verifier will accept. Swaps against any contract/function not in this list are rejected with \`contract_not_allowlisted\` at \`POST /api/competition/trades\`.
-
-Use this **before submitting a txid** to confirm the swap you just made will score, or as discovery for "what protocols / pools can I trade for the competition right now?"
-
-Returns the payload from \`GET /api/competition/allowlist\` verbatim:
-
-\`\`\`
-{
-  entries: [
-    { contract_id: "SP….contract-name", functions: ["swap-x-for-y", ...] },
-    ...
-  ],
-  total_contracts: number,         // count of distinct contract_ids
-  total_functions: number,         // sum of allowed function names across entries
-  provider_address: string,        // AIBTC attribution string (audit-only)
-  protocols: { bitflow: number },  // per-protocol entry count
-}
-\`\`\`
-
-**Notes:**
-- Source of truth: \`lib/competition/allowlist.ts\` in landing-page. Reviewed per PR; no runtime mutation surface.
-- Current scope is **Bitflow only** (stableswap, XYK, DLMM router, cross-DEX routers, wrappers). ALEX direct and Zest are NOT yet in scope — \`alex_swap\` / \`zest_*\` calls land on-chain but get rejected as \`contract_not_allowlisted\`.
-- \`provider_address\` is the AIBTC attribution tag Bitflow's optional \`provider\` clarity arg can carry — it's recorded for audit but does NOT gate acceptance. Only the \`(contract, function)\` tuple match matters.
-- The list is cached server-side; tool returns whatever the live endpoint reports at call time.`,
-        inputSchema: {},
-    }, async () => {
-        try {
-            const parsed = await competitionFetch("/allowlist");
-            return createJsonResponse(parsed);
-        }
-        catch (error) {
-            return createErrorResponse(error);
-        }
-    });
 }
 //# sourceMappingURL=competition.tools.js.map

package/dist/tools/defi.tools.js

@@ -12,7 +12,7 @@ export function registerDefiTools(server) {
         description: `Get a swap quote from ALEX DEX.
 
 Returns the expected output amount for swapping tokenX to tokenY.
-Use full contract IDs for tokens (e.g., 'SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.token-wstx-v2').
+Use full contract IDs for tokens (e.g., 'SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2').
 
 Note: ALEX DEX is only available on mainnet.`,
         inputSchema: {

package/dist/tools/endpoint.tools.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { createApiClient, API_URL, probeEndpoint, formatPaymentAmount, checkSufficientBalance, generateDedupKey, checkDedupCache, recordTransaction, X402_DEDUP_TTL_MS, NETWORK } from "../services/x402.service.js";
 import { ALL_ENDPOINTS, searchEndpoints, formatEndpointsTable, getEndpointsBySource, getCategories, } from "../endpoints/registry.js";
 import { createJsonResponse, createErrorResponse } from "../utils/index.js";
-import { X402_HEADERS } from "../utils/x402-protocol.js";
+import { X402_HEADERS, decodePaymentResponse } from "../utils/x402-protocol.js";
 import { extractPaymentIdFromPaymentSignature, extractTxidFromPaymentSignature, pollTransactionConfirmation, } from "../utils/x402-recovery.js";
 import { formatCanonicalPaymentStatus } from "../utils/x402-payment-state.js";
 import { emitPaymentLog } from "../utils/x402-payment-logging.js";
@@ -317,8 +317,13 @@ For aibtc.com inbox messages, use send_inbox_message_direct instead — it signs
                 },
             });
             const response = await api.request({ method, url: parsed.requestPath, params, data });
+            const paymentResponseTxid = decodePaymentResponse(response.headers?.[X402_HEADERS.PAYMENT_RESPONSE])?.transaction ||
+                undefined;
+            const paymentBodyTxid = response.data?.payment?.txid;
             const rawTxid = response.data?.txid ||
                 response.data?.payment_txid ||
+                paymentResponseTxid ||
+                (typeof paymentBodyTxid === "string" ? paymentBodyTxid : undefined) ||
                 response.headers?.['x-transaction-id'] ||
                 undefined;
             // Detect whether a payment was made by checking for the payment-signature

package/dist/tools/index.js

@@ -32,11 +32,15 @@ import { registerTeneroTools } from "./tenero.tools.js";
 import { registerOrdinalsP2PTools } from "./ordinals-p2p.tools.js";
 import { registerOrdinalsMarketplaceTools } from "./ordinals-marketplace.tools.js";
 import { registerTaprootMultisigTools } from "./taproot-multisig.tools.js";
+import { registerPsbtTools } from "./psbt.tools.js";
+import { registerSettingsTools } from "./settings.tools.js";
 import { registerJingswapTools } from "./jingswap.tools.js";
 import { registerSigningTools } from "./signing.tools.js";
 import { registerInferenceMarketplaceTools } from "./inference-marketplace.tools.js";
 import { registerNewsTools } from "./news.tools.js";
 import { registerLegionTools } from "./legion.tools.js";
+import { registerAtStakeTools } from "./at-stake.tools.js";
+import { registerAtStakeLegionTools } from "./at-stake-legion.tools.js";
 import { registerIdentityTools } from "./identity.tools.js";
 import { registerCredentialsTools } from "./credentials.tools.js";
 import { registerSouldinalsTools } from "./souldinals.tools.js";
@@ -47,7 +51,6 @@ import { registerRunesTools } from "./runes.tools.js";
 import { registerInboxTools } from "./inbox.tools.js";
 import { registerInboxX402Tools } from "./inbox-x402.tools.js";
 import { registerArxivResearchTools } from "./arxiv-research.tools.js";
-import { registerCompetitionTools } from "./competition.tools.js";
 import { registerEarningTools } from "./earning.tools.js";
 import { getSkillForTool } from "./skill-mappings.js";
 /**
@@ -160,16 +163,24 @@ export function registerAllTools(server) {
     registerOrdinalsMarketplaceTools(server);
     // Taproot Multisig (M-of-N coordination via OP_CHECKSIGADD, BIP-341/342)
     registerTaprootMultisigTools(server);
+    // PSBT sign/broadcast/decode (used by the ordinals marketplace, P2P and taproot multisig flows)
+    registerPsbtTools(server);
+    // Settings (Hiro API key, custom Stacks API URL, server version)
+    registerSettingsTools(server);
     // Jingswap Auction (blind batch auctions for STX/sBTC)
     registerJingswapTools(server);
     // Message Signing (BTC BIP-322, Stacks SIWS, SIP-018 structured data, Nostr NIP-01)
     registerSigningTools(server);
     // AIBTC Inference Marketplace (list/manage a paid model endpoint via wallet signature)
     registerInferenceMarketplaceTools(server);
-    // AIBTC News (signal feed, leaderboard, file signals)
+    // AIBTC News (deprecated — API retired; each tool redirects to legion_*)
     registerNewsTools(server);
     // AIBTC News Legion (mainnet aibtc-news-gov — inscribe, propose, vote, conclude)
     registerLegionTools(server);
+    // At Stake (elsalvadorstakesbtc.com — complete-set prediction market)
+    registerAtStakeTools(server);
+    // At Stake side legions (aibtc.com/legions — weight is the share balance)
+    registerAtStakeLegionTools(server);
     // Identity (ERC-8004 on-chain agent identity management)
     registerIdentityTools(server);
     // Credentials (encrypted credential store — list, get, set, delete, unlock)
@@ -190,8 +201,6 @@ export function registerAllTools(server) {
     registerInboxX402Tools(server);
     // arXiv Research (public arXiv Atom API — paper search and digest compilation)
     registerArxivResearchTools(server);
-    // AIBTC Trading Competition (submit trade txids, check standing, list trades)
-    registerCompetitionTools(server);
     // Earning Opportunities (static "how to put your assets to work" menu)
     registerEarningTools(server);
     restoreRegisterTool();

package/dist/tools/news.tools.d.ts

@@ -1,36 +1,10 @@
 /**
- * AIBTC News Tools
+ * AIBTC News tools — deprecated.
  *
- * Tools for interacting with the aibtc.news decentralized intelligence network.
- * Agents can read signal feeds, check correspondent standings, and file signals
- * authenticated via BIP-322 signatures (bc1q P2WPKH addresses only).
- *
- * Correspondent tools (read-only, no auth required):
- * - news_list_signals  — Browse the signal feed with optional filters
- * - news_front_page    — Get the latest compiled intelligence brief
- * - news_leaderboard   — Ranked correspondents with signal counts and streaks
- * - news_check_status  — Signal counts, streak, and earnings for a BTC address
- * - news_list_beats    — List all registered beats
- * - news_list_editors  — List editors registered on a beat
- *
- * Authenticated tools (require unlocked wallet with bc1q/tb1q address):
- * - news_file_signal                — File a signal on a beat (BIP-322 signed)
- * - news_claim_beat                 — Create or join a beat (BIP-322 signed)
- * - news_editor_review_signal       — Approve or reject a signal (editor or publisher)
- * - news_editor_file_review         — Submit structured editorial review for a signal
- * - news_editor_check_earnings      — Check editor earnings for an address
- * - news_register_editor            — Register an editor on a beat (publisher only)
- * - news_deactivate_editor          — Deactivate an editor on a beat (publisher only)
- * - news_file_correction            — File a correction on a signal
- * - news_publisher_compile_brief    — Compile the daily intelligence brief (publisher only)
- * - news_publisher_set_beat_config  — Update beat details and config (publisher only)
- * - news_record_editor_payout       — Record payout txid for an editor earning (publisher only)
- *
- * Authentication: BIP-322 simple signature (P2WPKH, bc1q mainnet / tb1q testnet).
- * Message format: "METHOD /path:unix_timestamp"
- * Headers: X-BTC-Address, X-BTC-Signature, X-BTC-Timestamp
- *
- * Reference: https://aibtc.news/api (GET /api for full spec)
+ * aibtc.news migrated from an off-chain newsroom API to on-chain governance, and
+ * every endpoint these tools called now answers 410 Gone. The tool names stay
+ * registered so an agent that still calls one is told where the workflow moved
+ * (the legion_* tools) instead of getting "unknown tool".
  */
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 export declare function registerNewsTools(server: McpServer): void;