@aihubspot/agent-trade-mcp 0.1.9 → 0.1.11

package/dist/index.js

@@ -56,6 +56,9 @@ function loadStoredCredentials(apiKey, secretKey) {
 
 // ../core/src/confirmation.ts
 import { createHash as createHash2, randomUUID } from "crypto";
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { join } from "path";
 function stableJson(value) {
   if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
   if (value && typeof value === "object") {
@@ -66,6 +69,37 @@ function stableJson(value) {
 function hash(input) {
   return createHash2("sha256").update(stableJson({ action: input.action, payload: input.payload, context: input.context })).digest("hex");
 }
+function createPending(input, ttlMs, now) {
+  return {
+    ...input,
+    confirmationId: randomUUID(),
+    requestHash: hash(input),
+    expiresAtMs: now() + ttlMs
+  };
+}
+function preparedAction(pending) {
+  return {
+    confirmationId: pending.confirmationId,
+    expiresAt: new Date(pending.expiresAtMs).toISOString(),
+    requestHash: pending.requestHash,
+    action: pending.action,
+    summary: pending.summary,
+    requiresNewUserConfirmation: true,
+    nextStep: "Stop and wait for a new explicit user confirmation message. Do not confirm from the same user instruction that prepared this request."
+  };
+}
+function confirmPending(pending, userConfirmation, context, now) {
+  if (typeof userConfirmation !== "string" || !userConfirmation.trim()) {
+    throw new AiHubError("AI_HUB_CONFIRMATION_REQUIRED", "A non-empty new explicit user confirmation message is required before a state-changing request can execute.");
+  }
+  if (pending.expiresAtMs < now()) {
+    throw new AiHubError("AI_HUB_CONFIRMATION_EXPIRED", "Confirmation has expired.");
+  }
+  if (stableJson(pending.context) !== stableJson(context)) {
+    throw new AiHubError("AI_HUB_CONFIRMATION_CONTEXT_CHANGED", "Profile, OpenAPI base URL, configuration, or credentials changed after prepare.");
+  }
+  return { action: pending.action, payload: pending.payload, requestHash: pending.requestHash };
+}
 var ConfirmationService = class {
   constructor(ttlMs = 5 * 60 * 1e3, now = () => Date.now()) {
     this.ttlMs = ttlMs;
@@ -75,19 +109,9 @@ var ConfirmationService = class {
   now;
   actions = /* @__PURE__ */ new Map();
   prepare(input) {
-    const expiresAtMs = this.now() + this.ttlMs;
-    const confirmationId = randomUUID();
-    const requestHash = hash(input);
-    this.actions.set(confirmationId, { ...input, confirmationId, requestHash, expiresAtMs, consumed: false });
-    return {
-      confirmationId,
-      expiresAt: new Date(expiresAtMs).toISOString(),
-      requestHash,
-      action: input.action,
-      summary: input.summary,
-      requiresNewUserConfirmation: true,
-      nextStep: "Stop and wait for a new explicit user confirmation message. Do not call confirm_action from the same user instruction that prepared this request."
-    };
+    const pending = createPending(input, this.ttlMs, this.now);
+    this.actions.set(pending.confirmationId, { ...pending, consumed: false });
+    return preparedAction(pending);
   }
   confirm(confirmationId, userConfirmation, context) {
     if (typeof userConfirmation !== "string" || !userConfirmation.trim()) {
@@ -96,17 +120,9 @@ var ConfirmationService = class {
     const pending = this.actions.get(confirmationId);
     if (!pending) throw new AiHubError("AI_HUB_CONFIRMATION_NOT_FOUND", "Confirmation was not found or has already been consumed.");
     if (pending.consumed) throw new AiHubError("AI_HUB_CONFIRMATION_CONSUMED", "Confirmation has already been consumed.");
-    if (pending.expiresAtMs < this.now()) {
-      this.actions.delete(confirmationId);
-      throw new AiHubError("AI_HUB_CONFIRMATION_EXPIRED", "Confirmation has expired.");
-    }
-    if (stableJson(pending.context) !== stableJson(context)) {
-      this.actions.delete(confirmationId);
-      throw new AiHubError("AI_HUB_CONFIRMATION_CONTEXT_CHANGED", "Profile, OpenAPI base URL, configuration, or credentials changed after prepare.");
-    }
     pending.consumed = true;
     this.actions.delete(confirmationId);
-    return { action: pending.action, payload: pending.payload, requestHash: pending.requestHash };
+    return confirmPending(pending, userConfirmation, context, this.now);
   }
 };
 
@@ -394,16 +410,16 @@ var AiHubSpotApi = class {
 // ../core/src/config.ts
 import { createHash as createHash3 } from "crypto";
 import { lookup } from "dns/promises";
-import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
-import { homedir } from "os";
-import { dirname, join } from "path";
+import { chmod as chmod2, mkdir as mkdir2, readFile as readFile2, rename as rename2, writeFile as writeFile2 } from "fs/promises";
+import { homedir as homedir2 } from "os";
+import { dirname, join as join2 } from "path";
 import { isIP } from "net";
 import { parse, stringify } from "smol-toml";
 var CONFIG_DIRECTORY = ".ai-hub";
 var CONFIG_FILENAME = "config.toml";
 var PROFILE_NAME = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
-function configFilePath(home = homedir()) {
-  return join(home, CONFIG_DIRECTORY, CONFIG_FILENAME);
+function configFilePath(home = homedir2()) {
+  return join2(home, CONFIG_DIRECTORY, CONFIG_FILENAME);
 }
 function validateProfileName(name) {
   if (!PROFILE_NAME.test(name)) {
@@ -435,7 +451,7 @@ async function normalizeOpenApiBaseUrl(value) {
     throw new AiHubError("AI_HUB_UNSAFE_OPENAPI_URL", "Localhost is not allowed as an OpenAPI base URL.");
   }
   const records2 = isIP(url.hostname) ? [{ address: url.hostname }] : await lookup(url.hostname, { all: true, verbatim: true });
-  if (records2.length === 0 || records2.some((record2) => blockedIp(record2.address))) {
+  if (records2.length === 0 || records2.some((record3) => blockedIp(record3.address))) {
     throw new AiHubError("AI_HUB_UNSAFE_OPENAPI_URL", "OpenAPI base URL must resolve only to public addresses.");
   }
   url.pathname = url.pathname.replace(/\/+$/, "");
@@ -467,7 +483,7 @@ var ConfigStore = class {
   filePath;
   async read() {
     try {
-      return parseConfig(await readFile(this.filePath, "utf8"));
+      return parseConfig(await readFile2(this.filePath, "utf8"));
     } catch (error) {
       if (error.code === "ENOENT") return defaultConfig();
       throw error;
@@ -538,13 +554,13 @@ var ConfigStore = class {
   }
   async write(config) {
     const directory = dirname(this.filePath);
-    await mkdir(directory, { recursive: true, mode: 448 });
-    await chmod(directory, 448);
+    await mkdir2(directory, { recursive: true, mode: 448 });
+    await chmod2(directory, 448);
     const temporaryPath = `${this.filePath}.${process.pid}.tmp`;
-    await writeFile(temporaryPath, stringify(config), { mode: 384 });
-    await chmod(temporaryPath, 384);
-    await rename(temporaryPath, this.filePath);
-    await chmod(this.filePath, 384);
+    await writeFile2(temporaryPath, stringify(config), { mode: 384 });
+    await chmod2(temporaryPath, 384);
+    await rename2(temporaryPath, this.filePath);
+    await chmod2(this.filePath, 384);
   }
 };
 
@@ -565,16 +581,65 @@ function confirmationContext(context) {
   };
 }
 
+// ../core/src/tools/account-balance.ts
+function record(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function decimal(value) {
+  if (typeof value === "string" && /^\d+(?:\.\d+)?$/.test(value.trim())) return value.trim();
+  if (typeof value === "number" && Number.isFinite(value) && value >= 0) return String(value);
+  return void 0;
+}
+function addDecimal(left, right) {
+  const [leftWhole, leftFraction = ""] = left.split(".");
+  const [rightWhole, rightFraction = ""] = right.split(".");
+  const scale = Math.max(leftFraction.length, rightFraction.length);
+  const leftValue = BigInt(`${leftWhole}${leftFraction.padEnd(scale, "0")}`);
+  const rightValue = BigInt(`${rightWhole}${rightFraction.padEnd(scale, "0")}`);
+  const digits = (leftValue + rightValue).toString().padStart(scale + 1, "0");
+  if (!scale) return digits;
+  const fraction = digits.slice(-scale).replace(/0+$/, "");
+  return fraction ? `${digits.slice(0, -scale)}.${fraction}` : digits.slice(0, -scale);
+}
+function balanceRows(payload) {
+  const root = record(payload);
+  const data = record(root?.data);
+  const candidates = [root?.balances, data?.balances, root?.data, data?.data];
+  for (const candidate of candidates) {
+    if (Array.isArray(candidate)) return candidate.filter((item) => Boolean(record(item)));
+  }
+  return [];
+}
+function findAssetBalance(payload, requestedAsset) {
+  const asset = requestedAsset.trim().toUpperCase();
+  const row = balanceRows(payload).find((item) => {
+    const candidate = item.asset ?? item.coinSymbol ?? item.currency ?? item.coin;
+    return typeof candidate === "string" && candidate.trim().toUpperCase() === asset;
+  });
+  if (!row) return { asset, available: "0", frozen: "0", total: "0", found: false };
+  const available = decimal(row.available ?? row.free ?? row.availableBalance ?? row.balance ?? row.total) ?? "0";
+  const frozen = decimal(row.frozen ?? row.locked ?? row.freeze ?? row.hold ?? row.lockedBalance) ?? "0";
+  const total = decimal(row.total ?? row.balance) ?? addDecimal(available, frozen);
+  return { asset, available, frozen, total, found: true };
+}
+function requireAvailableBalance(payload, asset) {
+  const balance = findAssetBalance(payload, asset);
+  if (!balance.found || balance.available === "0") {
+    throw new AiHubError("AI_HUB_INSUFFICIENT_AVAILABLE_BALANCE", `No available ${balance.asset} balance was found for this request.`);
+  }
+  return balance;
+}
+
 // ../core/src/tools/validation.ts
 function strictObject(input, allowedKeys) {
   if (!input || typeof input !== "object" || Array.isArray(input)) {
     throw new AiHubError("AI_HUB_INVALID_ARGUMENT", "Tool input must be an object.");
   }
-  const record2 = input;
-  for (const key of Object.keys(record2)) {
+  const record3 = input;
+  for (const key of Object.keys(record3)) {
     if (!allowedKeys.includes(key)) throw new AiHubError("AI_HUB_INVALID_ARGUMENT", `Unknown argument "${key}".`);
   }
-  return record2;
+  return record3;
 }
 function requiredString(input, name) {
   const value = input[name];
@@ -614,6 +679,26 @@ var accountTools = [
       if (!context.credentials) throw new AiHubError("AI_HUB_CREDENTIAL_NOT_CONFIGURED", `Credentials are not configured for profile "${context.profile.name}".`);
       return context.api.account(context.credentials);
     }
+  },
+  {
+    name: "account_get_asset_balance",
+    title: "Get Asset Balance",
+    description: "Get one asset's available, frozen, and total spot balance. Use this instead of the full account overview when the user asks about one asset.",
+    cliPath: ["account", "asset-balance"],
+    module: "spot-account",
+    access: "signed",
+    operation: "read",
+    riskLevel: "low",
+    inputSchema: { type: "object", properties: { asset: { type: "string", minLength: 1, description: "Asset code, for example ETH or USDT." } }, required: ["asset"], additionalProperties: false },
+    errorCodes: ["AI_HUB_INVALID_ARGUMENT", "AI_HUB_CREDENTIAL_NOT_CONFIGURED", "AI_HUB_OPENAPI_NETWORK_ERROR", "AI_HUB_OPENAPI_HTTP_ERROR", "AI_HUB_OPENAPI_INVALID_RESPONSE", "AI_HUB_OPENAPI_BUSINESS_ERROR"],
+    validate: (input) => {
+      const value = strictObject(input, ["asset"]);
+      return { asset: requiredString(value, "asset").toUpperCase() };
+    },
+    handler: async (input, context) => {
+      if (!context.credentials) throw new AiHubError("AI_HUB_CREDENTIAL_NOT_CONFIGURED", `Credentials are not configured for profile "${context.profile.name}".`);
+      return findAssetBalance(await context.api.account(context.credentials), input.asset);
+    }
   }
 ];
 
@@ -929,7 +1014,7 @@ var assetTools = [
 ];
 
 // ../core/src/tools/market-summaries.ts
-function record(value, message) {
+function record2(value, message) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     throw new AiHubError("AI_HUB_OPENAPI_INVALID_RESPONSE", message);
   }
@@ -1007,7 +1092,7 @@ function tickerItem(value) {
 }
 function tickerRows(value) {
   if (Array.isArray(value)) return records(value, "Ticker response must be an array.");
-  const payload = record(value, "Ticker response must be an array.");
+  const payload = record2(value, "Ticker response must be an array.");
   if (Array.isArray(payload.items)) return records(payload.items, "Ticker response items must be an array.");
   throw new AiHubError("AI_HUB_OPENAPI_INVALID_RESPONSE", "Ticker response must be an array.");
 }
@@ -1036,7 +1121,7 @@ function normalizedSymbol(value) {
   return value.replaceAll("/", "").trim().toUpperCase();
 }
 function parsedSymbolRows(value) {
-  const payload = record(value, "Symbols response must be an object.");
+  const payload = record2(value, "Symbols response must be an object.");
   const rows2 = records(payload.symbols, "Symbols response must contain a symbols array.");
   return rows2.map((item) => {
     const apiSymbol = text(item.symbol);
@@ -1143,7 +1228,7 @@ function level(value) {
   return { price: text(value[0]), quantity: text(value[1]) };
 }
 function summarizeDepth(value, symbol) {
-  const payload = record(value, "Depth response must be an object.");
+  const payload = record2(value, "Depth response must be an object.");
   const bids = Array.isArray(payload.bids) ? payload.bids : [];
   const asks = Array.isArray(payload.asks) ? payload.asks : [];
   const bestBid = level(bids[0]);
@@ -1164,7 +1249,7 @@ function summarizeDepth(value, symbol) {
   };
 }
 function summarizeTrades(value, symbol) {
-  const payload = record(value, "Trades response must be an object.");
+  const payload = record2(value, "Trades response must be an object.");
   const rows2 = records(payload.list, "Trades response must contain a list array.");
   let buyCount = 0;
   let sellCount = 0;
@@ -1235,9 +1320,9 @@ function summarizeKlines(value, symbol, interval) {
 
 // ../core/src/tools/symbol-rules.ts
 import { createHash as createHash4 } from "crypto";
-import { chmod as chmod2, mkdir as mkdir2, readFile as readFile2, rename as rename2, rm, writeFile as writeFile2 } from "fs/promises";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { chmod as chmod3, mkdir as mkdir3, readFile as readFile3, rename as rename3, rm as rm2, writeFile as writeFile3 } from "fs/promises";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
 var CACHE_TTL_MS = 60 * 60 * 1e3;
 var cache = /* @__PURE__ */ new Map();
 var pendingLoads = /* @__PURE__ */ new Map();
@@ -1248,16 +1333,16 @@ function persistentCacheEnabled() {
   return process.env.AI_HUB_DISABLE_PERSISTENT_CACHE !== "1";
 }
 function persistentCacheDirectory() {
-  return process.env.AI_HUB_CACHE_DIR ?? join2(homedir2(), ".ai-hub", "cache");
+  return process.env.AI_HUB_CACHE_DIR ?? join3(homedir3(), ".ai-hub", "cache");
 }
 function persistentCachePath(key) {
   const hash2 = createHash4("sha256").update(key).digest("hex");
-  return join2(persistentCacheDirectory(), `symbols-${hash2}.json`);
+  return join3(persistentCacheDirectory(), `symbols-${hash2}.json`);
 }
 async function loadPersistentSnapshot(key) {
   if (!persistentCacheEnabled()) return void 0;
   try {
-    const parsed = JSON.parse(await readFile2(persistentCachePath(key), "utf8"));
+    const parsed = JSON.parse(await readFile3(persistentCachePath(key), "utf8"));
     if (typeof parsed.expiresAt !== "number" || !Number.isFinite(parsed.expiresAt) || parsed.expiresAt <= Date.now() || !("response" in parsed)) return void 0;
     return { expiresAt: parsed.expiresAt, response: parsed.response, rules: parseRules(parsed.response) };
   } catch {
@@ -1270,14 +1355,14 @@ async function persistSnapshot(key, entry) {
   const filePath = persistentCachePath(key);
   const temporaryPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
   try {
-    await mkdir2(directory, { recursive: true, mode: 448 });
-    await chmod2(directory, 448);
-    await writeFile2(temporaryPath, JSON.stringify({ expiresAt: entry.expiresAt, response: entry.response }), { mode: 384 });
-    await chmod2(temporaryPath, 384);
-    await rename2(temporaryPath, filePath);
-    await chmod2(filePath, 384);
+    await mkdir3(directory, { recursive: true, mode: 448 });
+    await chmod3(directory, 448);
+    await writeFile3(temporaryPath, JSON.stringify({ expiresAt: entry.expiresAt, response: entry.response }), { mode: 384 });
+    await chmod3(temporaryPath, 384);
+    await rename3(temporaryPath, filePath);
+    await chmod3(filePath, 384);
   } catch {
-    await rm(temporaryPath, { force: true }).catch(() => void 0);
+    await rm2(temporaryPath, { force: true }).catch(() => void 0);
   }
 }
 function normalizedSymbol2(symbol) {
@@ -1309,6 +1394,8 @@ function parseRules(response) {
     if (!symbol) continue;
     result2.set(normalizedSymbol2(symbol), {
       symbol,
+      baseAsset: stringValue(row.baseAssetName) ?? stringValue(row.baseAsset),
+      quoteAsset: stringValue(row.quoteAssetName) ?? stringValue(row.quoteAsset),
       quantityPrecision: nonNegativeInteger(row.quantityPrecision),
       pricePrecision: nonNegativeInteger(row.pricePrecision),
       limitVolumeMin: stringValue(row.limitVolumeMin),
@@ -1352,7 +1439,7 @@ function decimalScale(value) {
   return value.split(".")[1]?.length ?? 0;
 }
 function decimalParts(value) {
-  const [whole, fraction = ""] = value.split(".");
+  const [whole = "0", fraction = ""] = value.split(".");
   return { digits: BigInt(`${whole}${fraction}`.replace(/^0+(?=\d)/, "") || "0"), scale: fraction.length };
 }
 function compareDecimal(left, right) {
@@ -1363,6 +1450,31 @@ function compareDecimal(left, right) {
   const rightValue = b.digits * 10n ** BigInt(scale - b.scale);
   return leftValue === rightValue ? 0 : leftValue > rightValue ? 1 : -1;
 }
+function floorDecimal(value, precision) {
+  if (!/^\d+(?:\.\d+)?$/.test(value) || precision < 0 || !Number.isInteger(precision)) {
+    throw new AiHubError("AI_HUB_OPENAPI_INVALID_RESPONSE", "A balance or symbol precision value could not be parsed.");
+  }
+  const [whole = "0", fraction = ""] = value.split(".");
+  const kept = fraction.slice(0, precision);
+  const normalizedWhole = whole.replace(/^0+(?=\d)/, "") || "0";
+  const normalizedFraction = kept.replace(/0+$/, "");
+  return normalizedFraction ? `${normalizedWhole}.${normalizedFraction}` : normalizedWhole;
+}
+function subtractNonNegativeDecimal(left, right) {
+  const comparison = compareDecimal(left, right);
+  if (comparison < 0) throw new AiHubError("AI_HUB_OPENAPI_INVALID_RESPONSE", "Balance arithmetic produced a negative result.");
+  const a = decimalParts(left);
+  const b = decimalParts(right);
+  const scale = Math.max(a.scale, b.scale);
+  const digits = a.digits * 10n ** BigInt(scale - a.scale) - b.digits * 10n ** BigInt(scale - b.scale);
+  const raw = digits.toString().padStart(scale + 1, "0");
+  if (!scale) return raw;
+  const fraction = raw.slice(-scale).replace(/0+$/, "");
+  return fraction ? `${raw.slice(0, -scale)}.${fraction}` : raw.slice(0, -scale);
+}
+function isAtLeastDecimal(value, minimum) {
+  return compareDecimal(value, minimum) >= 0;
+}
 function multipliedDecimal(left, right) {
   const a = decimalParts(left);
   const b = decimalParts(right);
@@ -1570,13 +1682,19 @@ var marketTools = [
     access: "public",
     operation: "read",
     riskLevel: "low",
-    inputSchema: { type: "object", properties: { symbol: { type: "string" }, symbols: { type: "string" }, timeZone: { type: "string" } }, additionalProperties: false },
+    inputSchema: {
+      type: "object",
+      properties: { symbol: { type: "string", minLength: 1, description: "One exact symbol, for example ETHUSDT." }, symbols: { type: "string", minLength: 1, description: "An explicitly requested upstream symbol list." }, timeZone: { type: "string" } },
+      oneOf: [{ required: ["symbol"] }, { required: ["symbols"] }],
+      additionalProperties: false
+    },
     errorCodes: readErrors,
     validate: (input) => {
       const value = strictObject(input, ["symbol", "symbols", "timeZone"]);
       const symbol = optionalString(value, "symbol");
       const symbols = optionalString(value, "symbols");
       if (!symbol && !symbols) throw new AiHubError("AI_HUB_INVALID_ARGUMENT", "market_get_ticker requires symbol or symbols. Use market_get_ticker_summary for all-market data.");
+      if (symbol && symbols) throw new AiHubError("AI_HUB_INVALID_ARGUMENT", "market_get_ticker accepts either symbol or symbols, not both.");
       return { symbol, symbols, timeZone: optionalString(value, "timeZone") };
     },
     handler: (input, context) => context.api.ticker(input)
@@ -1610,6 +1728,7 @@ var marketTools = [
     access: "public",
     operation: "read",
     riskLevel: "low",
+    mcpVisible: false,
     inputSchema: { type: "object", properties: { symbol: { type: "string" }, limit: { type: "integer", minimum: 1, maximum: 100 } }, required: ["symbol"], additionalProperties: false },
     errorCodes: readErrors,
     validate: (input) => {
@@ -1650,6 +1769,7 @@ var marketTools = [
     access: "public",
     operation: "read",
     riskLevel: "low",
+    mcpVisible: false,
     inputSchema: { type: "object", properties: { symbol: { type: "string" }, limit: { type: "integer", minimum: 1, maximum: 100 } }, required: ["symbol"], additionalProperties: false },
     errorCodes: readErrors,
     validate: (input) => {
@@ -1690,6 +1810,7 @@ var marketTools = [
     access: "public",
     operation: "read",
     riskLevel: "low",
+    mcpVisible: false,
     inputSchema: { type: "object", properties: { symbol: { type: "string", description: "Spot symbol, for example ETHUSDT or ETH/USDT." }, interval: { type: "string", enum: KLINE_INTERVALS, description: klineIntervalDescription }, startTime: { type: "integer", description: "Optional inclusive Unix timestamp in milliseconds." }, endTime: { type: "integer", description: "Optional inclusive Unix timestamp in milliseconds." }, timezone: { type: "string", description: klineTimezoneDescription }, limit: { type: "integer", minimum: 1, maximum: 300, description: "Number of newest-first candles. The upstream maximum is 300." } }, required: ["symbol", "interval"], additionalProperties: false },
     errorCodes: readErrors,
     validate: (input) => {
@@ -1909,11 +2030,11 @@ var marginTools = [
 // ../core/src/tools/order-tools.ts
 import { randomUUID as randomUUID3 } from "crypto";
 var signedReadErrors2 = ["AI_HUB_INVALID_ARGUMENT", "AI_HUB_CREDENTIAL_NOT_CONFIGURED", "AI_HUB_OPENAPI_NETWORK_ERROR", "AI_HUB_OPENAPI_HTTP_ERROR", "AI_HUB_OPENAPI_INVALID_RESPONSE", "AI_HUB_OPENAPI_BUSINESS_ERROR"];
-var writeErrors2 = [...signedReadErrors2, "AI_HUB_WRITE_CONFIRMATION_REQUIRED", "AI_HUB_CONFIRMATION_REQUIRED", "AI_HUB_CONFIRMATION_EXPIRED", "AI_HUB_CONFIRMATION_CONTEXT_CHANGED", "AI_HUB_CONFIRMATION_NOT_FOUND"];
-var decimal = /^(?:0|[1-9]\d*)(?:\.\d+)?$/;
+var writeErrors2 = [...signedReadErrors2, "AI_HUB_SYMBOL_NOT_FOUND", "AI_HUB_SYMBOL_PRECISION_INVALID", "AI_HUB_SYMBOL_MINIMUM_NOT_MET", "AI_HUB_INSUFFICIENT_AVAILABLE_BALANCE", "AI_HUB_WRITE_CONFIRMATION_REQUIRED", "AI_HUB_CONFIRMATION_REQUIRED", "AI_HUB_CONFIRMATION_EXPIRED", "AI_HUB_CONFIRMATION_CONTEXT_CHANGED", "AI_HUB_CONFIRMATION_NOT_FOUND"];
+var decimal2 = /^(?:0|[1-9]\d*)(?:\.\d+)?$/;
 function positiveDecimal2(value, name) {
   const raw = requiredString(value, name);
-  if (!decimal.test(raw) || !/[1-9]/.test(raw.replace(".", ""))) {
+  if (!decimal2.test(raw) || !/[1-9]/.test(raw.replace(".", ""))) {
     throw new AiHubError("AI_HUB_INVALID_ARGUMENT", `${name} must be a positive decimal string.`);
   }
   return raw;
@@ -1999,6 +2120,21 @@ function validateMarketSell(input) {
   const value = strictObject(input, ["symbol", "baseQuantity", "newClientOrderId", "recvWindow"]);
   return validateSemanticOrder({ ...value, side: "SELL", type: "MARKET" });
 }
+function validateSellAvailable(input) {
+  const value = strictObject(input, ["symbol", "newClientOrderId", "recvWindow"]);
+  const symbol = requiredString(value, "symbol");
+  return {
+    symbol,
+    // Replaced by the signed balance and symbol-rule preflight before a preview is created.
+    volume: "0",
+    side: "SELL",
+    type: "MARKET",
+    intent: "market_sell",
+    baseQuantity: "0",
+    requestedMode: "available_balance",
+    ...optionalOrderFields(value)
+  };
+}
 function validateLimitOrder(input) {
   const value = strictObject(input, ["symbol", "side", "baseQuantity", "price", "timeInForce", "newClientOrderId", "recvWindow"]);
   return validateSemanticOrder({ ...value, type: "LIMIT" });
@@ -2041,10 +2177,47 @@ function semanticOrderSummary(order) {
     newClientOrderId: order.newClientOrderId
   };
 }
+function sellAvailableSummary(order) {
+  return {
+    ...semanticOrderSummary(order),
+    requestedMode: order.requestedMode,
+    baseAsset: order.baseAsset,
+    availableBaseQuantity: order.availableBaseQuantity,
+    executableBaseQuantity: order.executableBaseQuantity,
+    remainderBaseQuantity: order.remainderBaseQuantity,
+    rounding: "floored to the configured base-quantity precision"
+  };
+}
 async function preflightSpotOrder(order, context) {
   await preflightSymbolOrder(context, order);
   return order;
 }
+async function preflightSellAvailable(order, context) {
+  const rule = await getSymbolRule(context, order.symbol);
+  if (!rule.baseAsset) {
+    throw new AiHubError("AI_HUB_OPENAPI_INVALID_RESPONSE", `Symbol "${rule.symbol}" did not include a base asset.`);
+  }
+  const balance = requireAvailableBalance(await context.api.account(signed2(context)), rule.baseAsset);
+  const executableBaseQuantity = floorDecimal(balance.available, rule.quantityPrecision ?? 0);
+  if (executableBaseQuantity === "0") {
+    throw new AiHubError("AI_HUB_INSUFFICIENT_AVAILABLE_BALANCE", `Available ${balance.asset} balance is below the executable quantity precision for ${rule.symbol}.`);
+  }
+  if (rule.limitVolumeMin && !isAtLeastDecimal(executableBaseQuantity, rule.limitVolumeMin)) {
+    throw new AiHubError("AI_HUB_SYMBOL_MINIMUM_NOT_MET", `Available ${balance.asset} balance for ${rule.symbol} is below the minimum executable quantity of ${rule.limitVolumeMin}.`);
+  }
+  const prepared = {
+    ...order,
+    symbol: rule.symbol,
+    volume: executableBaseQuantity,
+    baseQuantity: executableBaseQuantity,
+    baseAsset: balance.asset,
+    availableBaseQuantity: balance.available,
+    executableBaseQuantity,
+    remainderBaseQuantity: subtractNonNegativeDecimal(balance.available, executableBaseQuantity)
+  };
+  await preflightSymbolOrder(context, prepared);
+  return prepared;
+}
 async function preflightSpotBatch(input, context) {
   await Promise.all(input.orders.map((order) => preflightSymbolOrder(context, {
     symbol: input.symbol,
@@ -2190,6 +2363,22 @@ var orderTools = [
     handler: (input, context) => context.api.placeOrder(toOpenApiOrder(input), signed2(context)),
     writeSummary: (input) => semanticOrderSummary(input)
   },
+  {
+    name: "spot_sell_available",
+    title: "Prepare Market Sell of Available Balance",
+    description: "Prepare a market SELL of the maximum available base-asset balance for one symbol. It reads the signed balance, floors only to the configured quantity precision, shows the executable amount and remainder, and still requires separate confirmation.",
+    cliPath: ["spot", "order", "sell-available"],
+    module: "spot-order",
+    access: "signed",
+    operation: "write",
+    riskLevel: "high",
+    inputSchema: { type: "object", properties: { symbol: { type: "string", description: "Spot symbol, for example ETHUSDT." }, newClientOrderId: { type: "string" }, recvWindow: { type: "string" } }, required: ["symbol"], additionalProperties: false },
+    errorCodes: writeErrors2,
+    validate: validateSellAvailable,
+    preflight: preflightSellAvailable,
+    handler: (input, context) => context.api.placeOrder(toOpenApiOrder(input), signed2(context)),
+    writeSummary: (input) => sellAvailableSummary(input)
+  },
   {
     name: "spot_limit_order",
     title: "Place Limit Spot Order",
@@ -2511,7 +2700,7 @@ var ToolRegistry = class {
     if (tool.operation !== "write" || !tool.writeSummary) throw new AiHubError("AI_HUB_TOOL_NOT_WRITE", `Tool "${name}" is not a confirmable write Tool.`);
     const validInput = tool.validate(input);
     const preflightInput = tool.preflight ? await tool.preflight(validInput, context) : validInput;
-    return confirmations.prepare({
+    return await confirmations.prepare({
       action: tool.name,
       payload: preflightInput,
       context: confirmationContext(context),
@@ -2754,11 +2943,11 @@ var READ_RESULT_OUTPUT_SCHEMA = {
   required: ["ok", "data"]
 };
 function result(data) {
-  return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+  return { content: [{ type: "text", text: JSON.stringify(data) }] };
 }
 function toMcpReadResult(data) {
   const payload = { ok: true, data };
-  return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }], structuredContent: payload };
+  return { content: [{ type: "text", text: JSON.stringify(payload) }], structuredContent: payload };
 }
 function formatMcpData(data) {
   if (Array.isArray(data)) {
@@ -2780,7 +2969,7 @@ function toMcpTool(tool) {
   return {
     name: tool.name,
     title: tool.title,
-    description: `${tool.description}${tool.operation === "read" ? " Successful MCP output is structured as { ok: true, data: ... }. For list results, use data.items and data.count; for object results, use data.value. Check data.dataType before formatting." : ""}`,
+    description: tool.description,
     inputSchema: tool.inputSchema,
     ...tool.operation === "read" ? { outputSchema: READ_RESULT_OUTPUT_SCHEMA } : {},
     annotations: {
@@ -2811,10 +3000,10 @@ function createServer(profileName, readOnly) {
   const registry = createToolRegistry();
   const writeExecutor = new ToolWriteExecutor(registry);
   const server = new Server(
-    { name: "ai-hub-agent-trade", version: "0.1.9" },
+    { name: "ai-hub-agent-trade", version: "0.1.11" },
     {
       capabilities: { tools: {} },
-      instructions: "Every successful read-tool response provides both JSON text and MCP structuredContent in the envelope { ok: true, data: ... }. All read-tool data is normalized: dataType=array means use data.items and data.count; dataType=object or scalar means use data.value; dataType=null means no value. Inspect data.dataType before formatting and never assume undocumented nested keys. For a generic trading-pair list, call market_get_symbol_overview first; it returns only counts and a small sample. For paged or quote-asset browsing, use market_list_symbols. Use market_search_symbols only when the user gave a keyword; query is required. Use market_get_symbol_info only for exact precision and minimum rules. Do not use a symbol search as a generic all-symbol list. The complete raw symbols payload is intentionally unavailable in MCP. For broad market questions, call market_get_ticker_summary, market_get_depth_summary, market_get_trades_summary, or market_get_klines_summary instead of fetching large raw payloads. Account types are fixed: 1=Spot, 2=Isolated Margin, 3=Cross Margin, 4=C2C, 5=Derivatives. Never call account type 2 Derivatives. For Spot to Derivatives, use account_prepare_transfer with fromAccount=EXCHANGE and toAccount=FUTURE. Use wallet_prepare_universal_transfer for margin or C2C; account type 2 requires its isolated-margin trading pair in symbol. Prepare/confirm tools return their documented action payload directly in data. For every state-changing action, call only a spot_prepare_* or margin_prepare_* tool first and show its exact summary to the user. Stop and wait for a new, explicit user confirmation message. Only then call confirm_action with that new message verbatim in userConfirmation. Never call prepare and confirm consecutively for one user instruction; never infer confirmation from prior intent, silence, or an Agent-generated message. For spot and margin orders, MARKET BUY always uses quoteAmount (the quote asset to spend); MARKET SELL uses baseQuantity (the base asset to sell). Never reinterpret a requested base quantity as quoteAmount."
+      instructions: "Read results use {ok:true,data}; inspect data.dataType before reading fields. Use bounded summary tools for broad market requests. For writes, call a prepare tool, show its preview, stop for a new user message, then call confirm_action with that message. MARKET BUY uses quoteAmount; MARKET SELL uses baseQuantity."
     }
   );
   server.setRequestHandler(ListToolsRequestSchema, async () => ({
@@ -2822,7 +3011,7 @@ function createServer(profileName, readOnly) {
       {
         name: CAPABILITIES_TOOL,
         title: "Server Capabilities Snapshot",
-        description: "Return the available local profile and Tool Registry capability snapshot.",
+        description: "Return a compact local server status. Tool schemas are available through the MCP tool list.",
         inputSchema: { type: "object", additionalProperties: false },
         annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
       },
@@ -2840,12 +3029,18 @@ function createServer(profileName, readOnly) {
     try {
       const context = await createToolExecutionContext(profileName);
       if (request.params.name === CAPABILITIES_TOOL) {
+        const visibleTools = registry.list({ readOnly }).filter(isMcpVisible);
+        const toolCounts = visibleTools.reduce((counts, tool2) => {
+          counts[tool2.operation] = (counts[tool2.operation] ?? 0) + 1;
+          return counts;
+        }, {});
         return result({
           ok: true,
           data: {
             profile: { name: context.profile.name, host: new URL(context.profile.openApiBaseUrl).host, configVersion: context.profile.configVersion },
             readOnly,
-            capabilities: registry.capabilities(context, { readOnly }).filter((capability) => isMcpVisible(registry.byName(capability.name)))
+            serviceVersion: "0.1.11",
+            toolCounts
           }
         });
       }
@@ -2862,7 +3057,7 @@ function createServer(profileName, readOnly) {
       }
       const tool = registry.byName(request.params.name, { readOnly });
       if (!isMcpVisible(tool)) {
-        throw new AiHubError("AI_HUB_TOOL_NOT_AVAILABLE", `Tool "${request.params.name}" is not available through MCP. Use market_get_symbol_overview, market_list_symbols, market_search_symbols, or market_get_symbol_info instead.`);
+        throw new AiHubError("AI_HUB_TOOL_NOT_AVAILABLE", `Tool "${request.params.name}" is not available through MCP. Use the corresponding bounded summary or symbol-browsing tool instead.`);
       }
       const data = await registry.execute(request.params.name, request.params.arguments ?? {}, context, { readOnly });
       return toMcpReadResult(formatMcpData(data));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aihubspot/agent-trade-mcp",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "Local stdio MCP server for AI Hub spot trading tools",
   "license": "UNLICENSED",
   "repository": {