@buildaureon/mcp 0.1.2 → 0.1.8

package/README.md

@@ -11,7 +11,7 @@ Exposes the full `@buildaureon/sdk` surface as tools for Cursor, Claude Desktop,
 
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.x-3178C6?style=flat-square&logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
 [![MCP](https://img.shields.io/badge/Protocol-MCP_stdio-0b0e0d?style=flat-square)](https://modelcontextprotocol.io)
-[![Version](https://img.shields.io/badge/version-0.1.1-a8e00d?style=flat-square)](https://github.com/buildaureon)
+[![Version](https://img.shields.io/badge/version-0.1.8-a8e00d?style=flat-square)](https://github.com/buildaureon)
 [![License: MIT](https://img.shields.io/badge/license-MIT-0b0e0d?style=flat-square)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%3E%3D20-339933?style=flat-square&logo=nodejs&logoColor=white)](#requirements--installation)
 
@@ -64,7 +64,7 @@ npx -y @buildaureon/mcp
 | Rehearse market shocks | `aureon_apply_market_event`, `aureon_refresh_watchdog` |
 | Manage developer API keys | `aureon_list_api_keys`, `aureon_create_api_key`, … |
 
-**34 tools**: one per public `AureonClient` method. Full schemas: [docs/tools.md](docs/tools.md).
+**54 tools**: one per public `AureonClient` method. Full schemas: [docs/tools.md](docs/tools.md).
 
 For scripts without MCP, use [`@buildaureon/sdk`](https://github.com/buildaureon/aureon-sdk). The operator app at [app.aureonlabs.network](https://app.aureonlabs.network) stays wallet-Bearer only.
 
@@ -86,8 +86,8 @@ Traditional AI trading scripts execute isolated market orders without context, f
 ### Requirements
 
 - **Node.js**: 20 or higher (ESM compatible)
-- **Developer API Key**: An issued key from [app.aureonlabs.network](https://app.aureonlabs.network) → **Developers**
-- **Network Access**: Outbound connectivity to `https://api.aureonlabs.network`
+- **Developer API Key**: Issued on the **same** API you will call (local 5174 Developers for 8788 / 4663, or [app.aureonlabs.network](https://app.aureonlabs.network) for the public host — still 46630)
+- **Network Access**: Default local mainnet `http://127.0.0.1:8788`. Optional `AUREON_NETWORK=testnet` for `https://api.aureonlabs.network` (still 46630)
 
 ### Installation
 
@@ -102,7 +102,7 @@ npm install @buildaureon/mcp
 npx -y @buildaureon/mcp
 ```
 
-You do not need to clone the AUREON monorepo: only the package, the live API URL, and your issued key.
+You do not need to clone the AUREON monorepo: only the package and an issued key for the network you will call.
 
 ---
 
@@ -112,9 +112,10 @@ You do not need to clone the AUREON monorepo: only the package, the live API URL
 flowchart LR
   Agent[Cursor / Claude] -->|stdio MCP| MCP["@buildaureon/mcp"]
   MCP --> SDK["@buildaureon/sdk"]
-  SDK -->|HTTPS| API[api.aureonlabs.network]
-  Utility[Operator utility] -->|wallet Bearer| API
-  API --> Vault[Smart Vault · Robinhood Chain]
+  SDK -->|default| Main[127.0.0.1:8788 / 4663]
+  SDK -->|AUREON_NETWORK=testnet| Test[api.aureonlabs.network / still 46630]
+  Main --> Vault[Smart Vault]
+  Test --> Vault
 ```
 
 ### Surface & Ownership Breakdown
@@ -145,11 +146,13 @@ Get your AI agent running with AUREON MCP in 4 easy steps:
 
 ### 1. Create an issued API key
 
-1. Open https://app.aureonlabs.network
-2. Connect your wallet (invite early access)
-3. Navigate to **Developers** → click **Create API Key** → copy your key once
+Issue the key on the **same** API this MCP process will call:
 
-That key identifies your wallet for control-plane tools. **No Bearer token required.**
+1. Local mainnet (default 8788 / 4663): open Living Capital on `http://127.0.0.1:5174` → **Developers**.
+2. Public testnet (optional): open https://app.aureonlabs.network → **Developers** (still chain 46630).
+3. Create API Key → copy your key once.
+
+That key identifies your wallet for control-plane tools. **No Bearer token required.** A testnet key will not authenticate the local mainnet API.
 
 ### 2. Configure Cursor IDE
 
@@ -162,7 +165,6 @@ Copy [`examples/cursor.mcp.json`](examples/cursor.mcp.json) into `.cursor/mcp.js
       "command": "npx",
       "args": ["-y", "@buildaureon/mcp"],
       "env": {
-        "AUREON_API_URL": "https://api.aureonlabs.network",
         "AUREON_API_KEY": "<issued-developer-api-key>"
       }
     }
@@ -186,7 +188,6 @@ Merge [`examples/claude-desktop.json`](examples/claude-desktop.json) into Claude
       "command": "npx",
       "args": ["-y", "@buildaureon/mcp"],
       "env": {
-        "AUREON_API_URL": "https://api.aureonlabs.network",
         "AUREON_API_KEY": "<issued-developer-api-key>"
       }
     }
@@ -215,7 +216,8 @@ Point the host `command` / `args` at the built `dist/index.js`. See [docs/setup.
 | Variable | Required | Role |
 | --- | --- | --- |
 | `AUREON_API_KEY` | Yes (recommended) | Issued developer key for product access **and** wallet identity |
-| `AUREON_API_URL` | No | Defaults to `https://api.aureonlabs.network` |
+| `AUREON_NETWORK` | No | Omit for mainnet (4663 / 8788). Set `testnet` for the public host (still 46630). |
+| `AUREON_API_URL` | No | Optional override. Must match `AUREON_NETWORK` if both are set. |
 | `AUREON_AUTH_TOKEN` | No | Optional wallet Bearer (**wins** if both key and Bearer are sent) |
 
 **Private Key Boundary**: Private keys are only needed outside MCP when signing and broadcasting deposit or withdrawal transactions. Prepare tools return unsigned transaction steps; the MCP server never signs.
@@ -234,13 +236,13 @@ Deep dive: [docs/auth.md](docs/auth.md).
 
 ## Tool Surface
 
-AUREON MCP exposes **34 tools** covering 100% of the `AureonClient` SDK surface:
+AUREON MCP exposes **54 tools** covering 100% of the `AureonClient` SDK surface:
 
 | Category | Count | Tools Included | Primary Purpose |
 | --- | --- | --- | --- |
 | **Health** | 1 | `aureon_ping` | Check API connectivity & backend watchdog state |
 | **Auth** | 5 | `aureon_get_auth_nonce`, `aureon_verify_wallet`, `aureon_dev_login`, `aureon_logout`, `aureon_me` | Manage wallet sessions, challenges, and identity |
-| **Read** | 11 | `aureon_get_overview`, `aureon_get_portfolio`, `aureon_list_objectives`, `aureon_get_objective`, `aureon_get_health`, `aureon_list_timeline`, `aureon_list_market_presets`, `aureon_get_restore_plan`, `aureon_list_executions`, `aureon_get_vault`, `aureon_get_vault_status` | Inspect portfolio allocations, health scores, timelines, and vault state |
+| **Read** | 12 | `aureon_get_overview`, `aureon_get_portfolio`, `aureon_list_objectives`, `aureon_get_objective`, `aureon_get_health`, `aureon_list_timeline`, `aureon_list_market_presets`, `aureon_get_restore_plan`, `aureon_list_executions`, `aureon_get_vault`, `aureon_get_vault_status`, `aureon_get_audit_trail` | Inspect portfolio allocations, health scores, timelines, vault state, and the joined audit trail |
 | **Objectives** | 4 | `aureon_create_objective`, `aureon_update_objective`, `aureon_pause_objective`, `aureon_resume_objective` | Create, modify, pause, and resume Financial Compass Objectives |
 | **Portfolio** | 3 | `aureon_set_portfolio`, `aureon_clear_portfolio`, `aureon_sync_portfolio` | Synchronize and manage live Capital Book asset marks |
 | **Execution** | 2 | `aureon_run_execution`, `aureon_restore_objective` | Trigger policy rebalancing and execute objective restore plans |
@@ -358,7 +360,7 @@ pnpm --filter @buildaureon/mcp typecheck
 | --- | --- |
 | **[Setup Guide](docs/setup.md)** | Step-by-step setup for Cursor, Claude Desktop, npx, building from source, and troubleshooting |
 | **[Authentication Guide](docs/auth.md)** | Issued API key vs. Wallet Bearer vs. private key boundaries |
-| **[Tools Reference](docs/tools.md)** | Full 34-tool reference with arguments, schemas, and caveats |
+| **[Tools Reference](docs/tools.md)** | Full 47-tool reference with arguments, schemas, and caveats |
 | **[Agent Playbooks](docs/agent-guide.md)** | End-to-end agent decision playbooks, turn templates, and anti-patterns |
 | **[Architecture Deep Dive](docs/architecture.md)** | Module boundaries, file maps, and end-to-end request data flows |
 | **[Security Model](docs/security.md)** | Credential management, threat modeling, and operational safety |
@@ -372,7 +374,7 @@ pnpm --filter @buildaureon/mcp typecheck
 No. You only need an issued `AUREON_API_KEY`. Private keys stay in your host wallet when signing prepare steps.
 
 **Does MCP talk to a local backend server?**  
-No. By default, it connects to the live production API at `https://api.aureonlabs.network`. Override `AUREON_API_URL` only if targeting a custom gateway.
+Yes by default. Omit `AUREON_API_URL` for local mainnet `http://127.0.0.1:8788` (chain 4663). Set `AUREON_NETWORK=testnet` for the public host (still chain 46630). `api.aureonlabs.network` is not 4663.
 
 **Why did my restore receipt say `staged`?**  
 `staged` indicates a ledger-local simulation receipt rather than an on-chain vault settlement. Always describe settlement receipts accurately in agent responses.

package/dist/index.js

@@ -1,23 +1,30 @@
 #!/usr/bin/env node
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { DEFAULT_API_BASE_URL, createSessionTokenProvider, createAureonClient, isAureonError } from '@buildaureon/sdk';
+import { resolveAureonNetworkFromEnv, createSessionTokenProvider, createAureonClient, validateExecutionReceipt, isAureonError } from '@buildaureon/sdk';
 import { z } from 'zod';
 
 function loadConfig() {
-  const apiUrl = process.env.AUREON_API_URL || DEFAULT_API_BASE_URL;
+  const resolved = resolveAureonNetworkFromEnv();
   const apiKey = process.env.AUREON_API_KEY || void 0;
   const authToken = process.env.AUREON_AUTH_TOKEN || void 0;
   if (!apiKey && !authToken) {
     throw new Error(
-      "Set AUREON_API_KEY (issued developer key from app.aureonlabs.network Developers) or AUREON_AUTH_TOKEN (wallet Bearer). See https://github.com/buildaureon/aureon-mcp#authentication"
+      "Set AUREON_API_KEY (issued developer key) or AUREON_AUTH_TOKEN (wallet Bearer). Default network is mainnet (http://127.0.0.1:8788). Set AUREON_NETWORK=testnet for the public host (still 46630). See https://github.com/buildaureon/aureon-mcp#authentication"
     );
   }
-  return { apiUrl, apiKey, authToken };
+  return {
+    apiUrl: resolved.baseUrl,
+    apiKey,
+    authToken,
+    network: resolved.network,
+    chainId: resolved.chainId
+  };
 }
 function createClient(config) {
   const session = createSessionTokenProvider(config.authToken ?? null);
   const client = createAureonClient({
+    network: config.network,
     baseUrl: config.apiUrl,
     apiKey: config.apiKey ?? null,
     getAccessToken: session.getAccessToken
@@ -68,6 +75,18 @@ function registerReadTools(server, client) {
       }
     }
   );
+  server.tool(
+    "aureon_get_allocation_vs_target",
+    "Objective vs actual portfolio \u2014 current weight vs policy target per objective, plus green-book/off-plan paradox flag",
+    {},
+    async () => {
+      try {
+        return ok(await client.getAllocationVsTarget());
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
   server.tool(
     "aureon_get_portfolio",
     "Current capital book snapshot \u2014 positions, marks, weights",
@@ -151,7 +170,7 @@ function registerCompassTools(server, client) {
   );
   server.tool(
     "aureon_run_execution",
-    "Run restorative execution for an objective currently outside policy",
+    "Run restorative execution for an objective outside policy. Read receipt.settlement and receipt.verifiedOnChain \u2014 staged = never on-chain; vault + verifiedOnChain = chain-observed; vault without verified = submitted but not yet observed.",
     { objectiveId: z.string().describe("The objective ID") },
     async ({ objectiveId }) => {
       try {
@@ -163,7 +182,7 @@ function registerCompassTools(server, client) {
   );
   server.tool(
     "aureon_restore_objective",
-    "Run vault-backed restorative execution for an objective outside policy",
+    "Run restorative execution for an objective outside policy. Not always vault-backed: read settlement and verifiedOnChain. staged is never on-chain. vault without verifiedOnChain is submitted, not proven. Returns ExecutionReceipt.",
     { objectiveId: z.string().describe("The objective ID") },
     async ({ objectiveId }) => {
       try {
@@ -175,7 +194,7 @@ function registerCompassTools(server, client) {
   );
   server.tool(
     "aureon_list_executions",
-    "Recent execution receipts \u2014 past restorative actions taken",
+    "Recent execution receipts \u2014 read settlement, verifiedOnChain, settlementRecord, explorerUrl, registryRef.",
     { objectiveId: z.string().optional().describe("Filter by objective ID (omit for all)") },
     async ({ objectiveId }) => {
       try {
@@ -327,6 +346,176 @@ var objectiveKind = z.enum([
   "reward_reinvestment"
 ]);
 var objectivePriority = z.enum(["low", "medium", "high", "critical"]);
+function registerIntentTools(server, client) {
+  server.tool(
+    "aureon_apply_financial_intent",
+    "Register user/agent intent as an Automatic objective and return AI \u2192 objective \u2192 portfolio flow",
+    {
+      brief: z.string().describe("What the user wants their money to do \u2014 agent-extracted wording"),
+      kind: objectiveKind.describe("Objective kind"),
+      targetWeight: z.number().describe("Target portfolio weight (0\u20131)"),
+      tolerance: z.number().describe("Allowed drift band (0\u20131)"),
+      targetSymbol: z.string().optional().describe("Asset symbol for balanced_portfolio (required for that kind)"),
+      name: z.string().optional().describe("Objective display name override"),
+      priority: objectivePriority.optional().describe("Evaluation priority")
+    },
+    async (input) => {
+      try {
+        return ok(await client.applyFinancialIntent(input));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+  server.tool(
+    "aureon_get_objective_portfolio_flow",
+    "Read AI \u2192 objective \u2192 portfolio flow for active objectives",
+    {
+      objectiveId: z.string().optional().describe("Filter to one objective (omit for all active)")
+    },
+    async ({ objectiveId }) => {
+      try {
+        return ok(await client.getObjectivePortfolioFlow(objectiveId));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+}
+function registerDriftRestoreTools(server, client) {
+  server.tool(
+    "aureon_run_drift_restore_demo",
+    "Run drift \u2192 detection \u2192 restore demo (seed book, break rule, manual restore)",
+    {},
+    async () => {
+      try {
+        return ok(await client.runDriftRestoreDemo());
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+  server.tool(
+    "aureon_get_drift_restore_flow",
+    "Read drift \u2192 detection \u2192 restore flow for active objectives",
+    {
+      objectiveId: z.string().optional().describe("Filter to one objective (omit for all active)")
+    },
+    async ({ objectiveId }) => {
+      try {
+        return ok(await client.getDriftRestoreFlow(objectiveId));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+}
+function registerReceiptVerificationTools(server, client) {
+  server.tool(
+    "aureon_run_receipt_verification_demo",
+    "Run receipt \u2192 verification demo (restore + validate receipt + settlement lookup)",
+    {},
+    async () => {
+      try {
+        return ok(await client.runReceiptVerificationDemo());
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+  server.tool(
+    "aureon_get_receipt_verification_flow",
+    "Read receipt \u2192 verification flow for execution receipts",
+    {
+      executionId: z.string().optional().describe("Filter to one execution id (omit for five most recent)")
+    },
+    async ({ executionId }) => {
+      try {
+        return ok(await client.getReceiptVerificationFlow(executionId));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+}
+var agentHost = z.enum(["cursor", "claude", "mcp"]);
+function registerPortfolioWatchTools(server, client) {
+  server.tool(
+    "aureon_run_portfolio_watch_demo",
+    "Run portfolio watch demo (brief \u2192 Automatic objective \u2192 while-away event \u2192 return briefing)",
+    {
+      brief: z.string().optional().describe(
+        "User wording \u2014 default: Watch my portfolio while I'm away \u2014 keep about 20% in stable assets."
+      ),
+      host: agentHost.optional().describe("Agent host label for briefing (cursor | claude | mcp)")
+    },
+    async ({ brief, host }) => {
+      try {
+        return ok(await client.runPortfolioWatchDemo({ brief, host }));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+  server.tool(
+    "aureon_get_portfolio_watch_flow",
+    "Read portfolio watch briefing for Automatic objectives",
+    {
+      objectiveId: z.string().optional().describe("Filter to one objective (omit for all Automatic)"),
+      brief: z.string().optional().describe("User brief for briefing lines"),
+      host: agentHost.optional().describe("Agent host label")
+    },
+    async ({ objectiveId, brief, host }) => {
+      try {
+        return ok(
+          await client.getPortfolioWatchFlow({ objectiveId, brief, host })
+        );
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+}
+function registerFullAureonLoopTools(server, client) {
+  server.tool(
+    "aureon_run_full_aureon_loop_demo",
+    "Run Content Arc full AUREON loop (intent \u2192 plan check \u2192 restore \u2192 receipt verification)",
+    {
+      brief: z.string().optional().describe(
+        "User wording \u2014 default: Keep about 20% in stable assets \u2014 grow the book without abandoning the plan."
+      )
+    },
+    async ({ brief }) => {
+      try {
+        return ok(await client.runFullAureonLoopDemo({ brief }));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+  server.tool(
+    "aureon_get_full_aureon_loop_flow",
+    "Read full AUREON loop for active objectives with a latest execution receipt",
+    {
+      objectiveId: z.string().optional().describe("Filter to one objective (omit for all active with receipts)"),
+      brief: z.string().optional().describe("User brief for teaching shape")
+    },
+    async ({ objectiveId, brief }) => {
+      try {
+        return ok(await client.getFullAureonLoopFlow({ objectiveId, brief }));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+}
+var objectiveKind2 = z.enum([
+  "stable_allocation",
+  "balanced_portfolio",
+  "risk_ceiling",
+  "reward_reinvestment"
+]);
+var objectivePriority2 = z.enum(["low", "medium", "high", "critical"]);
 var automationMode = z.enum(["auto", "manual"]);
 function registerObjectiveTools(server, client) {
   server.tool(
@@ -334,10 +523,10 @@ function registerObjectiveTools(server, client) {
     "Create a Financial Compass Objective. targetSymbol and automationMode are locked after create \u2014 recreate to change them. Defaults to automationMode auto.",
     {
       name: z.string().describe("Objective display name"),
-      kind: objectiveKind.describe("Objective kind"),
+      kind: objectiveKind2.describe("Objective kind"),
       targetWeight: z.number().describe("Target portfolio weight (0\u20131)"),
       tolerance: z.number().describe("Allowed drift band (0\u20131)"),
-      priority: objectivePriority.optional().describe("Evaluation priority"),
+      priority: objectivePriority2.optional().describe("Evaluation priority"),
       maxRiskScore: z.number().optional().describe("Max risk score ceiling"),
       reinvestRatio: z.number().optional().describe("Reinvest ratio for reward objectives"),
       targetSymbol: z.string().nullable().optional().describe("Asset symbol to track (locked after create)"),
@@ -357,7 +546,7 @@ function registerObjectiveTools(server, client) {
     {
       objectiveId: z.string().describe("Objective ID"),
       name: z.string().optional(),
-      priority: objectivePriority.optional(),
+      priority: objectivePriority2.optional(),
       targetWeight: z.number().optional(),
       tolerance: z.number().optional(),
       maxRiskScore: z.number().optional(),
@@ -452,7 +641,7 @@ function registerMarketTools(server, client) {
       priceChangeRatio: z.number().describe("Fractional price change (e.g. -0.15 = -15%)"),
       name: z.string().optional().describe("Event label"),
       description: z.string().optional().describe("Event description"),
-      autoRestore: z.boolean().optional().describe("Run restorative execution if objectives breach")
+      autoRestore: z.boolean().optional().describe("Opt in to run restore if objectives breach. Omit or false = drift only. Automatic still 409s if the vault cannot execute.")
     },
     async (input) => {
       try {
@@ -561,6 +750,95 @@ function registerRegistryTools(server, client) {
       }
     }
   );
+  server.tool(
+    "aureon_confirm_objective_registry",
+    "Confirms an on-chain ObjectiveRegistry registration after the host wallet broadcast the prepare tx. Pass the transaction hash. The API verifies the receipt on chain and stores the registry link.",
+    {
+      objectiveId: z.string().describe("Objective id that was registered"),
+      transactionHash: z.string().describe("0x transaction hash from the wallet broadcast")
+    },
+    async ({ objectiveId, transactionHash }) => {
+      try {
+        return ok(await client.confirmObjectiveRegistry(objectiveId, transactionHash));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+}
+function registerSettlementTools(server, client) {
+  server.tool(
+    "aureon_get_execution_settlement",
+    "Returns the chain-verified settlement record for a vault execution when the listener has observed an on-chain Rebalanced event. Staged executions never have settlement records \u2014 do not claim on-chain proof without this.",
+    {
+      executionId: z.string().describe("Execution receipt id")
+    },
+    async ({ executionId }) => {
+      try {
+        return ok(await client.getExecutionSettlement(executionId));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+  server.tool(
+    "aureon_list_settlements",
+    "Lists settlement records for the authenticated wallet. May include orphans (observed vault Rebalanced events not yet bound to an execution). Optional objectiveId filter. Read status and executionId before claiming proof.",
+    {
+      objectiveId: z.string().optional().describe("Filter by objective id")
+    },
+    async ({ objectiveId }) => {
+      try {
+        return ok({ settlements: await client.listSettlements(objectiveId) });
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+  server.tool(
+    "aureon_confirm_execution_settlement",
+    "Manual backfill: verify a vault Rebalanced transaction on chain and attach a settlement record to an execution. Use when the listener missed the event. Staged executions cannot be confirmed this way.",
+    {
+      executionId: z.string().describe("Execution receipt id"),
+      transactionHash: z.string().describe("0x vault Rebalanced transaction hash")
+    },
+    async ({ executionId, transactionHash }) => {
+      try {
+        return ok(await client.confirmExecutionSettlement(executionId, transactionHash));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
+}
+function registerReceiptTools(server) {
+  server.tool(
+    "aureon_validate_receipt",
+    "Validates an execution receipt locally (schema + settlement honesty). No API call. Returns { valid, issues }. Do not trust or summarize a receipt as on-chain when validation fails.",
+    {
+      receipt: z.record(z.unknown()).describe("ExecutionReceipt JSON from restore, listExecutions, or API")
+    },
+    async ({ receipt }) => {
+      const result = validateExecutionReceipt(receipt);
+      return ok(result);
+    }
+  );
+}
+function registerAuditTrailTools(server, client) {
+  server.tool(
+    "aureon_get_audit_trail",
+    "Export the financial audit trail for one objective: registry, receipts, settlements, timeline. Missing proof is labeled. Never invent on-chain claims.",
+    {
+      objectiveId: z.string().describe("Objective id to export")
+    },
+    async ({ objectiveId }) => {
+      try {
+        return ok(await client.getAuditTrail(objectiveId));
+      } catch (err) {
+        return fail(err);
+      }
+    }
+  );
 }
 
 // src/tools/index.ts
@@ -570,10 +848,18 @@ function registerTools(server, client, session) {
   registerVaultTools(server, client);
   registerAuthTools(server, client, session);
   registerObjectiveTools(server, client);
+  registerIntentTools(server, client);
+  registerDriftRestoreTools(server, client);
+  registerReceiptVerificationTools(server, client);
+  registerPortfolioWatchTools(server, client);
+  registerFullAureonLoopTools(server, client);
   registerPortfolioTools(server, client);
   registerMarketTools(server, client);
   registerDeveloperTools(server, client);
   registerRegistryTools(server, client);
+  registerSettlementTools(server, client);
+  registerReceiptTools(server);
+  registerAuditTrailTools(server, client);
 }
 
 // src/server.ts