@dfm-fi/agent 0.2.2084 → 0.2.2103

package/dist/api-client.js

@@ -301,11 +301,12 @@ export class DfmApiClient {
     }
     /** The caller's XP plus the top of the leaderboard. */
     async getXp() {
-        const [mine, leaderboard] = await Promise.all([
+        const [mine, leaderboard, rules] = await Promise.all([
             this.authRequest('/xp/me', { method: 'GET' }),
             this.publicRequest('/xp/leaderboard?limit=10'),
+            this.publicRequest('/xp/rules'),
         ]);
-        return { mine, leaderboard };
+        return { mine, leaderboard, rules };
     }
     async getProfile() {
         return this.authRequest('/profile', { method: 'GET' });

package/dist/mcp-server.js

@@ -63,7 +63,7 @@ import { loadConfig } from './config.js';
 import { leanTokenRows, MAX_TOKEN_LIMIT } from './token-search.js';
 import { SiwsSession } from './session.js';
 import { DfmApiClient } from './api-client.js';
-import { isKeylessMode, executeAppWalletWrite, KEYLESS_SETUP_HINT, } from './keyless.js';
+import { isKeylessMode, hasLocalKeypair, executeAppWalletWrite, KEYLESS_SETUP_HINT, } from './keyless.js';
 import { runAcceptAdminTransfer, } from './manager-flow.js';
 import { submitSignedTx } from './submit.js';
 import { DEFAULT_OWNER_KEY_PATH, ownerKeyPath, policyUpdateNotice, runCreateAppWallet } from './app-wallet-owner.js';
@@ -759,7 +759,9 @@ server.registerTool('close_empty_accounts', {
 });
 server.registerTool('xp_status', {
     title: 'XP',
-    description: "The user's XP (total and by kind: deposit, launch, profile, referral) and the top of the XP leaderboard.",
+    description: "The user's XP (total and by kind: deposit, launch, profile, referral), the top of the XP leaderboard, and HOW XP is " +
+        'earned: `rules.howToEarn` lists every action with what it pays and what it waits for, `rules.doesNotEarn` what never ' +
+        'counts. Answer any "how do I earn XP / why did this not pay" from here, never from memory.',
     inputSchema: {},
     annotations: { readOnlyHint: true, openWorldHint: true },
 }, async () => {
@@ -778,6 +780,25 @@ server.registerTool('whoami', {
     inputSchema: {},
     annotations: { readOnlyHint: true, openWorldHint: true },
 }, async () => {
+    // A fresh headless agent has neither an API key nor an identity keypair
+    // yet. That is the START of onboarding, not a failure: answering with the
+    // signing layer's "No test keypair configured" error sent a model that
+    // followed "call whoami first" off to hand-install a keypair.
+    if (!isKeylessMode(config) && !hasLocalKeypair(config)) {
+        return text({
+            onboarded: false,
+            displayName: null,
+            signInWallet: null,
+            appWalletAddress: null,
+            setupHint: 'No DFM identity on this machine yet. Run onboard (it creates the identity keypair, signs in, ' +
+                `sets the profile and creates the app wallet): ${ONBOARDING_ORDER}. To operate a human's account ` +
+                'instead, install with --api-key dfm_… (minted at app.dfm.finance → Agent → Keys).',
+            confirmPhraseRequired: process.env.DFM_MCP_CONFIRM_REQUIRED === '1' && process.env.DFM_MCP_NONINTERACTIVE_WRITES !== '1',
+            apiUrl: config.apiUrl,
+            cluster: config.cluster,
+            writeEnabled: config.writeEnabled,
+        });
+    }
     try {
         const [{ identity, op }, profile, float] = await Promise.all([
             resolveWalletIdentityWithOp(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dfm-fi/agent",
-  "version": "0.2.2084",
+  "version": "0.2.2103",
   "description": "DFM v2 MCP server — drive the full fund launch → deposit → redeem (+ manage) lifecycle from an AI agent against the live API.",
   "homepage": "https://app.dfm.finance/docs/agent",
   "mcpName": "io.github.DFM-Finance/dfm-agent",

package/skills.md

@@ -61,6 +61,10 @@ https://app.dfm.finance/account); `app_wallet_fund` is refused in key-only mode
   already in use is refused.
 - **Season 0 cap:** every fund is capped at $1,000 of value; a deposit that would pass it is refused with the
   room that is left.
+- **XP:** never quote XP amounts or conditions from memory. `xp_status` returns the person's XP and the live
+  rules: `rules.howToEarn` (each action, what it pays, what it waits for) and `rules.doesNotEarn`. XP comes from
+  deposits, a completed profile, a linked X account, launching funds that keep money in them, and referrals;
+  redeeming earns nothing and never takes XP away.
 - **Fund policy:** every fund runs the same default policy; creator-set policies are coming in v2. There is
   no tool to change it.
 - **Writes need `DFM_AGENT_WRITE_ENABLED=true`** on the MCP process. Path A needs no API key for writes; path B
@@ -100,6 +104,7 @@ https://app.dfm.finance/account); `app_wallet_fund` is refused in key-only mode
 | "Swap 5 USDC to JUP" | `swap_quote` → `swap {inputMint, outputMint, amountRaw}` | signature, or "approve it in the app" | — |
 | "Withdraw my USDC" | `app_wallet_withdraw` · `withdraw_asset` | signature | — |
 | "My positions" | `get_portfolio` | shares and value | — |
+| "My XP" / "how do I earn XP?" | `xp_status` | total, by kind, `rules.howToEarn` | point to the next bonus the person can reach |
 | "Report a bug" | `report_bug {title, description}` | confirmation | — |
 
 `transfer_admin` and new `accept_admin_transfer` acceptances are **not available yet in this MCP**: they