@guiie/buda-mcp 1.5.0 → 1.5.2

package/dist/tools/compare_markets.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { BudaApiError } from "../client.js";
 import { CACHE_TTL } from "../cache.js";
+import { validateCurrency } from "../validation.js";
 export const toolSchema = {
     name: "compare_markets",
     description: "Returns side-by-side ticker data for all trading pairs of a given base currency across Buda.com's " +
@@ -18,63 +19,72 @@ export const toolSchema = {
         required: ["base_currency"],
     },
 };
+export async function handleCompareMarkets(args, client, cache) {
+    const { base_currency } = args;
+    const currencyError = validateCurrency(base_currency);
+    if (currencyError) {
+        return {
+            content: [{ type: "text", text: JSON.stringify({ error: currencyError, code: "INVALID_CURRENCY" }) }],
+            isError: true,
+        };
+    }
+    try {
+        const base = base_currency.toUpperCase();
+        const data = await cache.getOrFetch("tickers:all", CACHE_TTL.TICKER, () => client.get("/tickers"));
+        const matching = data.tickers.filter((t) => {
+            const [tickerBase] = t.market_id.split("-");
+            return tickerBase === base;
+        });
+        if (matching.length === 0) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            error: `No markets found for base currency '${base}'.`,
+                            code: "NOT_FOUND",
+                        }),
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const result = {
+            base_currency: base,
+            markets: matching.map((t) => ({
+                market_id: t.market_id,
+                last_price: parseFloat(t.last_price[0]),
+                last_price_currency: t.last_price[1],
+                best_bid: t.max_bid ? parseFloat(t.max_bid[0]) : null,
+                best_ask: t.min_ask ? parseFloat(t.min_ask[0]) : null,
+                volume_24h: t.volume ? parseFloat(t.volume[0]) : null,
+                price_change_24h: t.price_variation_24h
+                    ? parseFloat((parseFloat(t.price_variation_24h) * 100).toFixed(4))
+                    : null,
+                price_change_7d: t.price_variation_7d
+                    ? parseFloat((parseFloat(t.price_variation_7d) * 100).toFixed(4))
+                    : null,
+            })),
+        };
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (err) {
+        const msg = err instanceof BudaApiError
+            ? { error: err.message, code: err.status }
+            : { error: String(err), code: "UNKNOWN" };
+        return {
+            content: [{ type: "text", text: JSON.stringify(msg) }],
+            isError: true,
+        };
+    }
+}
 export function register(server, client, cache) {
     server.tool(toolSchema.name, toolSchema.description, {
         base_currency: z
             .string()
             .describe("Base currency to compare across all available markets (e.g. 'BTC', 'ETH', 'XRP')."),
-    }, async ({ base_currency }) => {
-        try {
-            const base = base_currency.toUpperCase();
-            const data = await cache.getOrFetch("tickers:all", CACHE_TTL.TICKER, () => client.get("/tickers"));
-            const matching = data.tickers.filter((t) => {
-                const [tickerBase] = t.market_id.split("-");
-                return tickerBase === base;
-            });
-            if (matching.length === 0) {
-                return {
-                    content: [
-                        {
-                            type: "text",
-                            text: JSON.stringify({
-                                error: `No markets found for base currency '${base}'.`,
-                                code: "NOT_FOUND",
-                            }),
-                        },
-                    ],
-                    isError: true,
-                };
-            }
-            const result = {
-                base_currency: base,
-                markets: matching.map((t) => ({
-                    market_id: t.market_id,
-                    last_price: parseFloat(t.last_price[0]),
-                    last_price_currency: t.last_price[1],
-                    best_bid: t.max_bid ? parseFloat(t.max_bid[0]) : null,
-                    best_ask: t.min_ask ? parseFloat(t.min_ask[0]) : null,
-                    volume_24h: t.volume ? parseFloat(t.volume[0]) : null,
-                    price_change_24h: t.price_variation_24h
-                        ? parseFloat((parseFloat(t.price_variation_24h) * 100).toFixed(4))
-                        : null,
-                    price_change_7d: t.price_variation_7d
-                        ? parseFloat((parseFloat(t.price_variation_7d) * 100).toFixed(4))
-                        : null,
-                })),
-            };
-            return {
-                content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-            };
-        }
-        catch (err) {
-            const msg = err instanceof BudaApiError
-                ? { error: err.message, code: err.status, path: err.path }
-                : { error: String(err), code: "UNKNOWN" };
-            return {
-                content: [{ type: "text", text: JSON.stringify(msg) }],
-                isError: true,
-            };
-        }
-    });
+    }, (args) => handleCompareMarkets(args, client, cache));
 }
 //# sourceMappingURL=compare_markets.js.map

package/dist/tools/dead_mans_switch.d.ts

@@ -55,7 +55,7 @@ type ScheduleArgs = {
     ttl_seconds: number;
     confirmation_token: string;
 };
-export declare function handleScheduleCancelAll(args: ScheduleArgs, client: BudaClient): Promise<{
+export declare function handleScheduleCancelAll(args: ScheduleArgs, client: BudaClient, transport?: "http" | "stdio"): Promise<{
     content: Array<{
         type: "text";
         text: string;
@@ -79,6 +79,6 @@ export declare function handleDisarmCancelTimer({ market_id }: MarketOnlyArgs):
     }>;
     isError?: boolean;
 };
-export declare function register(server: McpServer, client: BudaClient): void;
+export declare function register(server: McpServer, client: BudaClient, transport?: "stdio" | "http"): void;
 export {};
 //# sourceMappingURL=dead_mans_switch.d.ts.map

package/dist/tools/dead_mans_switch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dead_mans_switch.d.ts","sourceRoot":"","sources":["../../src/tools/dead_mans_switch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAiDxD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;CA2BtB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAgB3B,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;CAgB5B,CAAC;AAIF,KAAK,YAAY,GAAG;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA+ChF;AAED,KAAK,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,wBAAgB,sBAAsB,CACpC,EAAE,SAAS,EAAE,EAAE,cAAc,EAC7B,MAAM,EAAE,UAAU,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CA0CvE;AAED,wBAAgB,uBAAuB,CACrC,EAAE,SAAS,EAAE,EAAE,cAAc,GAC5B;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAwCvE;AAID,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA0CpE"}
+{"version":3,"file":"dead_mans_switch.d.ts","sourceRoot":"","sources":["../../src/tools/dead_mans_switch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAkDxD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;CA2BtB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAgB3B,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;CAgB5B,CAAC;AAIF,KAAK,YAAY,GAAG;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,UAAU,EAClB,SAAS,GAAE,MAAM,GAAG,OAAiB,GACpC,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA+DhF;AAED,KAAK,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,wBAAgB,sBAAsB,CACpC,EAAE,SAAS,EAAE,EAAE,cAAc,EAC7B,MAAM,EAAE,UAAU,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CA0CvE;AAED,wBAAgB,uBAAuB,CACrC,EAAE,SAAS,EAAE,EAAE,cAAc,GAC5B;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAwCvE;AAID,wBAAgB,QAAQ,CACtB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,UAAU,EAClB,SAAS,GAAE,OAAO,GAAG,MAAgB,GACpC,IAAI,CA2FN"}

package/dist/tools/dead_mans_switch.js

@@ -1,11 +1,12 @@
 import { z } from "zod";
 import { validateMarketId } from "../validation.js";
+import { logAudit } from "../audit.js";
 const timers = new Map();
 async function cancelAllOrdersForMarket(marketId, client) {
     try {
         const data = await client.get(`/markets/${marketId}/orders`, { state: "pending", per: 300 });
         const orders = data.orders ?? [];
-        await Promise.allSettled(orders.map((order) => client.put(`/orders/${order.id}`, { state: "canceling" })));
+        await Promise.allSettled(orders.map((order) => client.put(`/orders/${order.id}`, { order: { state: "canceling" } })));
         timers.delete(marketId);
     }
     catch {
@@ -85,7 +86,7 @@ export const disarmToolSchema = {
         required: ["market_id"],
     },
 };
-export async function handleScheduleCancelAll(args, client) {
+export async function handleScheduleCancelAll(args, client, transport = "stdio") {
     const { market_id, ttl_seconds, confirmation_token } = args;
     if (confirmation_token !== "CONFIRM") {
         return {
@@ -111,8 +112,23 @@ export async function handleScheduleCancelAll(args, client) {
             isError: true,
         };
     }
+    if (!Number.isInteger(ttl_seconds) || ttl_seconds < 10 || ttl_seconds > 300) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        error: "ttl_seconds must be an integer between 10 and 300.",
+                        code: "VALIDATION_ERROR",
+                    }),
+                },
+            ],
+            isError: true,
+        };
+    }
     const id = market_id.toLowerCase();
     const entry = armTimer(id, ttl_seconds, client);
+    logAudit({ ts: new Date().toISOString(), tool: "schedule_cancel_all", transport, args_summary: { market_id: market_id.toUpperCase(), ttl_seconds }, success: true });
     return {
         content: [
             {
@@ -207,7 +223,7 @@ export function handleDisarmCancelTimer({ market_id }) {
     };
 }
 // ---- Registration ----
-export function register(server, client) {
+export function register(server, client, transport = "stdio") {
     server.tool(toolSchema.name, toolSchema.description, {
         market_id: z
             .string()
@@ -221,16 +237,62 @@ export function register(server, client) {
         confirmation_token: z
             .string()
             .describe("Must equal exactly 'CONFIRM' (case-sensitive) to arm the switch."),
-    }, (args) => handleScheduleCancelAll(args, client));
+    }, (args) => {
+        if (transport === "http") {
+            return Promise.resolve({
+                content: [{
+                        type: "text",
+                        text: JSON.stringify({
+                            error: "schedule_cancel_all is not available on the HTTP transport. " +
+                                "Timer state is lost on every server restart or deploy. " +
+                                "Run buda-mcp in stdio mode on a persistent local process to use this feature.",
+                            code: "TRANSPORT_NOT_SUPPORTED",
+                        }),
+                    }],
+                isError: true,
+            });
+        }
+        return handleScheduleCancelAll(args, client);
+    });
     server.tool(renewToolSchema.name, renewToolSchema.description, {
         market_id: z
             .string()
             .describe("Market ID whose timer should be renewed (e.g. 'BTC-CLP')."),
-    }, (args) => handleRenewCancelTimer(args, client));
+    }, (args) => {
+        if (transport === "http") {
+            return Promise.resolve({
+                content: [{
+                        type: "text",
+                        text: JSON.stringify({
+                            error: "renew_cancel_timer is not available on the HTTP transport. " +
+                                "Timer state is process-local and only meaningful in stdio mode on a persistent local process.",
+                            code: "TRANSPORT_NOT_SUPPORTED",
+                        }),
+                    }],
+                isError: true,
+            });
+        }
+        return Promise.resolve(handleRenewCancelTimer(args, client));
+    });
     server.tool(disarmToolSchema.name, disarmToolSchema.description, {
         market_id: z
             .string()
             .describe("Market ID whose timer should be disarmed (e.g. 'BTC-CLP')."),
-    }, (args) => handleDisarmCancelTimer(args));
+    }, (args) => {
+        if (transport === "http") {
+            return Promise.resolve({
+                content: [{
+                        type: "text",
+                        text: JSON.stringify({
+                            error: "disarm_cancel_timer is not available on the HTTP transport. " +
+                                "Timer state is process-local and only meaningful in stdio mode on a persistent local process.",
+                            code: "TRANSPORT_NOT_SUPPORTED",
+                        }),
+                    }],
+                isError: true,
+            });
+        }
+        return Promise.resolve(handleDisarmCancelTimer(args));
+    });
 }
 //# sourceMappingURL=dead_mans_switch.js.map

package/dist/tools/deposits.js

@@ -80,7 +80,7 @@ export async function handleGetDepositHistory(args, client) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],
@@ -144,7 +144,7 @@ export async function handleCreateFiatDeposit(args, client) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/fees.js

@@ -55,7 +55,7 @@ export async function handleGetNetworkFees(args, client) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/lightning.d.ts

@@ -49,7 +49,7 @@ type CreateLightningInvoiceArgs = {
     description?: string;
     expiry_seconds?: number;
 };
-export declare function handleLightningWithdrawal(args: LightningWithdrawalArgs, client: BudaClient): Promise<{
+export declare function handleLightningWithdrawal(args: LightningWithdrawalArgs, client: BudaClient, transport?: "http" | "stdio"): Promise<{
     content: Array<{
         type: "text";
         text: string;

package/dist/tools/lightning.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lightning.d.ts","sourceRoot":"","sources":["../../src/tools/lightning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAIxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;CAuBzC,CAAC;AAEF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;CAwB5C,CAAC;AAEF,KAAK,uBAAuB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,uBAAuB,EAC7B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA+DhF;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,0BAA0B,EAChC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA8ChF;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA2CpE"}
+{"version":3,"file":"lightning.d.ts","sourceRoot":"","sources":["../../src/tools/lightning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAKxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;CAuBzC,CAAC;AAEF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;CAwB5C,CAAC;AAEF,KAAK,uBAAuB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,uBAAuB,EAC7B,MAAM,EAAE,UAAU,EAClB,SAAS,GAAE,MAAM,GAAG,OAAiB,GACpC,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAgFhF;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,0BAA0B,EAChC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA8ChF;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA2CpE"}

package/dist/tools/lightning.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { BudaApiError } from "../client.js";
 import { flattenAmount } from "../utils.js";
+import { logAudit } from "../audit.js";
 export const lightningWithdrawalToolSchema = {
     name: "lightning_withdrawal",
     description: "Pay a Bitcoin Lightning Network invoice from your Buda.com LN-BTC reserve. " +
@@ -47,7 +48,7 @@ export const createLightningInvoiceToolSchema = {
         required: ["amount_satoshis"],
     },
 };
-export async function handleLightningWithdrawal(args, client) {
+export async function handleLightningWithdrawal(args, client, transport = "stdio") {
     const { invoice, confirmation_token } = args;
     if (confirmation_token !== "CONFIRM") {
         const preview = invoice.length > 20 ? invoice.substring(0, 20) + "..." : invoice;
@@ -66,12 +67,26 @@ export async function handleLightningWithdrawal(args, client) {
             isError: true,
         };
     }
+    const BOLT11_RE = /^ln(bc|tb|bcrt)\d*[munp]?1[a-z0-9]{20,}$/i;
+    if (!BOLT11_RE.test(invoice)) {
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify({
+                        error: "Invalid Lightning invoice format. " +
+                            "Expected a BOLT-11 string starting with 'lnbc', 'lntb', or 'lnbcrt'.",
+                        code: "INVALID_INVOICE",
+                    }),
+                }],
+            isError: true,
+        };
+    }
     try {
         const data = await client.post(`/reserves/ln-btc/withdrawals`, { invoice });
         const lw = data.lightning_withdrawal;
         const amount = flattenAmount(lw.amount);
         const fee = flattenAmount(lw.fee);
-        return {
+        const result = {
             content: [
                 {
                     type: "text",
@@ -88,15 +103,16 @@ export async function handleLightningWithdrawal(args, client) {
                 },
             ],
         };
+        logAudit({ ts: new Date().toISOString(), tool: "lightning_withdrawal", transport, args_summary: {}, success: true });
+        return result;
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
-        return {
-            content: [{ type: "text", text: JSON.stringify(msg) }],
-            isError: true,
-        };
+        const result = { content: [{ type: "text", text: JSON.stringify(msg) }], isError: true };
+        logAudit({ ts: new Date().toISOString(), tool: "lightning_withdrawal", transport, args_summary: {}, success: false, error_code: msg.code });
+        return result;
     }
 }
 export async function handleCreateLightningInvoice(args, client) {
@@ -129,7 +145,7 @@ export async function handleCreateLightningInvoice(args, client) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],
@@ -141,7 +157,7 @@ export function register(server, client) {
     server.tool(lightningWithdrawalToolSchema.name, lightningWithdrawalToolSchema.description, {
         invoice: z
             .string()
-            .min(1)
+            .min(50)
             .describe("BOLT-11 Lightning invoice string (starts with 'lnbc', 'lntb', etc.)."),
         confirmation_token: z
             .string()

package/dist/tools/market_sentiment.js

@@ -86,7 +86,7 @@ export async function handleMarketSentiment({ market_id }, client, cache) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/market_summary.js

@@ -63,7 +63,7 @@ export async function handleMarketSummary({ market_id }, client, cache) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/markets.js

@@ -47,7 +47,7 @@ export function register(server, client, cache) {
         }
         catch (err) {
             const msg = err instanceof BudaApiError
-                ? { error: err.message, code: err.status, path: err.path }
+                ? { error: err.message, code: err.status }
                 : { error: String(err), code: "UNKNOWN" };
             return {
                 content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/order_lookup.js

@@ -76,7 +76,7 @@ export async function handleGetOrder(args, client) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],
@@ -93,7 +93,7 @@ export async function handleGetOrderByClientId(args, client) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/orderbook.js

@@ -66,7 +66,7 @@ export function register(server, client, cache) {
         }
         catch (err) {
             const msg = err instanceof BudaApiError
-                ? { error: err.message, code: err.status, path: err.path }
+                ? { error: err.message, code: err.status }
                 : { error: String(err), code: "UNKNOWN" };
             return {
                 content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/orders.js

@@ -117,7 +117,7 @@ export function register(server, client) {
         }
         catch (err) {
             const msg = err instanceof BudaApiError
-                ? { error: err.message, code: err.status, path: err.path }
+                ? { error: err.message, code: err.status }
                 : { error: String(err), code: "UNKNOWN" };
             return {
                 content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/place_order.d.ts

@@ -72,7 +72,7 @@ type PlaceOrderArgs = {
     stop_type?: ">=" | "<=";
     confirmation_token: string;
 };
-export declare function handlePlaceOrder(args: PlaceOrderArgs, client: BudaClient): Promise<{
+export declare function handlePlaceOrder(args: PlaceOrderArgs, client: BudaClient, transport?: "http" | "stdio"): Promise<{
     content: Array<{
         type: "text";
         text: string;

package/dist/tools/place_order.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"place_order.d.ts","sourceRoot":"","sources":["../../src/tools/place_order.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAIxD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmEtB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;IACpB,UAAU,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAqIhF;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA4DpE"}
+{"version":3,"file":"place_order.d.ts","sourceRoot":"","sources":["../../src/tools/place_order.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAKxD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmEtB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;IACpB,UAAU,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,UAAU,EAClB,SAAS,GAAE,MAAM,GAAG,OAAiB,GACpC,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAsLhF;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA4DpE"}

package/dist/tools/place_order.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { BudaApiError } from "../client.js";
 import { validateMarketId } from "../validation.js";
+import { logAudit } from "../audit.js";
 export const toolSchema = {
     name: "place_order",
     description: "Place a limit or market order on Buda.com. " +
@@ -66,7 +67,7 @@ export const toolSchema = {
         required: ["market_id", "type", "price_type", "amount", "confirmation_token"],
     },
 };
-export async function handlePlaceOrder(args, client) {
+export async function handlePlaceOrder(args, client, transport = "stdio") {
     const { market_id, type, price_type, amount, limit_price, ioc, fok, post_only, gtd_timestamp, stop_price, stop_type, confirmation_token, } = args;
     if (confirmation_token !== "CONFIRM") {
         return {
@@ -145,6 +146,37 @@ export async function handlePlaceOrder(args, client) {
                     isError: true,
                 };
             }
+            if (gtd_timestamp !== undefined) {
+                const ts = new Date(gtd_timestamp).getTime();
+                if (isNaN(ts)) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({
+                                    error: "gtd_timestamp must be a valid ISO 8601 datetime string.",
+                                    code: "VALIDATION_ERROR",
+                                }),
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+                if (ts <= Date.now()) {
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({
+                                    error: "gtd_timestamp must be a future datetime.",
+                                    code: "VALIDATION_ERROR",
+                                }),
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+            }
             let limitType = "gtc";
             if (ioc)
                 limitType = "ioc";
@@ -163,18 +195,35 @@ export async function handlePlaceOrder(args, client) {
             payload.stop = { price: stop_price, type: stop_type };
         }
         const data = await client.post(`/markets/${market_id.toLowerCase()}/orders`, payload);
-        return {
+        const result = {
             content: [{ type: "text", text: JSON.stringify(data.order, null, 2) }],
         };
+        logAudit({
+            ts: new Date().toISOString(),
+            tool: "place_order",
+            transport,
+            args_summary: { market_id, type, price_type, amount },
+            success: true,
+        });
+        return result;
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
-        return {
+        const result = {
             content: [{ type: "text", text: JSON.stringify(msg) }],
             isError: true,
         };
+        logAudit({
+            ts: new Date().toISOString(),
+            tool: "place_order",
+            transport,
+            args_summary: { market_id, type, price_type, amount },
+            success: false,
+            error_code: msg.code,
+        });
+        return result;
     }
 }
 export function register(server, client) {

package/dist/tools/price_history.js

@@ -85,7 +85,7 @@ export function register(server, client, _cache) {
         }
         catch (err) {
             const msg = err instanceof BudaApiError
-                ? { error: err.message, code: err.status, path: err.path }
+                ? { error: err.message, code: err.status }
                 : { error: String(err), code: "UNKNOWN" };
             return {
                 content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/quotation.js

@@ -80,7 +80,7 @@ export async function handleGetRealQuotation(args, client) {
     }
     catch (err) {
         const msg = err instanceof BudaApiError
-            ? { error: err.message, code: err.status, path: err.path }
+            ? { error: err.message, code: err.status }
             : { error: String(err), code: "UNKNOWN" };
         return {
             content: [{ type: "text", text: JSON.stringify(msg) }],

package/dist/tools/receive_addresses.d.ts

@@ -10,6 +10,10 @@ export declare const createReceiveAddressToolSchema: {
                 type: string;
                 description: string;
             };
+            confirmation_token: {
+                type: string;
+                description: string;
+            };
         };
         required: string[];
     };
@@ -67,7 +71,8 @@ export declare function handleGetReceiveAddress(args: {
 }>;
 export declare function handleCreateReceiveAddress(args: {
     currency: string;
-}, client: BudaClient): Promise<{
+    confirmation_token: string;
+}, client: BudaClient, transport?: "http" | "stdio"): Promise<{
     content: Array<{
         type: "text";
         text: string;

package/dist/tools/receive_addresses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"receive_addresses.d.ts","sourceRoot":"","sources":["../../src/tools/receive_addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAIxD,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;CAmB1C,CAAC;AAEF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;CAiB1C,CAAC;AAEF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;CAoBvC,CAAC;AAYF,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC1B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAqChF;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACtC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA4BhF;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC1B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA6BhF;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA4BpE"}
+{"version":3,"file":"receive_addresses.d.ts","sourceRoot":"","sources":["../../src/tools/receive_addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AAKxD,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;CAwB1C,CAAC;AAEF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;CAiB1C,CAAC;AAEF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;CAoBvC,CAAC;AAYF,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC1B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAqChF;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACtC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA4BhF;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,EACtD,MAAM,EAAE,UAAU,EAClB,SAAS,GAAE,MAAM,GAAG,OAAiB,GACpC,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA8ChF;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA+BpE"}