@muhaven/mcp 0.2.1 → 0.2.2

package/manifest.json

@@ -3,9 +3,9 @@
   "manifest_version": "0.2",
   "name": "muhaven-mcp",
   "display_name": "MuHaven (RWA portfolio)",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Confidential RWA portfolio management on Fhenix CoFHE. Read your encrypted balances, propose yield claims and policy changes — all signing happens in a sibling broker daemon, the LLM never sees your private key.",
-  "long_description": "MuHaven MCP exposes 23 tools across read.* / position.* / policy.* / issuer.* / governance.* groups for managing real-world asset (RWA) tokens with FHE-encrypted balances. Authentication uses a one-time device-code ceremony (run `muhaven-broker login`); subsequent tool calls fetch the JWT from the broker over a Unix socket. Position / governance tools deep-link to the dashboard for passkey signing — they NEVER auto-submit to a bundler. The companion `muhaven-broker` daemon must be running before tools can be invoked. See README for setup.",
+  "long_description": "MuHaven MCP exposes 24 tools across read.* / position.* / policy.* / issuer.* / governance.* groups for managing real-world asset (RWA) tokens with FHE-encrypted balances. Authentication uses a one-time device-code ceremony (run `muhaven-broker login`); subsequent tool calls fetch the JWT from the broker over a Unix socket. Position / governance tools deep-link to the dashboard for passkey signing — they NEVER auto-submit to a bundler. The companion `muhaven-broker` daemon must be running before tools can be invoked. See README for setup.",
   "author": {
     "name": "MuHaven",
     "email": "hello@muhaven.app",
@@ -32,7 +32,11 @@
         "MUHAVEN_BACKEND_URL": "${user_config.backend_url}",
         "MUHAVEN_DASHBOARD_URL": "${user_config.dashboard_url}",
         "MUHAVEN_BROKER_ENDPOINT": "${user_config.broker_endpoint}",
-        "MUHAVEN_READ_ONLY": "${user_config.read_only}"
+        "MUHAVEN_READ_ONLY": "${user_config.read_only}",
+        "MUHAVEN_BUNDLER_URL": "${user_config.bundler_url}",
+        "MUHAVEN_CHAIN_ID": "${user_config.chain_id}",
+        "MUHAVEN_SUBSCRIPTION_ADDRESS": "${user_config.subscription_address}",
+        "MUHAVEN_ENTRY_POINT": "${user_config.entry_point_address}"
       }
     }
   },
@@ -93,6 +97,38 @@
       "description": "When enabled, only the muhaven.read.* toolset is exposed; position.* and policy.* tools are not registered.",
       "default": false,
       "sensitive": false
+    },
+    {
+      "key": "bundler_url",
+      "type": "string",
+      "title": "ERC-4337 bundler RPC URL (Path D autonomous mode)",
+      "description": "Wave 5 Path D — when set, enables broker-signed autonomous position.buy submission via this bundler. Leave blank to keep position tools on Path C (dashboard deep-link, user passkey-signs). Must be https:// (or http:// to loopback for dev). The full Path D UserOp-build path ships in @muhaven/mcp 0.3.x; today's 0.2.1 only exercises the preflight + Path C fall-through.",
+      "default": "",
+      "sensitive": false
+    },
+    {
+      "key": "chain_id",
+      "type": "string",
+      "title": "Chain id (for Path D bundler chain check)",
+      "description": "Chain id the bundler must report. Default 421614 (Arbitrum Sepolia). Operators on a different network MUST override alongside bundler_url. Unused when bundler_url is blank.",
+      "default": "421614",
+      "sensitive": false
+    },
+    {
+      "key": "subscription_address",
+      "type": "string",
+      "title": "MuHavenSubscription contract address (Path D autonomous-buy target)",
+      "description": "Wave 5 Path D Slice 1 Commit 3.5 — the MuHavenSubscription contract address Path D's autonomous-buy UserOp targets. Source: deployments/arb-sepolia-v2.json (prod) or deployments/arb-sepolia-v2.staging.json (stage), `subscription` field. Leave blank to keep position.buy on Path C even when bundler_url + broker are set.",
+      "default": "",
+      "sensitive": false
+    },
+    {
+      "key": "entry_point_address",
+      "type": "string",
+      "title": "ERC-4337 EntryPoint address (Path D, defaults to v0.7 canonical)",
+      "description": "Wave 5 Path D Slice 1 Commit 3.5 — defaults to the canonical EntryPoint v0.7 deployment (0x0000000071727De22E5E9d8BAf0edAc6f37da032), same on every EVM chain. Only override on a future EntryPoint rotation.",
+      "default": "0x0000000071727De22E5E9d8BAf0edAc6f37da032",
+      "sensitive": false
     }
   ],
   "$comment_setup": "First-run instructions: (1) install this package via your MCPB host (Claude Desktop / Cursor / Claude Code) or globally via `npm install -g @muhaven/mcp`. (2) Run `muhaven-broker setup` — one-shot: applies env defaults, mints an ephemeral session key, spawns the broker daemon detached, then walks you through the passkey-bound device-code login (opens browser to https://muhaven.app/link?code=XXXX-XXXX). The daemon stays running after `setup` returns. Use `muhaven-broker setup --foreground` if systemd / launchd / a Windows service will own the daemon's lifecycle instead. (3) Use any tool in this MCP package."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@muhaven/mcp",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "MuHaven MCP server — read/position/policy toolsets bridging Claude Desktop / Cursor / Claude Code to the MuHaven backend, with a sibling muhaven-broker daemon holding the session-key private half over a local IPC socket",
   "type": "module",
   "repository": {
@@ -70,7 +70,8 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.4",
     "viem": "^2.47.0",
-    "zod": "^3.24.0"
+    "zod": "^3.25.0",
+    "zod-to-json-schema": "^3.24.0"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "^1.1.0"