@stratabook/mcp 0.1.3 → 0.1.5

package/dist/src/cli.js

@@ -3,7 +3,7 @@ import { createMcpExpressApp } from "@modelcontextprotocol/sdk/server/express.js
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { DEFAULT_API_BASE } from "@stratabook/sdk";
-import { STRATA_AGENT_HARNESS } from "./generated-harness.js";
+import { STRATA_ACTION_GRAPH, STRATA_AGENT_HARNESS, } from "./generated-harness.js";
 import { createStrataMcpServer, probeStrataMcpReadiness } from "./server.js";
 import { SERVER_VERSION } from "./version.js";
 function parse(argv) {
@@ -60,7 +60,9 @@ Options:
   --host HOST              HTTP bind host (default: localhost)
   --port N                 HTTP port (default: 8787)
 
-This server is read-only. It accepts no wallet, private key, or session key.
+This server exposes capability-gated quote and execution operations. The external
+agent owner controls permission and signing. Strata accepts public keys,
+signatures, and signed transactions, never private keys or seed phrases.
 `);
 }
 async function runStdio(options) {
@@ -100,6 +102,12 @@ async function runHttp(options) {
             .set("Cache-Control", "public, max-age=300")
             .json(STRATA_AGENT_HARNESS);
     });
+    app.get("/.well-known/strata-action-graph.json", (_request, response) => {
+        response
+            .status(200)
+            .set("Cache-Control", "public, max-age=300")
+            .json(STRATA_ACTION_GRAPH);
+    });
     app.post("/mcp", async (request, response) => {
         let runtime;
         let transport;

package/dist/src/generated-harness.d.ts

@@ -3,51 +3,355 @@ export declare const STRATA_AGENT_HARNESS: {
     readonly harness_version: "1.0";
     readonly contract_version: "1.1";
     readonly name: "Strata Agent Harness";
-    readonly summary: "A capability-gated workflow for agents that explore Strata markets and request validated Sonar quotes.";
+    readonly summary: "A capability-gated workflow and executable action graph for agents that discover, read market and account state, quote, prepare, externally sign, and submit Strata operations.";
     readonly entrypoints: {
         readonly documentation: "https://stratabook.org/docs/agent-harness/";
         readonly capabilities: "https://api.stratabook.app/sonar/capabilities";
         readonly markets: "https://api.stratabook.app/sonar/markets";
+        readonly platform_capabilities: "https://api.stratabook.app/v2/capabilities";
+        readonly platform_markets: "https://api.stratabook.app/v2/markets";
+        readonly action_graph: "https://api.stratabook.app/sonar/action-graph";
         readonly mcp: "https://api.stratabook.app/mcp";
         readonly manifest: "https://api.stratabook.app/.well-known/strata-agent.json";
     };
     readonly interfaces: {
-        readonly mcp_tool_order: readonly ["strata_capabilities", "strata_markets", "strata_quote"];
-        readonly terminal: readonly ["npx -y @stratabook/sdk capabilities --json", "npx -y @stratabook/sdk markets --json", "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json"];
+        readonly mcp_tool_order: readonly ["strata_capabilities", "strata_action_graph", "strata_markets", "strata_quote", "strata_execution_challenge", "strata_execution_prepare", "strata_execution_submit"];
+        readonly terminal: readonly ["npx -y @stratabook/sdk capabilities --json", "npx -y @stratabook/sdk action-graph --json", "npx -y @stratabook/sdk markets --json", "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json"];
     };
     readonly workflow: readonly [{
         readonly id: "discover_capabilities";
         readonly instruction: "Read the live capability catalog before every objective. Never infer permission from documentation, package support, or an earlier session.";
     }, {
         readonly id: "establish_mode";
-        readonly instruction: "State whether the available session is read-only or exposes a separately authorized prepare or submit capability. Read access never implies permission to move funds.";
+        readonly instruction: "Read the action graph and identify which prepare and submit nodes are live. The external agent owner configures its permissions and signer authority; static documentation never enables a Strata operation.";
     }, {
         readonly id: "understand_objective";
         readonly instruction: "Resolve the user's market, side, amount, and tolerance. Ask before proceeding when any economically meaningful input is ambiguous.";
     }, {
         readonly id: "discover_market";
         readonly instruction: "List markets, select one marked ready, and use its discovered base and quote decimals. Do not guess market identifiers or token decimals.";
+    }, {
+        readonly id: "read_market_data";
+        readonly instruction: "When books.read is live, use the opaque market ID to read the Strata book, status, fees, and recent trades. Subscribe to the market stream for changes and recover from any sequence gap with a fresh snapshot.";
+    }, {
+        readonly id: "read_account";
+        readonly instruction: "When account.read is live, use the owner-configured signer to authorize the exact wallet, market, request time, and fill limit. Read or stream only the sanitized orders and fills returned by the official SDK, and recover stream gaps from a fresh signed snapshot.";
     }, {
         readonly id: "preserve_atoms";
         readonly instruction: "Represent token amounts as unsigned base-10 atomic strings. Never pass settlement amounts through floating-point arithmetic.";
     }, {
         readonly id: "request_quote";
-        readonly instruction: "Request a fresh Sonar quote with an explicit side, exact input atoms, and user-approved execution tolerance.";
+        readonly instruction: "Request a fresh Sonar quote with an explicit side, exact input atoms, and execution tolerance supplied by the external agent.";
     }, {
         readonly id: "validate_quote";
         readonly instruction: "Verify the quote binds to the selected market, side, and input. Check labelled fees, minimum output, price impact, server time, and expiry.";
     }, {
         readonly id: "report_result";
-        readonly instruction: "Report consumed input, expected output, minimum output, fees by asset side, price impact, and remaining validity without inventing private route composition.";
+        readonly instruction: "Report consumed input, expected output, minimum output, fees by asset side, price impact, and remaining validity.";
     }, {
         readonly id: "authorize_writes";
-        readonly instruction: "If write capabilities are ever exposed, keep prepare and submit separate, require the configured approval, verify immutable economics, and use idempotency.";
+        readonly instruction: "When prepare and submit are exposed, keep signing external to Strata: request canonical authorization bytes, sign them with the owner-configured signer, verify the prepared transaction preserves the quote, then submit the externally signed transaction with idempotency.";
     }, {
         readonly id: "monitor_outcome";
         readonly instruction: "After an authorized submission, report the durable receipt or explicit failure. Never claim completion from preparation, signing, or an unconfirmed request.";
     }];
-    readonly stop_conditions: readonly ["The required live capability is disabled or absent.", "The market is paused, unavailable, or has no reviewed operation path.", "Market, side, amount, decimals, tolerance, or approval is ambiguous.", "The contract version is unsupported or a response contains unknown fields.", "A quote is expired or its market, side, amount, fee, minimum-output, or time binding is inconsistent.", "A requested operation exceeds the exposed tool, account, or policy scope.", "A user asks the agent to receive or expose wallet secrets, private keys, seed phrases, session keys, or production credentials."];
-    readonly safety_rules: readonly ["Never request or accept wallet secrets, private keys, seed phrases, session keys, or production credentials in a prompt.", "Never call undocumented endpoints or reconstruct private Sonar behavior.", "Never silently widen slippage, refresh changed economics, substitute a market, or retry a non-retryable failure.", "Treat capability removal, revocation, expiry, and emergency disable as immediate stop signals.", "The current MCP and terminal tools are read-only unless the live catalog and callable tool list explicitly prove otherwise."];
+    readonly stop_conditions: readonly ["The required live capability is disabled or absent.", "The market is paused, unavailable, or has no reviewed operation path.", "Market, side, amount, decimals, tolerance, or signer authority is unavailable or ambiguous.", "The contract version is unsupported or a response contains unknown fields.", "A quote is expired or its market, side, amount, fee, minimum-output, or time binding is inconsistent.", "A requested operation exceeds the exposed tool, account, or policy scope.", "A user asks the agent to receive or expose wallet secrets, private keys, seed phrases, session keys, or production credentials."];
+    readonly safety_rules: readonly ["Never request or accept wallet secrets, private keys, seed phrases, session keys, or production credentials in a prompt.", "Never call undocumented endpoints or reconstruct private Sonar behavior.", "Never silently widen slippage, refresh changed economics, substitute a market, or retry a non-retryable failure.", "Treat capability removal, revocation, expiry, and emergency disable as immediate stop signals.", "Capability and action-graph availability are authoritative for Strata operations; permission and signer policy remain controlled by the external agent owner."];
 };
 export declare const STRATA_AGENT_HARNESS_URI = "strata://agent-harness/v1";
-export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_markets. Read strata://agent-harness/v1 for the complete workflow. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. Stop on ambiguity, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing approval. Never request wallet secrets, private keys, seed phrases, session keys, or production credentials. Current MCP tools are read-only unless the live catalog and callable tool list explicitly prove otherwise.";
+export declare const STRATA_ACTION_GRAPH: {
+    readonly schema_version: 1;
+    readonly graph_version: "1.0";
+    readonly contract_version: "1.1";
+    readonly entry_node: "discover_capabilities";
+    readonly authority: {
+        readonly permission_source: "external_agent_owner";
+        readonly signing_location: "external";
+        readonly accepts_private_keys: false;
+    };
+    readonly nodes: readonly [{
+        readonly id: "discover_capabilities";
+        readonly kind: "discovery";
+        readonly summary: "Read the live capabilities that currently expose Strata operations.";
+        readonly required_capabilities: readonly [];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/sonar/capabilities";
+            readonly mcp_tool: "strata_capabilities";
+        };
+    }, {
+        readonly id: "discover_markets";
+        readonly kind: "discovery";
+        readonly summary: "Discover ready markets, token decimals, and public operation paths.";
+        readonly required_capabilities: readonly ["markets.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/sonar/markets";
+            readonly mcp_tool: "strata_markets";
+        };
+    }, {
+        readonly id: "discover_action_graph";
+        readonly kind: "discovery";
+        readonly summary: "Read the executable topology, live node availability, external signing steps, and transition conditions.";
+        readonly required_capabilities: readonly [];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/sonar/action-graph";
+            readonly mcp_tool: "strata_action_graph";
+        };
+    }, {
+        readonly id: "discover_platform_capabilities";
+        readonly kind: "discovery";
+        readonly summary: "Read the versioned capabilities available through the official SDK.";
+        readonly required_capabilities: readonly [];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/capabilities";
+        };
+    }, {
+        readonly id: "discover_platform_markets";
+        readonly kind: "discovery";
+        readonly summary: "Discover opaque market IDs and current market status.";
+        readonly required_capabilities: readonly ["markets.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/markets";
+        };
+    }, {
+        readonly id: "read_book";
+        readonly kind: "read";
+        readonly summary: "Read a sequenced Strata book snapshot.";
+        readonly required_capabilities: readonly ["books.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/markets/{market_id}/book";
+        };
+    }, {
+        readonly id: "read_market_status";
+        readonly kind: "read";
+        readonly summary: "Read tick size, minimum order size, and current market status.";
+        readonly required_capabilities: readonly ["books.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/markets/{market_id}/status";
+        };
+    }, {
+        readonly id: "read_best_bid_ask";
+        readonly kind: "read";
+        readonly summary: "Read the current best bid and ask.";
+        readonly required_capabilities: readonly ["books.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/markets/{market_id}/bbo";
+        };
+    }, {
+        readonly id: "read_fees";
+        readonly kind: "read";
+        readonly summary: "Read the market fee schedule.";
+        readonly required_capabilities: readonly ["books.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/markets/{market_id}/fees";
+        };
+    }, {
+        readonly id: "read_trades";
+        readonly kind: "read";
+        readonly summary: "Read recent anonymized trades.";
+        readonly required_capabilities: readonly ["books.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/markets/{market_id}/trades";
+        };
+    }, {
+        readonly id: "stream_market";
+        readonly kind: "read";
+        readonly summary: "Subscribe to book changes, trades, and heartbeats with automatic recovery.";
+        readonly required_capabilities: readonly ["books.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "WEBSOCKET";
+            readonly path: "/v2/markets/{market_id}/stream";
+        };
+    }, {
+        readonly id: "authorize_account_read";
+        readonly kind: "external_signature";
+        readonly summary: "The agent owner's configured signer authorizes the exact account request or stream challenge.";
+        readonly required_capabilities: readonly [];
+        readonly available: true;
+    }, {
+        readonly id: "read_account";
+        readonly kind: "read";
+        readonly summary: "Read the owner's sanitized open orders and fills for a Strata market.";
+        readonly required_capabilities: readonly ["account.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "GET";
+            readonly path: "/v2/markets/{market_id}/account/{wallet_address}";
+        };
+    }, {
+        readonly id: "stream_account";
+        readonly kind: "read";
+        readonly summary: "Subscribe to signed, sequenced order and fill state for the owner.";
+        readonly required_capabilities: readonly ["account.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "WEBSOCKET";
+            readonly path: "/v2/markets/{market_id}/account/{wallet_address}/stream";
+        };
+    }, {
+        readonly id: "request_quote";
+        readonly kind: "read";
+        readonly summary: "Request economics bound to a market, side, exact input atoms, and tolerance.";
+        readonly required_capabilities: readonly ["quotes.read"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "POST";
+            readonly path: "/sonar/markets/{market}/quote";
+            readonly mcp_tool: "strata_quote";
+        };
+    }, {
+        readonly id: "request_execution_challenge";
+        readonly kind: "prepare";
+        readonly summary: "Request canonical authorization bytes for an unexpired quote and external signer.";
+        readonly required_capabilities: readonly ["trade.prepare"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "POST";
+            readonly path: "/sonar/markets/{market}/execution/challenge";
+            readonly mcp_tool: "strata_execution_challenge";
+        };
+    }, {
+        readonly id: "sign_authorization";
+        readonly kind: "external_signature";
+        readonly summary: "The agent owner's configured signer signs the returned authorization bytes externally.";
+        readonly required_capabilities: readonly [];
+        readonly available: true;
+    }, {
+        readonly id: "prepare_execution";
+        readonly kind: "prepare";
+        readonly summary: "Exchange the authorization signature for a quote-bound partially signed transaction.";
+        readonly required_capabilities: readonly ["trade.prepare"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "POST";
+            readonly path: "/sonar/markets/{market}/execution/prepare";
+            readonly mcp_tool: "strata_execution_prepare";
+        };
+    }, {
+        readonly id: "sign_transaction";
+        readonly kind: "external_signature";
+        readonly summary: "The external signer verifies and fills its signature slot without sending key material to Strata.";
+        readonly required_capabilities: readonly [];
+        readonly available: true;
+    }, {
+        readonly id: "submit_execution";
+        readonly kind: "submit";
+        readonly summary: "Submit the signed transaction with an idempotency key.";
+        readonly required_capabilities: readonly ["trade.submit"];
+        readonly available: true;
+        readonly operation: {
+            readonly method: "POST";
+            readonly path: "/sonar/markets/{market}/execution/submit";
+            readonly mcp_tool: "strata_execution_submit";
+        };
+    }, {
+        readonly id: "receive_receipt";
+        readonly kind: "receipt";
+        readonly summary: "Receive the execution ID, Solana signature, and submitted status.";
+        readonly required_capabilities: readonly [];
+        readonly available: true;
+    }];
+    readonly edges: readonly [{
+        readonly from: "discover_capabilities";
+        readonly to: "discover_action_graph";
+        readonly condition: "the returned contract version is supported";
+    }, {
+        readonly from: "discover_action_graph";
+        readonly to: "discover_markets";
+        readonly condition: "markets.read is enabled";
+    }, {
+        readonly from: "discover_action_graph";
+        readonly to: "discover_platform_capabilities";
+        readonly condition: "the versioned SDK contract is supported";
+    }, {
+        readonly from: "discover_platform_capabilities";
+        readonly to: "discover_platform_markets";
+        readonly condition: "markets.read is enabled";
+    }, {
+        readonly from: "discover_platform_markets";
+        readonly to: "read_book";
+        readonly condition: "books.read is enabled and the market is active";
+    }, {
+        readonly from: "discover_platform_markets";
+        readonly to: "read_market_status";
+        readonly condition: "books.read is enabled";
+    }, {
+        readonly from: "discover_platform_markets";
+        readonly to: "read_best_bid_ask";
+        readonly condition: "books.read is enabled";
+    }, {
+        readonly from: "discover_platform_markets";
+        readonly to: "read_fees";
+        readonly condition: "books.read is enabled";
+    }, {
+        readonly from: "discover_platform_markets";
+        readonly to: "read_trades";
+        readonly condition: "books.read is enabled";
+    }, {
+        readonly from: "read_book";
+        readonly to: "stream_market";
+        readonly condition: "books.read is enabled and the snapshot sequence is accepted";
+    }, {
+        readonly from: "discover_platform_markets";
+        readonly to: "authorize_account_read";
+        readonly condition: "account.read is enabled and the owner-configured signer is available";
+    }, {
+        readonly from: "authorize_account_read";
+        readonly to: "read_account";
+        readonly condition: "the signature binds the wallet, market, request time, and fill limit";
+    }, {
+        readonly from: "read_account";
+        readonly to: "stream_account";
+        readonly condition: "the stream challenge is signed by the same owner-configured signer";
+    }, {
+        readonly from: "discover_markets";
+        readonly to: "request_quote";
+        readonly condition: "quotes.read is enabled and the market is ready";
+    }, {
+        readonly from: "request_quote";
+        readonly to: "request_execution_challenge";
+        readonly condition: "trade.prepare is enabled and the quote is unexpired";
+    }, {
+        readonly from: "request_execution_challenge";
+        readonly to: "sign_authorization";
+        readonly condition: "the challenge bindings match the quote and signer";
+    }, {
+        readonly from: "sign_authorization";
+        readonly to: "prepare_execution";
+        readonly condition: "a valid external authorization signature is available";
+    }, {
+        readonly from: "prepare_execution";
+        readonly to: "sign_transaction";
+        readonly condition: "the prepared transaction preserves the signed bindings";
+    }, {
+        readonly from: "sign_transaction";
+        readonly to: "submit_execution";
+        readonly condition: "trade.submit is enabled and the signed transaction is unmodified";
+    }, {
+        readonly from: "submit_execution";
+        readonly to: "receive_receipt";
+        readonly condition: "the execution ID and idempotency key match";
+    }];
+};
+export declare const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
+export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_markets. Read strata://agent-harness/v1 and strata://action-graph/v1. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute: request a challenge, sign its canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. Stop on ambiguity, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/dist/src/generated-harness.js

@@ -4,22 +4,30 @@ export const STRATA_AGENT_HARNESS = {
     "harness_version": "1.0",
     "contract_version": "1.1",
     "name": "Strata Agent Harness",
-    "summary": "A capability-gated workflow for agents that explore Strata markets and request validated Sonar quotes.",
+    "summary": "A capability-gated workflow and executable action graph for agents that discover, read market and account state, quote, prepare, externally sign, and submit Strata operations.",
     "entrypoints": {
         "documentation": "https://stratabook.org/docs/agent-harness/",
         "capabilities": "https://api.stratabook.app/sonar/capabilities",
         "markets": "https://api.stratabook.app/sonar/markets",
+        "platform_capabilities": "https://api.stratabook.app/v2/capabilities",
+        "platform_markets": "https://api.stratabook.app/v2/markets",
+        "action_graph": "https://api.stratabook.app/sonar/action-graph",
         "mcp": "https://api.stratabook.app/mcp",
         "manifest": "https://api.stratabook.app/.well-known/strata-agent.json"
     },
     "interfaces": {
         "mcp_tool_order": [
             "strata_capabilities",
+            "strata_action_graph",
             "strata_markets",
-            "strata_quote"
+            "strata_quote",
+            "strata_execution_challenge",
+            "strata_execution_prepare",
+            "strata_execution_submit"
         ],
         "terminal": [
             "npx -y @stratabook/sdk capabilities --json",
+            "npx -y @stratabook/sdk action-graph --json",
             "npx -y @stratabook/sdk markets --json",
             "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json"
         ]
@@ -31,7 +39,7 @@ export const STRATA_AGENT_HARNESS = {
         },
         {
             "id": "establish_mode",
-            "instruction": "State whether the available session is read-only or exposes a separately authorized prepare or submit capability. Read access never implies permission to move funds."
+            "instruction": "Read the action graph and identify which prepare and submit nodes are live. The external agent owner configures its permissions and signer authority; static documentation never enables a Strata operation."
         },
         {
             "id": "understand_objective",
@@ -41,13 +49,21 @@ export const STRATA_AGENT_HARNESS = {
             "id": "discover_market",
             "instruction": "List markets, select one marked ready, and use its discovered base and quote decimals. Do not guess market identifiers or token decimals."
         },
+        {
+            "id": "read_market_data",
+            "instruction": "When books.read is live, use the opaque market ID to read the Strata book, status, fees, and recent trades. Subscribe to the market stream for changes and recover from any sequence gap with a fresh snapshot."
+        },
+        {
+            "id": "read_account",
+            "instruction": "When account.read is live, use the owner-configured signer to authorize the exact wallet, market, request time, and fill limit. Read or stream only the sanitized orders and fills returned by the official SDK, and recover stream gaps from a fresh signed snapshot."
+        },
         {
             "id": "preserve_atoms",
             "instruction": "Represent token amounts as unsigned base-10 atomic strings. Never pass settlement amounts through floating-point arithmetic."
         },
         {
             "id": "request_quote",
-            "instruction": "Request a fresh Sonar quote with an explicit side, exact input atoms, and user-approved execution tolerance."
+            "instruction": "Request a fresh Sonar quote with an explicit side, exact input atoms, and execution tolerance supplied by the external agent."
         },
         {
             "id": "validate_quote",
@@ -55,11 +71,11 @@ export const STRATA_AGENT_HARNESS = {
         },
         {
             "id": "report_result",
-            "instruction": "Report consumed input, expected output, minimum output, fees by asset side, price impact, and remaining validity without inventing private route composition."
+            "instruction": "Report consumed input, expected output, minimum output, fees by asset side, price impact, and remaining validity."
         },
         {
             "id": "authorize_writes",
-            "instruction": "If write capabilities are ever exposed, keep prepare and submit separate, require the configured approval, verify immutable economics, and use idempotency."
+            "instruction": "When prepare and submit are exposed, keep signing external to Strata: request canonical authorization bytes, sign them with the owner-configured signer, verify the prepared transaction preserves the quote, then submit the externally signed transaction with idempotency."
         },
         {
             "id": "monitor_outcome",
@@ -69,7 +85,7 @@ export const STRATA_AGENT_HARNESS = {
     "stop_conditions": [
         "The required live capability is disabled or absent.",
         "The market is paused, unavailable, or has no reviewed operation path.",
-        "Market, side, amount, decimals, tolerance, or approval is ambiguous.",
+        "Market, side, amount, decimals, tolerance, or signer authority is unavailable or ambiguous.",
         "The contract version is unsupported or a response contains unknown fields.",
         "A quote is expired or its market, side, amount, fee, minimum-output, or time binding is inconsistent.",
         "A requested operation exceeds the exposed tool, account, or policy scope.",
@@ -80,8 +96,374 @@ export const STRATA_AGENT_HARNESS = {
         "Never call undocumented endpoints or reconstruct private Sonar behavior.",
         "Never silently widen slippage, refresh changed economics, substitute a market, or retry a non-retryable failure.",
         "Treat capability removal, revocation, expiry, and emergency disable as immediate stop signals.",
-        "The current MCP and terminal tools are read-only unless the live catalog and callable tool list explicitly prove otherwise."
+        "Capability and action-graph availability are authoritative for Strata operations; permission and signer policy remain controlled by the external agent owner."
     ]
 };
 export const STRATA_AGENT_HARNESS_URI = "strata://agent-harness/v1";
-export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_markets. Read strata://agent-harness/v1 for the complete workflow. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. Stop on ambiguity, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing approval. Never request wallet secrets, private keys, seed phrases, session keys, or production credentials. Current MCP tools are read-only unless the live catalog and callable tool list explicitly prove otherwise.";
+export const STRATA_ACTION_GRAPH = {
+    "schema_version": 1,
+    "graph_version": "1.0",
+    "contract_version": "1.1",
+    "entry_node": "discover_capabilities",
+    "authority": {
+        "permission_source": "external_agent_owner",
+        "signing_location": "external",
+        "accepts_private_keys": false
+    },
+    "nodes": [
+        {
+            "id": "discover_capabilities",
+            "kind": "discovery",
+            "summary": "Read the live capabilities that currently expose Strata operations.",
+            "required_capabilities": [],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/sonar/capabilities",
+                "mcp_tool": "strata_capabilities"
+            }
+        },
+        {
+            "id": "discover_markets",
+            "kind": "discovery",
+            "summary": "Discover ready markets, token decimals, and public operation paths.",
+            "required_capabilities": [
+                "markets.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/sonar/markets",
+                "mcp_tool": "strata_markets"
+            }
+        },
+        {
+            "id": "discover_action_graph",
+            "kind": "discovery",
+            "summary": "Read the executable topology, live node availability, external signing steps, and transition conditions.",
+            "required_capabilities": [],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/sonar/action-graph",
+                "mcp_tool": "strata_action_graph"
+            }
+        },
+        {
+            "id": "discover_platform_capabilities",
+            "kind": "discovery",
+            "summary": "Read the versioned capabilities available through the official SDK.",
+            "required_capabilities": [],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/capabilities"
+            }
+        },
+        {
+            "id": "discover_platform_markets",
+            "kind": "discovery",
+            "summary": "Discover opaque market IDs and current market status.",
+            "required_capabilities": [
+                "markets.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/markets"
+            }
+        },
+        {
+            "id": "read_book",
+            "kind": "read",
+            "summary": "Read a sequenced Strata book snapshot.",
+            "required_capabilities": [
+                "books.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/markets/{market_id}/book"
+            }
+        },
+        {
+            "id": "read_market_status",
+            "kind": "read",
+            "summary": "Read tick size, minimum order size, and current market status.",
+            "required_capabilities": [
+                "books.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/markets/{market_id}/status"
+            }
+        },
+        {
+            "id": "read_best_bid_ask",
+            "kind": "read",
+            "summary": "Read the current best bid and ask.",
+            "required_capabilities": [
+                "books.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/markets/{market_id}/bbo"
+            }
+        },
+        {
+            "id": "read_fees",
+            "kind": "read",
+            "summary": "Read the market fee schedule.",
+            "required_capabilities": [
+                "books.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/markets/{market_id}/fees"
+            }
+        },
+        {
+            "id": "read_trades",
+            "kind": "read",
+            "summary": "Read recent anonymized trades.",
+            "required_capabilities": [
+                "books.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/markets/{market_id}/trades"
+            }
+        },
+        {
+            "id": "stream_market",
+            "kind": "read",
+            "summary": "Subscribe to book changes, trades, and heartbeats with automatic recovery.",
+            "required_capabilities": [
+                "books.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "WEBSOCKET",
+                "path": "/v2/markets/{market_id}/stream"
+            }
+        },
+        {
+            "id": "authorize_account_read",
+            "kind": "external_signature",
+            "summary": "The agent owner's configured signer authorizes the exact account request or stream challenge.",
+            "required_capabilities": [],
+            "available": true
+        },
+        {
+            "id": "read_account",
+            "kind": "read",
+            "summary": "Read the owner's sanitized open orders and fills for a Strata market.",
+            "required_capabilities": [
+                "account.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "GET",
+                "path": "/v2/markets/{market_id}/account/{wallet_address}"
+            }
+        },
+        {
+            "id": "stream_account",
+            "kind": "read",
+            "summary": "Subscribe to signed, sequenced order and fill state for the owner.",
+            "required_capabilities": [
+                "account.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "WEBSOCKET",
+                "path": "/v2/markets/{market_id}/account/{wallet_address}/stream"
+            }
+        },
+        {
+            "id": "request_quote",
+            "kind": "read",
+            "summary": "Request economics bound to a market, side, exact input atoms, and tolerance.",
+            "required_capabilities": [
+                "quotes.read"
+            ],
+            "available": true,
+            "operation": {
+                "method": "POST",
+                "path": "/sonar/markets/{market}/quote",
+                "mcp_tool": "strata_quote"
+            }
+        },
+        {
+            "id": "request_execution_challenge",
+            "kind": "prepare",
+            "summary": "Request canonical authorization bytes for an unexpired quote and external signer.",
+            "required_capabilities": [
+                "trade.prepare"
+            ],
+            "available": true,
+            "operation": {
+                "method": "POST",
+                "path": "/sonar/markets/{market}/execution/challenge",
+                "mcp_tool": "strata_execution_challenge"
+            }
+        },
+        {
+            "id": "sign_authorization",
+            "kind": "external_signature",
+            "summary": "The agent owner's configured signer signs the returned authorization bytes externally.",
+            "required_capabilities": [],
+            "available": true
+        },
+        {
+            "id": "prepare_execution",
+            "kind": "prepare",
+            "summary": "Exchange the authorization signature for a quote-bound partially signed transaction.",
+            "required_capabilities": [
+                "trade.prepare"
+            ],
+            "available": true,
+            "operation": {
+                "method": "POST",
+                "path": "/sonar/markets/{market}/execution/prepare",
+                "mcp_tool": "strata_execution_prepare"
+            }
+        },
+        {
+            "id": "sign_transaction",
+            "kind": "external_signature",
+            "summary": "The external signer verifies and fills its signature slot without sending key material to Strata.",
+            "required_capabilities": [],
+            "available": true
+        },
+        {
+            "id": "submit_execution",
+            "kind": "submit",
+            "summary": "Submit the signed transaction with an idempotency key.",
+            "required_capabilities": [
+                "trade.submit"
+            ],
+            "available": true,
+            "operation": {
+                "method": "POST",
+                "path": "/sonar/markets/{market}/execution/submit",
+                "mcp_tool": "strata_execution_submit"
+            }
+        },
+        {
+            "id": "receive_receipt",
+            "kind": "receipt",
+            "summary": "Receive the execution ID, Solana signature, and submitted status.",
+            "required_capabilities": [],
+            "available": true
+        }
+    ],
+    "edges": [
+        {
+            "from": "discover_capabilities",
+            "to": "discover_action_graph",
+            "condition": "the returned contract version is supported"
+        },
+        {
+            "from": "discover_action_graph",
+            "to": "discover_markets",
+            "condition": "markets.read is enabled"
+        },
+        {
+            "from": "discover_action_graph",
+            "to": "discover_platform_capabilities",
+            "condition": "the versioned SDK contract is supported"
+        },
+        {
+            "from": "discover_platform_capabilities",
+            "to": "discover_platform_markets",
+            "condition": "markets.read is enabled"
+        },
+        {
+            "from": "discover_platform_markets",
+            "to": "read_book",
+            "condition": "books.read is enabled and the market is active"
+        },
+        {
+            "from": "discover_platform_markets",
+            "to": "read_market_status",
+            "condition": "books.read is enabled"
+        },
+        {
+            "from": "discover_platform_markets",
+            "to": "read_best_bid_ask",
+            "condition": "books.read is enabled"
+        },
+        {
+            "from": "discover_platform_markets",
+            "to": "read_fees",
+            "condition": "books.read is enabled"
+        },
+        {
+            "from": "discover_platform_markets",
+            "to": "read_trades",
+            "condition": "books.read is enabled"
+        },
+        {
+            "from": "read_book",
+            "to": "stream_market",
+            "condition": "books.read is enabled and the snapshot sequence is accepted"
+        },
+        {
+            "from": "discover_platform_markets",
+            "to": "authorize_account_read",
+            "condition": "account.read is enabled and the owner-configured signer is available"
+        },
+        {
+            "from": "authorize_account_read",
+            "to": "read_account",
+            "condition": "the signature binds the wallet, market, request time, and fill limit"
+        },
+        {
+            "from": "read_account",
+            "to": "stream_account",
+            "condition": "the stream challenge is signed by the same owner-configured signer"
+        },
+        {
+            "from": "discover_markets",
+            "to": "request_quote",
+            "condition": "quotes.read is enabled and the market is ready"
+        },
+        {
+            "from": "request_quote",
+            "to": "request_execution_challenge",
+            "condition": "trade.prepare is enabled and the quote is unexpired"
+        },
+        {
+            "from": "request_execution_challenge",
+            "to": "sign_authorization",
+            "condition": "the challenge bindings match the quote and signer"
+        },
+        {
+            "from": "sign_authorization",
+            "to": "prepare_execution",
+            "condition": "a valid external authorization signature is available"
+        },
+        {
+            "from": "prepare_execution",
+            "to": "sign_transaction",
+            "condition": "the prepared transaction preserves the signed bindings"
+        },
+        {
+            "from": "sign_transaction",
+            "to": "submit_execution",
+            "condition": "trade.submit is enabled and the signed transaction is unmodified"
+        },
+        {
+            "from": "submit_execution",
+            "to": "receive_receipt",
+            "condition": "the execution ID and idempotency key match"
+        }
+    ]
+};
+export const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
+export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_markets. Read strata://agent-harness/v1 and strata://action-graph/v1. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute: request a challenge, sign its canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. Stop on ambiguity, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/dist/src/index.d.ts

@@ -1,2 +1,2 @@
 export { capabilityAvailable, createStrataMcpServer, probeStrataMcpReadiness, type StrataMcpOptions, type StrataMcpReadiness, type StrataMcpRuntime, } from "./server.js";
-export { STRATA_AGENT_HARNESS, STRATA_AGENT_HARNESS_INSTRUCTIONS, STRATA_AGENT_HARNESS_URI, } from "./generated-harness.js";
+export { STRATA_AGENT_HARNESS, STRATA_AGENT_HARNESS_INSTRUCTIONS, STRATA_AGENT_HARNESS_URI, STRATA_ACTION_GRAPH, STRATA_ACTION_GRAPH_URI, } from "./generated-harness.js";

package/dist/src/index.js

@@ -1,2 +1,2 @@
 export { capabilityAvailable, createStrataMcpServer, probeStrataMcpReadiness, } from "./server.js";
-export { STRATA_AGENT_HARNESS, STRATA_AGENT_HARNESS_INSTRUCTIONS, STRATA_AGENT_HARNESS_URI, } from "./generated-harness.js";
+export { STRATA_AGENT_HARNESS, STRATA_AGENT_HARNESS_INSTRUCTIONS, STRATA_AGENT_HARNESS_URI, STRATA_ACTION_GRAPH, STRATA_ACTION_GRAPH_URI, } from "./generated-harness.js";

package/dist/src/server.js

@@ -1,15 +1,15 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { DEFAULT_SLIPPAGE_BPS, StrataApiError, StrataClient, } from "@stratabook/sdk";
 import * as z from "zod/v4";
-import { STRATA_AGENT_HARNESS, STRATA_AGENT_HARNESS_INSTRUCTIONS, STRATA_AGENT_HARNESS_URI, } from "./generated-harness.js";
+import { STRATA_AGENT_HARNESS, STRATA_AGENT_HARNESS_INSTRUCTIONS, STRATA_AGENT_HARNESS_URI, STRATA_ACTION_GRAPH_URI, } from "./generated-harness.js";
 import { SERVER_VERSION } from "./version.js";
 const REFRESH_INTERVAL_MS = 5_000;
 export function capabilityAvailable(catalog, id) {
     return catalog.capabilities.some((capability) => capability.id === id
         && capability.default_enabled
         && capability.public_sdk
-        && capability.risk === "read"
-        && capability.mcp_exposure === "read");
+        && capability.mcp_exposure !== "none"
+        && capability.risk === capability.mcp_exposure);
 }
 function strataClient(options) {
     return options.client
@@ -56,9 +56,22 @@ export async function createStrataMcpServer(options = {}) {
             },
         ],
     }));
+    server.registerResource("strata_action_graph", STRATA_ACTION_GRAPH_URI, {
+        title: "Strata Action Graph",
+        description: "Live executable topology for discovery, quoting, external signing, and submission.",
+        mimeType: "application/json",
+    }, async () => ({
+        contents: [
+            {
+                uri: STRATA_ACTION_GRAPH_URI,
+                mimeType: "application/json",
+                text: JSON.stringify(await client.actionGraph()),
+            },
+        ],
+    }));
     server.registerPrompt("strata_start", {
         title: "Start a Strata objective",
-        description: "Apply the Strata Agent Harness to a concrete read-only objective.",
+        description: "Apply the Strata Agent Harness to a concrete objective.",
         argsSchema: {
             objective: z
                 .string()
@@ -88,6 +101,16 @@ export async function createStrataMcpServer(options = {}) {
             openWorldHint: true,
         },
     }, async () => toolResult(await client.capabilities(), "Current Strata capabilities."));
+    server.registerTool("strata_action_graph", {
+        title: "Strata action graph",
+        description: "Discover live operations, required capabilities, transition conditions, and external signing boundaries.",
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+    }, async () => toolResult(await client.actionGraph(), "Current Strata action graph."));
     const markets = server.registerTool("strata_markets", {
         title: "Strata markets",
         description: "List Strata markets and their current Sonar quote availability.",
@@ -158,7 +181,117 @@ export async function createStrataMcpServer(options = {}) {
             + `for ${response.amount_out_atoms} output atoms; minimum `
             + `${response.minimum_output_atoms}; expires at ${response.expires_at_ms}.`);
     }));
-    const handles = { markets, quote };
+    const executionChallenge = server.registerTool("strata_execution_challenge", {
+        title: "Strata execution challenge",
+        description: "Request canonical quote-bound authorization bytes for the external signer configured by the agent owner.",
+        inputSchema: {
+            market: z.string().min(1).max(128).describe("Market label or public market ID."),
+            quoteId: z.string().regex(/^sq_[0-9a-f]{32}$/).describe("Unexpired Sonar quote ID."),
+            ownerWallet: z.string().min(32).max(44).describe("Base58 owner wallet public key."),
+            sessionPublicKey: z
+                .string()
+                .min(32)
+                .max(44)
+                .describe("Base58 public key for the externally configured signer."),
+            accountSequence: z
+                .string()
+                .regex(/^[0-9]+$/)
+                .max(20)
+                .describe("Current Vault account sequence as an unsigned decimal string."),
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
+    }, async ({ market, quoteId, ownerWallet, sessionPublicKey, accountSequence }) => guardedTool(client, "trade.prepare", async () => {
+        const request = {
+            market,
+            quoteId,
+            ownerWallet,
+            sessionPublicKey,
+            accountSequence,
+        };
+        const response = await client.executionChallenge(request);
+        return toolResult(response, `Authorization challenge ${response.challenge_id}; expires at ${response.expires_at_ms}.`);
+    }));
+    const executionPrepare = server.registerTool("strata_execution_prepare", {
+        title: "Prepare Strata execution",
+        description: "Exchange an externally signed authorization challenge for a quote-bound partially signed transaction.",
+        inputSchema: {
+            market: z.string().min(1).max(128).describe("Market label or public market ID."),
+            challengeId: z
+                .string()
+                .regex(/^sc_[0-9a-f]{32}$/)
+                .describe("Execution challenge ID returned by Strata."),
+            authorizationSignature: z
+                .string()
+                .min(1)
+                .max(128)
+                .regex(/^[1-9A-HJ-NP-Za-km-z]+$/)
+                .describe("Base58 Ed25519 signature made externally over the challenge payload."),
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
+    }, async ({ market, challengeId, authorizationSignature }) => guardedTool(client, "trade.prepare", async () => {
+        const request = {
+            market,
+            challengeId,
+            authorizationSignature,
+        };
+        const response = await client.executionPrepare(request);
+        return toolResult(response, `Prepared execution ${response.execution_id}; externally verify and sign before ${response.expires_at_ms}.`);
+    }));
+    const executionSubmit = server.registerTool("strata_execution_submit", {
+        title: "Submit Strata execution",
+        description: "Submit an externally signed prepared transaction with an idempotency key.",
+        inputSchema: {
+            market: z.string().min(1).max(128).describe("Market label or public market ID."),
+            executionId: z
+                .string()
+                .regex(/^se_[0-9a-f]{32}$/)
+                .describe("Prepared execution ID returned by Strata."),
+            signedTransactionBase64: z
+                .string()
+                .min(4)
+                .max(8_192)
+                .regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/)
+                .describe("The externally signed Solana transaction in canonical base64."),
+            idempotencyKey: z
+                .string()
+                .min(1)
+                .max(64)
+                .regex(/^[A-Za-z0-9._-]+$/)
+                .describe("Stable retry key for exactly this execution."),
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+    }, async ({ market, executionId, signedTransactionBase64, idempotencyKey }) => guardedTool(client, "trade.submit", async () => {
+        const request = {
+            market,
+            executionId,
+            signedTransactionBase64,
+            idempotencyKey,
+        };
+        const response = await client.executionSubmit(request);
+        return toolResult(response, `Submitted execution ${response.execution_id} as ${response.signature}.`);
+    }));
+    const handles = {
+        markets,
+        quote,
+        executionChallenge,
+        executionPrepare,
+        executionSubmit,
+    };
     applyCapabilityCatalog(handles, initialCatalog);
     let closed = false;
     const refresh = async () => {
@@ -185,6 +318,9 @@ export async function createStrataMcpServer(options = {}) {
 function applyCapabilityCatalog(handles, catalog) {
     setToolEnabled(handles.markets, capabilityAvailable(catalog, "markets.read"));
     setToolEnabled(handles.quote, capabilityAvailable(catalog, "quotes.read"));
+    setToolEnabled(handles.executionChallenge, capabilityAvailable(catalog, "trade.prepare"));
+    setToolEnabled(handles.executionPrepare, capabilityAvailable(catalog, "trade.prepare"));
+    setToolEnabled(handles.executionSubmit, capabilityAvailable(catalog, "trade.submit"));
 }
 function setToolEnabled(tool, enabled) {
     if (enabled)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratabook/mcp",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Connect AI agents to Strata markets and Sonar quotes with MCP.",
   "type": "module",
   "license": "MIT OR Apache-2.0",
@@ -44,7 +44,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@stratabook/sdk": "0.1.2",
+    "@stratabook/sdk": "0.1.4",
     "zod": "^3.25.76"
   },
   "devDependencies": {