@stratabook/mcp 0.1.8 → 0.1.10

package/dist/src/generated-harness.d.ts

@@ -3,7 +3,7 @@ export declare const STRATA_AGENT_HARNESS: {
     readonly harness_version: "1.0";
     readonly contract_version: "1.1";
     readonly name: "Strata Agent Harness";
-    readonly summary: "A capability-gated workflow and executable action graph for agents that discover, read market and account state, quote, prepare, externally sign, and submit Strata operations.";
+    readonly summary: "A capability-gated workflow and executable action graph for agents that discover, read, stream low-latency order commands, externally sign, and safely submit Strata operations.";
     readonly entrypoints: {
         readonly documentation: "https://stratabook.org/docs/agent-harness/";
         readonly capabilities: "https://api.stratabook.app/sonar/capabilities";
@@ -16,7 +16,7 @@ export declare const STRATA_AGENT_HARNESS: {
     };
     readonly interfaces: {
         readonly mcp_tool_order: readonly ["strata_capabilities", "strata_action_graph", "strata_markets", "strata_quote", "strata_execution_challenge", "strata_execution_prepare", "strata_execution_submit", "strata_order_challenge", "strata_order_prepare", "strata_order_submit", "strata_order_status"];
-        readonly terminal: readonly ["npx -y @stratabook/sdk capabilities --json", "npx -y @stratabook/sdk action-graph --json", "npx -y @stratabook/sdk markets --json", "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json"];
+        readonly terminal: readonly ["npx -y @stratabook/sdk capabilities --json", "npx -y @stratabook/sdk action-graph --json", "npx -y @stratabook/sdk markets --json", "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json", "npx -y @stratabook/sdk order-slo --market-id MARKET_ID --owner-wallet OWNER_PUBLIC_KEY --json"];
     };
     readonly workflow: readonly [{
         readonly id: "discover_capabilities";
@@ -50,13 +50,22 @@ export declare const STRATA_AGENT_HARNESS: {
         readonly instruction: "Report consumed input, expected output, minimum output, fees by asset side, price impact, and remaining validity.";
     }, {
         readonly id: "authorize_writes";
-        readonly instruction: "When prepare and submit are exposed, keep signing external to Strata: request canonical authorization bytes, sign them with the owner-configured signer, verify the prepared transaction preserves the quote or exact opaque order set, then submit the externally signed transaction with idempotency. Resting-order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations.";
+        readonly instruction: "When prepare and submit are exposed, keep signing external to Strata: request canonical authorization bytes, sign them with the owner-configured signer, verify the prepared transaction preserves the quote or exact opaque order set, then submit the externally signed transaction with idempotency. Resting-order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Every incoming resting order selects an explicit self-trade prevention policy; no policy permits a self-fill.";
+    }, {
+        readonly id: "stream_order_commands";
+        readonly instruction: "When orders.prepare and orders.submit advertise websocket transport, use the official SDK persistent order-command connection. Sign its owner/session/market challenge externally, require contiguous sequences and correlated request IDs, treat the submit result as RPC broadcast only, and consume the pushed terminal status without blocking the placement hot path.";
+    }, {
+        readonly id: "maintain_dead_man";
+        readonly instruction: "Before leaving resting exposure unattended, arm an exact externally verified and pre-signed cancel-all ticket, then maintain its SDK heartbeat. Dropping the guard or losing the agent must stop heartbeats and fail closed into cancellation; disarm only through an explicit owner-authorized action.";
+    }, {
+        readonly id: "certify_order_command_slo";
+        readonly instruction: "Use the official non-trading order-command certification harness before release and on the production schedule. Retain its machine-readable connection count, load, latency percentiles, sequence/error rate, thresholds, and pass/fail result; package support alone is not a latency claim.";
     }, {
         readonly id: "monitor_outcome";
-        readonly instruction: "After an authorized submission, report the durable receipt or explicit failure. If the request times out or either process restarts, recover it with the same control ID and idempotency key. Never claim completion from preparation, signing, or an unconfirmed request.";
+        readonly instruction: "After an authorized submission, report the RPC-broadcast receipt and then the durable terminal status or explicit failure. If the request times out or either process restarts, recover it with the same control ID and idempotency key. Never claim chain completion from preparation, signing, or the immediate broadcast receipt.";
     }];
     readonly stop_conditions: readonly ["The required live capability is disabled or absent.", "The market is paused, unavailable, or has no reviewed operation path.", "Market, side, amount, decimals, tolerance, or signer authority is unavailable or ambiguous.", "The contract version is unsupported or a response contains unknown fields.", "A quote is expired or its market, side, amount, fee, minimum-output, or time binding is inconsistent.", "A requested operation exceeds the exposed tool, account, or policy scope.", "A user asks the agent to receive or expose wallet secrets, private keys, seed phrases, session keys, or production credentials."];
-    readonly safety_rules: readonly ["Never request or accept wallet secrets, private keys, seed phrases, session keys, or production credentials in a prompt.", "Never call undocumented endpoints or reconstruct private Sonar behavior.", "Never silently widen slippage, refresh changed economics, substitute a market, or retry a non-retryable failure.", "Treat capability removal, revocation, expiry, and emergency disable as immediate stop signals.", "Capability and action-graph availability are authoritative for Strata operations; permission and signer policy remain controlled by the external agent owner."];
+    readonly safety_rules: readonly ["Never request or accept wallet secrets, private keys, seed phrases, session keys, or production credentials in a prompt.", "Never call undocumented endpoints or reconstruct private Sonar behavior.", "Never silently widen slippage, refresh changed economics, substitute a market, or retry a non-retryable failure.", "Never select a self-trade policy implicitly, suppress an order-command sequence gap, or disarm a dead-man ticket merely because the client is shutting down.", "Treat capability removal, revocation, expiry, and emergency disable as immediate stop signals.", "Capability and action-graph availability are authoritative for Strata operations; permission and signer policy remain controlled by the external agent owner."];
 };
 export declare const STRATA_AGENT_HARNESS_URI = "strata://agent-harness/v1";
 export declare const STRATA_ACTION_GRAPH: {
@@ -321,6 +330,36 @@ export declare const STRATA_ACTION_GRAPH: {
         readonly summary: "Receive the opaque order IDs, transaction signature, and submitted status.";
         readonly required_capabilities: readonly [];
         readonly available: true;
+    }, {
+        readonly id: "open_order_command_stream";
+        readonly kind: "prepare";
+        readonly summary: "Authenticate one persistent sequenced order channel for low-latency commands, explicit self-trade policy, and pushed confirmation.";
+        readonly required_capabilities: readonly ["orders.prepare", "orders.submit"];
+        readonly available: false;
+        readonly operation: {
+            readonly method: "WEBSOCKET";
+            readonly path: "/v2/markets/{market_id}/orders/stream";
+        };
+    }, {
+        readonly id: "maintain_dead_man";
+        readonly kind: "submit";
+        readonly summary: "Arm and heartbeat an exact pre-signed cancel-all that executes if the agent stops responding.";
+        readonly required_capabilities: readonly ["orders.prepare", "orders.submit"];
+        readonly available: false;
+        readonly operation: {
+            readonly method: "WEBSOCKET";
+            readonly path: "/v2/markets/{market_id}/orders/stream";
+        };
+    }, {
+        readonly id: "certify_order_command_slo";
+        readonly kind: "read";
+        readonly summary: "Measure authenticated command latency, concurrency, sequence integrity, and error rate without submitting a trade.";
+        readonly required_capabilities: readonly ["orders.prepare", "orders.submit"];
+        readonly available: false;
+        readonly operation: {
+            readonly method: "WEBSOCKET";
+            readonly path: "/v2/markets/{market_id}/orders/stream";
+        };
     }, {
         readonly id: "recover_order_status";
         readonly kind: "read";
@@ -413,6 +452,22 @@ export declare const STRATA_ACTION_GRAPH: {
         readonly from: "submit_execution";
         readonly to: "receive_receipt";
         readonly condition: "the execution ID and idempotency key match";
+    }, {
+        readonly from: "discover_platform_markets";
+        readonly to: "open_order_command_stream";
+        readonly condition: "orders.prepare and orders.submit advertise websocket transport and the owner-configured session signer is available";
+    }, {
+        readonly from: "open_order_command_stream";
+        readonly to: "request_order_challenge";
+        readonly condition: "signed socket authentication succeeds and an explicit self-trade prevention policy is selected";
+    }, {
+        readonly from: "open_order_command_stream";
+        readonly to: "maintain_dead_man";
+        readonly condition: "the exact cancel-all authorization and transaction are externally verified and signed";
+    }, {
+        readonly from: "open_order_command_stream";
+        readonly to: "certify_order_command_slo";
+        readonly condition: "a release or recurring production load certificate is required";
     }, {
         readonly from: "discover_platform_markets";
         readonly to: "request_order_challenge";
@@ -441,6 +496,10 @@ export declare const STRATA_ACTION_GRAPH: {
         readonly from: "submit_order_control";
         readonly to: "recover_order_status";
         readonly condition: "the submission result is ambiguous or either process restarted";
+    }, {
+        readonly from: "submit_order_control";
+        readonly to: "maintain_dead_man";
+        readonly condition: "the agent has resting exposure that must fail closed on disconnect";
     }, {
         readonly from: "recover_order_status";
         readonly to: "receive_order_receipt";
@@ -448,4 +507,4 @@ export declare const STRATA_ACTION_GRAPH: {
     }];
 };
 export declare const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
-export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_markets. Read strata://agent-harness/v1 and strata://action-graph/v1. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. If order submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";
+export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_markets. Read strata://agent-harness/v1 and strata://action-graph/v1. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/dist/src/generated-harness.js

@@ -4,7 +4,7 @@ export const STRATA_AGENT_HARNESS = {
     "harness_version": "1.0",
     "contract_version": "1.1",
     "name": "Strata Agent Harness",
-    "summary": "A capability-gated workflow and executable action graph for agents that discover, read market and account state, quote, prepare, externally sign, and submit Strata operations.",
+    "summary": "A capability-gated workflow and executable action graph for agents that discover, read, stream low-latency order commands, externally sign, and safely submit Strata operations.",
     "entrypoints": {
         "documentation": "https://stratabook.org/docs/agent-harness/",
         "capabilities": "https://api.stratabook.app/sonar/capabilities",
@@ -33,7 +33,8 @@ export const STRATA_AGENT_HARNESS = {
             "npx -y @stratabook/sdk capabilities --json",
             "npx -y @stratabook/sdk action-graph --json",
             "npx -y @stratabook/sdk markets --json",
-            "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json"
+            "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json",
+            "npx -y @stratabook/sdk order-slo --market-id MARKET_ID --owner-wallet OWNER_PUBLIC_KEY --json"
         ]
     },
     "workflow": [
@@ -79,11 +80,23 @@ export const STRATA_AGENT_HARNESS = {
         },
         {
             "id": "authorize_writes",
-            "instruction": "When prepare and submit are exposed, keep signing external to Strata: request canonical authorization bytes, sign them with the owner-configured signer, verify the prepared transaction preserves the quote or exact opaque order set, then submit the externally signed transaction with idempotency. Resting-order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations."
+            "instruction": "When prepare and submit are exposed, keep signing external to Strata: request canonical authorization bytes, sign them with the owner-configured signer, verify the prepared transaction preserves the quote or exact opaque order set, then submit the externally signed transaction with idempotency. Resting-order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Every incoming resting order selects an explicit self-trade prevention policy; no policy permits a self-fill."
+        },
+        {
+            "id": "stream_order_commands",
+            "instruction": "When orders.prepare and orders.submit advertise websocket transport, use the official SDK persistent order-command connection. Sign its owner/session/market challenge externally, require contiguous sequences and correlated request IDs, treat the submit result as RPC broadcast only, and consume the pushed terminal status without blocking the placement hot path."
+        },
+        {
+            "id": "maintain_dead_man",
+            "instruction": "Before leaving resting exposure unattended, arm an exact externally verified and pre-signed cancel-all ticket, then maintain its SDK heartbeat. Dropping the guard or losing the agent must stop heartbeats and fail closed into cancellation; disarm only through an explicit owner-authorized action."
+        },
+        {
+            "id": "certify_order_command_slo",
+            "instruction": "Use the official non-trading order-command certification harness before release and on the production schedule. Retain its machine-readable connection count, load, latency percentiles, sequence/error rate, thresholds, and pass/fail result; package support alone is not a latency claim."
         },
         {
             "id": "monitor_outcome",
-            "instruction": "After an authorized submission, report the durable receipt or explicit failure. If the request times out or either process restarts, recover it with the same control ID and idempotency key. Never claim completion from preparation, signing, or an unconfirmed request."
+            "instruction": "After an authorized submission, report the RPC-broadcast receipt and then the durable terminal status or explicit failure. If the request times out or either process restarts, recover it with the same control ID and idempotency key. Never claim chain completion from preparation, signing, or the immediate broadcast receipt."
         }
     ],
     "stop_conditions": [
@@ -99,6 +112,7 @@ export const STRATA_AGENT_HARNESS = {
         "Never request or accept wallet secrets, private keys, seed phrases, session keys, or production credentials in a prompt.",
         "Never call undocumented endpoints or reconstruct private Sonar behavior.",
         "Never silently widen slippage, refresh changed economics, substitute a market, or retry a non-retryable failure.",
+        "Never select a self-trade policy implicitly, suppress an order-command sequence gap, or disarm a dead-man ticket merely because the client is shutting down.",
         "Treat capability removal, revocation, expiry, and emergency disable as immediate stop signals.",
         "Capability and action-graph availability are authoritative for Strata operations; permission and signer policy remain controlled by the external agent owner."
     ]
@@ -428,6 +442,48 @@ export const STRATA_ACTION_GRAPH = {
             "required_capabilities": [],
             "available": true
         },
+        {
+            "id": "open_order_command_stream",
+            "kind": "prepare",
+            "summary": "Authenticate one persistent sequenced order channel for low-latency commands, explicit self-trade policy, and pushed confirmation.",
+            "required_capabilities": [
+                "orders.prepare",
+                "orders.submit"
+            ],
+            "available": false,
+            "operation": {
+                "method": "WEBSOCKET",
+                "path": "/v2/markets/{market_id}/orders/stream"
+            }
+        },
+        {
+            "id": "maintain_dead_man",
+            "kind": "submit",
+            "summary": "Arm and heartbeat an exact pre-signed cancel-all that executes if the agent stops responding.",
+            "required_capabilities": [
+                "orders.prepare",
+                "orders.submit"
+            ],
+            "available": false,
+            "operation": {
+                "method": "WEBSOCKET",
+                "path": "/v2/markets/{market_id}/orders/stream"
+            }
+        },
+        {
+            "id": "certify_order_command_slo",
+            "kind": "read",
+            "summary": "Measure authenticated command latency, concurrency, sequence integrity, and error rate without submitting a trade.",
+            "required_capabilities": [
+                "orders.prepare",
+                "orders.submit"
+            ],
+            "available": false,
+            "operation": {
+                "method": "WEBSOCKET",
+                "path": "/v2/markets/{market_id}/orders/stream"
+            }
+        },
         {
             "id": "recover_order_status",
             "kind": "read",
@@ -544,6 +600,26 @@ export const STRATA_ACTION_GRAPH = {
             "to": "receive_receipt",
             "condition": "the execution ID and idempotency key match"
         },
+        {
+            "from": "discover_platform_markets",
+            "to": "open_order_command_stream",
+            "condition": "orders.prepare and orders.submit advertise websocket transport and the owner-configured session signer is available"
+        },
+        {
+            "from": "open_order_command_stream",
+            "to": "request_order_challenge",
+            "condition": "signed socket authentication succeeds and an explicit self-trade prevention policy is selected"
+        },
+        {
+            "from": "open_order_command_stream",
+            "to": "maintain_dead_man",
+            "condition": "the exact cancel-all authorization and transaction are externally verified and signed"
+        },
+        {
+            "from": "open_order_command_stream",
+            "to": "certify_order_command_slo",
+            "condition": "a release or recurring production load certificate is required"
+        },
         {
             "from": "discover_platform_markets",
             "to": "request_order_challenge",
@@ -579,6 +655,11 @@ export const STRATA_ACTION_GRAPH = {
             "to": "recover_order_status",
             "condition": "the submission result is ambiguous or either process restarted"
         },
+        {
+            "from": "submit_order_control",
+            "to": "maintain_dead_man",
+            "condition": "the agent has resting exposure that must fail closed on disconnect"
+        },
         {
             "from": "recover_order_status",
             "to": "receive_order_receipt",
@@ -587,4 +668,4 @@ export const STRATA_ACTION_GRAPH = {
     ]
 };
 export const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
-export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_markets. Read strata://agent-harness/v1 and strata://action-graph/v1. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. If order submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";
+export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_markets. Read strata://agent-harness/v1 and strata://action-graph/v1. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve the market, side, exact input atoms, and tolerance before strata_quote. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratabook/mcp",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Connect AI agents to Strata markets and Sonar quotes with MCP.",
   "type": "module",
   "license": "MIT OR Apache-2.0",
@@ -44,7 +44,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@stratabook/sdk": "0.1.7",
+    "@stratabook/sdk": "0.1.9",
     "zod": "^3.25.76"
   },
   "devDependencies": {