@stratabook/mcp 0.2.5 → 0.2.6

package/README.md

@@ -91,13 +91,15 @@ For normal maker operation, use two calls:
    such as `0.01 SOL`, and the maker wallet. Duration defaults to ten minutes
    and levels default to three.
 2. Verify and sign only `prepared.transaction_base64` in the external wallet,
-   then pass it and `prepared.maker_control_id` to
-   `strata_market_making_submit_and_wait`.
+   then pass it, `prepared.maker_control_id`, and the unchanged
+   `preparationToken` to `strata_market_making_submit_and_wait`.
 
 The second call returns only after Strata's chain-derived maker status matches
-the exact product settings. Use `action: "stop"` through the same pair. The
-older product-specific tools remain available for strategies that deliberately
-manage every low-level array and safety field.
+the exact product settings. The token contains no signing authority and keeps
+the two-call flow working across stateless HTTP requests or an MCP process
+restart. Use `action: "stop"` through the same pair. The older product-specific
+tools remain available for strategies that deliberately manage every low-level
+array and safety field.
 
 For maker funding, initialize the market Vault if needed, activate the Strand
 or Current, then deposit with `strata_vault_deposit`. The market keeps that

package/dist/src/generated-harness.d.ts

@@ -17,7 +17,7 @@ export declare const STRATA_AGENT_HARNESS: {
         readonly manifest: "https://api.stratabook.app/.well-known/strata-agent.json";
     };
     readonly interfaces: {
-        readonly mcp_tool_order: readonly ["strata_capabilities", "strata_action_graph", "strata_platform_graph", "strata_status", "strata_markets", "strata_marks", "strata_candles", "strata_twaps", "strata_twap_challenge", "strata_twap_cancel", "strata_twap_prepare", "strata_twap_submit", "strata_portfolio", "strata_portfolio_history", "strata_market_making_status", "strata_market_making_reputation", "strata_vault_status", "strata_vault_setup", "strata_vault_deposit", "strata_vault_withdraw", "strata_vault_delegate", "strata_vault_policy", "strata_vault_pause", "strata_vault_submit", "strata_vault_submission", "strata_rewards", "strata_referrals", "strata_referral_link", "strata_referral_claim", "strata_bugs", "strata_bug_submit", "strata_quote", "strata_exact_output_quote", "strata_swap_quote", "strata_execution_challenge", "strata_execution_prepare", "strata_execution_submit", "strata_execution_status", "strata_order_challenge", "strata_order_prepare", "strata_order_submit", "strata_order_status"];
+        readonly mcp_tool_order: readonly ["strata_capabilities", "strata_action_graph", "strata_platform_graph", "strata_status", "strata_markets", "strata_marks", "strata_candles", "strata_twaps", "strata_twap_challenge", "strata_twap_cancel", "strata_twap_prepare", "strata_twap_submit", "strata_portfolio", "strata_portfolio_history", "strata_market_making_status", "strata_market_making_reputation", "strata_market_making_prepare", "strata_market_making_submit_and_wait", "strata_vault_status", "strata_vault_setup", "strata_vault_deposit", "strata_vault_withdraw", "strata_vault_delegate", "strata_vault_policy", "strata_vault_pause", "strata_vault_submit", "strata_vault_submission", "strata_rewards", "strata_referrals", "strata_referral_link", "strata_referral_claim", "strata_bugs", "strata_bug_submit", "strata_quote", "strata_exact_output_quote", "strata_swap_quote", "strata_execution_challenge", "strata_execution_prepare", "strata_execution_submit", "strata_execution_status", "strata_order_challenge", "strata_order_prepare", "strata_order_submit", "strata_order_status"];
         readonly terminal: readonly ["npx -y @stratabook/sdk capabilities --json", "npx -y @stratabook/sdk action-graph --json", "npx -y @stratabook/sdk platform-graph --json", "npx -y @stratabook/sdk platform-status --json", "npx -y @stratabook/sdk mark --market-id MARKET_ID --json", "npx -y @stratabook/sdk candles --market-id MARKET_ID --from-ms FROM_MS --to-ms TO_MS --resolution-seconds 300 --json", "npx -y @stratabook/sdk execution-status --market-id MARKET_ID --execution-id EXECUTION_ID --json", "npx -y @stratabook/sdk twaps --market-id MARKET_ID --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk twap-challenge --market-id MARKET_ID --owner-wallet OWNER_PUBLIC_KEY --session-public-key SESSION_PUBLIC_KEY --side buy --total-size-atoms TOTAL_ATOMS --slices 10 --tolerance-bps 100 --interval-slots 100 --limit-price-atoms PRICE_ATOMS --json", "npx -y @stratabook/sdk twap-cancel --market-id MARKET_ID --owner-wallet OWNER_PUBLIC_KEY --session-public-key SESSION_PUBLIC_KEY --twap-id TWAP_ID --json", "npx -y @stratabook/sdk twap-prepare --market-id MARKET_ID --owner-wallet OWNER_PUBLIC_KEY --session-public-key SESSION_PUBLIC_KEY --side buy --total-size-atoms TOTAL_ATOMS --slices 10 --tolerance-bps 100 --interval-slots 100 --limit-price-atoms PRICE_ATOMS --json", "npx -y @stratabook/sdk twap-submit --market-id MARKET_ID --twap-control-id CONTROL_ID --signed-transaction-base64 TRANSACTION --idempotency-key KEY --json", "npx -y @stratabook/sdk account --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk portfolio-history --wallet WALLET_PUBLIC_KEY --range 24h --json", "npx -y @stratabook/sdk maker-status --market-id MARKET_ID --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk maker-reputation --market-id MARKET_ID --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk vault-status --wallet WALLET_PUBLIC_KEY --session-public-key SESSION_PUBLIC_KEY --json", "npx -y @stratabook/sdk session-keygen --json", "npx -y @stratabook/sdk vault-setup --wallet WALLET_PUBLIC_KEY --session-public-key SESSION_PUBLIC_KEY --json", "npx -y @stratabook/sdk vault-deposit --wallet WALLET_PUBLIC_KEY --market-id MARKET_ID --asset-id ASSET_ID --amount-atoms AMOUNT --session-public-key SESSION_PUBLIC_KEY --json", "npx -y @stratabook/sdk vault-withdraw --wallet WALLET_PUBLIC_KEY --market-id MARKET_ID --asset-id ASSET_ID --destination-wallet DESTINATION_WALLET --amount-atoms AMOUNT --json", "npx -y @stratabook/sdk vault-delegate --wallet WALLET_PUBLIC_KEY --session-public-key SESSION_PUBLIC_KEY --action revoke --json", "npx -y @stratabook/sdk vault-policy --wallet WALLET_PUBLIC_KEY --mode restricted --allowed-wallets DESTINATION_WALLET --json", "npx -y @stratabook/sdk vault-pause --wallet WALLET_PUBLIC_KEY --paused true --json", "npx -y @stratabook/sdk rewards --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk referrals --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk referral-link --wallet WALLET_PUBLIC_KEY --code REFERRAL_CODE --json", "npx -y @stratabook/sdk referral-claim --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk bugs --wallet WALLET_PUBLIC_KEY --json", "npx -y @stratabook/sdk bug-payload --message REPORT_TEXT --json", "npx -y @stratabook/sdk markets --json", "npx -y @stratabook/sdk quote --market SOL/USDC --side sell --amount-atoms 10000000 --json", "npx -y @stratabook/sdk swap-quote --input-asset-id INPUT_ASSET_ID --output-asset-id OUTPUT_ASSET_ID --amount-atoms 10000000 --json", "npx -y @stratabook/sdk order-slo --market-id MARKET_ID --owner-wallet OWNER_PUBLIC_KEY --json"];
     };
     readonly workflow: readonly [{
@@ -551,4 +551,4 @@ export declare const STRATA_ACTION_GRAPH: {
     }];
 };
 export declare const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
-export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";
+export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. For normal Strand or Current operation, prefer strata_market_making_prepare, sign only its prepared transaction externally, then pass its unchanged preparationToken with the signed transaction to strata_market_making_submit_and_wait; the token carries no signing authority and survives stateless HTTP requests. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/dist/src/generated-harness.js

@@ -35,6 +35,8 @@ export const STRATA_AGENT_HARNESS = {
             "strata_portfolio_history",
             "strata_market_making_status",
             "strata_market_making_reputation",
+            "strata_market_making_prepare",
+            "strata_market_making_submit_and_wait",
             "strata_vault_status",
             "strata_vault_setup",
             "strata_vault_deposit",
@@ -786,4 +788,4 @@ export const STRATA_ACTION_GRAPH = {
     ]
 };
 export const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
-export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";
+export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. For normal Strand or Current operation, prefer strata_market_making_prepare, sign only its prepared transaction externally, then pass its unchanged preparationToken with the signed transaction to strata_market_making_submit_and_wait; the token carries no signing authority and survives stateless HTTP requests. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/dist/src/server.js

@@ -6,6 +6,155 @@ import { STRATA_AGENT_HARNESS, STRATA_AGENT_HARNESS_INSTRUCTIONS, STRATA_AGENT_H
 import { SERVER_VERSION } from "./version.js";
 const REFRESH_INTERVAL_MS = 5_000;
 export const STRATA_PLATFORM_GRAPH_URI = "strata://platform-graph/v2";
+const makerPublicKeySchema = z.string().regex(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/);
+const makerMarketIdSchema = z.string().regex(/^market_[0-9a-f]{32}$/);
+const makerAssetIdSchema = z.string().regex(/^asset_[0-9a-f]{32}$/);
+const makerControlIdSchema = z.string().regex(/^mc_[0-9a-f]{32}$/);
+const makerAtomicSchema = z.string().regex(/^(?:0|[1-9][0-9]*)$/).max(20);
+const makerPositiveAtomicSchema = z.string().regex(/^[1-9][0-9]*$/).max(20);
+const makerBase64Schema = z.string().min(4).max(4_096)
+    .regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
+const makerMarketSchema = z.object({
+    market_id: makerMarketIdSchema,
+    label: z.string().min(1).max(128),
+    base_asset_id: makerAssetIdSchema,
+    quote_asset_id: makerAssetIdSchema,
+    status: z.enum([
+        "active",
+        "read_only",
+        "quote_only",
+        "cancel_only",
+        "paused",
+        "warming",
+        "degraded",
+        "unavailable",
+    ]),
+    available_actions: z.array(z.enum([
+        "quote",
+        "execute_immediate",
+        "place_order",
+        "schedule_twap",
+    ])).max(4),
+}).strict();
+const makerAssetSchema = z.object({
+    asset_id: makerAssetIdSchema,
+    symbol: z.string().min(1).max(32),
+    name: z.string().min(1).max(128),
+    decimals: z.number().int().min(0).max(18),
+    logo_url: z.string().url().optional(),
+    network: z.literal("solana"),
+}).strict();
+const makerStrandOperationSchema = z.discriminatedUnion("action", [
+    z.object({
+        action: z.literal("upsert"),
+        makerWallet: makerPublicKeySchema,
+        enabled: z.boolean(),
+        asyncOnly: z.boolean(),
+        syncSpreadTicks: z.number().int().min(0).max(65_535),
+        midPriceAtoms: makerPositiveAtomicSchema,
+        maxExposureBaseAtoms: makerPositiveAtomicSchema,
+        bidOffsetsTicks: z.array(z.number().int().min(0).max(65_535)).length(16),
+        askOffsetsTicks: z.array(z.number().int().min(0).max(65_535)).length(16),
+        bidSizesBaseAtoms: z.array(makerAtomicSchema).length(16),
+        askSizesBaseAtoms: z.array(makerAtomicSchema).length(16),
+        validUntilSlot: makerPositiveAtomicSchema,
+    }).strict(),
+    z.object({
+        action: z.literal("cancel"),
+        makerWallet: makerPublicKeySchema,
+    }).strict(),
+]);
+const makerCurrentOperationSchema = z.discriminatedUnion("action", [
+    z.object({
+        action: z.literal("upsert"),
+        makerWallet: makerPublicKeySchema,
+        enabled: z.boolean(),
+        asyncOnly: z.boolean(),
+        halfSpreadBps: z.number().int().min(1).max(65_535),
+        bandStepBps: z.number().int().min(0).max(65_535),
+        maxConfidenceBps: z.number().int().min(1).max(100),
+        maxOracleDeviationBps: z.number().int().min(1).max(500),
+        maxOracleAgeSeconds: z.number().int().min(0).max(4_294_967_295),
+        syncSpreadBps: z.number().int().min(0).max(65_535),
+        maxExposureBaseAtoms: makerPositiveAtomicSchema,
+        bidDepthBaseAtoms: z.array(makerAtomicSchema).length(8),
+        askDepthBaseAtoms: z.array(makerAtomicSchema).length(8),
+        validUntilSlot: makerPositiveAtomicSchema,
+    }).strict(),
+    z.object({
+        action: z.literal("cancel"),
+        makerWallet: makerPublicKeySchema,
+    }).strict(),
+]);
+const makerPreparedResponseSchema = z.object({
+    schema_version: z.literal(2),
+    contract_version: z.literal("2.0"),
+    maker_control_id: makerControlIdSchema,
+    market_id: makerMarketIdSchema,
+    maker_wallet: makerPublicKeySchema,
+    product: z.enum(["strand", "current"]),
+    action: z.enum([
+        "strand_upsert",
+        "strand_recenter",
+        "strand_set_enabled",
+        "strand_cancel",
+        "current_upsert",
+        "current_cancel",
+    ]),
+    transaction_base64: makerBase64Schema,
+    recent_blockhash: makerPublicKeySchema,
+    last_valid_block_height: z.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
+    expires_at_ms: z.number().int().min(1).max(Number.MAX_SAFE_INTEGER),
+}).strict();
+const makerPreparationSchema = z.object({
+    market: makerMarketSchema,
+    base_asset: makerAssetSchema.optional(),
+    product: z.enum(["strand", "current"]),
+    operation: z.union([makerStrandOperationSchema, makerCurrentOperationSchema]),
+    prepared: makerPreparedResponseSchema,
+}).strict();
+const makerPreparationEnvelopeSchema = z.object({
+    version: z.literal(1),
+    preparation: makerPreparationSchema,
+}).strict();
+function encodeMakerPreparationToken(preparation) {
+    const checked = makerPreparationSchema.parse(preparation);
+    return Buffer.from(JSON.stringify({ version: 1, preparation: checked }), "utf8")
+        .toString("base64url");
+}
+function decodeMakerPreparationToken(token) {
+    let decoded;
+    try {
+        const bytes = Buffer.from(token, "base64url");
+        if (bytes.toString("base64url") !== token) {
+            throw new Error("non-canonical base64url");
+        }
+        decoded = JSON.parse(bytes.toString("utf8"));
+    }
+    catch {
+        throw new Error("preparationToken is not valid encoded JSON");
+    }
+    const { preparation } = makerPreparationEnvelopeSchema.parse(decoded);
+    const expectedAction = preparation.product === "strand"
+        ? preparation.operation.action === "upsert" ? "strand_upsert" : "strand_cancel"
+        : preparation.operation.action === "upsert" ? "current_upsert" : "current_cancel";
+    if (preparation.prepared.product !== preparation.product
+        || preparation.prepared.action !== expectedAction
+        || preparation.prepared.market_id !== preparation.market.market_id
+        || preparation.prepared.maker_wallet !== preparation.operation.makerWallet
+        || (preparation.product === "strand"
+            && preparation.operation.action === "upsert"
+            && !("midPriceAtoms" in preparation.operation))
+        || (preparation.product === "current"
+            && preparation.operation.action === "upsert"
+            && !("halfSpreadBps" in preparation.operation))
+        || (preparation.operation.action === "upsert" && preparation.base_asset === undefined)
+        || (preparation.base_asset !== undefined
+            && preparation.base_asset.asset_id !== preparation.market.base_asset_id)) {
+        throw new Error("preparationToken contains inconsistent maker bindings");
+    }
+    return preparation;
+}
 const LEGACY_TOOL_CAPABILITIES = {
     strata_markets: { ids: ["markets.read"] },
     strata_quote: { ids: ["quotes.read"] },
@@ -260,7 +409,6 @@ export async function createStrataMcpServer(options = {}) {
         instructions: STRATA_AGENT_HARNESS_INSTRUCTIONS,
     });
     const { registerTool, handles: registeredTools } = trackedToolRegistrar(server);
-    const makerQuickstartPreparations = new Map();
     server.registerResource("strata_agent_harness", STRATA_AGENT_HARNESS_URI, {
         title: "Strata Agent Harness",
         description: "Canonical capability-gated first-run workflow for Strata agents.",
@@ -1567,13 +1715,6 @@ export async function createStrataMcpServer(options = {}) {
             return toolError("invalid_request", "Starting market making requires spreadBps and size.", false);
         }
         const resolved = await prepared;
-        makerQuickstartPreparations.set(resolved.prepared.maker_control_id, resolved);
-        while (makerQuickstartPreparations.size > 128) {
-            const oldest = makerQuickstartPreparations.keys().next().value;
-            if (oldest === undefined)
-                break;
-            makerQuickstartPreparations.delete(oldest);
-        }
         const response = {
             action: args.action,
             market: resolved.market,
@@ -1581,14 +1722,16 @@ export async function createStrataMcpServer(options = {}) {
             ...("base_asset" in resolved ? { base_asset: resolved.base_asset } : {}),
             operation: resolved.operation,
             prepared: resolved.prepared,
+            preparationToken: encodeMakerPreparationToken(resolved),
         };
-        return toolResult(response, `Prepared ${args.action} for ${resolved.market.label} as ${resolved.prepared.maker_control_id}. Verify and sign only prepared.transaction_base64, then submit it within 30 seconds.`);
+        return toolResult(response, `Prepared ${args.action} for ${resolved.market.label} as ${resolved.prepared.maker_control_id}. Verify and sign only prepared.transaction_base64, then pass preparationToken unchanged to submit_and_wait within 30 seconds.`);
     }));
     const makerSubmitAndWait = registerTool("strata_market_making_submit_and_wait", {
         title: "Submit and confirm Strata market making",
-        description: "Submit the exact externally signed quickstart transaction and wait until Strata's chain-derived maker state confirms the product started or stopped. The control ID is its default idempotency key.",
+        description: "Submit the exact externally signed quickstart transaction with the unchanged preparation token and wait until Strata's chain-derived maker state confirms the product started or stopped. The token survives stateless HTTP requests and server restarts; the control ID is its default idempotency key.",
         inputSchema: {
             makerControlId: z.string().regex(/^mc_[0-9a-f]{32}$/),
+            preparationToken: z.string().min(16).max(32_768).regex(/^[A-Za-z0-9_-]+$/),
             signedTransactionBase64: z.string().min(4).max(4_096).regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/),
             idempotencyKey: z.string().min(1).max(64).regex(/^[A-Za-z0-9._-]+$/).optional(),
             confirmationTimeoutMs: z.number().int().min(1_000).max(120_000).optional(),
@@ -1600,9 +1743,15 @@ export async function createStrataMcpServer(options = {}) {
             openWorldHint: true,
         },
     }, async (args) => {
-        const prepared = makerQuickstartPreparations.get(args.makerControlId);
-        if (!prepared) {
-            return toolError("session_expired", "This quickstart preparation is not in the current MCP session. Prepare it again; maker transactions expire after 30 seconds.", false);
+        let prepared;
+        try {
+            prepared = decodeMakerPreparationToken(args.preparationToken);
+        }
+        catch {
+            return toolError("invalid_request", "preparationToken is invalid. Pass the token returned by strata_market_making_prepare unchanged.", false);
+        }
+        if (prepared.prepared.maker_control_id !== args.makerControlId) {
+            return toolError("binding_mismatch", "makerControlId does not match preparationToken.", false);
         }
         return guardedTool(client, `mm.${prepared.product}.manage`, async () => {
             const response = await platformClient.marketMaking.submitPrepared({
@@ -1613,7 +1762,6 @@ export async function createStrataMcpServer(options = {}) {
                     ? {}
                     : { confirmationTimeoutMs: args.confirmationTimeoutMs }),
             });
-            makerQuickstartPreparations.delete(args.makerControlId);
             return toolResult(response, `${response.product} is confirmed ${response.operation.action === "cancel" ? "stopped" : "live"} on ${response.market.label}.`);
         });
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratabook/mcp",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Connect AI agents to Strata markets and Sonar quotes with MCP.",
   "type": "module",
   "license": "MIT OR Apache-2.0",
@@ -44,7 +44,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@stratabook/sdk": "0.2.5",
+    "@stratabook/sdk": "0.2.6",
     "zod": "^3.25.76"
   },
   "devDependencies": {