@stratabook/mcp 0.2.9 → 0.2.11

package/CHANGELOG.md

@@ -0,0 +1,118 @@
+# Changelog
+
+All notable changes to the Strata SDKs (`@stratabook/sdk`, `@stratabook/mcp`,
+and the `strata-sdk` Rust crate) are recorded here. Versions move together.
+
+## 0.2.11
+
+- Consume the exact TypeScript SDK 0.2.11 release containing the installed
+  maker-conformance CLI entrypoint fix.
+- Make the zero-credential read-only path explicit in MCP initialization:
+  markets, books, marks, candles, trades, quotes, public portfolios, and maker
+  reads work immediately. Agents must not request session secrets in chat or
+  begin write onboarding unless the user asks to trade.
+
+## 0.2.10
+
+- Consume the matching SDK conformance release. The safe deployment gate now
+  exercises hosted MCP discovery, maker reads, and fresh-request Strand and
+  Current preparations after every activation; funded mode proves the
+  restart-safe prepare/submit path with a real externally signed Current.
+
+## 0.2.9
+
+- Correct the maker preparation terminology inherited from the SDK:
+  `transaction_version=0` is browser-safe native Solana v0, not legacy.
+  Runtime behavior is unchanged from 0.2.8.
+
+## 0.2.8
+
+- Consume `@stratabook/sdk` 0.2.8 so hosted maker quickstarts request
+  browser-safe native-v0 preparations compatible with external wallets.
+
+## 0.2.7
+
+- Consume `@stratabook/sdk` 0.2.7 so maker quickstarts accept the human base
+  symbol from the selected market label, including `SOL` for `SOL/USDC`, and
+  inherit its post-sign transaction-message invariant.
+
+## 0.2.6
+
+- Carry verified maker preparations across stateless HTTP requests with the
+  returned `preparationToken`; submit validates all market, product, wallet,
+  operation, transaction, and control-ID bindings before using it.
+- Add both maker quickstart tools to the canonical machine-readable harness.
+
+## 0.2.5
+
+- Add `strata_market_making_prepare` and
+  `strata_market_making_submit_and_wait`. Agents now provide a market label,
+  product, spread, decimal base size, and duration, sign one exact transaction
+  externally, and receive chain-derived confirmation without managing arrays,
+  atoms, opaque IDs, tick math, or expiry slots.
+
+## 0.2.2
+
+- Correct every Strand exposure and level-size tool input from `BaseLots` to
+  `BaseAtoms` so agents receive the actual on-chain unit.
+- State explicitly that positive base-atom amounts are valid order sizes and
+  the market price denominator is not a minimum order size.
+
+## 0.2.0
+
+The unattended-agent release: an external agent can now onboard, hold one
+balance across markets, trade instantly under a user-owned safety slider, and see the book it
+trades into — all without a human signing each action, and without any venue,
+route, or pool ever crossing the boundary.
+
+### Onboarding & signing
+- **One-signature onboarding.** `vault.setup` works for every user-bounded
+  market — register a capped, revocable session key with a single wallet
+  signature; the first deposit registers the session in the same owner-signed
+  transaction.
+- **One signature per action.** `orders.prepare`, `algos.twap.prepare`, and
+  `execution.prepare` accept the operation itself and build immediately — the
+  session's transaction signature is the whole authorization. The signed-
+  challenge form still works. SDK one-call helpers (`orders.execute`,
+  `algos.execute`, `executeQuote`) sign and submit in one call with a built-in
+  transaction verifier; `sessionSignerFromSecretKey` turns a session secret
+  into a ready signer.
+- **Sponsored Vault lifecycle** (`vault.relay`): the owner needs no SOL and no
+  RPC; Strata pays the fee (and pre-funds rent) when the wallet is low and
+  recovers exactly what it spent from later deposits, Jupiter-style.
+
+### Reads
+- **One account read.** `GET /v2/account/{wallet}/portfolio` — balances,
+  positions, open orders, and recent fills across every live market in one
+  public read by wallet address (`account`/`portfolio`, `strata_portfolio`).
+- **Order book, best bid/ask, and recent trades in MCP** — `strata_book`,
+  `strata_bbo`, `strata_trades` (already in the SDK `books` module).
+- **Maker reads public by wallet** — status, reputation, and the fills stream
+  need no signature.
+- **Exact-output market quotes** ("buy at least 1 SOL"): `amount_out_atoms` on
+  the same quote handle and execution flow.
+- Sequenced **execution**, **TWAP**, and **maker fill** streams.
+
+### Autonomy (MCP)
+- **Session-autonomy slider.** With a session key in the MCP's env
+  (`STRATA_SESSION_SECRET_KEY` + `STRATA_OWNER_WALLET`), `strata_execute_quote`,
+  `strata_order_execute`, and `strata_twap_execute` sign and submit within
+  `STRATA_AUTONOMY` = `ask` (default; prepare only) / `limits` (up to
+  `STRATA_AUTONOMY_MAX_USD_PER_TRADE` / `_PER_DAY` / `_MARKETS`) / `instant`.
+  `strata_autonomy` is read-only; nothing an agent calls raises its own
+  autonomy. Withdraw/policy/pause/revoke stay owner-only.
+
+### Other
+- `strata_markets` carries each market's opaque `market_id` and asset ids.
+- Account sequence is optional (server-resolved).
+- Tolerance is named `maximum_tolerance_bps` and echoed on every quote (never
+  conflated with price impact).
+- CLI: `session-keygen`, `account`, `execute-quote`, direct `twap-prepare` /
+  `execution-prepare`.
+
+Nothing about venues, routes, pools, adapters, legs, counterparties, or how a fill was built, is exposed at any surface; the contract privacy gate enforces it.
+
+## 0.1.x
+
+Initial public SDK: capabilities, markets, action graph, market quote, quote execution (challenge → prepare → submit), firm orders, and the
+opaque market/asset contract.

package/README.md

@@ -11,6 +11,16 @@ it does **not** mean quotes are inactive.
 
 ## Local stdio
 
+Read-only use needs no wallet, key, autonomy setting, or environment variable.
+For Codex, add Strata once and start asking for markets or quotes:
+
+```sh
+codex mcp add strata -- npx -y @stratabook/mcp
+```
+
+Do not paste a session secret into chat. Session setup is optional and appears
+only when the user wants the local MCP to sign trading writes.
+
 ```sh
 npx -y @stratabook/mcp
 ```
@@ -107,6 +117,14 @@ available collateral while a control is live and returns it after the final
 control is disabled, exhausted, expired, or cancelled. Current follows Strata's
 live mark and needs no separate publisher transaction.
 
+The matching TypeScript package ships `strata-maker-conformance`. Its default
+`safe` mode exercises this hosted MCP's discovery, public maker reads, and
+fresh-request Strand and Current preparations without signing or broadcasting.
+The explicitly confirmed `funded` mode signs a Current preparation externally,
+submits it in a separate MCP request, waits for chain-derived state, and stops
+it through the same restart-safe continuation path. Production activation runs
+the safe suite automatically and rolls back the MCP release if it fails.
+
 ## Hosted Streamable HTTP
 
 The managed public endpoint is:

package/dist/src/generated-harness.d.ts

@@ -551,4 +551,4 @@ export declare const STRATA_ACTION_GRAPH: {
     }];
 };
 export declare const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
-export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. For normal Strand or Current operation, prefer strata_market_making_prepare, sign only its prepared transaction externally, then pass its unchanged preparationToken with the signed transaction to strata_market_making_submit_and_wait; the token carries no signing authority and survives stateless HTTP requests. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";
+export declare const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata read-only tools work immediately with no wallet, approval, session key, or environment setup. For market discovery, books, marks, candles, trades, quotes, public portfolios, maker status, or reputation, call the tools directly and never begin trading setup. Never request or accept a session secret in chat. A session is needed only when the user asks to sign a trading write; if it is missing, direct the user to https://stratabook.app/agents for out-of-chat setup. Revoke, withdraw, pause, and policy changes are owner-wallet actions and never use the session signer. Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. For normal Strand or Current operation, prefer strata_market_making_prepare, sign only its prepared transaction externally, then pass its unchanged preparationToken with the signed transaction to strata_market_making_submit_and_wait; the token carries no signing authority and survives stateless HTTP requests. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/dist/src/generated-harness.js

@@ -788,4 +788,4 @@ export const STRATA_ACTION_GRAPH = {
     ]
 };
 export const STRATA_ACTION_GRAPH_URI = "strata://action-graph/v1";
-export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. For normal Strand or Current operation, prefer strata_market_making_prepare, sign only its prepared transaction externally, then pass its unchanged preparationToken with the signed transaction to strata_market_making_submit_and_wait; the token carries no signing authority and survives stateless HTTP requests. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";
+export const STRATA_AGENT_HARNESS_INSTRUCTIONS = "Strata read-only tools work immediately with no wallet, approval, session key, or environment setup. For market discovery, books, marks, candles, trades, quotes, public portfolios, maker status, or reputation, call the tools directly and never begin trading setup. Never request or accept a session secret in chat. A session is needed only when the user asks to sign a trading write; if it is missing, direct the user to https://stratabook.app/agents for out-of-chat setup. Revoke, withdraw, pause, and policy changes are owner-wallet actions and never use the session signer. Strata Agent Harness 1.0. Start every objective with strata_capabilities, then strata_action_graph, then strata_platform_graph, then strata_status, then strata_markets. Read strata://agent-harness/v1, strata://action-graph/v1, and strata://platform-graph/v2. The external agent owner controls permission and signer authority. Strata accepts public keys, detached signatures, and signed transactions, never private keys or seed phrases. Resolve a market and side or catalog input/output asset IDs, plus exact input atoms and tolerance, before strata_quote or strata_swap_quote. When portfolio.read is live, read the owner's live Vault portfolio before sizing any action and treat null USD totals as an incomplete valuation, never as zero. When mm.status.read is live, reconcile the owner's own maker products, exposure, and dead-man guards through the authorized status read before and after every maker action, and when mm.fills.stream is live keep the official SDK's authenticated maker stream open to apply contiguous maker fills and exposure changes. For normal Strand or Current operation, prefer strata_market_making_prepare, sign only its prepared transaction externally, then pass its unchanged preparationToken with the signed transaction to strata_market_making_submit_and_wait; the token carries no signing authority and survives stateless HTTP requests. When algos.twap.stream is live, follow TWAP progress through the official SDK's sequenced TWAP stream instead of polling, and when execution.stream is live watch prepared execution handles through the sequenced execution stream. Before selecting a maker transport, read the externally authorized owner-scoped maker reputation record and follow its signed-quote eligibility, cadence, and tier-progress fields. Treat amounts as unsigned base-10 token atoms; check quote bindings, labelled fees, minimum output, and expiry. To execute or control a resting order: request a challenge, verify its quote or exact opaque order bindings, sign canonical authorization bytes externally, prepare, verify and sign the returned transaction externally, then submit with idempotency. When websocket order transport is live, prefer the official SDK persistent command stream, choose explicit self-trade prevention, keep its durable dead-man guard armed for resting exposure, and distinguish immediate RPC broadcast from pushed terminal chain status. If submission is ambiguous, recover durable status with the same control ID and idempotency key. Order control supports place, cancel, bounded cancel-all, atomic replace, and atomic heterogeneous batches of up to six operations. Stop on ambiguity, sequence gaps, unavailable capabilities, paused markets, unsupported contracts, inconsistent bindings, expiry, or missing signer authority.";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratabook/mcp",
-  "version": "0.2.9",
+  "version": "0.2.11",
   "description": "Connect AI agents to Strata markets and Sonar quotes with MCP.",
   "type": "module",
   "license": "MIT OR Apache-2.0",
@@ -33,7 +33,8 @@
     "dist/src",
     "README.md",
     "LICENSE-APACHE",
-    "LICENSE-MIT"
+    "LICENSE-MIT",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.json",
@@ -44,7 +45,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@stratabook/sdk": "0.2.9",
+    "@stratabook/sdk": "0.2.11",
     "zod": "^3.25.76"
   },
   "devDependencies": {