mpp32-mcp-server 1.5.0 → 1.8.0

package/CHANGELOG.md

@@ -4,6 +4,104 @@ All notable changes to `mpp32-mcp-server` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.8.0] - 2026-07-14
+
+### Fixed
+
+* **Tempo payments now actually work.** `completeTempoPayment` called
+  `client.pay(...)`, a method that does not exist on the mppx client —
+  every Tempo payment attempt threw `client.pay is not a function` before
+  a transaction was ever signed. The signer now uses the real mppx API:
+  `Mppx.create({ methods: [tempo({ account })], polyfill: false })
+  .createCredential(response)`, driven by the raw `WWW-Authenticate`
+  challenge header. Verified end-to-end against Tempo Mainnet (chain 4217):
+  the client parses the live challenge, signs a TIP-20 pathUSD transfer,
+  and the backend's on-chain verification accepts/rejects it correctly.
+* **Authorization header format.** mppx credentials serialize as the full
+  `Payment <base64url>` header value; the old code re-prefixed it, producing
+  the invalid `Payment Payment <…>`. The credential is now set verbatim.
+* **No more fetch polyfill side effect.** `Mppx.create` polyfills
+  `globalThis.fetch` by default; the signer now passes `polyfill: false` so
+  the MCP server's own fetch is never wrapped.
+
+### Changed
+
+* Tempo (pathUSD) is now enabled in MPP32 production alongside x402 on
+  Solana and Base — `MPP32_PRIVATE_KEY` (0x-prefixed EVM key) pays both
+  x402-on-Base and Tempo challenges automatically.
+* **`mppx` promoted from optional peer dependency to a pinned direct
+  dependency (`0.4.12`).** With Tempo live in production, an `npx` user
+  must never hit "Tempo payment client not available. Install: npm install
+  mppx viem" — the signer now works out of the box. Adds mppx's five
+  transitive dependencies; `viem` was already bundled.
+
+## [1.7.0] - 2026-06-07
+
+### Changed
+
+* **Supply-chain cleanup.** Dropped three direct dependencies that were
+  driving Socket.dev alerts on the published package:
+  * `tweetnacl` (unmaintained since 2020): the 32-byte-seed → 64-byte
+    keypair derivation now uses
+    `@solana/kit`'s `createKeyPairSignerFromPrivateKeyBytes` directly
+    via WebCrypto Ed25519.
+  * `cheerio` (and its 21 transitives, including the deprecated
+    `whatwg-encoding@3.1.1`): `get_pivx_dao_intelligence` now calls the
+    MPP32 backend's `/api/governance` endpoint instead of scraping
+    `pivx.org` client-side. Same payload; the backend has served it since
+    1.4.0.
+  * `bs58` + `base-x`: replaced with the already-in-tree `@scure/base`
+    `base58` codec.
+  Net effect: published install drops from 181 to ~155 transitive
+  packages, zero deprecated, zero unmaintained-since-2020.
+* **All direct dependencies pinned to exact versions** (no `^` ranges).
+* **`engines.node` raised to `>=20.10.0`** (Node 18 reached end-of-life
+  in April 2025; WebCrypto Ed25519 is native on 20.10+).
+
+### Added
+
+* **npm provenance.** Releases now ship with an [npm provenance
+  attestation](https://docs.npmjs.com/generating-provenance-statements)
+  linking the tarball to the exact GitHub Actions run that built it.
+  Verify with `npm audit signatures`.
+* **`SECURITY.md` included in the published tarball**, describing
+  runtime behavior, the env vars the server reads, and the egress
+  allow-list.
+* **`docs/EGRESS.md`** (repo) enumerates every outbound host the MCP
+  server reaches and why.
+* **`socket.yml`** (repo) documents the small set of behavior alerts we
+  consciously accept (`envVars`, `networkAccess`, `hasBin`) with links
+  to where each behavior is implemented.
+
+### Removed
+
+* `pivx-provider.ts` (the cheerio-based client-side scraper). Replaced
+  by a 25-line wrapper around `${MPP32_API_URL}/api/governance`.
+
+### Security
+
+* No code-level vulnerability fixed; this release exists to eliminate
+  supply-chain-risk surface area on the published package.
+
+## [1.6.0] - 2026-06-02
+
+### Added
+
+* **Auto Sign In With Solana (SIWS) at startup.** When both `MPP32_AGENT_KEY`
+  and `MPP32_SOLANA_PRIVATE_KEY` are configured, the MCP server proves wallet
+  ownership to the MPP32 backend on the first run and activates M32 holder
+  pricing on every subsequent paid query for the rest of the process lifetime.
+  The signed message is the canonical SIWS structure (single use nonce, five
+  minute expiry, domain bound to mpp32.org). Holders pay $0.0048 per
+  Intelligence Oracle query at the 1M tier and $0.0064 at the 250K tier with
+  zero extra setup beyond the Solana key already used for x402 payments.
+
+### Changed
+
+* **`get_mpp32_diagnostics` output adds an "M32 holder pricing" capability
+  row** showing the verified wallet, the tier, and the active discount once
+  SIWS has run.
+
 ## [1.5.0] - 2026-06-01
 
 ### Added

package/README.md

@@ -17,16 +17,23 @@ One install. Pay any x402 endpoint on Solana from your agent. Browse a federated
 |:-----|:-------|:--------|:------|
 | x402 | Production | Solana (mainnet) | USDC |
 | x402 | Production | Base | USDC |
-| Tempo | Envelope wired, gated off in production until the client flow is verified end to end | Ethereum L2 | pathUSD |
-| ACP / AP2 / AGTP | Envelopes wired, gated off in production | Multi chain | per protocol |
+| Tempo | Production | Tempo (mainnet, chain 4217) | pathUSD |
+| AP2 / AGTP | Production (authorization and identity layers) | Chain agnostic | per protocol |
+| ACP | Envelope wired, gated off in production | Multi chain | checkout session |
 
-The MCP server ships signers for both Solana and Base out of the box. When a paid call returns a 402, the server picks the network that matches the key you configured and settles the payment in one round trip.
+The MCP server ships signers for Solana, Base, and Tempo out of the box. When a paid call returns a 402, the server picks the rail that matches the key you configured and settles the payment in one round trip. `MPP32_SOLANA_PRIVATE_KEY` pays x402 on Solana; `MPP32_PRIVATE_KEY` (0x-prefixed EVM key) pays x402 on Base and Tempo pathUSD challenges.
 
-## Try it free first (no keys, no setup)
+## Free Tier: 10 calls/day, no wallet required
 
-The MCP server exposes a **`try_solana_token_intelligence_free`** tool that returns the full Intelligence Oracle payload (alpha score, rug risk, whale activity, smart money signals, 24h pump probability, market data) for any Solana token with **zero configuration** — no `MPP32_AGENT_KEY`, no Solana key, no payment. Rate-limited to 10 calls/minute per IP. Use it to evaluate the oracle, then switch to `get_solana_token_intelligence` for unlimited attributed usage at $0.008/query (M32 holders save up to 40%).
+Every agent session gets **10 free Intelligence Oracle calls per day** — no wallet, no USDC, no payment setup. Just set `MPP32_AGENT_KEY` (free, instant, no signup at [mpp32.org/agent-console](https://mpp32.org/agent-console)) and start calling `get_solana_token_intelligence`. Free tier resets at midnight UTC.
 
-Just install the server and ask your agent: _"Use mpp32 to get a free intelligence preview for SOL."_
+This lets you **test your full MCP integration end-to-end** before committing any crypto. Build working prototypes, evaluate the data quality, and ship to production — the free tier covers typical development and light usage indefinitely.
+
+After free tier: $0.008/query paid via x402 (USDC on Solana). M32 holders save up to 40%.
+
+### Quick anonymous test (no keys at all)
+
+The **`try_solana_token_intelligence_free`** tool returns the same payload with zero configuration — just install and call. Rate-limited to 10/minute per IP. Good for a quick taste, but the 10/day free tier with an agent key is better for real work.
 
 ## Why this beats running your own integrations
 
@@ -257,7 +264,7 @@ Sessions are scoped, revocable, and rotate cleanly. The key is hashed at rest on
 
 x402 payments are verified on chain through the Solana facilitator (for SVM) or the Base facilitator (for EVM). MPP32 never holds custody of funds. Every paid call settles directly from the caller's wallet to the provider's wallet.
 
-Tempo, ACP, AP2, and AGTP envelopes are implemented in the proxy and tested against synthetic challenges, but the corresponding client signing flows are not yet exposed by this MCP. Those rails stay disabled in production until each has a verified end to end client flow. Treat the catalog as an x402 catalog today; the rest will light up as their clients land.
+Tempo payments are verified on chain by the proxy's mppx integration: the client signs a TIP-20 pathUSD transfer against the live challenge and the server confirms the transfer on Tempo mainnet before releasing the response. AP2 and AGTP run as live authorization and identity layers on every paid route. The ACP envelope is implemented and tested against synthetic challenges but stays disabled in production until its checkout-session client flow is verified end to end.
 
 ## For API providers
 

package/SECURITY.md

@@ -0,0 +1,77 @@
+# Security Policy — `mpp32-mcp-server`
+
+## Reporting a vulnerability
+
+Report security issues privately to **`security@mpp32.org`**.
+
+Include:
+
+- A description of the issue, including the affected version of
+  `mpp32-mcp-server`.
+- Steps to reproduce, or a minimal proof of concept.
+- The Node.js version, OS, and MCP host (Claude Desktop, Cursor,
+  Windsurf, …) you tested against.
+- Your name or handle if you'd like credit in the fix release.
+
+We aim to acknowledge reports within **3 business days** and provide a
+remediation timeline within **10 business days**. Please do not file public
+GitHub issues for security vulnerabilities until a fix has shipped.
+
+## Supported versions
+
+| Version  | Supported  |
+|:---------|:-----------|
+| `1.7.x`  | ✅ current  |
+| `1.6.x`  | High-severity only |
+| `< 1.6`  | ❌          |
+
+## What this package does at runtime
+
+Understanding the package's behavior is the first step in any audit. The
+MCP server is a stdio process. It:
+
+1. **Reads three environment variables** for authentication and signing:
+   `MPP32_AGENT_KEY`, `MPP32_PRIVATE_KEY` (EVM), and
+   `MPP32_SOLANA_PRIVATE_KEY`. Values are never logged, transmitted as
+   plaintext to third parties, or written to disk. See
+   `src/index.ts` for the exact validation rules.
+2. **Makes outbound HTTPS requests** to a small, fixed set of hosts
+   needed to discover services and settle x402 payments. The complete
+   egress allow-list is documented in [`docs/EGRESS.md`](../docs/EGRESS.md).
+3. **Signs Solana and EVM payment payloads locally** using
+   `@solana/kit` (WebCrypto Ed25519) and `viem` (secp256k1) inside the
+   user's Node process. Private keys never leave the machine.
+
+There is no install script, no native code, no filesystem write, no
+shell execution, and no dynamic `require`/`eval` in this package.
+
+## Provenance
+
+Starting with `1.7.0`, npm releases are published from a GitHub Actions
+workflow using OIDC and include an [npm provenance attestation][prov]
+linking the published tarball to the exact commit and workflow run that
+produced it. Verify with:
+
+```sh
+npm audit signatures
+```
+
+[prov]: https://docs.npmjs.com/generating-provenance-statements
+
+## Hardening already in place (backend)
+
+The MCP server depends on a backend at `mpp32.org` for the federated
+catalog and `/api/agent/execute`. Backend-side hardening is documented
+in the [root SECURITY.md](../SECURITY.md):
+
+- Production refuses to boot when `MPP_SECRET_KEY` is missing or matches
+  a committed default.
+- All outbound URLs from user submissions and agent execute calls run
+  through an SSRF guard.
+- Agent session API keys are hashed at rest with SHA-256.
+
+## Disclosure
+
+We follow coordinated disclosure. Reporters who act in good faith and
+follow this policy will not be subject to legal action for their
+research.

package/dist/index.js

@@ -3,7 +3,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { signX402Payment } from "./x402-signers.js";
-const SERVER_VERSION = "1.5.0";
+const SERVER_VERSION = "1.8.0";
 // ── Env loading: trim and sanitize aggressively ─────────────────────────────
 // Copy-paste from Claude Desktop / Cursor / Windsurf JSON config UIs frequently
 // adds trailing \n, \r, NBSP, BOM, or wraps the value in literal quotes. Any
@@ -171,7 +171,11 @@ const server = new McpServer({
     version: SERVER_VERSION,
 });
 function buildHeaders(extra = {}) {
-    const headers = {};
+    const headers = {
+        // Identifies this surface to the backend's usage tracking so MCP traffic
+        // can be measured separately from web/SDK/direct-API traffic.
+        "X-MPP32-Client": `mcp-server/${SERVER_VERSION}`,
+    };
     for (const [k, v] of Object.entries(extra)) {
         headers[k] = safeHeaderValue(k, v);
     }
@@ -181,6 +185,12 @@ function buildHeaders(extra = {}) {
     return headers;
 }
 function isHttpCallable(svc) {
+    // Prefer the server's authoritative `callable` flag when provided. The server
+    // knows things the URL cannot tell us — e.g. a native service that hasn't
+    // completed endpoint verification (the proxy will 403 it) or an M32
+    // token-gated service that needs an on-chain balance proof.
+    if (typeof svc.callable === "boolean")
+        return svc.callable;
     if (svc.source === "native")
         return true;
     const url = svc.endpointUrl ?? "";
@@ -190,6 +200,21 @@ function isHttpCallable(svc) {
         return false;
     return /^https?:\/\//.test(url);
 }
+// Human-readable explanation for why a service is not callable through this MCP.
+function notCallableLabel(svc) {
+    switch (svc.callableReason) {
+        case "pending_verification":
+            return "No — provider hasn't completed endpoint verification yet";
+        case "m32_token_gated":
+            return svc.m32Required
+                ? `Token-gated — hold ${svc.m32Required.toLocaleString()}+ M32 and use the dedicated tool`
+                : "Token-gated — requires M32 holdings via the dedicated tool";
+        case "listing_only":
+            return "No — listing only";
+        default:
+            return "No — listing only";
+    }
+}
 // ── Tool 0: get_mpp32_diagnostics ───────────────────────────────────────────
 // Lets the user (and Claude) see exactly what the MCP process detected at
 // startup. The single most common failure mode is "I set the env var but it
@@ -251,8 +276,10 @@ server.tool("get_mpp32_diagnostics", "Report what the mpp32-mcp-server detected
         `- Federated service execution: ${AGENT_KEY ? "yes" : "no — set MPP32_AGENT_KEY"}`,
         `- x402 (USDC on Solana) payment: ${SOLANA_PRIVATE_KEY ? "yes" : "no — set MPP32_SOLANA_PRIVATE_KEY"}`,
         `- x402 (USDC on Base/EVM) payment: ${PRIVATE_KEY ? "yes" : "no — set MPP32_PRIVATE_KEY"}`,
+        `- M32 holder pricing (SIWS verified): ${siwsVerifiedAddress ? `yes — ${siwsTier} tier, ${siwsDiscountPercent}% off every paid query` : (AGENT_KEY && SOLANA_PRIVATE_KEY ? "pending — auto verification runs once at startup" : "no — set MPP32_AGENT_KEY + MPP32_SOLANA_PRIVATE_KEY")}`,
         ``,
-        `**Ready to pay end-to-end:** ${readyToPay ? "YES — try `get_solana_token_intelligence` with token=\"M32\" to confirm." : "NO — see the missing items above. Meanwhile, you can still call `try_solana_token_intelligence_free` (10/min/IP, no keys required) to evaluate the oracle."}`,
+        `**Ready to use:** ${AGENT_KEY ? "YES — you have 10 FREE Intelligence Oracle calls/day. Try `get_solana_token_intelligence` with token=\"M32\" now." : "SET MPP32_AGENT_KEY to get 10 FREE calls/day. Get one at " + API_URL + "/agent-console."}`,
+        `**Ready to pay (after free tier):** ${readyToPay ? "YES — x402 signing configured." : "NO — set MPP32_SOLANA_PRIVATE_KEY (or MPP32_PRIVATE_KEY for EVM) to pay after free tier exhausted."}`,
         ``,
         `**If a variable shows NOT SET but you set it in claude_desktop_config.json:**`,
         `1. Confirm the file path Claude Desktop actually reads:`,
@@ -369,7 +396,7 @@ server.tool("list_mpp32_services", "Browse the MPP32 federated catalog of 4,500+
                 `- **Category:** ${s.category ?? "—"}`,
                 `- **Price:** ${priceLabel}`,
                 `- **Protocols:** ${protos}`,
-                `- **Callable via this MCP:** ${callable ? "Yes — use `call_mpp32_endpoint`" : "No — listing only"}`,
+                `- **Callable via this MCP:** ${callable ? "Yes — use `call_mpp32_endpoint`" : notCallableLabel(s)}`,
                 s.description ? `- **Description:** ${s.description}` : null,
                 s.endpointUrl && !callable ? `- **Install / direct URL:** \`${s.endpointUrl}\`` : null,
                 s.websiteUrl ? `- **Website:** ${s.websiteUrl}` : null,
@@ -450,7 +477,7 @@ server.tool("call_mpp32_endpoint", "Call any HTTP-callable service in the MPP32
     return await callViaLegacyProxy(slug, method, parsedBody, query, path);
 });
 // ── Tool 3: get_solana_token_intelligence ───────────────────────────────────
-server.tool("get_solana_token_intelligence", "Get real-time Solana token intelligence from the MPP32 Intelligence Oracle. Returns alpha score (0-100), rug risk assessment, whale activity, smart money signals, 24h pump probability, projected ROI ranges, and aggregated DexScreener/Jupiter/CoinGecko market data. Costs $0.008 per query, paid automatically via x402 (USDC on Solana) or Tempo (pathUSD on Eth L2). M32 token holders receive up to 40% discount once their wallet is signature-verified. Set MPP32_AGENT_KEY in config to attribute calls to your dashboard. **New users with no keys configured: call `try_solana_token_intelligence_free` first** — it returns the same payload, rate-limited to 10/min, no payment or key required.", {
+server.tool("get_solana_token_intelligence", "Get real-time Solana token intelligence from the MPP32 Intelligence Oracle. Returns alpha score (0-100), rug risk assessment, whale activity, smart money signals, 24h pump probability, projected ROI ranges, and aggregated DexScreener/Jupiter/CoinGecko market data. **FREE TIER: Every agent session gets 10 free calls per day — no wallet, no USDC, no payment setup required.** Just set MPP32_AGENT_KEY. After free tier: $0.008/query paid via x402 (USDC on Solana). M32 token holders receive up to 40% discount.", {
     token: z
         .string()
         .describe("Solana token mint address or ticker symbol (e.g. SOL, BONK, JUP, M32, or full base58 address)."),
@@ -472,7 +499,7 @@ server.tool("get_solana_token_intelligence", "Get real-time Solana token intelli
 // trying MPP32 — they see real alpha scores and signals BEFORE encountering
 // any payment wall. This is the conversion funnel fix: agents today bounce
 // off the 402, so we let them taste the product first.
-server.tool("try_solana_token_intelligence_free", "FREE preview of the MPP32 Intelligence Oracle. No payment, no agent key, no Solana private key required. Returns the SAME payload as the paid endpoint (alpha score, rug risk, whale activity, smart money signals, pump probability, market data) for any Solana token. Rate-limited to 10 calls/minute per IP. Use this to evaluate the data quality. Once you're convinced, set MPP32_AGENT_KEY + a payment key and switch to `get_solana_token_intelligence` for unlimited, attributed usage and M32-holder discounts.", {
+server.tool("try_solana_token_intelligence_free", "FREE preview of the MPP32 Intelligence Oracle — quick anonymous test, no keys required. Rate-limited to 10 calls/minute per IP. Returns the same payload as the paid endpoint. **Better option: get an MPP32_AGENT_KEY from mpp32.org/agent-console and call `get_solana_token_intelligence` instead — you get 10 FREE attributed calls per day, plus dashboard tracking, before any payment is needed.**", {
     token: z
         .string()
         .describe("Solana token mint address or ticker symbol (e.g. SOL, BONK, JUP, M32, or full base58 address)."),
@@ -480,7 +507,7 @@ server.tool("try_solana_token_intelligence_free", "FREE preview of the MPP32 Int
     try {
         const res = await fetchWithTimeout(`${API_URL}/api/intelligence/demo`, {
             method: "POST",
-            headers: { "Content-Type": "application/json" },
+            headers: buildHeaders({ "Content-Type": "application/json" }),
             body: JSON.stringify({ token }),
         });
         const text = await res.text();
@@ -495,7 +522,7 @@ server.tool("try_solana_token_intelligence_free", "FREE preview of the MPP32 Int
             return {
                 content: [{
                         type: "text",
-                        text: `Demo rate limit reached (10 calls/minute per IP). Wait a minute and retry, or set up paid access for unlimited queries:\n\n1. Get an agent key: ${API_URL}/agent-console\n2. Add MPP32_AGENT_KEY + MPP32_SOLANA_PRIVATE_KEY to your MCP config\n3. Call \`get_solana_token_intelligence\` instead — $0.008/query, M32 holders save up to 40%.`,
+                        text: `Demo rate limit reached (10 calls/minute per IP). **Better option:** Get a free agent key at ${API_URL}/agent-console → 10 FREE attributed calls/day with dashboard tracking, no payment setup required. After free tier, $0.008/query.`,
                     }],
             };
         }
@@ -631,11 +658,25 @@ server.tool("scan_portfolio_m32", "M32-gated full wallet portfolio scan. Discove
         return { content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }] };
     }
 });
-// ── Tool 7: get_pivx_dao_intelligence ─────────────────────────────────────
-// Self-contained: scrapes pivx.org/proposals + Chainz CryptoID directly.
-// Does NOT depend on any backend endpoint — works for every npm user out of the box.
-import { fetchPivxGovernance } from "./pivx-provider.js";
-server.tool("get_pivx_dao_intelligence", "Get real-time PIVX DAO governance intelligence. Returns active budget proposals with masternode voting tallies (Yes/No counts, net yes percentages), budget allocation status, network deflation metrics (unallocated treasury PIV that are never minted), and masternode network health. PIVX is a fully community-governed cryptocurrency where Masternode owners vote on budget proposals every ~30 days (43,200 blocks per superblock cycle, 432,000 PIV max monthly budget). Data scraped live from pivx.org/proposals and the PIVX blockchain via Chainz CryptoID. Cached for 5 minutes. Free — no payment or API key required.", {
+async function fetchPivxGovernance() {
+    const res = await fetchWithTimeout(`${API_URL}/api/governance`, {
+        timeoutMs: 15_000,
+        headers: buildHeaders({ Accept: "application/json" }),
+    });
+    if (!res.ok) {
+        throw new Error(`MPP32 governance endpoint returned HTTP ${res.status}`);
+    }
+    const { data } = (await res.json());
+    return {
+        proposals: data.proposals,
+        network: data.network,
+        deflation: data.deflation,
+        timestamp: data.meta.timestamp,
+        source: data.meta.source,
+        cacheHit: data.meta.cacheHit,
+    };
+}
+server.tool("get_pivx_dao_intelligence", "Get real-time PIVX DAO governance intelligence. Returns active budget proposals with masternode voting tallies (Yes/No counts, net yes percentages), budget allocation status, network deflation metrics (unallocated treasury PIV that are never minted), and masternode network health. PIVX is a fully community-governed cryptocurrency where Masternode owners vote on budget proposals every ~30 days (43,200 blocks per superblock cycle, 432,000 PIV max monthly budget). Data is served by the MPP32 backend, which aggregates pivx.org/proposals and the PIVX blockchain via Chainz CryptoID, and caches for 5 minutes. Free — no payment or API key required.", {
     filter: z
         .enum(["all", "passing", "failing"])
         .default("all")
@@ -712,7 +753,7 @@ server.tool("get_pivx_dao_intelligence", "Get real-time PIVX DAO governance inte
         return {
             content: [{
                     type: "text",
-                    text: `Failed to fetch PIVX governance data: ${err instanceof Error ? err.message : String(err)}. The tool scrapes pivx.org/proposals directly — the site may be temporarily unreachable.`,
+                    text: `Failed to fetch PIVX governance data: ${err instanceof Error ? err.message : String(err)}. The tool calls ${API_URL}/api/governance — the MPP32 backend or its upstream sources (pivx.org, chainz.cryptoid.info) may be temporarily unreachable.`,
                 }],
         };
     }
@@ -901,10 +942,9 @@ async function signAndRetry(execUrl, reqBody, challenge) {
         catch (err) {
             // Fall through to Tempo if available
             if (challenge.wwwAuthenticate && PRIVATE_KEY) {
-                const parsed = parseWwwAuthenticate(challenge.wwwAuthenticate);
                 try {
-                    const token = await completeTempoPayment(parsed.params, PRIVATE_KEY);
-                    paymentHeaders["Authorization"] = `Payment ${token}`;
+                    const token = await completeTempoPayment(challenge.wwwAuthenticate, PRIVATE_KEY);
+                    paymentHeaders["Authorization"] = token;
                     usedProtocol = "pathUSD (Tempo)";
                 }
                 catch (tempoErr) {
@@ -929,8 +969,8 @@ async function signAndRetry(execUrl, reqBody, challenge) {
             };
         }
         try {
-            const token = await completeTempoPayment(parsed.params, PRIVATE_KEY);
-            paymentHeaders["Authorization"] = `Payment ${token}`;
+            const token = await completeTempoPayment(challenge.wwwAuthenticate, PRIVATE_KEY);
+            paymentHeaders["Authorization"] = token;
             usedProtocol = "pathUSD (Tempo)";
         }
         catch (err) {
@@ -1237,10 +1277,9 @@ async function callViaLegacyProxy(slug, method, body, query, path) {
             }
             catch (err) {
                 if (wwwAuth && PRIVATE_KEY) {
-                    const parsed = parseWwwAuthenticate(wwwAuth);
                     try {
-                        const token = await completeTempoPayment(parsed.params, PRIVATE_KEY);
-                        paymentHeaders["Authorization"] = `Payment ${token}`;
+                        const token = await completeTempoPayment(wwwAuth, PRIVATE_KEY);
+                        paymentHeaders["Authorization"] = token;
                         usedProtocol = "pathUSD (Tempo)";
                     }
                     catch (te) {
@@ -1253,10 +1292,9 @@ async function callViaLegacyProxy(slug, method, body, query, path) {
             }
         }
         else if (wwwAuth && PRIVATE_KEY) {
-            const parsed = parseWwwAuthenticate(wwwAuth);
             try {
-                const token = await completeTempoPayment(parsed.params, PRIVATE_KEY);
-                paymentHeaders["Authorization"] = `Payment ${token}`;
+                const token = await completeTempoPayment(wwwAuth, PRIVATE_KEY);
+                paymentHeaders["Authorization"] = token;
                 usedProtocol = "pathUSD (Tempo)";
             }
             catch (err) {
@@ -1383,9 +1421,8 @@ async function legacyIntelligenceCall(token, walletAddress) {
             catch (x402Err) {
                 if (wwwAuth && PRIVATE_KEY) {
                     try {
-                        const parsed = parseWwwAuthenticate(wwwAuth);
-                        const tempoToken = await completeTempoPayment(parsed.params, PRIVATE_KEY);
-                        paymentHeaders["Authorization"] = `Payment ${tempoToken}`;
+                        const tempoToken = await completeTempoPayment(wwwAuth, PRIVATE_KEY);
+                        paymentHeaders["Authorization"] = tempoToken;
                         usedProtocol = "pathUSD (Tempo)";
                     }
                     catch (tempoErr) {
@@ -1407,9 +1444,8 @@ async function legacyIntelligenceCall(token, walletAddress) {
         }
         else if (wwwAuth && PRIVATE_KEY) {
             try {
-                const parsed = parseWwwAuthenticate(wwwAuth);
-                const tempoToken = await completeTempoPayment(parsed.params, PRIVATE_KEY);
-                paymentHeaders["Authorization"] = `Payment ${tempoToken}`;
+                const tempoToken = await completeTempoPayment(wwwAuth, PRIVATE_KEY);
+                paymentHeaders["Authorization"] = tempoToken;
                 usedProtocol = "pathUSD (Tempo)";
             }
             catch (tempoErr) {
@@ -1475,7 +1511,11 @@ function parseWwwAuthenticate(header) {
     }
     return { scheme, params };
 }
-async function completeTempoPayment(challengeParams, privateKey) {
+// Signs a Tempo TIP-20 transfer for the challenge carried in a 402 response's
+// raw WWW-Authenticate header and returns the FULL Authorization header value
+// ("Payment <b64>", mppx Credential.serialize format) — callers must set it
+// verbatim, never re-prefix with "Payment ".
+async function completeTempoPayment(wwwAuthenticateHeader, privateKey) {
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     let mppxClient;
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -1491,10 +1531,16 @@ async function completeTempoPayment(challengeParams, privateKey) {
     }
     try {
         const account = viemAccounts.privateKeyToAccount(privateKey.startsWith("0x") ? privateKey : `0x${privateKey}`);
+        // polyfill: false — never clobber the host process's globalThis.fetch.
         const client = mppxClient.Mppx.create({
             methods: [mppxClient.tempo({ account })],
+            polyfill: false,
+        });
+        const challengeResponse = new Response(null, {
+            status: 402,
+            headers: { "WWW-Authenticate": wwwAuthenticateHeader },
         });
-        return (await client.pay(challengeParams));
+        return (await client.createCredential(challengeResponse));
     }
     catch (payErr) {
         throw new Error(`Tempo payment failed: ${payErr instanceof Error ? payErr.message : String(payErr)}`);
@@ -1521,6 +1567,95 @@ async function completeX402Payment(paymentRequiredHeader, keys) {
         protocolUsed: result.protocolUsed,
     };
 }
+// ── Auto SIWS bootstrap ─────────────────────────────────────────────────────
+// When both MPP32_AGENT_KEY and MPP32_SOLANA_PRIVATE_KEY are configured the
+// MCP server proves wallet ownership to the MPP32 backend at startup, which
+// activates M32 holder pricing on every subsequent paid query for the rest of
+// the process lifetime. No user action required.
+let siwsVerifiedAddress = null;
+let siwsTier = null;
+let siwsDiscountPercent = 0;
+async function tryAutoSiws() {
+    if (!AGENT_KEY || !SOLANA_PRIVATE_KEY)
+        return;
+    try {
+        // Lazy import to keep startup fast when only catalog browsing is needed.
+        const [kitMod, scureBase] = await Promise.all([
+            import("@solana/kit"),
+            import("@scure/base"),
+        ]);
+        const { base58 } = scureBase;
+        const { createKeyPairFromBytes, createKeyPairFromPrivateKeyBytes, getAddressFromPublicKey, signBytes, } = kitMod;
+        // Decode the private key. Supports JSON byte array, hex, and base58.
+        let bytes;
+        if (SOLANA_PRIVATE_KEY.startsWith("[")) {
+            bytes = new Uint8Array(JSON.parse(SOLANA_PRIVATE_KEY));
+        }
+        else if (/^[0-9a-fA-F]+$/.test(SOLANA_PRIVATE_KEY) && SOLANA_PRIVATE_KEY.length % 2 === 0) {
+            bytes = new Uint8Array(Buffer.from(SOLANA_PRIVATE_KEY, "hex"));
+        }
+        else {
+            bytes = base58.decode(SOLANA_PRIVATE_KEY);
+        }
+        let keyPair;
+        if (bytes.length === 32) {
+            keyPair = await createKeyPairFromPrivateKeyBytes(bytes);
+        }
+        else if (bytes.length === 64) {
+            keyPair = await createKeyPairFromBytes(bytes);
+        }
+        else {
+            console.error(`[mpp32] SIWS skipped: Solana key has unexpected length ${bytes.length}`);
+            return;
+        }
+        const walletAddress = await getAddressFromPublicKey(keyPair.publicKey);
+        // Step 1: request a nonce bound to our existing agent session.
+        const nonceRes = await fetchWithTimeout(`${API_URL}/api/auth/siws/nonce`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ wallet: walletAddress, agentKey: AGENT_KEY }),
+            timeoutMs: 8_000,
+        });
+        if (!nonceRes.ok) {
+            const text = await nonceRes.text().catch(() => "");
+            console.error(`[mpp32] SIWS nonce request failed: HTTP ${nonceRes.status} ${text.slice(0, 200)}`);
+            return;
+        }
+        const nonceBody = (await nonceRes.json());
+        const message = nonceBody.data?.message;
+        if (!message) {
+            console.error("[mpp32] SIWS nonce response missing message");
+            return;
+        }
+        // Step 2: sign the canonical message bytes via WebCrypto Ed25519.
+        const signatureBytes = await signBytes(keyPair.privateKey, new TextEncoder().encode(message));
+        const signature = base58.encode(signatureBytes);
+        // Step 3: verify with the backend. Backend marks session walletVerified=true.
+        const verifyRes = await fetchWithTimeout(`${API_URL}/api/auth/siws/verify`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ wallet: walletAddress, signature, agentKey: AGENT_KEY }),
+            timeoutMs: 8_000,
+        });
+        if (!verifyRes.ok) {
+            const text = await verifyRes.text().catch(() => "");
+            console.error(`[mpp32] SIWS verify failed: HTTP ${verifyRes.status} ${text.slice(0, 200)}`);
+            return;
+        }
+        const verifyBody = (await verifyRes.json());
+        siwsVerifiedAddress = verifyBody.data?.walletAddress ?? walletAddress;
+        siwsTier = verifyBody.data?.tier ?? "none";
+        siwsDiscountPercent = verifyBody.data?.discountPercent ?? 0;
+        const tierLabel = siwsDiscountPercent > 0
+            ? `${siwsTier} tier (${siwsDiscountPercent}% off every paid query)`
+            : "no holder tier (wallet holds zero M32, verification still active)";
+        const shortAddr = `${siwsVerifiedAddress.slice(0, 6)}…${siwsVerifiedAddress.slice(-4)}`;
+        console.error(`[mpp32] SIWS verified for ${shortAddr}: ${tierLabel}`);
+    }
+    catch (err) {
+        console.error(`[mpp32] SIWS bootstrap error: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
 // ── Start ───────────────────────────────────────────────────────────────────
 async function main() {
     const transport = new StdioServerTransport();
@@ -1533,6 +1668,9 @@ async function main() {
         .filter(Boolean)
         .join(", ") || "no keys (catalog-only legacy mode)";
     console.error(`[mpp32] MCP server v${SERVER_VERSION} on stdio. API ${API_URL}. Configured: ${features}. Timeout ${TIMEOUT_MS}ms.`);
+    // Auto SIWS in the background. Does not block startup — if it fails the user
+    // simply pays the standard rate instead of the holder rate.
+    void tryAutoSiws();
     // Per-variable status so a user staring at this log can immediately see
     // whether their env vars made it through. Values are fingerprinted.
     const fp = (v) => !v ? "NOT SET" : v.length <= 12 ? `SET (${v.length}c)` : `SET (${v.slice(0, 6)}…${v.slice(-4)}, ${v.length}c)`;

package/dist/x402-signers.d.ts

@@ -25,7 +25,7 @@ export interface X402PaymentEnvelope {
 }
 export declare function isSvmNetwork(network: string): boolean;
 export declare function isEvmNetwork(network: string): boolean;
-export declare function signX402PaymentSvm(requirements: X402PaymentRequirements, rawKey: string, rpcUrlOverride?: string, echoedVersion?: number): Promise<string>;
+export declare function signX402PaymentSvm(requirements: X402PaymentRequirements, rawKey: string, rpcUrlOverride?: string, echoedVersion?: number, computeUnitLimitOverride?: number): Promise<string>;
 export declare function signX402PaymentEvm(requirements: X402PaymentRequirements, rawKey: string, echoedVersion?: number): Promise<string>;
 export interface SignX402Args {
     paymentRequiredHeader: string;

package/dist/x402-signers.js

@@ -18,12 +18,11 @@
 //   { x402Version: 1, scheme: "exact", network, payload: <scheme payload> }
 // base64-encoded into the `X-Payment` HTTP header.
 async function loadSvmDeps() {
-    const [kit, tokenProgram, computeBudgetProgram, bs58Mod, naclMod] = await Promise.all([
+    const [kit, tokenProgram, computeBudgetProgram, scureBase] = await Promise.all([
         import("@solana/kit"),
         import("@solana-program/token"),
         import("@solana-program/compute-budget"),
-        import("bs58"),
-        import("tweetnacl"),
+        import("@scure/base"),
     ]).catch((err) => {
         const msg = err instanceof Error ? err.message : String(err);
         throw new Error(`Could not load Solana signing libraries: ${msg}. ` +
@@ -33,6 +32,7 @@ async function loadSvmDeps() {
     return {
         address: kit.address,
         createKeyPairSignerFromBytes: kit.createKeyPairSignerFromBytes,
+        createKeyPairSignerFromPrivateKeyBytes: kit.createKeyPairSignerFromPrivateKeyBytes,
         createSolanaRpc: kit.createSolanaRpc,
         createTransactionMessage: kit.createTransactionMessage,
         setTransactionMessageFeePayer: kit.setTransactionMessageFeePayer,
@@ -46,8 +46,7 @@ async function loadSvmDeps() {
         TOKEN_PROGRAM_ADDRESS: tokenProgram.TOKEN_PROGRAM_ADDRESS,
         getSetComputeUnitLimitInstruction: computeBudgetProgram.getSetComputeUnitLimitInstruction,
         getSetComputeUnitPriceInstruction: computeBudgetProgram.getSetComputeUnitPriceInstruction,
-        bs58: bs58Mod.default ?? bs58Mod,
-        nacl: naclMod.default ?? naclMod,
+        base58: scureBase.base58,
     };
 }
 async function loadEvmDeps() {
@@ -94,24 +93,23 @@ function decodeSolanaSecret(raw, deps) {
     if (/^[0-9a-fA-F]+$/.test(raw) && raw.length % 2 === 0) {
         return new Uint8Array(Buffer.from(raw, "hex"));
     }
-    return deps.bs58.decode(raw);
+    return deps.base58.decode(raw);
 }
 async function buildSolanaSigner(rawKey, deps) {
-    let bytes = decodeSolanaSecret(rawKey, deps);
+    const bytes = decodeSolanaSecret(rawKey, deps);
     if (bytes.length === 32) {
-        // 32-byte seed — kit's createKeyPairSignerFromBytes wants the 64-byte
-        // expanded key. Derive via tweetnacl.
-        const kp = deps.nacl.sign.keyPair.fromSeed(bytes);
-        bytes = kp.secretKey;
+        // 32-byte seed — kit derives the public key via WebCrypto Ed25519.
+        return await deps.createKeyPairSignerFromPrivateKeyBytes(bytes);
     }
-    else if (bytes.length !== 64) {
-        throw new Error(`Solana private key must be a 32-byte seed or a 64-byte expanded key; got ${bytes.length} bytes.`);
+    if (bytes.length === 64) {
+        // 64-byte expanded key (seed || publicKey) — kit's standard path.
+        return await deps.createKeyPairSignerFromBytes(bytes);
     }
-    return await deps.createKeyPairSignerFromBytes(bytes);
+    throw new Error(`Solana private key must be a 32-byte seed or a 64-byte expanded key; got ${bytes.length} bytes.`);
 }
 // ── SVM signer ──────────────────────────────────────────────────────────────
 const DEFAULT_SOLANA_RPC = "https://api.mainnet-beta.solana.com";
-export async function signX402PaymentSvm(requirements, rawKey, rpcUrlOverride, echoedVersion = 1) {
+export async function signX402PaymentSvm(requirements, rawKey, rpcUrlOverride, echoedVersion = 1, computeUnitLimitOverride) {
     if (requirements.scheme !== "exact") {
         throw new Error(`SVM x402 scheme "${requirements.scheme}" not implemented; only "exact" is supported.`);
     }
@@ -160,7 +158,12 @@ export async function signX402PaymentSvm(requirements, rawKey, rpcUrlOverride, e
     const rpc = deps.createSolanaRpc(rpcUrl);
     const { value: latestBlockhash } = await rpc.getLatestBlockhash({ commitment: "confirmed" }).send();
     const instructions = [
-        deps.getSetComputeUnitLimitInstruction({ units: 150_000 }),
+        // Compute-unit limit must stay under the facilitator's fee-payer cap. PayAI
+        // rejects anything above ~60,000 CU as `compute_limit_too_high` (it pays the
+        // fee, so it bounds the budget). 50,000 is comfortably under that cap and far
+        // above the ~7,000 CU an SPL TransferChecked + compute-budget ixs consume.
+        // (Verified against PayAI /verify 2026-06-17: 150,000 was rejected outright.)
+        deps.getSetComputeUnitLimitInstruction({ units: computeUnitLimitOverride ?? 50_000 }),
         deps.getSetComputeUnitPriceInstruction({ microLamports: 1000n }),
         deps.getTransferCheckedInstruction({
             source: sourceAta,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mpp32-mcp-server",
-  "version": "1.5.0",
+  "version": "1.8.0",
   "mcpName": "io.github.MPP32/mpp32-mcp-server",
   "description": "Payment layer for AI agents. One MCP, five protocols, thousands of paid APIs your agent can call.",
   "type": "module",
@@ -20,7 +20,8 @@
     "dist/**/*.d.ts",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "SECURITY.md"
   ],
   "sideEffects": false,
   "scripts": {
@@ -67,30 +68,26 @@
   "bugs": {
     "url": "https://github.com/MPP32/MPP32/issues"
   },
+  "funding": "https://mpp32.org",
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=20.10.0"
   },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
-    "@solana-program/compute-budget": "^0.15.0",
-    "@solana-program/token": "^0.13.0",
-    "@solana/kit": "^6.9.0",
-    "bs58": "^6.0.0",
-    "cheerio": "^1.2.0",
-    "tweetnacl": "^1.0.3",
-    "viem": "^2.48.11",
-    "zod": "^3.23.0"
-  },
-  "peerDependencies": {
-    "mppx": ">=0.4.0"
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
   },
-  "peerDependenciesMeta": {
-    "mppx": {
-      "optional": true
-    }
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "@scure/base": "1.2.6",
+    "@solana-program/compute-budget": "0.15.0",
+    "@solana-program/token": "0.13.0",
+    "@solana/kit": "6.9.0",
+    "mppx": "0.4.12",
+    "viem": "2.52.2",
+    "zod": "3.25.76"
   },
   "devDependencies": {
-    "@types/node": "^22.0.0",
-    "typescript": "^5.7.0"
+    "@types/node": "22.19.18",
+    "typescript": "5.9.3"
   }
 }

package/dist/pivx-provider.d.ts

@@ -1,42 +0,0 @@
-export interface PivxProposal {
-    name: string;
-    url: string;
-    status: "passing" | "failing";
-    funded: boolean;
-    netYesPercent: number;
-    yesVotes: number;
-    noVotes: number;
-    monthlyPaymentPiv: number;
-    monthlyPaymentUsd: number;
-    totalPaymentPiv: number;
-    installmentsRemaining: number;
-    totalInstallments: number;
-    budgetPercent: number;
-}
-export interface PivxNetworkStats {
-    masternodeCount: number;
-    passingThreshold: number;
-    monthlyBudgetPiv: number;
-    monthlyBudgetUsd: number;
-    budgetAllocatedPiv: number;
-    budgetAllocatedUsd: number;
-    budgetAllocatedPercent: number;
-    blockHeight: number;
-    totalSupply: number;
-    circulatingSupply: number;
-}
-export interface PivxGovernanceData {
-    proposals: PivxProposal[];
-    network: PivxNetworkStats;
-    deflation: {
-        unallocatedPivPerCycle: number;
-        unallocatedPercent: number;
-        annualUnallocatedPiv: number;
-        proposalFeeBurnPiv: number;
-        effectiveInflationReduction: string;
-    };
-    timestamp: string;
-    source: string;
-    cacheHit: boolean;
-}
-export declare function fetchPivxGovernance(): Promise<PivxGovernanceData>;

package/dist/pivx-provider.js

@@ -1,232 +0,0 @@
-import * as cheerio from "cheerio";
-// 5-minute cache
-const CACHE_TTL_MS = 5 * 60 * 1000;
-let cachedData = null;
-let cacheTimestamp = 0;
-const CHAINZ_BASE = "https://chainz.cryptoid.info/pivx/api.dws";
-async function chainzFetch(query) {
-    const res = await fetch(`${CHAINZ_BASE}?q=${query}`, {
-        signal: AbortSignal.timeout(8000),
-    });
-    if (!res.ok)
-        throw new Error(`Chainz API ${query}: HTTP ${res.status}`);
-    return (await res.text()).trim();
-}
-async function fetchNetworkStats() {
-    const [masternodeCount, blockHeight, totalSupply, circulating] = await Promise.allSettled([
-        chainzFetch("masternodecount"),
-        chainzFetch("getblockcount"),
-        chainzFetch("totalcoins"),
-        chainzFetch("circulating"),
-    ]);
-    const mn = masternodeCount.status === "fulfilled"
-        ? parseInt(masternodeCount.value, 10)
-        : 0;
-    const bh = blockHeight.status === "fulfilled"
-        ? parseInt(blockHeight.value, 10)
-        : 0;
-    const ts = totalSupply.status === "fulfilled"
-        ? parseFloat(totalSupply.value)
-        : 0;
-    const cs = circulating.status === "fulfilled"
-        ? parseFloat(circulating.value)
-        : 0;
-    return {
-        masternodeCount: isNaN(mn) ? 0 : mn,
-        blockHeight: isNaN(bh) ? 0 : bh,
-        totalSupply: isNaN(ts) ? 0 : ts,
-        circulatingSupply: isNaN(cs) ? 0 : cs,
-        passingThreshold: isNaN(mn) ? 0 : Math.ceil(mn * 0.1),
-    };
-}
-function parseNumber(text) {
-    const cleaned = text.replace(/[^0-9.\-]/g, "");
-    const num = parseFloat(cleaned);
-    return isNaN(num) ? 0 : num;
-}
-async function scrapePivxProposals() {
-    const res = await fetch("https://pivx.org/proposals", {
-        signal: AbortSignal.timeout(15000),
-        headers: {
-            "User-Agent": "MPP32-Governance-Oracle/1.0 (+https://mpp32.org)",
-            Accept: "text/html",
-        },
-    });
-    if (!res.ok)
-        throw new Error(`pivx.org/proposals returned HTTP ${res.status}`);
-    const html = await res.text();
-    const $ = cheerio.load(html);
-    const pageText = $("body").text();
-    let monthlyBudgetPiv = 432000;
-    let monthlyBudgetUsd = 0;
-    let budgetAllocatedPiv = 0;
-    let budgetAllocatedUsd = 0;
-    let masternodeCount = 0;
-    let passingThreshold = 0;
-    const budgetMatch = pageText.match(/Monthly\s*Budget[:\s]*([\d,]+)\s*PIV/i);
-    if (budgetMatch?.[1])
-        monthlyBudgetPiv = parseNumber(budgetMatch[1]);
-    const budgetUsdMatch = pageText.match(/Monthly\s*Budget[^$]*US?\$([\d,.]+)/i);
-    if (budgetUsdMatch?.[1])
-        monthlyBudgetUsd = parseNumber(budgetUsdMatch[1]);
-    const allocatedMatch = pageText.match(/Budget\s*Allocated[:\s]*([\d,]+)\s*PIV/i);
-    if (allocatedMatch?.[1])
-        budgetAllocatedPiv = parseNumber(allocatedMatch[1]);
-    const allocatedUsdMatch = pageText.match(/Budget\s*Allocated[^$]*US?\$([\d,.]+)/i);
-    if (allocatedUsdMatch?.[1])
-        budgetAllocatedUsd = parseNumber(allocatedUsdMatch[1]);
-    const mnMatch = pageText.match(/([\d,]+)\s*masternodes?\s*online/i);
-    if (mnMatch?.[1])
-        masternodeCount = parseNumber(mnMatch[1]);
-    const thresholdMatch = pageText.match(/Positive\s*votes\s*required[^:]*:\s*(\d+)/i);
-    if (thresholdMatch?.[1])
-        passingThreshold = parseInt(thresholdMatch[1], 10);
-    const proposals = [];
-    const seenHashes = new Set();
-    $("table#js_table tbody tr[data-hash]").each((_i, el) => {
-        const $row = $(el);
-        const hash = $row.attr("data-hash") || "";
-        if (!hash || seenHashes.has(hash))
-            return;
-        seenHashes.add(hash);
-        const name = ($row.attr("data-title") || "").trim();
-        if (!name)
-            return;
-        const cells = $row.find("td");
-        if (cells.length < 5)
-            return;
-        const statusCell = $(cells[0]);
-        const statusText = statusCell.text();
-        const isPassing = /passing/i.test(statusText);
-        const funded = /funded/i.test(statusText);
-        let netYesPercent = 0;
-        const netYesMatch = statusText.match(/([-\d.]+)%/);
-        if (netYesMatch?.[1])
-            netYesPercent = parseFloat(netYesMatch[1]);
-        const nameCell = $(cells[1]);
-        const link = nameCell.find("a").first();
-        const url = link.attr("href") || "";
-        const paymentCell = $(cells[2]);
-        const monthlyPaymentPiv = parseNumber(paymentCell.attr("data-piv") || paymentCell.attr("data-order") || "0");
-        const budgetPercent = parseFloat(paymentCell.attr("data-percent") || "0");
-        let monthlyPaymentUsd = 0;
-        const usdSpan = paymentCell.find(".curr-prefix").parent();
-        if (usdSpan.length) {
-            const usdText = usdSpan.text();
-            const usdMatch = usdText.match(/US?\$\s*([\d,]+(?:\.\d+)?)/i);
-            if (usdMatch?.[1])
-                monthlyPaymentUsd = parseNumber(usdMatch[1]);
-        }
-        let installmentsRemaining = 1;
-        const longLine = paymentCell.find(".long-line");
-        if (longLine.length) {
-            const installB = longLine.find("b").first();
-            if (installB.length) {
-                const n = parseInt(installB.text().trim(), 10);
-                if (!isNaN(n))
-                    installmentsRemaining = n;
-            }
-        }
-        let totalPaymentPiv = monthlyPaymentPiv;
-        if (longLine.length) {
-            const totalB = longLine.find("b").last();
-            if (totalB.length) {
-                const totalText = totalB.text();
-                const totalMatch = totalText.match(/([\d,]+(?:\.\d+)?)\s*PIV/i);
-                if (totalMatch?.[1])
-                    totalPaymentPiv = parseNumber(totalMatch[1]);
-            }
-        }
-        const voteCell = $(cells[4]);
-        const voteText = voteCell.text();
-        let yesVotes = 0;
-        let noVotes = 0;
-        const voteMatch = voteText.match(/(\d+)\s*\/\s*(\d+)/);
-        if (voteMatch?.[1] && voteMatch[2]) {
-            yesVotes = parseInt(voteMatch[1], 10);
-            noVotes = parseInt(voteMatch[2], 10);
-        }
-        proposals.push({
-            name,
-            url,
-            status: isPassing ? "passing" : "failing",
-            funded,
-            netYesPercent,
-            yesVotes,
-            noVotes,
-            monthlyPaymentPiv,
-            monthlyPaymentUsd,
-            totalPaymentPiv,
-            installmentsRemaining,
-            totalInstallments: installmentsRemaining,
-            budgetPercent,
-        });
-    });
-    return {
-        proposals,
-        budgetSummary: {
-            monthlyBudgetPiv,
-            monthlyBudgetUsd,
-            budgetAllocatedPiv,
-            budgetAllocatedUsd,
-            masternodeCount,
-            passingThreshold,
-        },
-    };
-}
-export async function fetchPivxGovernance() {
-    if (cachedData && Date.now() - cacheTimestamp < CACHE_TTL_MS) {
-        return { ...cachedData, cacheHit: true };
-    }
-    const [scrapeResult, networkStats] = await Promise.allSettled([
-        scrapePivxProposals(),
-        fetchNetworkStats(),
-    ]);
-    const scraped = scrapeResult.status === "fulfilled" ? scrapeResult.value : null;
-    const chainzStats = networkStats.status === "fulfilled" ? networkStats.value : {};
-    if (!scraped) {
-        throw new Error(`Failed to fetch PIVX governance data: ${scrapeResult.status === "rejected" ? scrapeResult.reason : "unknown"}`);
-    }
-    const budgetAllocatedPercent = scraped.budgetSummary.monthlyBudgetPiv > 0
-        ? Math.round((scraped.budgetSummary.budgetAllocatedPiv /
-            scraped.budgetSummary.monthlyBudgetPiv) *
-            10000) / 100
-        : 0;
-    const network = {
-        masternodeCount: scraped.budgetSummary.masternodeCount ||
-            chainzStats.masternodeCount ||
-            0,
-        passingThreshold: scraped.budgetSummary.passingThreshold ||
-            chainzStats.passingThreshold ||
-            0,
-        monthlyBudgetPiv: scraped.budgetSummary.monthlyBudgetPiv,
-        monthlyBudgetUsd: scraped.budgetSummary.monthlyBudgetUsd,
-        budgetAllocatedPiv: scraped.budgetSummary.budgetAllocatedPiv,
-        budgetAllocatedUsd: scraped.budgetSummary.budgetAllocatedUsd,
-        budgetAllocatedPercent,
-        blockHeight: chainzStats.blockHeight || 0,
-        totalSupply: chainzStats.totalSupply || 0,
-        circulatingSupply: chainzStats.circulatingSupply || 0,
-    };
-    const unallocatedPivPerCycle = network.monthlyBudgetPiv - network.budgetAllocatedPiv;
-    const annualUnallocatedPiv = unallocatedPivPerCycle * 12;
-    const data = {
-        proposals: scraped.proposals,
-        network,
-        deflation: {
-            unallocatedPivPerCycle,
-            unallocatedPercent: 100 - budgetAllocatedPercent,
-            annualUnallocatedPiv,
-            proposalFeeBurnPiv: 50,
-            effectiveInflationReduction: network.totalSupply > 0
-                ? `${((annualUnallocatedPiv / network.totalSupply) * 100).toFixed(3)}%`
-                : "N/A",
-        },
-        timestamp: new Date().toISOString(),
-        source: "pivx.org/proposals + chainz.cryptoid.info",
-        cacheHit: false,
-    };
-    cachedData = data;
-    cacheTimestamp = Date.now();
-    return data;
-}