feat(mcp): align energy purchase, security, and agent output - #30
Merged
Conversation
- expose config, quote, order, history, risk, and confirmed buy tools - keep payment broadcast server-side with same-transaction retries - persist reconciliation markers and document the tool workflow
- Acquire payer-scoped process and filesystem intents before signing. - Fail closed on corrupt risk state and require exact quote confirmation. - Upgrade PostCSS and add security regression coverage.
- Lock shared risk-store mutations across processes. - Refresh vulnerable dependency pins and cover write contention.
- align quote, payment, memo, and response handling with the live API\n- preserve ambiguous payments for exact replay and bind network, recipient, and signer output\n- disable the unauthenticated browser-wallet bridge and remove its dependency\n- redact replayable payment data from MCP responses and add regression coverage
- Observe FullNode receipts before checking SolidityNode finality - Persist chain status without reopening ambiguous payment risks - Expose the staged result and cover reconciliation with tests
- Keep wallet selection and caches scoped to the active MCP session. - Serialize stale intent recovery with the payment-risk mutation lock.
- Guard intent ownership checks and deletion with the shared mutation lock.\n- Persist signed payment risk without recursively acquiring the store lock.\n- Cover release and finalize lock ownership with regression tests.
- Declare a versioned output schema for all 98 tools.\n- Preserve legacy text content while exposing structuredContent.\n- Reconcile the documented market roster to 24 markets.
- Remove trailing Markdown spaces from generated tool titles.\n- Keep regenerated catalogs clean under git diff checks.
# Conflicts: # mcp-api-list.md # package.json
BlackChar92
changed the title
This was referenced Aug 19, 2026
Merged
- Route post-purchase tracking through order lookup. - Direct uncertain payments to the existing risk reconciliation tool.
BlackChar92
changed the title
- default to the app release's trusted production endpoint\n- normalize live config, quote, purchase, and recovery fields\n- prevent production API use with non-mainnet signing
- reject redirects for signed payments and order credentials - add public payer history as the sixth purchase tool - retain signed recovery state until history confirms the order
- keep the read-only payment-risk tool bound to the configured wallet\n- suggest exact vault approval amounts instead of unlimited allowance\n- reject invalid token decimals before scaling market transactions
bbsyaya
approved these changes
Aug 28, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope
This is the single MCP PR for the coordinated open-source release. It combines energy direct purchase, security remediation, and AI readability in one review.
1. Energy direct purchase
get_energy_purchase_config,quote_energy_purchase,get_energy_purchase_order,get_energy_purchase_history,get_energy_payment_risk, andbuy_energy_directhttps://tegrow.ablesdxd.link2. Security audit remediation
0600risk file until reconciliation3. AI readability
outputSchemafor all 104 toolsstructuredContentwhile preserving legacy text contentjUValidation
npm test— 502 passed, 19 skippednpm run build— passednpm run gen:api-list— deterministic; 104 tool headings and 104 output schemase03fdbf3-df94-42e0-992d-374390902318delivered; payment 43a9cdcc…44848 solidified; EnergyLimit +65,000; 0 unresolved risksnpm audit --audit-level=high— 0 vulnerabilitiesnpm pack --dry-run— v1.1.3 package contains the generated catalogNo mainnet payment was signed or broadcast during self-test.
Runtime boundary
The MCP server signs the native TRX payment; the configured backend validates and may broadcast it. Economic limits, price, payment address, and pool capacity always come from live responses. Custom/test endpoints require explicit configuration and trust opt-in; the production endpoint is rejected with non-mainnet signers.
Coordinated rollout
Docs may merge first. The CLI, MCP, and Skills PRs should follow in the same release window so public contracts do not remain ahead of implementation.