Release 0.5.1 - #55

Bumps package.json + server.json to 0.5.1. Cuts a release covering everything merged since v0.5.0.

What's shipping since 0.5.0

New tools

• get_verification_artifact — second-agent cross-verification via a sparse, copy-paste-ready JSON payload (PR feat: second-agent verification artifact #48).
• prepare_uniswap_swap — direct Uniswap V3 routing for clear-signed swaps (PR feat: direct Uniswap V3 routing when user names the venue #51).
• get_market_incident_status — Aave V3 + Compound V3 + Morpho Blue incident/pause surfaces (PR Incident-awareness bundle: pre-flight pauses, richer reverts, market-info & incident tools #42 bundle).
• get_compound_market_info — Compound V3 market facts + governance state (PR Incident-awareness bundle: pre-flight pauses, richer reverts, market-info & incident tools #42 bundle).
• get_token_metadata — ERC-20 symbol/decimals/name lookup (PR Incident-awareness bundle: pre-flight pauses, richer reverts, market-info & incident tools #42 bundle).

Defenses / gates

• previewToken + userDecision: "send" gate on send_transaction (PR feat(signing): previewToken + userDecision gate on send_transaction #53) — closes accidental preview_send → send_transaction collapse. Schema-enforced; clear-error refusal on miss/mismatch.
• from in get_verification_artifact (PR feat(verification-artifact): include from so the second agent can auto-check recipient-vs-signer #52) — enables in-calldata recipient-vs-signer auto-check.
• Peer-trust warning allowlist (PR docs(security): refresh model — previewToken gate, from-field note, 2nd-agent roadmap #54) — get_ledger_status only emits peerTrustWarning when the paired WC peer host is NOT on the *.ledger.com allowlist. Quiets the common case; still loud on unknowns.
• Pre-flight checks (PRs Incident-awareness bundle: pre-flight pauses, richer reverts, market-info & incident tools #42, TRON: pre-flight simulation, status polling, verify-decode preview #43, Live TRON resource awareness: meter + tx pre-flight #44) — Aave reserve state, Compound pause state, TRON bandwidth/energy before tx build.

UX / behavior

• Priority-fee floor lowered from 1.5 → 0.5 gwei (PR docs(security): refresh model — previewToken gate, from-field note, 2nd-agent roadmap #54).
• Proactive capability-request offers (PR Proactively offer capability requests instead of mentioning gaps #50) — agent offers a request_capability call when a gap is encountered, instead of just narrating it.
• Richer simulate_transaction revert decoding (PR Incident-awareness bundle: pre-flight pauses, richer reverts, market-info & incident tools #42 bundle).
• simulate_position_change extended to Compound V3 + Morpho Blue (PR Incident-awareness bundle: pre-flight pauses, richer reverts, market-info & incident tools #42 bundle).
• TRON post-broadcast polling tuned per-chain (PR TRON: pre-flight simulation, status polling, verify-decode preview #43); TRON preview + verify-decode block.
• Governance pause state surfaced in position readers (PR Incident-awareness bundle: pre-flight pauses, richer reverts, market-info & incident tools #42 bundle).

Docs + chore

• README Security-section refresh — defenses table + threat-catch mapping updated for previewToken gate, from auto-check, server-side second-agent verification roadmap entry (PR docs(security): refresh model — previewToken gate, from-field note, 2nd-agent roadmap #54).
• CLAUDE.md added with preflight / git / tool-use / incident guidance (PR docs: add CLAUDE.md with preflight, git, tool-use, and incident guidance #45).
• Refactor: token-meta + approval-chain dedup (PR refactor + audit hardening: boilerplate dedup + 6 security fixes #47).
• Security audit findings closed (PR refactor: dedup token-meta + approval-chain boilerplate #46).
• .gitignore: .context/ (crypto-audit scratch), .claude/ (local Claude Code state).

Test plan

• npm run build — clean
• npm test — 479/479 pass
• Merge → create GH release v0.5.1 → CI publishes to npm (OIDC provenance) + MCP registry via .github/workflows/publish.yml

🤖 Generated with Claude Code