szhygulin/recon-crypto-mcp

Highlights

• Demo mode is now write-flow-capable. Deleted the fixture layer entirely and introduced live mode: a curated PERSONA (or custom address bundle) drives real chain RPC for reads + prepare_* + simulate; send_transaction is intercepted with a structured simulation envelope (no signing, no broadcast). Personas: defi-power-user, stable-saver, staking-maxi, whale.
• set_demo_wallet / get_demo_wallet — runtime wallet selection at any point in a demo session, no restart needed.
• exit_demo_mode — agent-guided handoff to operational mode with preflight + step-by-step + per-chain provider recommendations + copy-paste claude mcp add recipe.
• set_helius_api_key + set_etherscan_api_key — runtime API key injection (process-local, ephemeral). Auto-nudge on count 1 + every 10 public-RPC errors, pointing the user at signup.
• demoMode discoverability — get_vaultpilot_config_status.demoMode surfaces { active, envVar, howToEnable, liveMode }. First-run state emits a demo-mode setupHint suggesting the env-var recipe.

New env var

• VAULTPILOT_DEMO — set to "true" to enable demo mode. Documented in server.json environmentVariables[].

Included PRs

• #372 surface demoMode on get_vaultpilot_config_status
• #374 emit demo-mode setupHint on fresh-install state
• #377 fixture refresh (mostly reverted by #380)
• #380 write-flow simulation via personas + simulated broadcast
• #383 set_helius_api_key + auto-nudge on Solana RPC errors
• #385 exit_demo_mode handoff guide
• #386 generalize runtime-override + nudge to Etherscan
• #381 / #382 docs(security): phishing-approval row + section
• #376 refactor: dead-export sweep + BTC/LTC dedup
• #373 fix(test): root-cause #344 — testTimeout bump
• #384 chore: skill rename + pin bump

Deliberately deferred

• Manual end-to-end smoke test of personas against current chain state (tracked in claude-work/plan-demo-saga-followups.md item #1; blocks further demo expansion until verified).
• Markdown rendering of the simulation envelope. JSON-only today; agents can summarize but it's not as polished as the prepare-receipt block.
• README + docs update reflecting the current demo model.
• Reservoir runtime API key (NFT reads) — scoped out of #386 per design; same mechanism applies if added later.