szhygulin/recon-crypto-mcp

Headline

Bitcoin Phase 1 ships in full — pairing across all four address types with BIP-44 gap-limit scanning, native segwit + taproot sends, multi-address portfolio integration, message signing, and a sibling rescan tool. The pairing flow is also ~30× faster than at v0.8.0 (160 USB roundtrips → 4 + parallel indexer fan-out).

v0.8.0 was the last shipped release. 0.8.1 was bumped in package.json after that but never tagged — 0.8.2 skips the unreleased intermediate and bundles everything that has settled since.

What's in here vs v0.8.0

Bitcoin Phase 1 — complete

• prepare_btc_send + send_transaction BTC branch (PRs #176, #177) — segwit + taproot sends with PSBT v0, RBF on by default, fee-cap guard
• sign_message_btc — BIP-137 (legacy / P2SH-wrapped / native segwit). Taproot refused with a clear pointer to BIP-322 (which the Ledger BTC app does not yet expose)
• get_btc_block_tip — current chain tip (height / hash / timestamp / ageSeconds) via the configured indexer
• BTC portfolio fold-in — bitcoinAddress / bitcoinAddresses arg on get_portfolio_summary
• pair_ledger_btc BIP-44 gap-limit scan (#190) — walks both receive and change chains across all 4 BIP-44 purposes, stops after gap-limit consecutive empties; default 20, max 100, per-type optimization to skip change when receive is fully empty
• get_btc_account_balance + rescan_btc_account (#191, #193) — aggregate cached used-addresses; refresh txCount indexer-side without touching the device

BTC perf + correctness

• Account-xpub host-side derivation (#195): per BIP-32 hardened/non-hardened semantics, only the account-level m/<purpose>'/0'/<account>' xpub needs the device — leaves are computable purely with the parent's public material. Cuts the pairing flow from ~160 USB roundtrips to 4, plus parallel indexer fan-out within each chunk. Fresh-wallet wall time: ~80s → ~2-3s.
• Rescan throttle + tri-state needsExtend (#200): BITCOIN_INDEXER_PARALLELISM cap (default 8) + single retry on HTTP 429 (honors Retry-After) + network errors. The tail-probe extend signal now distinguishes fulfilled-and-used (needsExtend: true) / fulfilled-and-empty (healthy) / rejected (unverifiedChains: [...] — re-run rescan, don't re-pair on a transient hiccup).
• bs58 / base-x ESM-CJS interop fixes (#181, base-x carve-out)
• P2WSH detector fix + tighter taproot regex (#182, #185)

Other fixes + features

• Marinade: BN named-export resolution under Node ESM-CJS interop (#178), plus nested anchor 0.28 override for the marinade-ts-sdk subtree
• Multi-wallet get_portfolio_summary (#202) now accepts non-EVM addresses (TRON / Solana / BTC), surfaced as parallel siblings in a nonEvm block at the top level instead of forcing misattribution to a chosen EVM wallet. Adds tronAddresses[] / solanaAddresses[] parallel-array args
• Marketing headline lead-in: "Safety first." across README / website / repo description / npm / MCP registry

Notes

• 1123 tests pass on this commit; build clean
• npm @latest flips to 0.8.2 once publish.yml runs (~minutes)
• Bundled binaries (Linux x64, macOS arm64, macOS x64, Windows x64) attach automatically once release-binaries.yml finishes (~10-15 min)

Out of scope / what's next

• BTC RBF fee-bump tool (prepare_btc_rbf_bump) — Phase 2 candidate
• BTC multi-sig PSBT (co-signer flow) — Phase 2 candidate
• BRC-20 / Runes / Ordinals — would require inscription-aware UTXO blacklisting; deferred
• Lightning, signet/testnet, multi-vendor (Trezor / Coldcard) — deferred