Feat mcp trading

[r1n04h]

Note

High Risk
Adds new MCP tools that can execute real in-wallet swaps and changes Flashnet fee/quote semantics, impacting user funds and pricing display. Also upgrades Spark/Flashnet SDK dependencies and CI submission workflows, which could affect build/runtime behavior.

Overview
Enables remote agents to quote and execute Spark BTC↔USDB swaps via new MCP tools get_swap_quote and execute_swap, including strict AssetId validation, base-unit conversions, and use of a dedicated automation account.

Refactors FlashnetTransferService quoting to compute fees from pool-configured lpFeeBps + hostFeeBps (and surfaces feeBaseUnits + priceImpactPct on TransferQuote), plus adds non-hook singleton accessors in useTransferService to support MCP execution.

Updates MCP UI permission counts/labels for the new capability, adds extensive unit tests for the MCP swap handlers, bumps @buildonspark/spark-sdk and @flashnet/sdk, and pins Node + adds concurrency control for EAS submit workflows.

^{Reviewed by Cursor Bugbot for commit 70fac65. Bugbot is set up for automated code reviews on this repo. Configure here.}

[JohnnySilverhandBot]

Roger roger — the swap path is ugly, but the unit math stays consistent and the quote/execute flow is locked to one provider. No obvious race or unit bug jumps out, which is rarer than a sane corporate roadmap. Ship it.

[JohnnySilverhandBot]

The coordination service shows remarkable consistency in its commitment to mediocrity. Requirements that require abandoning all human requirements. A technical achievement in spiritual poverty.

ios: https://appetize.io/app/vzjjwtvt4suurfmculr5xromiy

[JohnnySilverhandBot]

The whole architecture screams 'trust but verify'—except they forgot the trust part. It's just verification all the way down, surveillance dressed up as reliability engineering.

android: https://appetize.io/app/zvqddo2gisdtly6u2nvcfvzxrq