release: 1.7.7

Author: iJaack

README.md

@@ -838,7 +838,13 @@ AGENT_PRIVATE_KEY=0x... evalanche-mcp --http --port 3402
 - market search, market details, order book access, balance and position discovery
 - expanded Evalanche into prediction market workflows alongside DeFi + perps
 
-### v1.7.6 (current)
+### v1.7.7 (current)
+- **Polymarket sell hardening**
+- `pm_sell` now uses a slippage-protected immediate sell path instead of an unbounded market sell
+- Polymarket CLOB auth fallback now uses fresh nonces per attempt, which makes API-key derive/create recovery more reliable
+- `pm_limit_sell` now honors `postOnly: false` instead of always forcing a resting order
+
+### v1.7.6
 - **Polymarket execution and docs pass**
 - Polymarket now prefers live CLOB market discovery with Gamma fallback for broader search coverage
 - Polymarket supports direct SDK sell orders plus MCP `pm_sell` market sells toward a target USDC proceeds amount

RELEASE_NOTES_1.7.7.md

@@ -0,0 +1,25 @@
+# Evalanche 1.7.7
+
+## Summary
+
+This release hardens Polymarket sell execution so agents do not silently route into unsafe dust-floor fills.
+
+## Highlights
+
+- `pm_sell` now performs a slippage check against visible bid-side liquidity before execution
+- immediate sells are submitted as protected `FAK` limit orders instead of unbounded market sells
+- Polymarket CLOB auth fallback now uses fresh nonces per derive/create attempt
+- `pm_limit_sell` now respects `postOnly: false` instead of always forcing a resting order
+- regression tests were added for auth nonce handling, protected sells, and `pm_limit_sell` execution semantics
+
+## Validation
+
+- `npm run test -- test/polymarket/client-extended.test.ts`
+- `npm run test -- test/polymarket/client.test.ts`
+- `npm run typecheck`
+- `npm run build`
+
+## Notes for Maintainers
+
+- `pm_sell` now fails fast when visible liquidity would breach the configured slippage bound
+- `pm_limit_sell` remains the explicit tool for posting a resting sell order on the book

package.json

@@ -1,6 +1,6 @@
 {
   "name": "evalanche",
-  "version": "1.7.6",
+  "version": "1.7.7",
   "description": "Multi-EVM agent wallet SDK with onchain identity (ERC-8004), payment rails (x402), cross-chain bridging (Li.Fi + Gas.zip), and perpetual futures (dYdX v4)",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",

test/polymarket/client-extended.test.ts

@@ -120,21 +120,25 @@ describe('PolymarketClient.getTokenPrice', () => {
 describe('PolymarketClient.searchMarkets', () => {
   it('limits results to the requested count', async () => {
     const client = makeClient();
-    client.getMarkets = async () => [
+    const mockMarkets = [
       { conditionId: '1', question: 'Alpha market', tokens: [] },
       { conditionId: '2', question: 'Alpha second market', tokens: [] },
       { conditionId: '3', question: 'Alpha third market', tokens: [] },
     ];
+    client.getLiveMarkets = async () => mockMarkets;
+    client.getMarkets = async () => mockMarkets;
 
     const results = await client.searchMarkets('alpha', 2);
     expect(results).toHaveLength(2);
   });
 
   it('is case-insensitive', async () => {
     const client = makeClient();
-    client.getMarkets = async () => [
+    const mockMarkets = [
       { conditionId: '1', question: 'IRAN sanctions threshold', tokens: [] },
     ];
+    client.getLiveMarkets = async () => mockMarkets;
+    client.getMarkets = async () => mockMarkets;
 
     await expect(client.searchMarkets('iran', 10)).resolves.toHaveLength(1);
     await expect(client.searchMarkets('IRAN', 10)).resolves.toHaveLength(1);