v1.1.0 — four tools

The stdio server now matches the hosted remote at api.riskstate.ai/mcp, which has exposed three tools since July while this package still shipped one.

Added

• get_market_structure — structural events, triggers and the friction zones between spot and them (POST /v1/market-structure).
• get_playbook_status — locked playbooks and which setups are actionable (GET /api/playbook-data). Public: no API key needed. A setup counts as actionable only when its conditions match, no engine vetoed it, and it is not in alert cooldown; matching-but-cooling setups are reported separately so an agent does not act twice on one signal.
• check_trade — assess proposed position(s) against the caps (POST /v2/portfolio-risk-state). Read-only, portfolio-aware: returns per position allowed, the size cap, and reason_codes when blocked.
• README: the keyless remote connector, and an explicit "Why there are no write tools" section.

Changed

• Handlers extracted to src/handlers.ts; the test suite now exercises shipped code rather than a copy pasted into the test file. 19 tests.
• Server version string tracked the package again (it was pinned at 1.0.0).
• Canonical URLs moved to the Riskstate GitHub org.

There are deliberately no write tools. The system being governed must not be able to move its own limits, or policy_hash stops meaning anything.