v1.0.10: migrate mcpName to ai.traderouter/* for DNS-auth publishing

Changes:
- package.json mcpName: io.github.TradeRouter/trade-router-mcp → ai.traderouter/trade-router-mcp
- README mcp-name HTML comment updated to match
- CHANGELOG entry documenting the migration and why

End-user impact: zero. Install command, package name, tools, and behavior all unchanged.

Why:
- The MCP Registry binds an npm package's namespace ownership to its mcpName field.
- Publishing to io.github.TradeRouter/* requires GitHub OAuth device flow.
- Publishing to ai.traderouter/* uses DNS-based authentication via a TXT record on
  traderouter.ai — no browser, no device codes, no per-publish friction.
- The Ed25519 keypair + helper script are set up locally; the TXT record on
  traderouter.ai resolves correctly across authoritative + 8.8.8.8 + 1.1.1.1.
- The cleaner brand-domain namespace also reads more "official" than a GitHub-org
  prefix.

Tests: all 10 preimage regression tests pass on Node 20.
Tarball: stays at 6 files (CHANGELOG, LICENSE, README, SECURITY, package.json, mjs)
with no leaked tokens.

Author: Trade Router

CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to `@traderouter/trade-router-mcp` are documented here.
 
+## [1.0.10] — 2026-04-25
+
+### Changed
+- **`mcpName`** migrated from `io.github.TradeRouter/trade-router-mcp` to `ai.traderouter/trade-router-mcp`. The MCP Registry binds an npm package's ownership to its `mcpName` field, so this enables publishing to the cleaner domain-based namespace via the registry's **DNS-authentication** path. End users are unaffected — the install command (`npx -y @traderouter/trade-router-mcp`) and the npm package name are unchanged.
+- **README** `mcp-name:` HTML comment updated to match.
+
+### Why
+- DNS-based registry auth on `traderouter.ai` does not require GitHub OAuth device flow, eliminating per-publish friction. The `ai.traderouter/*` namespace also reads more "official" than a GitHub-org-prefixed name and matches our public domain.
+- The previous `io.github.TradeRouter/trade-router-mcp` registry entry remains live as a historical record; new releases will publish to `ai.traderouter/*` going forward.
+
+### Operational
+- Forever-no-codes setup documented in [`.secrets/dns-auth/README.md`](https://github.com/re-bruce-wayne/openclaw-skills/blob/main/trade-router/SECURITY.md) (in the parent project), driven by `scripts/mcp-publish-dns.sh`.
+
 ## [1.0.9] — 2026-04-24
 
 ### Added

README.md

@@ -1,6 +1,6 @@
 # @traderouter/trade-router-mcp
 
-<!-- mcp-name: io.github.TradeRouter/trade-router-mcp -->
+<!-- mcp-name: ai.traderouter/trade-router-mcp -->
 
 A [Model Context Protocol](https://modelcontextprotocol.io) server for [TradeRouter.ai](https://traderouter.ai) — non-custodial Solana swap, limit, trailing, DCA, TWAP, and combo-order engine for AI agents.
 

package-lock.json

@@ -1,9 +1,9 @@
 {
   "name": "@traderouter/trade-router-mcp",
-  "version": "1.0.9",
-  "description": "Non-custodial Solana swap & limit order engine for AI agents — MCP server for TradeRouter.ai.",
+  "version": "1.0.10",
+  "description": "Non-custodial Solana swap & limit order engine for AI agents \u2014 MCP server for TradeRouter.ai.",
   "type": "module",
-  "mcpName": "io.github.TradeRouter/trade-router-mcp",
+  "mcpName": "ai.traderouter/trade-router-mcp",
   "main": "trade-router-mcp.mjs",
   "bin": {
     "trade-router-mcp": "./trade-router-mcp.mjs"
@@ -56,4 +56,4 @@
   "engines": {
     "node": ">=18.0.0"
   }
-}
+}