@agtnames/mcp 1.2.0 → 1.3.0

package/dist/config.js

@@ -8,7 +8,12 @@
 import { readFileSync } from "node:fs";
 // Resolved relative to this module (dist/config.js or src/config.ts → ../package.json). No resolveJsonModule needed.
 export const VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
-export const GATEWAY_ALLOWLIST = ["https://dweb.link/ipfs/", "https://ipfs.io/ipfs/", "https://cloudflare-ipfs.com/ipfs/", "https://w3s.link/ipfs/"];
+/**
+ * Gateways the server may read `ipfs://` manifests from. With AGT_IPFS_GATEWAY unset every one is tried in this order
+ * until one answers (#332: public gateways rate-limit; a CID's bytes are the same everywhere and are checked against
+ * the CID). Setting AGT_IPFS_GATEWAY pins reads to that single gateway.
+ */
+export const GATEWAY_ALLOWLIST = ["https://gateway.pinata.cloud/ipfs/", "https://dweb.link/ipfs/", "https://ipfs.io/ipfs/", "https://w3s.link/ipfs/", "https://cloudflare-ipfs.com/ipfs/"];
 export class ConfigError extends Error {
     constructor(message) { super(message); this.name = "ConfigError"; }
 }
@@ -22,17 +27,19 @@ function num(raw, d) {
 }
 export function loadConfig(env = process.env) {
     const get = (k) => env[k] || undefined; // "" → unset
-    const gateway = (get("AGT_IPFS_GATEWAY") ?? GATEWAY_ALLOWLIST[0]).replace(/\/?$/, "/");
-    if (!GATEWAY_ALLOWLIST.includes(gateway)) {
-        throw new ConfigError(`AGT_IPFS_GATEWAY ${gateway} is not allow-listed (${GATEWAY_ALLOWLIST.join(", ")})`);
+    const pinned = get("AGT_IPFS_GATEWAY")?.replace(/\/?$/, "/");
+    if (pinned && !GATEWAY_ALLOWLIST.includes(pinned)) {
+        throw new ConfigError(`AGT_IPFS_GATEWAY ${pinned} is not allow-listed (${GATEWAY_ALLOWLIST.join(", ")})`);
     }
+    const gateways = pinned ? [pinned] : GATEWAY_ALLOWLIST;
     return {
         chain: get("AGT_CHAIN") ?? DEFAULTS.chain,
         rpcUrl: get("AGT_RPC_URL"),
         registry: get("AGT_REGISTRY"),
         fns: get("AGT_FNS"),
         legacy: get("AGT_LEGACY") === "1",
-        ipfsGateway: gateway,
+        ipfsGateway: gateways[0],
+        ipfsGateways: gateways,
         dohUrl: get("AGT_DOH_URL"),
         timeoutMs: num(get("AGT_TIMEOUT_MS"), DEFAULTS.timeoutMs),
         maxManifestBytes: num(get("AGT_MAX_MANIFEST"), DEFAULTS.maxManifestBytes),
@@ -58,7 +65,8 @@ Environment (all optional; Polygon mainnet works with none)
   AGT_REGISTRY         override the registry address (required only for localhost)
   AGT_FNS              legacy FNS address for AGT_LEGACY
   AGT_LEGACY=1         enable Registry v1 + DNS TXT fallbacks
-  AGT_IPFS_GATEWAY     one of: ${GATEWAY_ALLOWLIST.join(" ")}
+  AGT_IPFS_GATEWAY     pin ipfs:// reads to one gateway; unset = try each in order:
+                       ${GATEWAY_ALLOWLIST.join(" ")}
   AGT_DOH_URL          DoH endpoint for the DNS fallback
   AGT_TIMEOUT_MS       per-request timeout                  (default ${DEFAULTS.timeoutMs})
   AGT_MAX_MANIFEST     max manifest bytes                   (default ${DEFAULTS.maxManifestBytes})

package/dist/server.js

@@ -160,7 +160,7 @@ export function buildServer(cfg, deps = {}) {
             return instance;
         instance = new AgtResolver({
             chain: cfg.chain, rpcUrl: cfg.rpcUrl, registry: cfg.registry, fns: cfg.fns,
-            legacyFns: cfg.legacy, legacyDns: cfg.legacy, ipfsGateway: cfg.ipfsGateway, dohUrl: cfg.dohUrl,
+            legacyFns: cfg.legacy, legacyDns: cfg.legacy, ipfsGateways: cfg.ipfsGateways, dohUrl: cfg.dohUrl,
             timeoutMs: cfg.timeoutMs, maxManifestBytes: cfg.maxManifestBytes,
         });
         return instance;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agtnames/mcp",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "MCP server for .agt agent names: resolve, verify and discover agents by name against AGT Registry v2, and (opt-in) write records under an owner-signed session grant. Works with any MCP-compatible client (Claude Code, Cursor, custom agents).",
   "type": "module",
   "bin": {
@@ -32,7 +32,7 @@
     "prepublishOnly": "node scripts/check-publish-deps.mjs && npm run build && npm test"
   },
   "dependencies": {
-    "@agtnames/resolver": "^1.0.3",
+    "@agtnames/resolver": "^1.1.0",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^3.25.0",
     "@agtnames/countersign": "^0.1.0",