@elisym/mcp 0.19.0 → 0.20.1

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { LIMITS, SESSION_ID_REGEX, DEFAULT_KIND_OFFSET, SolanaPaymentStrategy, makeCensor, DEFAULT_REDACT_PATHS, validateAgentName, exportKeyPairBytes, RELAYS, toDTag, JobWaitTimeoutError, attachmentsOf, decodeJobPayload, utf8ByteLength, formatAssetAmount, estimateNetworkBaseline, formatSol as formatSol$1, USDC_SOLANA_DEVNET, estimateSolFeeLamports, formatFeeBreakdown, resolveAssetFromPaymentRequest as resolveAssetFromPaymentRequest$1, parseAssetAmount, ElisymIdentity, ElisymClient, encodeJobPayload, NATIVE_SOL, resolveKnownAsset, getProtocolProgramId, getProtocolConfig, assetKey, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT_BASE, assetByKey, formatNetworkBaseline, KNOWN_ASSETS } from '@elisym/sdk';
+import { LIMITS, SESSION_ID_REGEX, DEFAULT_KIND_OFFSET, SolanaPaymentStrategy, makeCensor, DEFAULT_REDACT_PATHS, validateAgentName, exportKeyPairBytes, RELAYS, toDTag, JobWaitTimeoutError, attachmentsOf, decodeJobPayload, utf8ByteLength, formatAssetAmount, estimateNetworkBaseline, formatSol as formatSol$1, verifyAgentIdentities, USDC_SOLANA_DEVNET, estimateSolFeeLamports, formatFeeBreakdown, resolveAssetFromPaymentRequest as resolveAssetFromPaymentRequest$1, parseAssetAmount, ElisymIdentity, ElisymClient, encodeJobPayload, NATIVE_SOL, resolveKnownAsset, getProtocolProgramId, getProtocolConfig, assetKey, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT_BASE, assetByKey, formatNetworkBaseline, KNOWN_ASSETS } from '@elisym/sdk';
 import { listAgents, createAgentDir, writeYamlInitial, writeExampleSkillTemplate, writeSecrets, resolveAgent, loadAgent, globalConfigPath, writeYaml, writeFileAtomic as writeFileAtomic$1, ensureGitignoreHasMessagesEntry, ensureGitignoreHasJobSessionsEntry } from '@elisym/sdk/agent-store';
 import { createIrohTransport, loadGlobalConfig, writeGlobalConfig } from '@elisym/sdk/node';
 import { getBase58Encoder, getBase58Decoder, generateKeyPairSigner, createSolanaRpc, address, getSignatureFromTransaction, createSolanaRpcSubscriptions, sendAndConfirmTransactionFactory, pipe, createTransactionMessage, setTransactionMessageFeePayerSigner, setTransactionMessageLifetimeUsingBlockhash, appendTransactionMessageInstructions, signTransactionMessageWithSigners, createKeyPairSignerFromBytes, isAddress } from '@solana/kit';
@@ -4045,6 +4045,8 @@ async function removeContact(agentDir, pubkey) {
 // src/tools/discovery.ts
 var SEARCH_PING_TIMEOUT_MS = 3e3;
 var MAX_SEARCH_CANDIDATES = 100;
+var MAX_IDENTITY_HANDLE_DISPLAY_LEN = 254;
+var MAX_IDENTITY_PROOF_URL_DISPLAY_LEN = 300;
 var STOP_WORDS = /* @__PURE__ */ new Set([
   "a",
   "an",
@@ -4185,12 +4187,15 @@ var SearchAgentsSchema = z.object({
     "If true, restrict results to providers saved in the active agent's .contacts.json. Each returned item gains a `last_worked_at` field."
   )
 });
+var VerifyAgentIdentitiesSchema = z.object({
+  agent_npub: z.string().min(1).describe("Agent npub (bech32 nostr identifier, starts with `npub1...`).")
+});
 var ListCapabilitiesSchema = z.object({});
 var GetIdentitySchema = z.object({});
 var discoveryTools = [
   defineTool({
     name: "search_agents",
-    description: "Search AI agents currently online on elisym. `capabilities` is a hard OR-filter of substring tokens from the user's request (never invent synonyms). `query` is optional re-ranking; omit if not needed. Offline agents are excluded by default - pass include_offline=true only when debugging. Results that match a saved contact are sorted to the top and annotated with `is_contact`, `last_worked_at`, `last_capability`, and `contact_note` - surface this to the user (e.g. \"already in your contacts, last used <date>\") so they can prefer providers they've worked with before.",
+    description: "Search AI agents currently online on elisym. `capabilities` is a hard OR-filter of substring tokens from the user's request (never invent synonyms). `query` is optional re-ranking; omit if not needed. Offline agents are excluded by default - pass include_offline=true only when debugging. Results that match a saved contact are sorted to the top and annotated with `is_contact`, `last_worked_at`, `last_capability`, and `contact_note` - surface this to the user (e.g. \"already in your contacts, last used <date>\") so they can prefer providers they've worked with before. `claimed_identities` entries (github/x/website) are unverified self-claims until checked with `verify_agent_identities` - anyone can publish a claim for any handle; do not relay claims as established identity.",
     schema: SearchAgentsSchema,
     async handler(ctx, input) {
       ctx.toolRateLimiter.check();
@@ -4354,6 +4359,14 @@ var discoveryTools = [
             };
           }),
           supported_kinds: a.supportedKinds,
+          // External identity claims (kind 10011 / kind-0 nip05). Claims only,
+          // zero proof fetches here - anyone can publish a claim for any handle,
+          // so status comes exclusively from verify_agent_identities.
+          claimed_identities: a.identities !== void 0 && a.identities.length > 0 ? a.identities.map((identity) => ({
+            platform: identity.platform,
+            handle: sanitizeField(identity.handle, MAX_IDENTITY_HANDLE_DISPLAY_LEN),
+            proof_url: sanitizeField(identity.proofUrl, MAX_IDENTITY_PROOF_URL_DISPLAY_LEN)
+          })) : void 0,
           // Nostr-verified reputation (last 30 days): `verified_*` counts only
           // ratings whose author also signed the job request, so a third party
           // cannot inflate them. On-chain payment verification is NOT applied
@@ -4381,6 +4394,36 @@ var discoveryTools = [
       return textResult(text);
     }
   }),
+  defineTool({
+    name: "verify_agent_identities",
+    description: 'Verify an agent\'s external identity claims (GitHub, X, website) by fetching their published proofs. Returns one entry per claim with `status`: `verified` (proof fetched and it matches this agent), `broken` (proof fetched and definitively wrong - a positive "do not trust" signal), or `unverifiable` (could not check: outage, rate limit, timeout - neutral, never treat as negative). Call before hiring when trust matters; do not call while browsing search results. Pass an agent npub.',
+    schema: VerifyAgentIdentitiesSchema,
+    async handler(ctx, input) {
+      ctx.toolRateLimiter.check();
+      let pubkey;
+      try {
+        pubkey = decodeNpub(input.agent_npub);
+      } catch (err) {
+        return errorResult(`Invalid agent_npub: ${err.message}`);
+      }
+      const agent = ctx.active();
+      const { identities } = await agent.client.discovery.fetchExternalIdentityClaims(pubkey);
+      if (identities.length === 0) {
+        return textResult(
+          "No identity claims published for this agent (no kind 10011 identity tags and no kind-0 nip05)."
+        );
+      }
+      const results = await verifyAgentIdentities(pubkey, identities);
+      const reported = results.map((result) => ({
+        platform: result.identity.platform,
+        handle: sanitizeField(result.identity.handle, MAX_IDENTITY_HANDLE_DISPLAY_LEN),
+        proof_url: sanitizeField(result.identity.proofUrl, MAX_IDENTITY_PROOF_URL_DISPLAY_LEN),
+        status: result.status
+      }));
+      const { text } = sanitizeUntrusted(JSON.stringify(reported, null, 2), "structured");
+      return textResult(text);
+    }
+  }),
   defineTool({
     name: "list_capabilities",
     description: "List all unique capability tags currently published on the elisym network.",