@integraledger/lcp-mcp-server 0.10.1 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @integraledger/lcp-mcp-server
 
+## 0.11.0
+
+### Minor Changes
+
+- 5159d60: The server declares the LCP capability, and the protocol line moves to 0.13.
+
+  `lcp-mcp-server` now advertises `com.integraledger/legal-context` in
+  `capabilities.extensions`, so an MCP host can discover that this server verifies the legal context bound
+  to a payment **without calling a tool**. The identifier and its settings value are both imported —
+  `LCP_MCP_EXTENSION_ID` from `lcp-discovery`, `LCP_SPEC_VERSION` from `lcp-kernel` — because a wire
+  identity spelled locally is a second home the wire seal cannot see, and a hardcoded spec version drifts
+  the first time the specification moves.
+
+  ⭐ **This is the one capability that must be asserted in the constructor, and it does not contradict the
+  rule beside it.** `tools` is left to the registrations because the SDK DERIVES it, so restating it would
+  duplicate a fact something else owns. Nothing derives an extension: no registration implies this server
+  speaks LCP, so the constructor is the only place the declaration can come from. Measured — deleting it
+  makes the extension vanish from what a client sees.
+
+  **Graceful degradation is total, which is what makes this safe to ship.** A client that ignores the
+  identifier gets a byte-identical server; there is no branch in which the extension refuses a request, and
+  a test asserts the tool list is unchanged. A client must not read the declaration as a claim that any
+  seller's terms are bound — it describes the server's capability, not a transaction.
+
+  Three assertions, each driven red against a planted defect: the declaration removed (the "consistency
+  fix" the docblock warns against), UCP's `com.integraledger.legal_context` substituted for MCP's
+  slash-form identifier, and the spec version hardcoded rather than derived.
+
+  ⛔ **Protocol repin: `0.13.0`.** Exact in `devDependencies`, `^0.13.0` in shipped `dependencies` and
+  `peerDependencies` — the three shapes `check:wire` enforces. The line moves for a reason rather than a
+  bump: `LCP_MCP_EXTENSION_ID` is new API, and it first shipped as `0.12.3`, a **patch**. That broke the
+  invariant `check:wire` is built on — every patch inside a line is API-equivalent — while the gate
+  requires the caret at the minor's zero patch and refuses a raised floor. With `0.12.2` resolved, squarely
+  inside `^0.12.0`, the export is `undefined` and the capability key serialises as
+  `{"extensions":{"undefined":{}}}`. The declaration was deliberately not shipped against that floor.
+  Verified afterwards that the invariant had otherwise held: of the nine runtime protocol dependencies,
+  eight added no exports anywhere across `0.12.x`.
+
+  ⚠️ The spec is `docs/2026-08-25-lcp-mcp-extension-specification.md`. `@modelcontextprotocol/server@2.0.0`
+  negotiates wire era `2025-11-25` and has no `server/discover`, so the declaration rides the `initialize`
+  handshake today and carries forward unchanged when the SDK ships the modern era.
+
+### Patch Changes
+
+- @integraledger/agent-guard@0.11.0
+
 ## 0.10.1
 
 ### Patch Changes

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,YAAY,CAAC;AAErC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,YACzB,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,CACf,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAShE"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,YAAY,CAAC;AAErC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,YACzB,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,CACf,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CA+BhE"}

package/dist/server.js

@@ -1,3 +1,5 @@
+import { LCP_MCP_EXTENSION_ID } from "@integraledger/lcp-discovery";
+import { LCP_SPEC_VERSION } from "@integraledger/lcp-kernel";
 import { McpServer } from "@modelcontextprotocol/server";
 import { registerComputeAtrHash } from "./tools/compute-atrhash.js";
 import { registerExtractReference } from "./tools/extract-reference.js";
@@ -55,7 +57,26 @@ export const LCP_TOOL_NAMES = [
  * the boundary above. When there is a resource to serve that is not one of those, it is declared then.
  */
 export function createLcpMcpServer(ports) {
-    const server = new McpServer({ name: SERVER_NAME, version: serverVersion() });
+    const server = new McpServer({ name: SERVER_NAME, version: serverVersion() }, {
+        // THE ONE CAPABILITY THAT MUST BE ASSERTED, AND IT DOES NOT CONTRADICT THE PARAGRAPH ABOVE.
+        //
+        // `tools` is left to the registrations because the SDK DERIVES it — restating it in the constructor
+        // is a second statement of a fact something else already owns. An extension has no such deriver:
+        // nothing about registering a tool implies this server speaks LCP, so the constructor is the only
+        // place the declaration can come from, and asserting it here states a fact rather than duplicating
+        // one. Do not "consistency-fix" this by deleting it; measured, removing it makes the extension
+        // vanish from what a client sees, which is precisely what the sibling test asserts.
+        //
+        // BOTH VALUES ARE IMPORTED, NEITHER IS SPELLED HERE. The identifier is a wire identity a
+        // counterparty must recognise, and `check:wire` seals it by importing `lcp-discovery`; a local copy
+        // would be a second home the gate cannot see. `LCP_SPEC_VERSION` is the kernel's own answer to which
+        // revision this stack implements, so a literal here would drift the first time the spec moved.
+        capabilities: {
+            extensions: {
+                [LCP_MCP_EXTENSION_ID]: { specVersion: LCP_SPEC_VERSION },
+            },
+        },
+    });
     registerComputeAtrHash(server, ports);
     registerGenerateLegalContext(server, ports);
     registerVerifyBeforePay(server, ports);

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAErC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,qBAAqB;IACrB,4BAA4B;IAC5B,uBAAuB;IACvB,0BAA0B;IAC1B,qBAAqB;IACrB,uBAAuB;CACf,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACnD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IAC9E,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvC,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACpC,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAErC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,qBAAqB;IACrB,4BAA4B;IAC5B,uBAAuB;IACvB,0BAA0B;IAC1B,qBAAqB;IACrB,uBAAuB;CACf,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACnD,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAC/C;QACE,4FAA4F;QAC5F,EAAE;QACF,oGAAoG;QACpG,iGAAiG;QACjG,kGAAkG;QAClG,mGAAmG;QACnG,+FAA+F;QAC/F,oFAAoF;QACpF,EAAE;QACF,yFAAyF;QACzF,oGAAoG;QACpG,qGAAqG;QACrG,+FAA+F;QAC/F,YAAY,EAAE;YACZ,UAAU,EAAE;gBACV,CAAC,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE;aAC1D;SACF;KACF,CACF,CAAC;IACF,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvC,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACpC,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integraledger/lcp-mcp-server",
-  "version": "0.10.1",
+  "version": "0.11.0",
   "type": "module",
   "exports": {
     ".": {
@@ -28,18 +28,18 @@
     "directory": "packages/lcp-mcp-server"
   },
   "dependencies": {
-    "@integraledger/lcp-authority": "^0.12.0",
-    "@integraledger/lcp-binding-core": "^0.12.0",
-    "@integraledger/lcp-discovery": "^0.12.0",
-    "@integraledger/lcp-evidence": "^0.12.0",
-    "@integraledger/lcp-kernel": "^0.12.0",
-    "@integraledger/lcp-placement-ack": "^0.12.0",
-    "@integraledger/lcp-placement-ap2": "^0.12.0",
-    "@integraledger/lcp-placements": "^0.12.0",
-    "@integraledger/lcp-verify": "^0.12.0",
+    "@integraledger/lcp-authority": "^0.13.0",
+    "@integraledger/lcp-binding-core": "^0.13.0",
+    "@integraledger/lcp-discovery": "^0.13.0",
+    "@integraledger/lcp-evidence": "^0.13.0",
+    "@integraledger/lcp-kernel": "^0.13.0",
+    "@integraledger/lcp-placement-ack": "^0.13.0",
+    "@integraledger/lcp-placement-ap2": "^0.13.0",
+    "@integraledger/lcp-placements": "^0.13.0",
+    "@integraledger/lcp-verify": "^0.13.0",
     "@modelcontextprotocol/server": "2.0.0",
     "zod": "4.4.3",
-    "@integraledger/agent-guard": "0.10.1"
+    "@integraledger/agent-guard": "0.11.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.0.0",

package/src/server.ts

@@ -1,3 +1,5 @@
+import { LCP_MCP_EXTENSION_ID } from "@integraledger/lcp-discovery";
+import { LCP_SPEC_VERSION } from "@integraledger/lcp-kernel";
 import { McpServer } from "@modelcontextprotocol/server";
 import type { LcpMcpPorts } from "./ports.js";
 import { registerComputeAtrHash } from "./tools/compute-atrhash.js";
@@ -59,7 +61,29 @@ export const LCP_TOOL_NAMES = [
  * the boundary above. When there is a resource to serve that is not one of those, it is declared then.
  */
 export function createLcpMcpServer(ports: LcpMcpPorts): McpServer {
-  const server = new McpServer({ name: SERVER_NAME, version: serverVersion() });
+  const server = new McpServer(
+    { name: SERVER_NAME, version: serverVersion() },
+    {
+      // THE ONE CAPABILITY THAT MUST BE ASSERTED, AND IT DOES NOT CONTRADICT THE PARAGRAPH ABOVE.
+      //
+      // `tools` is left to the registrations because the SDK DERIVES it — restating it in the constructor
+      // is a second statement of a fact something else already owns. An extension has no such deriver:
+      // nothing about registering a tool implies this server speaks LCP, so the constructor is the only
+      // place the declaration can come from, and asserting it here states a fact rather than duplicating
+      // one. Do not "consistency-fix" this by deleting it; measured, removing it makes the extension
+      // vanish from what a client sees, which is precisely what the sibling test asserts.
+      //
+      // BOTH VALUES ARE IMPORTED, NEITHER IS SPELLED HERE. The identifier is a wire identity a
+      // counterparty must recognise, and `check:wire` seals it by importing `lcp-discovery`; a local copy
+      // would be a second home the gate cannot see. `LCP_SPEC_VERSION` is the kernel's own answer to which
+      // revision this stack implements, so a literal here would drift the first time the spec moved.
+      capabilities: {
+        extensions: {
+          [LCP_MCP_EXTENSION_ID]: { specVersion: LCP_SPEC_VERSION },
+        },
+      },
+    },
+  );
   registerComputeAtrHash(server, ports);
   registerGenerateLegalContext(server, ports);
   registerVerifyBeforePay(server, ports);