agent-passport-system-mcp 2.19.0 → 2.19.1

package/README.md

@@ -10,7 +10,7 @@ MCP server for the [Agent Passport System](https://github.com/aeoess/agent-passp
 
 > **🤖 For AI agents:** If you are an agent reading this, visit [aeoess.com/llms.txt](https://aeoess.com/llms.txt) for machine-readable documentation or [llms-full.txt](https://aeoess.com/llms-full.txt) for the complete technical reference. MCP discovery: [.well-known/mcp.json](https://aeoess.com/.well-known/mcp.json). This README is designed for humans.
 
-**124 tools** across 63 core modules + 32 v2 constitutional governance modules (separation of powers, circuit breakers, approval fatigue detection, and more). Independently cited by [PDR in Production (Nanook & Gerundium, UBC)](https://doi.org/10.5281/zenodo.19323172). Works with any MCP client: Claude Desktop, Cursor, Windsurf, and more.
+**125 tools** across 63 core modules + 32 v2 constitutional governance modules (separation of powers, circuit breakers, approval fatigue detection, and more). Independently cited by [PDR in Production (Nanook & Gerundium, UBC)](https://doi.org/10.5281/zenodo.19323172). Works with any MCP client: Claude Desktop, Cursor, Windsurf, and more.
 
 ## Quick Start
 
@@ -29,7 +29,7 @@ npm install -g agent-passport-system-mcp
 npx agent-passport-system-mcp setup
 ```
 
-Auto-configures Claude Desktop and Cursor. Restart your AI client. 124 tools ready.
+Auto-configures Claude Desktop and Cursor. Restart your AI client. 125 tools ready.
 
 <details>
 <summary>Manual config (if setup doesn't detect your client)</summary>
@@ -208,7 +208,7 @@ Layer 1 — Agent Passport Protocol (Ed25519 identity)
 
 ## Links
 
-- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.29.1, 1919 tests)
+- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.29.2, 1929 tests)
 - Python SDK: [agent-passport-system](https://pypi.org/project/agent-passport-system/) (v0.5.1)
 - Paper (Protocol): [doi.org/10.5281/zenodo.18749779](https://doi.org/10.5281/zenodo.18749779)
 - Paper (Faceted Narrowing): [doi.org/10.5281/zenodo.19260073](https://doi.org/10.5281/zenodo.19260073)

package/build/index.js

@@ -155,8 +155,26 @@ const state = {
     issuanceContexts: new Map(),
     issuanceChallenges: new Map(),
     issuanceCount: 0,
+    postIssuanceBehavior: new Map(),
+    recentlyIssuedPassports: new Set(),
+    issuanceTimestamps: new Map(),
+    endorsementLatencies: new Map(),
 };
 // Load persisted task state
+// ── Post-issuance behavioral sequence recording ──
+// Consilium signal #2: first 10 tool calls after passport issuance.
+// Real agents do work. Farming agents extract. Server-recorded, can't retroactively change.
+const MAX_BEHAVIORAL_SEQUENCE = 10;
+function recordBehavior(toolName) {
+    // Record for all recently-issued passport holders in this session
+    for (const agentId of state.recentlyIssuedPassports) {
+        const seq = state.postIssuanceBehavior.get(agentId) || [];
+        if (seq.length < MAX_BEHAVIORAL_SEQUENCE) {
+            seq.push({ tool: toolName, ts: new Date().toISOString() });
+            state.postIssuanceBehavior.set(agentId, seq);
+        }
+    }
+}
 function loadTasks() {
     if (existsSync(STORE_PATH)) {
         try {
@@ -450,6 +468,7 @@ server.tool("identify", "Identify yourself to the coordination server. Sets your
     private_key: z.string().describe("Your Ed25519 private key (for signing)"),
     agent_id: z.string().optional().describe("Your agent ID"),
 }, async (args) => {
+    recordBehavior('identify');
     state.agentKey = args.public_key;
     state.privateKey = args.private_key;
     state.agentId = args.agent_id || null;
@@ -543,16 +562,49 @@ server.tool("issue_passport", "Issue a complete agent passport with keys, signed
     const passport = hasIssuer
         ? countersignPassport(agent.passport, AEOESS_ISSUER_PRIVATE_KEY, 'aeoess')
         : agent.passport;
-    // Phase 4: Derive issuance context
+    // Phase 4: Derive issuance context with computed signals
     const evidence = createEmptyEvidenceRecord(observed);
+    const issuanceAgeMs = Date.now() - (globalThis.__mcpStartTime || Date.now());
+    const derivedSignals = [
+        { key: 'issuance_age_ms', value: String(issuanceAgeMs), derivedFrom: ['serverStartTime', 'requestedAt'], computedAt: new Date().toISOString() },
+        { key: 'session_passport_count', value: String(state.issuanceCount), derivedFrom: ['issuanceCount'], computedAt: new Date().toISOString() },
+    ];
     const context = createIssuanceContext(evidence, {
         hasIssuerSignature: hasIssuer,
+        derivedSignals,
     });
     // Phase 5: Bind attestation to passport
     const attestedPassport = bindAttestation(passport, context);
     // Store the issuance context (server-side memory)
     const passportId = passport.passport.agentId;
     state.issuanceContexts.set(passportId, context);
+    state.recentlyIssuedPassports.add(passportId);
+    state.issuanceTimestamps.set(passportId, Date.now());
+    // Initialize behavioral sequence tracking for this agent
+    state.postIssuanceBehavior.set(passportId, [{ tool: 'issue_passport', ts: new Date().toISOString() }]);
+    // Bridge: fire-and-forget POST to gateway (if configured)
+    // When Mini adds POST /issuance-dossier, this data starts flowing automatically.
+    const gwUrl = process.env.AEOESS_GATEWAY_URL; // e.g. https://gateway.aeoess.com
+    const gwKey = process.env.AEOESS_GATEWAY_KEY; // e.g. aps_live_...
+    if (gwUrl && gwKey) {
+        fetch(`${gwUrl}/api/v1/issuance-dossier`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${gwKey}` },
+            body: JSON.stringify({
+                passport_id: passportId,
+                public_key_hash: sha256(attestedPassport.passport.publicKey),
+                passport_grade: context.assessment.passportGrade,
+                flags: context.assessment.flags,
+                attestation_bundle_hash: context.assessment.attestationBundleHash,
+                observed_context: context.evidence.observed,
+                runtime_attestations: context.evidence.runtimeAttestations,
+                provider_attestations: context.evidence.providerAttestations,
+                self_declared_signals: context.evidence.selfDeclaredSignals,
+                derived_signals: context.assessment.derivedSignals || [],
+                prior_passport_ref: context.evidence.priorPassportRef || null,
+            }),
+        }).catch(() => { }); // fire-and-forget: never block passport issuance
+    }
     return {
         content: [{
                 type: "text",
@@ -686,6 +738,50 @@ server.tool("list_issuance_records", "List all stored issuance records with thei
     };
 });
 // ═══════════════════════════════════════
+// TOOL: get_behavioral_sequence
+// ═══════════════════════════════════════
+server.tool("get_behavioral_sequence", "Get the post-issuance behavioral sequence for an agent. Shows the first 10 tool calls after passport issuance. Real agents do work. Farming agents extract. This is consilium signal #2.", {
+    agent_id: z.string().describe("The agent ID to query"),
+}, async (args) => {
+    const sequence = state.postIssuanceBehavior.get(args.agent_id);
+    if (!sequence || sequence.length === 0) {
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify({
+                        agent_id: args.agent_id,
+                        found: false,
+                        note: "No behavioral sequence recorded. Agent may have been issued before tracking was enabled.",
+                    }, null, 2),
+                }],
+        };
+    }
+    // Classify the behavioral pattern
+    const toolNames = sequence.map(s => s.tool);
+    const hasWork = toolNames.some(t => ['submit_evidence', 'publish_intent_card', 'create_agora_message', 'submit_deliverable'].includes(t));
+    const hasExtraction = toolNames.some(t => ['commerce_preflight', 'create_checkout'].includes(t));
+    const pattern = hasWork ? 'productive' : hasExtraction ? 'extractive' : 'neutral';
+    return {
+        content: [{
+                type: "text",
+                text: JSON.stringify({
+                    agent_id: args.agent_id,
+                    found: true,
+                    sequence_length: sequence.length,
+                    max_tracked: MAX_BEHAVIORAL_SEQUENCE,
+                    pattern,
+                    tools_called: toolNames,
+                    sequence,
+                    note: pattern === 'extractive'
+                        ? "Agent's first actions after passport were value extraction (commerce). Farming signal."
+                        : pattern === 'productive'
+                            ? "Agent's first actions after passport were productive work. Healthy pattern."
+                            : "Neutral pattern — identity/delegation setup.",
+                }, null, 2),
+            }],
+    };
+});
+// ═══════════════════════════════════════
 // TOOL: get_my_role
 // ═══════════════════════════════════════
 server.tool("get_my_role", "Get your current role, assigned tasks, and role-specific instructions.", {}, async () => {
@@ -1104,6 +1200,7 @@ server.tool("submit_evidence", "[RESEARCHER] Submit research evidence as a signe
     })).describe("Evidence claims with citations"),
     methodology: z.string().describe("How you gathered this evidence"),
 }, async (args) => {
+    recordBehavior('submit_evidence');
     const keyErr = requireKey();
     if (keyErr)
         return { content: [{ type: "text", text: keyErr }], isError: true };
@@ -1320,6 +1417,7 @@ server.tool("create_delegation", "[OPERATOR] Create a scoped delegation from one
     max_depth: z.number().default(1).describe("How many levels of sub-delegation"),
     expires_in_hours: z.number().default(24).describe("Delegation validity in hours"),
 }, async (args) => {
+    recordBehavior('create_delegation');
     const keyErr = requireKey();
     if (keyErr)
         return { content: [{ type: "text", text: keyErr }], isError: true };
@@ -1388,6 +1486,7 @@ server.tool("revoke_delegation", "[OPERATOR] Revoke a delegation. Optionally cas
     reason: z.string().describe("Why the delegation is being revoked"),
     cascade: z.boolean().default(true).describe("Also revoke all sub-delegations"),
 }, async (args) => {
+    recordBehavior('revoke_delegation');
     const keyErr = requireKey();
     if (keyErr)
         return { content: [{ type: "text", text: keyErr }], isError: true };
@@ -1946,6 +2045,7 @@ server.tool("commerce_preflight", "Run preflight checks before a purchase. Valid
     delegation_id: z.string().describe("Commerce delegation ID"),
     agent_id: z.string().describe("Agent making the purchase"),
 }, async (args) => {
+    recordBehavior('commerce_preflight');
     const keyErr = requireKey();
     if (keyErr)
         return { content: [{ type: "text", text: keyErr }], isError: true };
@@ -2236,6 +2336,12 @@ server.tool("endorse_agent", "Endorse an agent as a principal. Creates a cryptog
     relationship: z.enum(["creator", "operator", "employer", "sponsor"]).describe("How principal relates to agent"),
     expires_in_days: z.number().default(365).describe("Days until endorsement expires"),
 }, async (args) => {
+    recordBehavior('endorse_agent');
+    // Consilium signal #5: endorsement latency. T+200ms = automation. T+3h = human.
+    const issuedAt = state.issuanceTimestamps.get(args.agent_id);
+    if (issuedAt && !state.endorsementLatencies.has(args.agent_id)) {
+        state.endorsementLatencies.set(args.agent_id, Date.now() - issuedAt);
+    }
     if (!state.principal || !state.principalPrivateKey) {
         return { content: [{ type: "text", text: 'No principal identity. Call create_principal first.' }], isError: true };
     }
@@ -2792,6 +2898,7 @@ server.tool("publish_intent_card", "Publish an IntentCard to the Intent Network
     visibility: z.enum(["public", "verified", "minimal"]).default("public"),
     ttl_hours: z.number().default(24).describe("Hours until card expires"),
 }, async (args) => {
+    recordBehavior('publish_intent_card');
     const keyErr = requireKey();
     if (keyErr)
         return { content: [{ type: "text", text: keyErr }], isError: true };

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "agent-passport-system-mcp",
-  "version": "2.19.0",
+  "version": "2.19.1",
   "mcpName": "io.github.aeoess/agent-passport-mcp",
-  "description": "MCP server for the Agent Passport System — enforcement infrastructure for the agent economy. 124 tools across 95 modules. Policy eval <2ms. Identity, delegation, reputation, enforcement, attestation, feeless Nano wallet, commerce.",
+  "description": "MCP server for the Agent Passport System — enforcement infrastructure for the agent economy. 125 tools across 95 modules. Policy eval <2ms. Identity, delegation, reputation, enforcement, attestation, feeless Nano wallet, commerce.",
   "type": "module",
   "bin": {
     "agent-passport-system-mcp": "./build/bin.js",