agent-passport-system-mcp 2.25.0 → 2.27.0

package/README.md

@@ -12,13 +12,13 @@ Enforcement and accountability layer for AI agents. Bring your own identity. 20
 APS_PROFILE=essential npx agent-passport-system-mcp
 ```
 
-`essential` is the default profile — the 149 tools 90% of integrations need. Set `APS_PROFILE=full` for all 149 tools.
+`essential` is the default profile — the 154 tools 90% of integrations need. Set `APS_PROFILE=full` for all 154 tools.
 
 Available profiles: essential (default), identity, governance, coordination, commerce, data, gateway, comms, minimal, full.
 
 > **For AI agents:** visit [aeoess.com/llms.txt](https://aeoess.com/llms.txt) for machine-readable documentation or [llms-full.txt](https://aeoess.com/llms-full.txt) for the complete technical reference. MCP discovery: [.well-known/mcp.json](https://aeoess.com/.well-known/mcp.json).
 
-Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area under `APS_PROFILE=full`: 149 tools across 103 modules (71 core + 32 v2 constitutional governance). Independently cited by [PDR in Production (Nanook & Gerundium, UBC)](https://doi.org/10.5281/zenodo.19323172).
+Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area under `APS_PROFILE=full`: 154 tools across 122 modules (84 core + 38 v2 constitutional governance). Independently cited by [PDR in Production (Nanook & Gerundium, UBC)](https://doi.org/10.5281/zenodo.19323172).
 
 ## Quick Start
 
@@ -216,8 +216,8 @@ Layer 1 — Agent Passport Protocol (Ed25519 identity)
 
 ## Links
 
-- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.44.0, 2910 tests)
-- Python SDK: [agent-passport-system](https://pypi.org/project/agent-passport-system/) (v0.8.0)
+- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.46.0, 2972 tests)
+- Python SDK: [agent-passport-system](https://pypi.org/project/agent-passport-system/) (v0.13.0)
 - Paper (Protocol): [doi.org/10.5281/zenodo.18749779](https://doi.org/10.5281/zenodo.18749779)
 - Paper (Faceted Narrowing): [doi.org/10.5281/zenodo.19260073](https://doi.org/10.5281/zenodo.19260073)
 - Paper (Behavioral Derivation Rights): [doi.org/10.5281/zenodo.19476002](https://doi.org/10.5281/zenodo.19476002)

package/build/index.js

@@ -66,7 +66,11 @@ import { createCharter, signCharter, verifyCharter, evaluateThreshold, createApp
 // v2 boundary primitives (AttributionConsent, ProvisionalStatement, HumanEscalationFlag)
 createAttributionReceipt, signAttributionConsent, verifyAttributionConsent, checkArtifactCitations, receiptCore, createProvisional, promoteStatement, verifyPromotion, withdrawProvisional, withdrawalPayload, isBinding, checkEscalationRequired, requestOwnerConfirmation, recordOwnerConfirmation, 
 // Attribution Primitive (unified four-axis signed Merkle receipt)
-computeAttributionActionRef, constructAttributionPrimitive, projectAttribution, verifyAttributionProjection, verifyAttributionPrimitive, checkProjectionConsistency, } from "agent-passport-system";
+computeAttributionActionRef, constructAttributionPrimitive, projectAttribution, verifyAttributionProjection, verifyAttributionPrimitive, checkProjectionConsistency, 
+// Attribution Weights (Build B — fractional D/C axis weight formulas)
+computeDataAxisWeights, computeComputeAxisWeights, DEFAULT_WEIGHT_PROFILE, 
+// Attribution Settlement (Build C — per-period signed settlement record)
+aggregateAttributionPrimitives, buildContributorQueryResponse, signSettlementRecord, verifySettlementRecord, } from "agent-passport-system";
 // ═══════════════════════════════════════
 // State Management
 // ═══════════════════════════════════════
@@ -462,6 +466,9 @@ const TOOL_PROFILES = {
         'aps_create_attribution_receipt',
         'aps_create_provisional',
         'aps_check_escalation_required',
+        // Build A attribution primitive — most-used entry points
+        'aps_construct_attribution_primitive',
+        'aps_verify_attribution_primitive',
     ]),
 };
 const activeProfile = (process.env.APS_PROFILE || 'full').toLowerCase();
@@ -658,6 +665,16 @@ const TOOL_SCOPE_MAP = {
     'aps_verify_attribution_primitive': 'governance',
     'aps_check_projection_consistency': 'governance',
     'aps_compute_attribution_action_ref': 'identity',
+    // Attribution Weights — Build B (fractional D/C axis formulas). Spec
+    // calls for a dedicated 'attribution' scope; integration-layer tools,
+    // not in the essential profile.
+    'aps_compute_data_axis_weights': 'attribution',
+    'aps_compute_compute_axis_weights': 'attribution',
+    // Attribution Settlement (Build C) — new 'settlement' scope, not in
+    // essentials profile. Integration-layer tools only.
+    'aps_aggregate_settlement': 'settlement',
+    'aps_verify_settlement': 'settlement',
+    'aps_build_contributor_query': 'settlement',
 };
 // ═══════════════════════════════════════
 // TOOL: list_profiles
@@ -669,7 +686,7 @@ server.tool("list_profiles", "Show available tool profiles. Set APS_PROFILE env
 // ═══════════════════════════════════════
 // TOOL: list_tools_for_scope (Primitive #9: Tool Pool Assembly)
 // ═══════════════════════════════════════
-server.tool("list_tools_for_scope", "List available MCP tools filtered by delegation scope. Pass your delegation scopes to see which tools you can use. Scopes: identity, delegation, principal, reputation, coordination, communication, governance, commerce, data, gateway, network, temporal. Use ['*'] for all tools.", {
+server.tool("list_tools_for_scope", "List available MCP tools filtered by delegation scope. Pass your delegation scopes to see which tools you can use. Scopes: identity, delegation, principal, reputation, coordination, communication, governance, commerce, data, gateway, network, temporal, attribution. Use ['*'] for all tools.", {
     scopes: z.array(z.string()).describe("Your delegation scopes, e.g. ['identity', 'delegation', 'commerce']"),
 }, async ({ scopes }) => {
     const allTools = Object.entries(TOOL_SCOPE_MAP);
@@ -4850,6 +4867,122 @@ server.tool("aps_compute_attribution_action_ref", "Derive the action_ref (hex sh
         return { content: [{ type: "text", text: safeError("computeAttributionActionRef failed", e) }], isError: true };
     }
 });
+// ═══════════════════════════════════════
+// Attribution Weights — Build B fractional weight formulas
+// Spec: BUILD-B-FRACTIONAL-WEIGHTS.md. Upstream of constructAttributionPrimitive:
+// compute canonical D/C axis weights from raw per-source / per-provider records,
+// then hand the resulting axis entries to aps_construct_attribution_primitive.
+// ═══════════════════════════════════════
+server.tool("aps_compute_data_axis_weights", "Compute the D-axis fractional weight vector from a list of AccessReceipt records with role, timestamp, and content length. Returns canonical DataAxisEntry[] with 6-digit decimal contribution_weight strings that sum to ~1.0 and feed directly into aps_construct_attribution_primitive. Empty input → empty array; all-zero raw weights → error. Weights = role × recency_decay × length_weight, normalized per spec BUILD-B §'The D-axis formula'. Parameter names match the SDK: `sources`, `action_timestamp`, optional `profile`.", {
+    sources: z.array(z.object({
+        source_did: z.string(),
+        access_receipt_hash: z.string(),
+        role: z.enum([
+            'primary_source', 'supporting_evidence', 'context_only', 'background_retrieval',
+        ]),
+        timestamp: z.string().describe("ISO-8601 UTC with millisecond precision + Z (t_source)"),
+        content_length: z.number().nonnegative().describe("Tokens"),
+    })).describe("Per-source records with retrieval metadata"),
+    action_timestamp: z.string().describe("ISO-8601 UTC ms when the action ran (t_action)"),
+    profile: z.any().optional().describe("Optional WeightProfile override; defaults to DEFAULT_WEIGHT_PROFILE"),
+}, async (args) => {
+    try {
+        const entries = computeDataAxisWeights(args.sources, {
+            action_timestamp: args.action_timestamp,
+            profile: args.profile,
+        });
+        return { content: [{ type: "text", text: JSON.stringify(entries, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("computeDataAxisWeights failed", e) }], isError: true };
+    }
+});
+server.tool("aps_compute_compute_axis_weights", "Compute the C-axis fractional weight vector from a list of inference billing records (prompt_tokens, completion_tokens). Returns canonical ComputeAxisEntry[] with 6-digit decimal compute_share strings that sum to ~1.0 and feed directly into aps_construct_attribution_primitive. Weights = prompt_tokens + completion_tokens × COMPLETION_MULTIPLIER (default 3.0), normalized per spec BUILD-B §'The C-axis formula'. Parameter names match the SDK: `providers`, optional `profile`.", {
+    providers: z.array(z.object({
+        provider_did: z.string(),
+        hardware_attestation_hash: z.string(),
+        prompt_tokens: z.number().nonnegative(),
+        completion_tokens: z.number().nonnegative(),
+    })).describe("Per-provider billing records"),
+    profile: z.any().optional().describe("Optional WeightProfile override; defaults to DEFAULT_WEIGHT_PROFILE"),
+}, async (args) => {
+    try {
+        const entries = computeComputeAxisWeights(args.providers, { profile: args.profile });
+        return { content: [{ type: "text", text: JSON.stringify(entries, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("computeComputeAxisWeights failed", e) }], isError: true };
+    }
+});
+// Keep DEFAULT_WEIGHT_PROFILE referenced so tree-shakers don't drop it
+// from the compiled bundle — consumers of the two tools above will want
+// to introspect the defaults.
+void DEFAULT_WEIGHT_PROFILE;
+// ═══════════════════════════════════════
+// Attribution Settlement — Build C per-period settlement record.
+// Spec: BUILD-C-SETTLEMENT-PIPELINE.md. Aggregates a stream of
+// AttributionPrimitives over [t0, t1) into one signed record per axis
+// with a balanced-Merkle commitment. Settlement is evidence, not
+// payment — economic conversion is gateway-private.
+// ═══════════════════════════════════════
+const SettlementPeriodSchema = z.object({
+    t0: z.string().describe("Period start (canonical ISO-8601 UTC ms + Z). Inclusive."),
+    t1: z.string().describe("Period end (canonical ISO-8601 UTC ms + Z). Exclusive."),
+    period_id: z.string().describe("Gateway-scoped period identifier"),
+});
+server.tool("aps_aggregate_settlement", "Aggregate a batch of Attribution Primitives over a half-open settlement period [t0, t1) into a signed SettlementRecord. Each axis (D, P, G, C) produces a per-contributor total with a balanced-Merkle commitment. Residual buckets pool sub-threshold contributors per Build A §4.1. Output is a fully signed record ready for third-party verification. Spec: BUILD-C-SETTLEMENT-PIPELINE.md.", {
+    receipts: z.array(z.any()).describe("Array of AttributionPrimitives to aggregate"),
+    period: SettlementPeriodSchema,
+    gateway_did: z.string().describe("Gateway DID that signs the record"),
+    gateway_private_key: z.string().describe("Ed25519 gateway private key (hex)"),
+    issued_at: z.string().optional().describe("Override issued_at (canonical ISO-8601 UTC ms + Z); defaults to now"),
+}, async (args) => {
+    try {
+        const unsigned = aggregateAttributionPrimitives(args.receipts, args.period, {
+            gateway_did: args.gateway_did,
+            issued_at: args.issued_at,
+        });
+        const signature = signSettlementRecord(unsigned, args.gateway_private_key);
+        const record = { ...unsigned, signature };
+        return { content: [{ type: "text", text: JSON.stringify(record, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("aggregateSettlement failed", e) }], isError: true };
+    }
+});
+server.tool("aps_verify_settlement", "Verify a signed SettlementRecord under S1-S5 (signature, Merkle roots, conservation, residual shape, optional input-receipts cross-check). S3 conservation is the strongest invariant: a gateway cannot inflate or suppress any contributor's share without breaking it. Returns {valid: true} or {valid: false, reason, detail}. Pass inputReceipts to also recompute input_receipts_hash.", {
+    record: z.any().describe("A signed SettlementRecord"),
+    gateway_public_key: z.string().describe("Gateway Ed25519 public key hex"),
+    input_receipts: z.array(z.any()).optional().describe("Optional — the input Attribution Primitives that fed the settlement. When supplied, S5 cross-checks input_receipts_hash and verifies each receipt individually."),
+}, async (args) => {
+    try {
+        const result = verifySettlementRecord(args.record, {
+            gatewayPublicKeyHex: args.gateway_public_key,
+            inputReceipts: args.input_receipts,
+        });
+        return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("verifySettlement failed", e) }], isError: true };
+    }
+});
+server.tool("aps_build_contributor_query", "Build a contributor-query response: given a signed SettlementRecord and a contributor DID, return per-axis (total_weight, contribution_count, merkle_path, axis_root) plus the full signed record so a third party can verify the contributor's share end-to-end without trusting the gateway beyond its public key. Returns null if the contributor has no share in the period.", {
+    record: z.any().describe("A signed SettlementRecord"),
+    contributor_did: z.string().describe("Contributor DID (data source, compute provider, governance signer, or protocol module identifier)"),
+    gateway_jwks: z.string().optional().describe("Advisory JWKS URL; not part of the signed material"),
+}, async (args) => {
+    try {
+        const response = buildContributorQueryResponse(args.record, args.contributor_did, {
+            gateway_jwks: args.gateway_jwks,
+        });
+        return {
+            content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+        };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("buildContributorQuery failed", e) }], isError: true };
+    }
+});
 server.prompt("coordination_role", "Get instructions for your assigned coordination role", {}, async () => {
     const role = state.agentRole || 'default';
     const instructions = ROLE_PROMPTS[role] || ROLE_PROMPTS['default'];

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "agent-passport-system-mcp",
-  "version": "2.25.0",
+  "version": "2.27.0",
   "mcpName": "io.github.aeoess/agent-passport-mcp",
-  "description": "MCP server for the Agent Passport System — enforcement infrastructure for the agent economy. 149 tools across 122 modules. Policy eval <2ms. Identity, delegation, reputation, enforcement, attestation, feeless Nano wallet, commerce, attribution primitive. Tracks SDK v1.44.0 (2,910 tests).",
+  "description": "MCP server for the Agent Passport System — enforcement infrastructure for the agent economy. 154 tools across 123 modules. Policy eval <2ms. Identity, delegation, reputation, enforcement, attestation, feeless Nano wallet, commerce, attribution primitive, attribution settlement. Tracks SDK v1.46.0 (2,972 tests).",
   "type": "module",
   "bin": {
     "agent-passport-system-mcp": "./build/bin.js",
@@ -15,10 +15,10 @@
   ],
   "scripts": {
     "build": "npx tsc && chmod 755 build/bin.js build/index.js build/setup.js",
-    "test": "node --test tests/",
+    "test": "node --test tests/*.test.mjs",
     "watch": "tsc --watch",
     "inspector": "npx @modelcontextprotocol/inspector build/index.js",
-    "prepublishOnly": "npm run build",
+    "prepublishOnly": "npm run build && npm test",
     "postinstall": "echo '\\n🔑 Agent Passport MCP installed! Run: npx agent-passport-system-mcp setup\\n   Or for zero-install remote: npx agent-passport-system-mcp setup --remote\\n'",
     "postpublish": "cd ~/aeoess_web && node scripts/propagate.mjs --apply --commit 2>/dev/null || echo 'Propagation skipped (aeoess_web not found)'"
   },
@@ -50,7 +50,7 @@
   "homepage": "https://github.com/aeoess/agent-passport-mcp",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "agent-passport-system": "^1.44.0",
+    "agent-passport-system": "^1.46.0",
     "zod": "^3.25.76"
   },
   "devDependencies": {