agent-passport-system-mcp 2.26.0 → 2.27.0

package/README.md

@@ -12,13 +12,13 @@ Enforcement and accountability layer for AI agents. Bring your own identity. 20
 APS_PROFILE=essential npx agent-passport-system-mcp
 ```
 
-`essential` is the default profile — the 151 tools 90% of integrations need. Set `APS_PROFILE=full` for all 151 tools.
+`essential` is the default profile — the 154 tools 90% of integrations need. Set `APS_PROFILE=full` for all 154 tools.
 
 Available profiles: essential (default), identity, governance, coordination, commerce, data, gateway, comms, minimal, full.
 
 > **For AI agents:** visit [aeoess.com/llms.txt](https://aeoess.com/llms.txt) for machine-readable documentation or [llms-full.txt](https://aeoess.com/llms-full.txt) for the complete technical reference. MCP discovery: [.well-known/mcp.json](https://aeoess.com/.well-known/mcp.json).
 
-Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area under `APS_PROFILE=full`: 151 tools across 122 modules (84 core + 38 v2 constitutional governance). Independently cited by [PDR in Production (Nanook & Gerundium, UBC)](https://doi.org/10.5281/zenodo.19323172).
+Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area under `APS_PROFILE=full`: 154 tools across 122 modules (84 core + 38 v2 constitutional governance). Independently cited by [PDR in Production (Nanook & Gerundium, UBC)](https://doi.org/10.5281/zenodo.19323172).
 
 ## Quick Start
 
@@ -216,7 +216,7 @@ Layer 1 — Agent Passport Protocol (Ed25519 identity)
 
 ## Links
 
-- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.45.0, 2937 tests)
+- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v1.46.0, 2972 tests)
 - Python SDK: [agent-passport-system](https://pypi.org/project/agent-passport-system/) (v0.13.0)
 - Paper (Protocol): [doi.org/10.5281/zenodo.18749779](https://doi.org/10.5281/zenodo.18749779)
 - Paper (Faceted Narrowing): [doi.org/10.5281/zenodo.19260073](https://doi.org/10.5281/zenodo.19260073)

package/build/index.js

@@ -68,7 +68,9 @@ createAttributionReceipt, signAttributionConsent, verifyAttributionConsent, chec
 // Attribution Primitive (unified four-axis signed Merkle receipt)
 computeAttributionActionRef, constructAttributionPrimitive, projectAttribution, verifyAttributionProjection, verifyAttributionPrimitive, checkProjectionConsistency, 
 // Attribution Weights (Build B — fractional D/C axis weight formulas)
-computeDataAxisWeights, computeComputeAxisWeights, DEFAULT_WEIGHT_PROFILE, } from "agent-passport-system";
+computeDataAxisWeights, computeComputeAxisWeights, DEFAULT_WEIGHT_PROFILE, 
+// Attribution Settlement (Build C — per-period signed settlement record)
+aggregateAttributionPrimitives, buildContributorQueryResponse, signSettlementRecord, verifySettlementRecord, } from "agent-passport-system";
 // ═══════════════════════════════════════
 // State Management
 // ═══════════════════════════════════════
@@ -668,6 +670,11 @@ const TOOL_SCOPE_MAP = {
     // not in the essential profile.
     'aps_compute_data_axis_weights': 'attribution',
     'aps_compute_compute_axis_weights': 'attribution',
+    // Attribution Settlement (Build C) — new 'settlement' scope, not in
+    // essentials profile. Integration-layer tools only.
+    'aps_aggregate_settlement': 'settlement',
+    'aps_verify_settlement': 'settlement',
+    'aps_build_contributor_query': 'settlement',
 };
 // ═══════════════════════════════════════
 // TOOL: list_profiles
@@ -4911,6 +4918,71 @@ server.tool("aps_compute_compute_axis_weights", "Compute the C-axis fractional w
 // from the compiled bundle — consumers of the two tools above will want
 // to introspect the defaults.
 void DEFAULT_WEIGHT_PROFILE;
+// ═══════════════════════════════════════
+// Attribution Settlement — Build C per-period settlement record.
+// Spec: BUILD-C-SETTLEMENT-PIPELINE.md. Aggregates a stream of
+// AttributionPrimitives over [t0, t1) into one signed record per axis
+// with a balanced-Merkle commitment. Settlement is evidence, not
+// payment — economic conversion is gateway-private.
+// ═══════════════════════════════════════
+const SettlementPeriodSchema = z.object({
+    t0: z.string().describe("Period start (canonical ISO-8601 UTC ms + Z). Inclusive."),
+    t1: z.string().describe("Period end (canonical ISO-8601 UTC ms + Z). Exclusive."),
+    period_id: z.string().describe("Gateway-scoped period identifier"),
+});
+server.tool("aps_aggregate_settlement", "Aggregate a batch of Attribution Primitives over a half-open settlement period [t0, t1) into a signed SettlementRecord. Each axis (D, P, G, C) produces a per-contributor total with a balanced-Merkle commitment. Residual buckets pool sub-threshold contributors per Build A §4.1. Output is a fully signed record ready for third-party verification. Spec: BUILD-C-SETTLEMENT-PIPELINE.md.", {
+    receipts: z.array(z.any()).describe("Array of AttributionPrimitives to aggregate"),
+    period: SettlementPeriodSchema,
+    gateway_did: z.string().describe("Gateway DID that signs the record"),
+    gateway_private_key: z.string().describe("Ed25519 gateway private key (hex)"),
+    issued_at: z.string().optional().describe("Override issued_at (canonical ISO-8601 UTC ms + Z); defaults to now"),
+}, async (args) => {
+    try {
+        const unsigned = aggregateAttributionPrimitives(args.receipts, args.period, {
+            gateway_did: args.gateway_did,
+            issued_at: args.issued_at,
+        });
+        const signature = signSettlementRecord(unsigned, args.gateway_private_key);
+        const record = { ...unsigned, signature };
+        return { content: [{ type: "text", text: JSON.stringify(record, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("aggregateSettlement failed", e) }], isError: true };
+    }
+});
+server.tool("aps_verify_settlement", "Verify a signed SettlementRecord under S1-S5 (signature, Merkle roots, conservation, residual shape, optional input-receipts cross-check). S3 conservation is the strongest invariant: a gateway cannot inflate or suppress any contributor's share without breaking it. Returns {valid: true} or {valid: false, reason, detail}. Pass inputReceipts to also recompute input_receipts_hash.", {
+    record: z.any().describe("A signed SettlementRecord"),
+    gateway_public_key: z.string().describe("Gateway Ed25519 public key hex"),
+    input_receipts: z.array(z.any()).optional().describe("Optional — the input Attribution Primitives that fed the settlement. When supplied, S5 cross-checks input_receipts_hash and verifies each receipt individually."),
+}, async (args) => {
+    try {
+        const result = verifySettlementRecord(args.record, {
+            gatewayPublicKeyHex: args.gateway_public_key,
+            inputReceipts: args.input_receipts,
+        });
+        return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("verifySettlement failed", e) }], isError: true };
+    }
+});
+server.tool("aps_build_contributor_query", "Build a contributor-query response: given a signed SettlementRecord and a contributor DID, return per-axis (total_weight, contribution_count, merkle_path, axis_root) plus the full signed record so a third party can verify the contributor's share end-to-end without trusting the gateway beyond its public key. Returns null if the contributor has no share in the period.", {
+    record: z.any().describe("A signed SettlementRecord"),
+    contributor_did: z.string().describe("Contributor DID (data source, compute provider, governance signer, or protocol module identifier)"),
+    gateway_jwks: z.string().optional().describe("Advisory JWKS URL; not part of the signed material"),
+}, async (args) => {
+    try {
+        const response = buildContributorQueryResponse(args.record, args.contributor_did, {
+            gateway_jwks: args.gateway_jwks,
+        });
+        return {
+            content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+        };
+    }
+    catch (e) {
+        return { content: [{ type: "text", text: safeError("buildContributorQuery failed", e) }], isError: true };
+    }
+});
 server.prompt("coordination_role", "Get instructions for your assigned coordination role", {}, async () => {
     const role = state.agentRole || 'default';
     const instructions = ROLE_PROMPTS[role] || ROLE_PROMPTS['default'];

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "agent-passport-system-mcp",
-  "version": "2.26.0",
+  "version": "2.27.0",
   "mcpName": "io.github.aeoess/agent-passport-mcp",
-  "description": "MCP server for the Agent Passport System — enforcement infrastructure for the agent economy. 151 tools across 122 modules. Policy eval <2ms. Identity, delegation, reputation, enforcement, attestation, feeless Nano wallet, commerce, attribution primitive. Tracks SDK v1.45.0 (2,910 tests).",
+  "description": "MCP server for the Agent Passport System — enforcement infrastructure for the agent economy. 154 tools across 123 modules. Policy eval <2ms. Identity, delegation, reputation, enforcement, attestation, feeless Nano wallet, commerce, attribution primitive, attribution settlement. Tracks SDK v1.46.0 (2,972 tests).",
   "type": "module",
   "bin": {
     "agent-passport-system-mcp": "./build/bin.js",
@@ -50,7 +50,7 @@
   "homepage": "https://github.com/aeoess/agent-passport-mcp",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "agent-passport-system": "^1.45.0",
+    "agent-passport-system": "^1.46.0",
     "zod": "^3.25.76"
   },
   "devDependencies": {