agent-passport-system-mcp 3.3.0 → 3.3.1

package/README.md

@@ -6,19 +6,19 @@
   <img width="380" height="200" src="https://glama.ai/mcp/servers/@aeoess/agent-passport-system-mcp/badge" />
 </a>
 
-Enforcement and accountability layer for AI agents. Bring your own identity. 20 essential tools by default: identity, delegation, enforcement, commerce, reputation.
+Enforcement and accountability layer for AI agents. Bring your own identity. 150 tools by default across identity, delegation, enforcement, commerce, reputation, governance, coordination, and data.
 
 ```bash
-APS_PROFILE=essential npx agent-passport-system-mcp
+npx agent-passport-system-mcp
 ```
 
-`essential` is the default profile — the 20 tools 90% of integrations need. Set `APS_PROFILE=full` for all 150 tools.
+The default profile is `full` — all 150 tools. Set `APS_PROFILE=essential` for a 26-tool slim profile covering the primitives most integrations need (identity, delegation, enforcement, commerce, reputation).
 
-Available profiles: essential (default), identity, governance, coordination, commerce, data, gateway, comms, minimal, full.
+Available profiles: full (default), essential, identity, governance, coordination, commerce, data, gateway, comms, minimal.
 
 > **For AI agents:** visit [agent-passport.org/llms.txt](https://agent-passport.org/llms.txt) for machine-readable documentation or [llms-full.txt](https://agent-passport.org/llms-full.txt) for the complete technical reference. MCP discovery: [.well-known/mcp.json](https://agent-passport.org/.well-known/mcp.json).
 
-Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area under `APS_PROFILE=full`: 150 tools across the protocol surface, including Wave 1 accountability primitives (Ed25519 ActionReceipt, AuthorityBoundaryReceipt, CustodyReceipt, ContestabilityReceipt, APSBundle, strict RFC 8785 JCS for interop-facing receipts, byte-match across implementations). Independently cited by [PDR in Production preprint (Nanook & Gerundium)](https://doi.org/10.5281/zenodo.19323172).
+Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and more. Full surface area (the default): 150 tools across the protocol surface, including Wave 1 accountability primitives (Ed25519 ActionReceipt, AuthorityBoundaryReceipt, CustodyReceipt, ContestabilityReceipt, APSBundle, strict RFC 8785 JCS for interop-facing receipts, byte-match across implementations). Independently cited by [PDR in Production preprint (Nanook & Gerundium)](https://doi.org/10.5281/zenodo.19323172).
 
 ## Quick Start
 
@@ -215,9 +215,9 @@ Layer 1 — Agent Passport Protocol (Ed25519 identity)
 
 ## Links
 
-- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v3.2.0, 4,026 tests)
-- Python SDK: [agent-passport-system](https://pypi.org/project/agent-passport-system/) (v2.4.0a3 pre-release; v2.3.0 stable)
-- Go SDK: [agent-passport-go](https://pkg.go.dev/github.com/aeoess/agent-passport-go) (v0.2.0-alpha.3; `go get github.com/aeoess/agent-passport-go@v0.2.0-alpha.3`)
+- npm SDK: [agent-passport-system](https://www.npmjs.com/package/agent-passport-system) (v3.3.0, 4,097 tests)
+- Python SDK: [agent-passport-system](https://pypi.org/project/agent-passport-system/) (v2.8.0)
+- Go SDK: [agent-passport-go](https://pkg.go.dev/github.com/aeoess/agent-passport-go) (v0.3.0; `go get github.com/aeoess/agent-passport-go@v0.3.0`)
 - Paper (Social Contract): [doi.org/10.5281/zenodo.18749779](https://doi.org/10.5281/zenodo.18749779)
 - Paper (Monotonic Narrowing): [doi.org/10.5281/zenodo.18932404](https://doi.org/10.5281/zenodo.18932404)
 - Paper (Faceted Authority Attenuation): [doi.org/10.5281/zenodo.19260073](https://doi.org/10.5281/zenodo.19260073)

package/build/index.js

@@ -28,7 +28,9 @@ createAgoraMessage, createFeed, appendToFeed, getThread, getByTopic, getTopics,
 // Values/Policy (Layer 2 + 5)
 loadFloor, attestFloor, createActionIntent, evaluateIntent, FloorValidatorV1, 
 // Commerce (Layer 8)
-commercePreflight, createCommerceDelegation, getSpendSummary, requestHumanApproval, 
+// commercePreflight moved to the gateway in agent-passport-system 3.3.0 (throw-only stub);
+// the MCP tool now returns a machine-readable deprecation notice instead of calling it.
+createCommerceDelegation, getSpendSummary, requestHumanApproval, 
 // Principal Identity
 createPrincipalIdentity, endorseAgent, verifyEndorsement, revokeEndorsement, createDisclosure, createFleet, addToFleet, getFleetStatus, revokeFromFleet, 
 // Reputation-Gated Authority (Layer 9)
@@ -368,7 +370,7 @@ function movedToGateway(toolName) {
 // ═══════════════════════════════════════
 const server = new McpServer({
     name: "agent-passport-mcp",
-    version: "2.0.0",
+    version: "3.3.0",
 });
 // Track server start time for Tier 0 connection timing
 globalThis.__mcpStartTime = Date.now();
@@ -452,12 +454,13 @@ const TOOL_PROFILES = {
         'create_intent', 'evaluate_intent', 'list_profiles',
     ]),
     essential: new Set([
+        'identify',
         'generate_keys', 'issue_passport', 'get_passport_grade',
         'create_delegation', 'verify_delegation', 'revoke_delegation', 'sub_delegate',
         'load_values_floor', 'attest_to_floor',
         'create_intent', 'evaluate_intent', 'complete_action',
         'create_agent_context', 'execute_with_context',
-        'commerce_preflight', 'get_commerce_spend', 'request_human_approval',
+        'get_commerce_spend', 'request_human_approval',
         'resolve_authority', 'check_tier', 'rotate_key',
         // v2 boundary primitives — most-used entry points
         'aps_create_attribution_receipt',
@@ -665,18 +668,24 @@ const TOOL_SCOPE_MAP = {
     'aps_capability_evaluate_authority': 'capability',
     'aps_capability_mint_receipt': 'capability',
     'aps_capability_sign_effect': 'capability',
+    // Mutual Authentication v1 (SDK v2.2.0) -> 'mutual-auth' scope
+    'mutualAuthBuildCertificate': 'mutual-auth',
+    'mutualAuthVerifyAttest': 'mutual-auth',
+    'mutualAuthDeriveSession': 'mutual-auth',
+    'mutualAuthVerifyTrustBundle': 'mutual-auth',
 };
 // ═══════════════════════════════════════
 // TOOL: list_profiles
 // ═══════════════════════════════════════
 server.tool("list_profiles", "Show available tool profiles. Set APS_PROFILE env var to limit exposed tools (e.g. APS_PROFILE=data).", {}, async () => {
     const lines = Object.entries(TOOL_PROFILES).map(([name, tools]) => `• ${name} (${tools.size} tools): ${Array.from(tools).slice(0, 6).join(', ')}${tools.size > 6 ? '...' : ''}`);
-    return { content: [{ type: "text", text: `📋 Tool Profiles (set APS_PROFILE env var):\n\nActive: ${activeProfile} (${activeProfile === 'full' ? '132' : profileFilter?.size || '132'} tools)\n\nRecommended: essential (20 tools) — identity, delegation, enforcement, commerce, reputation.\n\n${lines.join('\n')}\n\n• full (132 tools): All tools exposed (default)` }] };
+    const essentialSize = TOOL_PROFILES.essential.size;
+    return { content: [{ type: "text", text: `📋 Tool Profiles (set APS_PROFILE env var):\n\nActive: ${activeProfile} (${activeProfile === 'full' ? '150' : profileFilter?.size || '150'} tools)\n\nRecommended: essential (${essentialSize} tools) - identity, delegation, enforcement, commerce, reputation.\n\n${lines.join('\n')}\n\n• full (150 tools): All tools exposed (default)` }] };
 });
 // ═══════════════════════════════════════
 // TOOL: list_tools_for_scope (Primitive #9: Tool Pool Assembly)
 // ═══════════════════════════════════════
-server.tool("list_tools_for_scope", "List available MCP tools filtered by delegation scope. Pass your delegation scopes to see which tools you can use. Scopes: identity, delegation, principal, reputation, coordination, communication, governance, commerce, data, gateway, network, temporal, attribution. Use ['*'] for all tools.", {
+server.tool("list_tools_for_scope", "List available MCP tools filtered by delegation scope. Pass your delegation scopes to see which tools you can use. Scopes: identity, delegation, principal, reputation, coordination, communication, governance, commerce, data, gateway, network, temporal, attribution, settlement, capability, mutual-auth. Use ['*'] for all tools.", {
     scopes: z.array(z.string()).describe("Your delegation scopes, e.g. ['identity', 'delegation', 'commerce']"),
 }, async ({ scopes }) => {
     const allTools = Object.entries(TOOL_SCOPE_MAP);
@@ -2283,63 +2292,29 @@ server.tool("evaluate_intent", "[OPERATOR] Evaluate an intent against the Values
 // ═══════════════════════════════════════
 // COMMERCE TOOLS (Layer 8)
 // ═══════════════════════════════════════
-server.tool("commerce_preflight", "Run preflight checks before a purchase. Validates passport, delegation, merchant, and spend limits.", {
+server.tool("commerce_preflight", "[moved to gateway in SDK 3.3.0] The 6-gate commerce preflight orchestration moved out of the SDK and MCP into the AEOESS gateway. This tool no longer runs the pipeline locally; it returns a machine-readable deprecation notice pointing to the gateway commerce endpoint. Compose the pure gate predicates from the SDK yourself, or call the gateway.", {
     merchant_name: z.string().describe("Merchant to purchase from"),
     amount: z.number().describe("Purchase amount"),
     currency: z.string().default("usd").describe("Currency code"),
     delegation_id: z.string().describe("Commerce delegation ID"),
     agent_id: z.string().describe("Agent making the purchase"),
-}, async (args) => {
+}, async (_args) => {
     recordBehavior('commerce_preflight');
-    const keyErr = requireKey();
-    if (keyErr)
-        return { content: [{ type: "text", text: keyErr }], isError: true };
-    // F-1 fix: look up actual delegation from session state for real scope/spend
-    const sessionDel = state.delegations.get(args.delegation_id);
-    const actualSpendLimit = sessionDel?.spendLimit ?? 1000;
-    const hasCommerceScope = sessionDel
-        ? sessionDel.scope.some((s) => s === 'commerce' || s === 'commerce:checkout' || s.startsWith('commerce'))
-        : false; // no delegation → no commerce scope (agent-context fallback removed with gateway move)
-    // Use session agent if available (created by identify), fallback to throwaway
-    const agent = state.sessionAgent || joinSocialContract({
-        name: args.agent_id,
-        mission: 'Commerce operation',
-        owner: 'mcp-session',
-        capabilities: hasCommerceScope ? ['commerce:checkout', 'commerce:browse'] : [],
-        platform: 'node',
-        models: ['mcp'],
-    });
-    // Look up or create commerce delegation using actual scope/spend.
-    // Reflect spend already recorded on the session delegation instead of the hardcoded 0 that
-    // createCommerceDelegation returns, so the spend gate is not a structural no-op that always
-    // sees the full limit remaining. NOTE: nothing in the MCP yet INCREMENTS sessionDel.spentAmount
-    // (a spend-record path is a metering decision flagged for Tima), so cumulative enforcement here
-    // is only as complete as the session state that feeds it.
-    const commerceDel = {
-        ...createCommerceDelegation({
-            agentId: args.agent_id,
-            delegationId: args.delegation_id,
-            spendLimit: actualSpendLimit,
-            approvedMerchants: [], // Empty = all merchants allowed
-        }),
-        spentAmount: sessionDel?.spentAmount ?? 0,
-    };
-    const result = commercePreflight({
-        signedPassport: agent.passport,
-        delegation: commerceDel,
-        merchantName: args.merchant_name,
-        estimatedTotal: { amount: args.amount, currency: args.currency },
-    });
+    // commercePreflight() became a throw-only migration stub in agent-passport-system 3.3.0
+    // (the orchestrator moved to the gateway). Rather than let that stub throw, return a clean,
+    // machine-readable deprecation result so tools/list stays honest and calls fail predictably.
     return {
         content: [{
                 type: "text",
                 text: JSON.stringify({
-                    permitted: result.permitted,
-                    checks: result.checks,
-                    warnings: result.warnings,
-                    blockedReason: result.blockedReason,
+                    permitted: false,
+                    error: 'commerce_preflight_moved_to_gateway',
+                    reason: 'Commerce preflight orchestration was removed from the SDK and MCP in agent-passport-system 3.3.0. Run the 6-gate preflight via the AEOESS gateway commerce endpoint.',
+                    gateway_endpoint: 'https://gateway.aeoess.com',
+                    sdk_note: 'The SDK still exports the pure gate predicates (checkPassportGate, checkScopeGate, checkSpendGate, checkMerchantGate, checkWalletGate) and signCommerceReceipt, so callers can compose preflight themselves.',
                 }, null, 2),
             }],
+        isError: true,
     };
 });
 server.tool("get_commerce_spend", "Get spend analytics for a commerce delegation.", {
@@ -2347,9 +2322,9 @@ server.tool("get_commerce_spend", "Get spend analytics for a commerce delegation
     delegation_id: z.string().describe("Commerce delegation ID"),
     spend_limit: z.number().describe("Total allowed spend"),
 }, async (args) => {
-    // Report spend recorded on the session delegation instead of always reporting 0. Same caveat
-    // as commerce_preflight: nothing in the MCP yet increments sessionDel.spentAmount (metering
-    // record path flagged for Tima), so this reflects whatever the session state holds.
+    // Report spend recorded on the session delegation instead of always reporting 0. Caveat:
+    // nothing in the MCP yet increments sessionDel.spentAmount (a metering record path is a
+    // decision flagged for Tima), so this reflects whatever the session state holds.
     const sessionDel = state.delegations.get(args.delegation_id);
     const commerceDel = {
         ...createCommerceDelegation({

package/build/setup.js

@@ -87,7 +87,7 @@ function setup() {
         console.log(JSON.stringify({ mcpServers: { "agent-passport": serverConfig } }, null, 2));
     }
     else {
-        console.log(`\n  Restart your AI client to activate Agent Passport (83 tools).`);
+        console.log(`\n  Restart your AI client to activate Agent Passport (150 tools).`);
         console.log(`  Then say: "Create an agent identity" or "Delegate authority"\n`);
         if (!useRemote) {
             console.log(`  Tip: Use --remote for zero-install SSE mode: npx agent-passport-system-mcp setup --remote\n`);

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "agent-passport-system-mcp",
-  "version": "3.3.0",
+  "version": "3.3.1",
   "mcpName": "io.github.aeoess/agent-passport-mcp",
-  "description": "MCP server for the Agent Passport System - protocol-layer tools only. 150 tools (132 protocol + 10 gateway deprecation stubs). Identity, delegation, reputation, attestation, coordination, commerce, attribution primitive, attribution settlement. Tracks SDK v3.2.0 (Wave 1 accountability primitives + Phase 4.1 payment rails shipped in SDK; MCP rail-tool exposure deferred). For gateway-runtime tools (ProxyGateway, AgentContext, DataEnforcementGate), use gateway.aeoess.com REST API or pin to v3.1.x.",
+  "description": "MCP server for the Agent Passport System - protocol-layer tools only. 150 tools (132 protocol + 10 gateway deprecation stubs). Identity, delegation, reputation, attestation, coordination, commerce, attribution primitive, attribution settlement. Tracks SDK v3.3.0 (Wave 1 accountability primitives + Phase 4.1 payment rails shipped in SDK; MCP rail-tool exposure deferred). For gateway-runtime tools (ProxyGateway, AgentContext, DataEnforcementGate), use gateway.aeoess.com REST API or pin to v3.1.x.",
   "type": "module",
   "bin": {
     "agent-passport-system-mcp": "./build/bin.js",
@@ -50,7 +50,7 @@
   "homepage": "https://github.com/aeoess/agent-passport-mcp",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "agent-passport-system": "^3.3.0",
+    "agent-passport-system": "^3.3.1",
     "zod": "^3.25.76"
   },
   "overrides": {