Release 0.5.0: MCP tool surface closed, plaintext passphrase cache removed - #98
Merged
Conversation
…moved Minor rather than patch because this is breaking on 0.x. The `unlock` command is removed, and six commands no longer appear over MCP: wallet create, wallet show-mnemonic, wallet export, wallet remove, send and unlock. All six still run from a shell. What changes is that they are no longer served as agent tools, where the CLI's --danger and typed-confirm gates degrade into boolean parameters a model sets for itself, and where anything they return lands in the transcript. Unattended use of the wallet is AGENTSCORE_PAY_PASSPHRASE in the environment, which the removed command's own hint text already recommended. A leftover .unlock file is deleted rather than ignored on the next command that needs a passphrase. Spend limits now apply to `send`, which previously let a configured ceiling be walked past with a raw transfer.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Version bump for the AS-006 and AS-011 work merged in #97.
Type of change
Minor rather than patch because 0.x signals breaking with the minor. The
unlockcommand is removed and six commands no longer appear over MCP.Public API
CLI:
unlockis gone. Unattended use isAGENTSCORE_PAY_PASSPHRASEin the environment, which that command's own hint text already recommended; interactive users type the passphrase per command. Every other command is unchanged.MCP:
wallet_export,wallet_show-mnemonic,wallet_create,wallet_remove,sendandunlocknow returnUnknown tool. All six still run from a shell.sendgains a spend-limit check, a no-op unlesslimits.jsonsets one.A leftover
~/.agentscore/.unlockis deleted on the next command that needs a passphrase, rather than ignored.Test plan
On the bumped tree:
bun run lint,bun run typecheckandbun run testclean, 57 files and 574 tests passing.The behavior is verified in #97, including a live MCP handshake confirming the six tools return
Unknown toolwhilepayandbalancestay exposed, and drills that reintroduce each guard's removal and confirm the tests fail.Checklist