chore: v0.9.8.1 to 0.9.8.2: SSOT, JWKS, OpenAPI (#44)

- Wire SSOT=0.9.8
- README samples lowercase
- MCP discovery gated
- JWKS If-None-Match list handling
- OpenAPI license Apache-2.0
- Jest CJS
- explicit server→schema dep.

Author: jithinraj

README.md

@@ -37,7 +37,7 @@ Autonomous clients need predictable, auditable policy and trust rails. With well
 ## At a glance
 
 - **Discovery:** `/.well-known/peac.txt` (fallback `/peac.txt`)
-- **Wire version:** `0.9.11` (set header `X-PEAC-Protocol: 0.9.11`; emit lowercase on wire if you prefer)
+- **Wire version:** `0.9.8` (set header `x-peac-protocol: 0.9.8`)
 - **Headers:** lowercase `x-peac-*`; parsers MUST treat header names case-insensitively
 - **Media:** `application/peac+json` (content), `application/problem+json` (errors), `application/jwk-set+json` (JWKS)
 - **Receipts:** detached JWS (`typ: application/peac-receipt+jws`) using JCS
@@ -76,7 +76,7 @@ Autonomous clients need predictable, auditable policy and trust rails. With well
 pnpm add -g @peacprotocol/cli @peacprotocol/core
 
 npx peac init                 # scaffold peac.txt with defaults
-npx peac validate peac.txt    # Expected: Valid PEAC 0.9.11 policy
+npx peac validate peac.txt    # Expected: Valid PEAC 0.9.8 policy
 
 # Preferred path
 #   /.well-known/peac.txt
@@ -117,7 +117,7 @@ Common pitfalls: invalid schema returns `application/problem+json` 400.
 
 ---
 
-## Minimal `peac.txt` (0.9.11 wire)
+## Minimal `peac.txt` (docs train 0.9.11, wire 0.9.8)
 
 ```txt
 # /.well-known/peac.txt
@@ -171,14 +171,14 @@ More examples: [docs/examples.md](docs/examples.md)
 
 Adapters bridge PEAC to payment rails, agent protocols, provenance, and chains. Lifecycle: simulation → staging → production.
 
-| Adapter    | Status (0.9.11) | Notes                          |
-| ---------- | --------------- | ------------------------------ |
-| **MCP**    | Beta            | Agent protocol adapter         |
-| **A2A**    | Beta            | Agent-to-Agent negotiation     |
-| **x402**   | Stable          | Payment rail                   |
-| **Stripe** | Stable          | Payment rail                   |
-| Chainlink  | Preview         | Oracle/provenance integrations |
-| peaq       | Preview         | DePIN/IoT sharing + receipts   |
+| Adapter    | Status (0.9.11 docs) | Notes                          |
+| ---------- | -------------------- | ------------------------------ |
+| **MCP**    | Beta                 | Agent protocol adapter         |
+| **A2A**    | Beta                 | Agent-to-Agent negotiation     |
+| **x402**   | Stable               | Payment rail                   |
+| **Stripe** | Stable               | Payment rail                   |
+| Chainlink  | Preview              | Oracle/provenance integrations |
+| peaq       | Preview              | DePIN/IoT sharing + receipts   |
 
 Details & examples: [docs/interop.md](docs/interop.md) · Propose new adapters via [PEIPs](docs/peips.md)
 
@@ -221,6 +221,38 @@ if (access.granted) {
 
 ## HTTP semantics & samples
 
+**Example API request with curl:**
+
+```bash
+curl -X POST https://demo.peac.dev/peac/agreements \
+  -H "x-peac-protocol: 0.9.8" \
+  -H "content-type: application/json" \
+  -H "x-api-key: your-key" \
+  -d '{
+    "capabilities": ["read", "summarize"],
+    "max_charge": "5.00",
+    "currency": "USD"
+  }'
+```
+
+**JavaScript example:**
+
+```javascript
+const response = await fetch('https://demo.peac.dev/peac/agreements', {
+  method: 'POST',
+  headers: {
+    'x-peac-protocol': '0.9.8',
+    'content-type': 'application/json',
+    'x-api-key': apiKey,
+  },
+  body: JSON.stringify({
+    capabilities: ['read', 'summarize'],
+    max_charge: '5.00',
+    currency: 'USD',
+  }),
+});
+```
+
 **400 Bad Request** (validation error)
 
 ```json

openapi/openapi.yaml

@@ -5,8 +5,8 @@ info:
   x-release: 0.9.8
   description: Agreement-first API for PEAC Protocol v0.9.8 with payment binding and secure webhooks
   license:
-    name: MIT
-    url: https://opensource.org/licenses/MIT
+    name: Apache-2.0
+    url: https://www.apache.org/licenses/LICENSE-2.0
   contact:
     name: PEAC Protocol Team
     url: https://github.com/peacprotocol/peac

package-lock.json

@@ -1,2 +1,3 @@
 export * from './schemas';
 export * from './types';
+export { WIRE_VERSION, DOCS_TRAIN } from './version';

packages/schema/src/index.ts

@@ -1,3 +1,4 @@
-// PEAC Protocol v0.9.5 Schema definitions
-export const PEAC_VERSION = '0.9.5';
-export const SCHEMA_VERSION = '0.9.5';
+import { WIRE_VERSION } from './version';
+
+export const PEAC_VERSION = WIRE_VERSION;
+export const SCHEMA_VERSION = WIRE_VERSION;

packages/schema/src/schemas.ts

@@ -0,0 +1,2 @@
+export const WIRE_VERSION = '0.9.8';
+export const DOCS_TRAIN = '0.9.11';

packages/schema/src/version.ts

@@ -9,6 +9,13 @@ REDIS_URL=redis://localhost:6379
 SESSION_PRIVATE_KEY_PATH=./keys/session-private.pem
 SESSION_PUBLIC_KEY_PATH=./keys/session-public.pem
 
+# MCP discovery (exposed only when enabled)
+PEAC_MCP_ENABLED=false
+MCP_ENDPOINT=https://your-mcp-endpoint.com
+
+# Existing payment config unchanged
+PAYMENT_PROVIDER=x402  # or credits
+
 # Optional
 LOG_LEVEL=info
 RATE_LIMIT_WINDOW=60000

packages/server/.env.example

@@ -1,5 +1,5 @@
 /** @type {import('jest').Config} */
-export default {
+module.exports = {
   preset: 'ts-jest',
   testEnvironment: 'node',
 

packages/server/jest.config.js

@@ -47,6 +47,7 @@
     "prepublishOnly": "npm run build && npm run test:coverage && npm run sbom"
   },
   "dependencies": {
+    "@peacprotocol/schema": "file:../schema",
     "bullmq": "^5.1.0",
     "canonicalize": "^2.0.0",
     "cors": "^2.8.5",
@@ -72,11 +73,11 @@
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
     "@types/jest": "^29.5.11",
-    "chokidar": "^3.6.0",
     "@types/node": "^20.11.0",
     "@types/supertest": "^6.0.2",
     "@typescript-eslint/eslint-plugin": "^6.21.0",
     "@typescript-eslint/parser": "^6.21.0",
+    "chokidar": "^3.6.0",
     "eslint": "^8.57.1",
     "ioredis-mock": "^8.9.0",
     "jest": "^29.7.0",

packages/server/package.json

@@ -3,6 +3,7 @@ import * as crypto from 'crypto';
 import pino from 'pino';
 import { AdapterRegistry } from '../adapters/registry';
 import { deepMerge } from '../utils/deep-merge';
+import { WIRE_VERSION } from '@peacprotocol/schema';
 
 const logger = pino({ name: 'discovery' });
 
@@ -39,8 +40,8 @@ export class DiscoveryService {
 
     const base = {
       protocol: 'PEAC',
-      version: this.config.version,
-      'x-release': this.config.x_release,
+      version: WIRE_VERSION,
+      'x-release': WIRE_VERSION,
 
       endpoints: {
         agreements: {
@@ -129,14 +130,26 @@ export class DiscoveryService {
       },
 
       version_negotiation: {
-        request_header: 'X-PEAC-Protocol',
-        current: this.config.x_release,
-        supported: [this.config.x_release],
+        request_header: 'x-peac-protocol',
+        current: WIRE_VERSION,
+        supported: [WIRE_VERSION],
       },
     };
 
     const adapterFragments = this.adapterRegistry.composeDiscovery();
-    const document = deepMerge(base, adapterFragments);
+    let document = deepMerge(base, adapterFragments);
+
+    if (process.env.PEAC_MCP_ENABLED === 'true') {
+      document = deepMerge(document, {
+        adapters: {
+          mcp: {
+            enabled: true,
+            tools: ['peac.negotiate', 'peac.pay', 'peac.verify'],
+            endpoint: process.env.MCP_ENDPOINT,
+          },
+        },
+      });
+    }
 
     const content = JSON.stringify(document);
     const etag = `"${crypto.createHash('sha256').update(content).digest('hex')}"`;