@kya-os/create-mcpi-app 1.13.0 → 1.14.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @kya-os/create-mcpi-app@1.13.0 build /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app
+> @kya-os/create-mcpi-app@1.14.0 build /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app
 > tsc && chmod +x dist/index.js && node --import tsx scripts/build-bundles.ts
 
 🔨 Building template bundles...
@@ -7,23 +7,23 @@
 
 📦 Building template: blank
   ✅ Source files written to /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app/dist/.tmp-bundles/blank
-  ✅ Bundle built: 8564273 bytes, hash: sha256:e6abd9412c1e1b82a73b9feab75e49ff4af04f8dc8d912f34cef43a2743627a2
+  ✅ Bundle built: 8565369 bytes, hash: sha256:82c9c7ad725657596d170b798edf349e185bba42f6795b48efe253da6a320304
 
 📦 Building template: hardware-world
   ✅ Source files written to /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app/dist/.tmp-bundles/hardware-world
-  ✅ Bundle built: 8576706 bytes, hash: sha256:b0efa3467d3353697f11bb8a953e1ed8cd4bfa393046afd36bb7d2152e7c32ba
+  ✅ Bundle built: 8577802 bytes, hash: sha256:86f8393c5f1c5872656c838b56245200e59ec56e4931b0dbac3387101702599c
 
 📦 Building template: ecommerce
   ✅ Source files written to /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app/dist/.tmp-bundles/ecommerce
-  ✅ Bundle built: 8565967 bytes, hash: sha256:0d0c64955b1ccc2ffe0de63d0fb5396aacefd41a4f60e0e34eb1c32eaeca18d5
+  ✅ Bundle built: 8567063 bytes, hash: sha256:b79f9cb456fe4cea8041d71e873b05b64f8e0184c9fe98408d8237c0762cf465
 
 📦 Building template: mix-station
   ✅ Source files written to /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app/dist/.tmp-bundles/mix-station
-  ✅ Bundle built: 8579352 bytes, hash: sha256:638947f74b153bc3e5fc316c50a5e5be0892f6a4e512b1cac24edf591311db20
+  ✅ Bundle built: 8580448 bytes, hash: sha256:8cc29447b3641c36e3393c4aef6004b3c306803c3eec167562c9f71c90ebf24a
 
 ✅ All bundles built successfully!
    Output: /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app/dist/bundles
-   Version: 1.13.0
-   Framework: 1.16.0
+   Version: 1.14.0
+   Framework: 1.17.0
    Templates: blank, hardware-world, ecommerce, mix-station
    Manifest: /home/runner/work/xmcp-i/xmcp-i/packages/create-mcpi-app/dist/bundles/manifest.json

package/dist/bundles/{blank.e6abd9412c1e1b82a73b9feab75e49ff4af04f8dc8d912f34cef43a2743627a2.js → blank.82c9c7ad725657596d170b798edf349e185bba42f6795b48efe253da6a320304.js}

@@ -152582,6 +152582,50 @@ function createRemoteIssuer(binding, apiKey) {
 
 // ../mcp-i-cloudflare/dist/services/delegation-trust.js
 init_crypto3();
+
+// ../mcp-i-cloudflare/dist/services/resource-audience.js
+var RESOURCE_REFUSALS = Object.freeze({
+  resources_unconfigured: "KYA_OS_RESOURCE_DIDS is unset, empty or malformed: this worker has no resource DID, so no delegation can name it",
+  no_routed_host: "No routed host for this verification: the expected audience is did:web:<request Host>",
+  host_not_a_resource: "The routed host is not one of this worker's resources (KYA_OS_RESOURCE_DIDS)"
+});
+var DID_WEB_PATTERN = /^did:web:[a-z0-9.-]+(?:%3A[0-9]{1,5})?(?::[^\s:#?/]+)*$/;
+function parseResourceDids(raw2) {
+  if (typeof raw2 !== "string" || !raw2.trim())
+    return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw2);
+  } catch {
+    return null;
+  }
+  return Array.isArray(parsed) && parsed.length > 0 && parsed.every((did) => typeof did === "string" && DID_WEB_PATTERN.test(did)) ? parsed : null;
+}
+function didWebForHost(host) {
+  const value = host.trim().toLowerCase();
+  if (!/^[a-z0-9.-]+(?::[0-9]{1,5})?$/.test(value))
+    return void 0;
+  return "did:web:" + value.replace(":", "%3A");
+}
+function routedResource(resourceDids, routedHost) {
+  const resources = parseResourceDids(resourceDids);
+  if (!resources)
+    return { refusal: "resources_unconfigured" };
+  const routed = routedHost === void 0 ? void 0 : didWebForHost(routedHost);
+  if (!routed)
+    return { refusal: "no_routed_host" };
+  if (!resources.includes(routed))
+    return { refusal: "host_not_a_resource" };
+  return { resourceDid: routed };
+}
+function audienceNamesResource(aud, resourceDid) {
+  if (aud === void 0)
+    return "missing";
+  const value = Array.isArray(aud) && aud.length === 1 ? aud[0] : aud;
+  return resourceDid !== void 0 && value === resourceDid ? "accepted" : "unmatched";
+}
+
+// ../mcp-i-cloudflare/dist/services/delegation-trust.js
 var DID_PATTERN = /^did:[a-z0-9]+:[^\s#?]+$/;
 var UPSTREAM_TIMEOUT_MS = 3e3;
 var DID_DOCUMENT_TTL_MS = 5 * 6e4;
@@ -152599,35 +152643,24 @@ function checkpointOriginFor(url3) {
 }
 function resolveDelegationTrust(env2, options = {}) {
   const issuers = /* @__PURE__ */ new Set();
-  const audiences = /* @__PURE__ */ new Set();
+  const { resourceDid, refusal: resourceRefusal } = routedResource(env2.KYA_OS_RESOURCE_DIDS, options.routedHost);
   const ownDid = typeof env2.MCP_IDENTITY_AGENT_DID === "string" && DID_PATTERN.test(env2.MCP_IDENTITY_AGENT_DID) ? env2.MCP_IDENTITY_AGENT_DID : void 0;
-  if (ownDid) {
+  if (ownDid)
     issuers.add(ownDid);
-    audiences.add(ownDid);
-  }
   const binding = parseNativeIssuerBinding(env2.MCPI_NATIVE_HTTP_ISSUER_CONFIG);
-  if (binding) {
+  if (binding)
     issuers.add(binding.issuerDid);
-    audiences.add(binding.issuerDid);
-    audiences.add(binding.projectId);
-  }
   for (const did of [
     ...listFrom(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
     ...options.trustedIssuers ?? []
   ])
     if (did && DID_PATTERN.test(did))
       issuers.add(did);
-  for (const aud of [
-    ...listFrom(env2.CHECKPOINT_PROJECT_ID),
-    ...listFrom(env2.KYA_OS_DELEGATION_AUDIENCES),
-    ...options.audiences ?? []
-  ])
-    if (aud)
-      audiences.add(aud);
   const checkpointUrl = env2.CHECKPOINT_API_URL || DEFAULT_CHECKPOINT_URL;
   return {
     issuers,
-    audiences,
+    resourceDid,
+    resourceRefusal,
     ownDid,
     checkpointOrigin: typeof checkpointUrl === "string" ? checkpointOriginFor(checkpointUrl) : void 0
   };
@@ -152641,10 +152674,7 @@ function credentialHandle(payload) {
   return typeof jti === "string" && jti.length > 0 ? jti : void 0;
 }
 function audienceVerdict(aud, trust) {
-  if (aud === void 0)
-    return "missing";
-  const values = Array.isArray(aud) ? aud : [aud];
-  return values.some((v) => typeof v === "string" && trust.audiences.has(v)) ? "accepted" : "unmatched";
+  return audienceNamesResource(aud, trust.resourceDid);
 }
 async function readBounded(stream, maxBytes) {
   if (!stream)
@@ -152982,16 +153012,14 @@ var DelegationService = class {
   /**
    * Whether a cached development verdict still holds under THIS deployment's
    * trust: the token's issuer is the one the verdict was granted to, it is
-   * still pinned, and the token's `aud` is still accepted (a KV namespace may
-   * be shared by deployments with different audiences). Development only, so
-   * no audience is deferred to Checkpoint here.
+   * still pinned, and the token's `aud` is still this worker's resource DID
+   * (a KV namespace may be shared by deployments with different resources).
    */
   async servesCachedVerdict(token, grantedIssuer) {
     const payload = parseVCJWT2(token)?.payload;
     if (!payload || payload.iss !== grantedIssuer)
       return false;
-    const audience = audienceVerdict(payload.aud, this.trust);
-    if (audience !== "accepted" && !(audience === "missing" && grantedIssuer === this.trust.ownDid))
+    if (audienceVerdict(payload.aud, this.trust) !== "accepted")
       return false;
     return this.isPinnedIssuer(grantedIssuer);
   }
@@ -153005,15 +153033,13 @@ var DelegationService = class {
    * only fetch an unpinned issuer can cause is the configured Checkpoint's own
    * DID document (cached).
    *
-   * Audience: `aud` must name this worker (see ./delegation-trust). Only a
-   * self-issued credential (issuer = this worker's own DID) may omit it: the
-   * anchor flow mints self-issued delegations without `aud`, while the
-   * Checkpoint platform mint, the hosted-consent org mint and the native
-   * issuer always set it. One exception: with a Checkpoint API key, a
-   * platform-signed credential may carry an `aud` this worker cannot name
-   * (its project UUID, while CHECKPOINT_PROJECT_ID is often the friendly id).
-   * Checkpoint's confirm pins that `aud` to the API key's project, so the
-   * check is left to it.
+   * Audience: `aud` must be `did:web:<the host this request was routed for>`,
+   * and that DID must be in `KYA_OS_RESOURCE_DIDS` (see ./delegation-trust),
+   * whoever the issuer and whether or not a Checkpoint API key is set. A
+   * credential without `aud`, or naming anything else (another of this
+   * worker's hosts, the org DID, the worker's own DID, a project id), is
+   * refused. Without a valid resource list, or without a routed host (a
+   * verification with no request behind it), every credential is refused.
    *
    * Issuer: only pinned issuers are resolved and verified. An untrusted or
    * unresolvable issuer fails closed.
@@ -153033,15 +153059,14 @@ var DelegationService = class {
       const issuerDid2 = parsed.payload.iss;
       if (!issuerDid2 || typeof issuerDid2 !== "string")
         return reject("Missing issuer (iss)");
+      if (!this.trust.resourceDid)
+        return reject(RESOURCE_REFUSALS[this.trust.resourceRefusal]);
       const audience = audienceVerdict(parsed.payload.aud, this.trust);
-      if (audience === "missing" && issuerDid2 !== this.trust.ownDid)
+      if (audience === "missing")
         return reject("Missing audience (aud)");
-      if (audience === "unmatched" && !this.env.CHECKPOINT_API_KEY)
+      if (audience !== "accepted")
         return reject("Audience not accepted");
-      if (this.trust.issuers.has(issuerDid2)) {
-        if (audience === "unmatched")
-          return reject("Audience not accepted");
-      } else if (!await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
+      if (!this.trust.issuers.has(issuerDid2) && !await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
         return reject(`Untrusted issuer: ${logSafe(issuerDid2)}`);
       }
       const kid = parsed.header.kid;
@@ -166382,7 +166407,7 @@ function mapPrefixedEnv(source, prefix) {
     // Delegation trust policy (DelegationService); set unprefixed like the
     // native issuer binding above.
     KYA_OS_TRUSTED_DELEGATION_ISSUERS: stringValue(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
-    KYA_OS_DELEGATION_AUDIENCES: stringValue(env2.KYA_OS_DELEGATION_AUDIENCES),
+    KYA_OS_RESOURCE_DIDS: stringValue(env2.KYA_OS_RESOURCE_DIDS),
     KYA_OS_INSECURE_DEV_TOKENS: stringValue(env2.KYA_OS_INSECURE_DEV_TOKENS),
     CHECKPOINT_API_URL: typeof env2.CHECKPOINT_API_URL === "string" ? env2.CHECKPOINT_API_URL : void 0,
     CHECKPOINT_API_KEY: typeof env2.CHECKPOINT_API_KEY === "string" ? env2.CHECKPOINT_API_KEY : void 0,
@@ -166725,7 +166750,7 @@ init_native_oauth_state_do();
 // ../mcp-i-cloudflare/package.json
 var package_default = {
   name: "@kya-os/mcp-i-cloudflare",
-  version: "1.16.0",
+  version: "1.17.0",
   description: "Cloudflare Workers adapter for MCP-I framework",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -174214,7 +174239,7 @@ async function applyBearerDelegation(request, env2, cfg, getProofSupport = getCa
   const native = cfg.native ?? void 0;
   const isValid2 = await new DelegationService(env2, void 0, {
     trustedIssuers: [native?.issuerDid],
-    audiences: [native?.issuerDid, native?.projectId]
+    routedHost: new URL(request.url).host
   }).verifyDelegation(vcJwt);
   if (!isValid2) {
     if (isVcJwtExpired(vcJwt)) {

package/dist/bundles/{ecommerce.0d0c64955b1ccc2ffe0de63d0fb5396aacefd41a4f60e0e34eb1c32eaeca18d5.js → ecommerce.b79f9cb456fe4cea8041d71e873b05b64f8e0184c9fe98408d8237c0762cf465.js}

@@ -152582,6 +152582,50 @@ function createRemoteIssuer(binding, apiKey) {
 
 // ../mcp-i-cloudflare/dist/services/delegation-trust.js
 init_crypto3();
+
+// ../mcp-i-cloudflare/dist/services/resource-audience.js
+var RESOURCE_REFUSALS = Object.freeze({
+  resources_unconfigured: "KYA_OS_RESOURCE_DIDS is unset, empty or malformed: this worker has no resource DID, so no delegation can name it",
+  no_routed_host: "No routed host for this verification: the expected audience is did:web:<request Host>",
+  host_not_a_resource: "The routed host is not one of this worker's resources (KYA_OS_RESOURCE_DIDS)"
+});
+var DID_WEB_PATTERN = /^did:web:[a-z0-9.-]+(?:%3A[0-9]{1,5})?(?::[^\s:#?/]+)*$/;
+function parseResourceDids(raw2) {
+  if (typeof raw2 !== "string" || !raw2.trim())
+    return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw2);
+  } catch {
+    return null;
+  }
+  return Array.isArray(parsed) && parsed.length > 0 && parsed.every((did) => typeof did === "string" && DID_WEB_PATTERN.test(did)) ? parsed : null;
+}
+function didWebForHost(host) {
+  const value = host.trim().toLowerCase();
+  if (!/^[a-z0-9.-]+(?::[0-9]{1,5})?$/.test(value))
+    return void 0;
+  return "did:web:" + value.replace(":", "%3A");
+}
+function routedResource(resourceDids, routedHost) {
+  const resources = parseResourceDids(resourceDids);
+  if (!resources)
+    return { refusal: "resources_unconfigured" };
+  const routed = routedHost === void 0 ? void 0 : didWebForHost(routedHost);
+  if (!routed)
+    return { refusal: "no_routed_host" };
+  if (!resources.includes(routed))
+    return { refusal: "host_not_a_resource" };
+  return { resourceDid: routed };
+}
+function audienceNamesResource(aud, resourceDid) {
+  if (aud === void 0)
+    return "missing";
+  const value = Array.isArray(aud) && aud.length === 1 ? aud[0] : aud;
+  return resourceDid !== void 0 && value === resourceDid ? "accepted" : "unmatched";
+}
+
+// ../mcp-i-cloudflare/dist/services/delegation-trust.js
 var DID_PATTERN = /^did:[a-z0-9]+:[^\s#?]+$/;
 var UPSTREAM_TIMEOUT_MS = 3e3;
 var DID_DOCUMENT_TTL_MS = 5 * 6e4;
@@ -152599,35 +152643,24 @@ function checkpointOriginFor(url3) {
 }
 function resolveDelegationTrust(env2, options = {}) {
   const issuers = /* @__PURE__ */ new Set();
-  const audiences = /* @__PURE__ */ new Set();
+  const { resourceDid, refusal: resourceRefusal } = routedResource(env2.KYA_OS_RESOURCE_DIDS, options.routedHost);
   const ownDid = typeof env2.MCP_IDENTITY_AGENT_DID === "string" && DID_PATTERN.test(env2.MCP_IDENTITY_AGENT_DID) ? env2.MCP_IDENTITY_AGENT_DID : void 0;
-  if (ownDid) {
+  if (ownDid)
     issuers.add(ownDid);
-    audiences.add(ownDid);
-  }
   const binding = parseNativeIssuerBinding(env2.MCPI_NATIVE_HTTP_ISSUER_CONFIG);
-  if (binding) {
+  if (binding)
     issuers.add(binding.issuerDid);
-    audiences.add(binding.issuerDid);
-    audiences.add(binding.projectId);
-  }
   for (const did of [
     ...listFrom(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
     ...options.trustedIssuers ?? []
   ])
     if (did && DID_PATTERN.test(did))
       issuers.add(did);
-  for (const aud of [
-    ...listFrom(env2.CHECKPOINT_PROJECT_ID),
-    ...listFrom(env2.KYA_OS_DELEGATION_AUDIENCES),
-    ...options.audiences ?? []
-  ])
-    if (aud)
-      audiences.add(aud);
   const checkpointUrl = env2.CHECKPOINT_API_URL || DEFAULT_CHECKPOINT_URL;
   return {
     issuers,
-    audiences,
+    resourceDid,
+    resourceRefusal,
     ownDid,
     checkpointOrigin: typeof checkpointUrl === "string" ? checkpointOriginFor(checkpointUrl) : void 0
   };
@@ -152641,10 +152674,7 @@ function credentialHandle(payload) {
   return typeof jti === "string" && jti.length > 0 ? jti : void 0;
 }
 function audienceVerdict(aud, trust) {
-  if (aud === void 0)
-    return "missing";
-  const values = Array.isArray(aud) ? aud : [aud];
-  return values.some((v) => typeof v === "string" && trust.audiences.has(v)) ? "accepted" : "unmatched";
+  return audienceNamesResource(aud, trust.resourceDid);
 }
 async function readBounded(stream, maxBytes) {
   if (!stream)
@@ -152982,16 +153012,14 @@ var DelegationService = class {
   /**
    * Whether a cached development verdict still holds under THIS deployment's
    * trust: the token's issuer is the one the verdict was granted to, it is
-   * still pinned, and the token's `aud` is still accepted (a KV namespace may
-   * be shared by deployments with different audiences). Development only, so
-   * no audience is deferred to Checkpoint here.
+   * still pinned, and the token's `aud` is still this worker's resource DID
+   * (a KV namespace may be shared by deployments with different resources).
    */
   async servesCachedVerdict(token, grantedIssuer) {
     const payload = parseVCJWT2(token)?.payload;
     if (!payload || payload.iss !== grantedIssuer)
       return false;
-    const audience = audienceVerdict(payload.aud, this.trust);
-    if (audience !== "accepted" && !(audience === "missing" && grantedIssuer === this.trust.ownDid))
+    if (audienceVerdict(payload.aud, this.trust) !== "accepted")
       return false;
     return this.isPinnedIssuer(grantedIssuer);
   }
@@ -153005,15 +153033,13 @@ var DelegationService = class {
    * only fetch an unpinned issuer can cause is the configured Checkpoint's own
    * DID document (cached).
    *
-   * Audience: `aud` must name this worker (see ./delegation-trust). Only a
-   * self-issued credential (issuer = this worker's own DID) may omit it: the
-   * anchor flow mints self-issued delegations without `aud`, while the
-   * Checkpoint platform mint, the hosted-consent org mint and the native
-   * issuer always set it. One exception: with a Checkpoint API key, a
-   * platform-signed credential may carry an `aud` this worker cannot name
-   * (its project UUID, while CHECKPOINT_PROJECT_ID is often the friendly id).
-   * Checkpoint's confirm pins that `aud` to the API key's project, so the
-   * check is left to it.
+   * Audience: `aud` must be `did:web:<the host this request was routed for>`,
+   * and that DID must be in `KYA_OS_RESOURCE_DIDS` (see ./delegation-trust),
+   * whoever the issuer and whether or not a Checkpoint API key is set. A
+   * credential without `aud`, or naming anything else (another of this
+   * worker's hosts, the org DID, the worker's own DID, a project id), is
+   * refused. Without a valid resource list, or without a routed host (a
+   * verification with no request behind it), every credential is refused.
    *
    * Issuer: only pinned issuers are resolved and verified. An untrusted or
    * unresolvable issuer fails closed.
@@ -153033,15 +153059,14 @@ var DelegationService = class {
       const issuerDid2 = parsed.payload.iss;
       if (!issuerDid2 || typeof issuerDid2 !== "string")
         return reject("Missing issuer (iss)");
+      if (!this.trust.resourceDid)
+        return reject(RESOURCE_REFUSALS[this.trust.resourceRefusal]);
       const audience = audienceVerdict(parsed.payload.aud, this.trust);
-      if (audience === "missing" && issuerDid2 !== this.trust.ownDid)
+      if (audience === "missing")
         return reject("Missing audience (aud)");
-      if (audience === "unmatched" && !this.env.CHECKPOINT_API_KEY)
+      if (audience !== "accepted")
         return reject("Audience not accepted");
-      if (this.trust.issuers.has(issuerDid2)) {
-        if (audience === "unmatched")
-          return reject("Audience not accepted");
-      } else if (!await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
+      if (!this.trust.issuers.has(issuerDid2) && !await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
         return reject(`Untrusted issuer: ${logSafe(issuerDid2)}`);
       }
       const kid = parsed.header.kid;
@@ -166382,7 +166407,7 @@ function mapPrefixedEnv(source, prefix) {
     // Delegation trust policy (DelegationService); set unprefixed like the
     // native issuer binding above.
     KYA_OS_TRUSTED_DELEGATION_ISSUERS: stringValue(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
-    KYA_OS_DELEGATION_AUDIENCES: stringValue(env2.KYA_OS_DELEGATION_AUDIENCES),
+    KYA_OS_RESOURCE_DIDS: stringValue(env2.KYA_OS_RESOURCE_DIDS),
     KYA_OS_INSECURE_DEV_TOKENS: stringValue(env2.KYA_OS_INSECURE_DEV_TOKENS),
     CHECKPOINT_API_URL: typeof env2.CHECKPOINT_API_URL === "string" ? env2.CHECKPOINT_API_URL : void 0,
     CHECKPOINT_API_KEY: typeof env2.CHECKPOINT_API_KEY === "string" ? env2.CHECKPOINT_API_KEY : void 0,
@@ -166725,7 +166750,7 @@ init_native_oauth_state_do();
 // ../mcp-i-cloudflare/package.json
 var package_default = {
   name: "@kya-os/mcp-i-cloudflare",
-  version: "1.16.0",
+  version: "1.17.0",
   description: "Cloudflare Workers adapter for MCP-I framework",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -174214,7 +174239,7 @@ async function applyBearerDelegation(request, env2, cfg, getProofSupport = getCa
   const native = cfg.native ?? void 0;
   const isValid2 = await new DelegationService(env2, void 0, {
     trustedIssuers: [native?.issuerDid],
-    audiences: [native?.issuerDid, native?.projectId]
+    routedHost: new URL(request.url).host
   }).verifyDelegation(vcJwt);
   if (!isValid2) {
     if (isVcJwtExpired(vcJwt)) {

package/dist/bundles/{hardware-world.b0efa3467d3353697f11bb8a953e1ed8cd4bfa393046afd36bb7d2152e7c32ba.js → hardware-world.86f8393c5f1c5872656c838b56245200e59ec56e4931b0dbac3387101702599c.js}

@@ -152582,6 +152582,50 @@ function createRemoteIssuer(binding, apiKey) {
 
 // ../mcp-i-cloudflare/dist/services/delegation-trust.js
 init_crypto3();
+
+// ../mcp-i-cloudflare/dist/services/resource-audience.js
+var RESOURCE_REFUSALS = Object.freeze({
+  resources_unconfigured: "KYA_OS_RESOURCE_DIDS is unset, empty or malformed: this worker has no resource DID, so no delegation can name it",
+  no_routed_host: "No routed host for this verification: the expected audience is did:web:<request Host>",
+  host_not_a_resource: "The routed host is not one of this worker's resources (KYA_OS_RESOURCE_DIDS)"
+});
+var DID_WEB_PATTERN = /^did:web:[a-z0-9.-]+(?:%3A[0-9]{1,5})?(?::[^\s:#?/]+)*$/;
+function parseResourceDids(raw2) {
+  if (typeof raw2 !== "string" || !raw2.trim())
+    return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw2);
+  } catch {
+    return null;
+  }
+  return Array.isArray(parsed) && parsed.length > 0 && parsed.every((did) => typeof did === "string" && DID_WEB_PATTERN.test(did)) ? parsed : null;
+}
+function didWebForHost(host) {
+  const value = host.trim().toLowerCase();
+  if (!/^[a-z0-9.-]+(?::[0-9]{1,5})?$/.test(value))
+    return void 0;
+  return "did:web:" + value.replace(":", "%3A");
+}
+function routedResource(resourceDids, routedHost) {
+  const resources = parseResourceDids(resourceDids);
+  if (!resources)
+    return { refusal: "resources_unconfigured" };
+  const routed = routedHost === void 0 ? void 0 : didWebForHost(routedHost);
+  if (!routed)
+    return { refusal: "no_routed_host" };
+  if (!resources.includes(routed))
+    return { refusal: "host_not_a_resource" };
+  return { resourceDid: routed };
+}
+function audienceNamesResource(aud, resourceDid) {
+  if (aud === void 0)
+    return "missing";
+  const value = Array.isArray(aud) && aud.length === 1 ? aud[0] : aud;
+  return resourceDid !== void 0 && value === resourceDid ? "accepted" : "unmatched";
+}
+
+// ../mcp-i-cloudflare/dist/services/delegation-trust.js
 var DID_PATTERN = /^did:[a-z0-9]+:[^\s#?]+$/;
 var UPSTREAM_TIMEOUT_MS = 3e3;
 var DID_DOCUMENT_TTL_MS = 5 * 6e4;
@@ -152599,35 +152643,24 @@ function checkpointOriginFor(url3) {
 }
 function resolveDelegationTrust(env2, options = {}) {
   const issuers = /* @__PURE__ */ new Set();
-  const audiences = /* @__PURE__ */ new Set();
+  const { resourceDid, refusal: resourceRefusal } = routedResource(env2.KYA_OS_RESOURCE_DIDS, options.routedHost);
   const ownDid = typeof env2.MCP_IDENTITY_AGENT_DID === "string" && DID_PATTERN.test(env2.MCP_IDENTITY_AGENT_DID) ? env2.MCP_IDENTITY_AGENT_DID : void 0;
-  if (ownDid) {
+  if (ownDid)
     issuers.add(ownDid);
-    audiences.add(ownDid);
-  }
   const binding = parseNativeIssuerBinding(env2.MCPI_NATIVE_HTTP_ISSUER_CONFIG);
-  if (binding) {
+  if (binding)
     issuers.add(binding.issuerDid);
-    audiences.add(binding.issuerDid);
-    audiences.add(binding.projectId);
-  }
   for (const did of [
     ...listFrom(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
     ...options.trustedIssuers ?? []
   ])
     if (did && DID_PATTERN.test(did))
       issuers.add(did);
-  for (const aud of [
-    ...listFrom(env2.CHECKPOINT_PROJECT_ID),
-    ...listFrom(env2.KYA_OS_DELEGATION_AUDIENCES),
-    ...options.audiences ?? []
-  ])
-    if (aud)
-      audiences.add(aud);
   const checkpointUrl = env2.CHECKPOINT_API_URL || DEFAULT_CHECKPOINT_URL;
   return {
     issuers,
-    audiences,
+    resourceDid,
+    resourceRefusal,
     ownDid,
     checkpointOrigin: typeof checkpointUrl === "string" ? checkpointOriginFor(checkpointUrl) : void 0
   };
@@ -152641,10 +152674,7 @@ function credentialHandle(payload) {
   return typeof jti === "string" && jti.length > 0 ? jti : void 0;
 }
 function audienceVerdict(aud, trust) {
-  if (aud === void 0)
-    return "missing";
-  const values = Array.isArray(aud) ? aud : [aud];
-  return values.some((v) => typeof v === "string" && trust.audiences.has(v)) ? "accepted" : "unmatched";
+  return audienceNamesResource(aud, trust.resourceDid);
 }
 async function readBounded(stream, maxBytes) {
   if (!stream)
@@ -152982,16 +153012,14 @@ var DelegationService = class {
   /**
    * Whether a cached development verdict still holds under THIS deployment's
    * trust: the token's issuer is the one the verdict was granted to, it is
-   * still pinned, and the token's `aud` is still accepted (a KV namespace may
-   * be shared by deployments with different audiences). Development only, so
-   * no audience is deferred to Checkpoint here.
+   * still pinned, and the token's `aud` is still this worker's resource DID
+   * (a KV namespace may be shared by deployments with different resources).
    */
   async servesCachedVerdict(token, grantedIssuer) {
     const payload = parseVCJWT2(token)?.payload;
     if (!payload || payload.iss !== grantedIssuer)
       return false;
-    const audience = audienceVerdict(payload.aud, this.trust);
-    if (audience !== "accepted" && !(audience === "missing" && grantedIssuer === this.trust.ownDid))
+    if (audienceVerdict(payload.aud, this.trust) !== "accepted")
       return false;
     return this.isPinnedIssuer(grantedIssuer);
   }
@@ -153005,15 +153033,13 @@ var DelegationService = class {
    * only fetch an unpinned issuer can cause is the configured Checkpoint's own
    * DID document (cached).
    *
-   * Audience: `aud` must name this worker (see ./delegation-trust). Only a
-   * self-issued credential (issuer = this worker's own DID) may omit it: the
-   * anchor flow mints self-issued delegations without `aud`, while the
-   * Checkpoint platform mint, the hosted-consent org mint and the native
-   * issuer always set it. One exception: with a Checkpoint API key, a
-   * platform-signed credential may carry an `aud` this worker cannot name
-   * (its project UUID, while CHECKPOINT_PROJECT_ID is often the friendly id).
-   * Checkpoint's confirm pins that `aud` to the API key's project, so the
-   * check is left to it.
+   * Audience: `aud` must be `did:web:<the host this request was routed for>`,
+   * and that DID must be in `KYA_OS_RESOURCE_DIDS` (see ./delegation-trust),
+   * whoever the issuer and whether or not a Checkpoint API key is set. A
+   * credential without `aud`, or naming anything else (another of this
+   * worker's hosts, the org DID, the worker's own DID, a project id), is
+   * refused. Without a valid resource list, or without a routed host (a
+   * verification with no request behind it), every credential is refused.
    *
    * Issuer: only pinned issuers are resolved and verified. An untrusted or
    * unresolvable issuer fails closed.
@@ -153033,15 +153059,14 @@ var DelegationService = class {
       const issuerDid2 = parsed.payload.iss;
       if (!issuerDid2 || typeof issuerDid2 !== "string")
         return reject("Missing issuer (iss)");
+      if (!this.trust.resourceDid)
+        return reject(RESOURCE_REFUSALS[this.trust.resourceRefusal]);
       const audience = audienceVerdict(parsed.payload.aud, this.trust);
-      if (audience === "missing" && issuerDid2 !== this.trust.ownDid)
+      if (audience === "missing")
         return reject("Missing audience (aud)");
-      if (audience === "unmatched" && !this.env.CHECKPOINT_API_KEY)
+      if (audience !== "accepted")
         return reject("Audience not accepted");
-      if (this.trust.issuers.has(issuerDid2)) {
-        if (audience === "unmatched")
-          return reject("Audience not accepted");
-      } else if (!await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
+      if (!this.trust.issuers.has(issuerDid2) && !await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
         return reject(`Untrusted issuer: ${logSafe(issuerDid2)}`);
       }
       const kid = parsed.header.kid;
@@ -166382,7 +166407,7 @@ function mapPrefixedEnv(source, prefix) {
     // Delegation trust policy (DelegationService); set unprefixed like the
     // native issuer binding above.
     KYA_OS_TRUSTED_DELEGATION_ISSUERS: stringValue(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
-    KYA_OS_DELEGATION_AUDIENCES: stringValue(env2.KYA_OS_DELEGATION_AUDIENCES),
+    KYA_OS_RESOURCE_DIDS: stringValue(env2.KYA_OS_RESOURCE_DIDS),
     KYA_OS_INSECURE_DEV_TOKENS: stringValue(env2.KYA_OS_INSECURE_DEV_TOKENS),
     CHECKPOINT_API_URL: typeof env2.CHECKPOINT_API_URL === "string" ? env2.CHECKPOINT_API_URL : void 0,
     CHECKPOINT_API_KEY: typeof env2.CHECKPOINT_API_KEY === "string" ? env2.CHECKPOINT_API_KEY : void 0,
@@ -166725,7 +166750,7 @@ init_native_oauth_state_do();
 // ../mcp-i-cloudflare/package.json
 var package_default = {
   name: "@kya-os/mcp-i-cloudflare",
-  version: "1.16.0",
+  version: "1.17.0",
   description: "Cloudflare Workers adapter for MCP-I framework",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -174214,7 +174239,7 @@ async function applyBearerDelegation(request, env2, cfg, getProofSupport = getCa
   const native = cfg.native ?? void 0;
   const isValid2 = await new DelegationService(env2, void 0, {
     trustedIssuers: [native?.issuerDid],
-    audiences: [native?.issuerDid, native?.projectId]
+    routedHost: new URL(request.url).host
   }).verifyDelegation(vcJwt);
   if (!isValid2) {
     if (isVcJwtExpired(vcJwt)) {

package/dist/bundles/manifest.json

@@ -1,30 +1,30 @@
 {
-  "version": "1.13.0",
-  "frameworkVersion": "1.16.0",
+  "version": "1.14.0",
+  "frameworkVersion": "1.17.0",
   "doClassName": "MCPIAgent",
   "auditDoClassName": "AuditProducer",
   "nativeOAuthStateDoClassName": "NativeOAuthState",
-  "buildDate": "2026-10-12T23:20:11.343Z",
+  "buildDate": "2026-10-13T00:48:58.917Z",
   "templates": {
     "blank": {
-      "file": "blank.e6abd9412c1e1b82a73b9feab75e49ff4af04f8dc8d912f34cef43a2743627a2.js",
-      "size": 8564273,
-      "hash": "sha256:e6abd9412c1e1b82a73b9feab75e49ff4af04f8dc8d912f34cef43a2743627a2"
+      "file": "blank.82c9c7ad725657596d170b798edf349e185bba42f6795b48efe253da6a320304.js",
+      "size": 8565369,
+      "hash": "sha256:82c9c7ad725657596d170b798edf349e185bba42f6795b48efe253da6a320304"
     },
     "hardware-world": {
-      "file": "hardware-world.b0efa3467d3353697f11bb8a953e1ed8cd4bfa393046afd36bb7d2152e7c32ba.js",
-      "size": 8576706,
-      "hash": "sha256:b0efa3467d3353697f11bb8a953e1ed8cd4bfa393046afd36bb7d2152e7c32ba"
+      "file": "hardware-world.86f8393c5f1c5872656c838b56245200e59ec56e4931b0dbac3387101702599c.js",
+      "size": 8577802,
+      "hash": "sha256:86f8393c5f1c5872656c838b56245200e59ec56e4931b0dbac3387101702599c"
     },
     "ecommerce": {
-      "file": "ecommerce.0d0c64955b1ccc2ffe0de63d0fb5396aacefd41a4f60e0e34eb1c32eaeca18d5.js",
-      "size": 8565967,
-      "hash": "sha256:0d0c64955b1ccc2ffe0de63d0fb5396aacefd41a4f60e0e34eb1c32eaeca18d5"
+      "file": "ecommerce.b79f9cb456fe4cea8041d71e873b05b64f8e0184c9fe98408d8237c0762cf465.js",
+      "size": 8567063,
+      "hash": "sha256:b79f9cb456fe4cea8041d71e873b05b64f8e0184c9fe98408d8237c0762cf465"
     },
     "mix-station": {
-      "file": "mix-station.638947f74b153bc3e5fc316c50a5e5be0892f6a4e512b1cac24edf591311db20.js",
-      "size": 8579352,
-      "hash": "sha256:638947f74b153bc3e5fc316c50a5e5be0892f6a4e512b1cac24edf591311db20"
+      "file": "mix-station.8cc29447b3641c36e3393c4aef6004b3c306803c3eec167562c9f71c90ebf24a.js",
+      "size": 8580448,
+      "hash": "sha256:8cc29447b3641c36e3393c4aef6004b3c306803c3eec167562c9f71c90ebf24a"
     }
   }
 }

package/dist/bundles/{mix-station.638947f74b153bc3e5fc316c50a5e5be0892f6a4e512b1cac24edf591311db20.js → mix-station.8cc29447b3641c36e3393c4aef6004b3c306803c3eec167562c9f71c90ebf24a.js}

@@ -152582,6 +152582,50 @@ function createRemoteIssuer(binding, apiKey) {
 
 // ../mcp-i-cloudflare/dist/services/delegation-trust.js
 init_crypto3();
+
+// ../mcp-i-cloudflare/dist/services/resource-audience.js
+var RESOURCE_REFUSALS = Object.freeze({
+  resources_unconfigured: "KYA_OS_RESOURCE_DIDS is unset, empty or malformed: this worker has no resource DID, so no delegation can name it",
+  no_routed_host: "No routed host for this verification: the expected audience is did:web:<request Host>",
+  host_not_a_resource: "The routed host is not one of this worker's resources (KYA_OS_RESOURCE_DIDS)"
+});
+var DID_WEB_PATTERN = /^did:web:[a-z0-9.-]+(?:%3A[0-9]{1,5})?(?::[^\s:#?/]+)*$/;
+function parseResourceDids(raw2) {
+  if (typeof raw2 !== "string" || !raw2.trim())
+    return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw2);
+  } catch {
+    return null;
+  }
+  return Array.isArray(parsed) && parsed.length > 0 && parsed.every((did) => typeof did === "string" && DID_WEB_PATTERN.test(did)) ? parsed : null;
+}
+function didWebForHost(host) {
+  const value = host.trim().toLowerCase();
+  if (!/^[a-z0-9.-]+(?::[0-9]{1,5})?$/.test(value))
+    return void 0;
+  return "did:web:" + value.replace(":", "%3A");
+}
+function routedResource(resourceDids, routedHost) {
+  const resources = parseResourceDids(resourceDids);
+  if (!resources)
+    return { refusal: "resources_unconfigured" };
+  const routed = routedHost === void 0 ? void 0 : didWebForHost(routedHost);
+  if (!routed)
+    return { refusal: "no_routed_host" };
+  if (!resources.includes(routed))
+    return { refusal: "host_not_a_resource" };
+  return { resourceDid: routed };
+}
+function audienceNamesResource(aud, resourceDid) {
+  if (aud === void 0)
+    return "missing";
+  const value = Array.isArray(aud) && aud.length === 1 ? aud[0] : aud;
+  return resourceDid !== void 0 && value === resourceDid ? "accepted" : "unmatched";
+}
+
+// ../mcp-i-cloudflare/dist/services/delegation-trust.js
 var DID_PATTERN = /^did:[a-z0-9]+:[^\s#?]+$/;
 var UPSTREAM_TIMEOUT_MS = 3e3;
 var DID_DOCUMENT_TTL_MS = 5 * 6e4;
@@ -152599,35 +152643,24 @@ function checkpointOriginFor(url3) {
 }
 function resolveDelegationTrust(env2, options = {}) {
   const issuers = /* @__PURE__ */ new Set();
-  const audiences = /* @__PURE__ */ new Set();
+  const { resourceDid, refusal: resourceRefusal } = routedResource(env2.KYA_OS_RESOURCE_DIDS, options.routedHost);
   const ownDid = typeof env2.MCP_IDENTITY_AGENT_DID === "string" && DID_PATTERN.test(env2.MCP_IDENTITY_AGENT_DID) ? env2.MCP_IDENTITY_AGENT_DID : void 0;
-  if (ownDid) {
+  if (ownDid)
     issuers.add(ownDid);
-    audiences.add(ownDid);
-  }
   const binding = parseNativeIssuerBinding(env2.MCPI_NATIVE_HTTP_ISSUER_CONFIG);
-  if (binding) {
+  if (binding)
     issuers.add(binding.issuerDid);
-    audiences.add(binding.issuerDid);
-    audiences.add(binding.projectId);
-  }
   for (const did of [
     ...listFrom(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
     ...options.trustedIssuers ?? []
   ])
     if (did && DID_PATTERN.test(did))
       issuers.add(did);
-  for (const aud of [
-    ...listFrom(env2.CHECKPOINT_PROJECT_ID),
-    ...listFrom(env2.KYA_OS_DELEGATION_AUDIENCES),
-    ...options.audiences ?? []
-  ])
-    if (aud)
-      audiences.add(aud);
   const checkpointUrl = env2.CHECKPOINT_API_URL || DEFAULT_CHECKPOINT_URL;
   return {
     issuers,
-    audiences,
+    resourceDid,
+    resourceRefusal,
     ownDid,
     checkpointOrigin: typeof checkpointUrl === "string" ? checkpointOriginFor(checkpointUrl) : void 0
   };
@@ -152641,10 +152674,7 @@ function credentialHandle(payload) {
   return typeof jti === "string" && jti.length > 0 ? jti : void 0;
 }
 function audienceVerdict(aud, trust) {
-  if (aud === void 0)
-    return "missing";
-  const values = Array.isArray(aud) ? aud : [aud];
-  return values.some((v) => typeof v === "string" && trust.audiences.has(v)) ? "accepted" : "unmatched";
+  return audienceNamesResource(aud, trust.resourceDid);
 }
 async function readBounded(stream, maxBytes) {
   if (!stream)
@@ -152982,16 +153012,14 @@ var DelegationService = class {
   /**
    * Whether a cached development verdict still holds under THIS deployment's
    * trust: the token's issuer is the one the verdict was granted to, it is
-   * still pinned, and the token's `aud` is still accepted (a KV namespace may
-   * be shared by deployments with different audiences). Development only, so
-   * no audience is deferred to Checkpoint here.
+   * still pinned, and the token's `aud` is still this worker's resource DID
+   * (a KV namespace may be shared by deployments with different resources).
    */
   async servesCachedVerdict(token, grantedIssuer) {
     const payload = parseVCJWT2(token)?.payload;
     if (!payload || payload.iss !== grantedIssuer)
       return false;
-    const audience = audienceVerdict(payload.aud, this.trust);
-    if (audience !== "accepted" && !(audience === "missing" && grantedIssuer === this.trust.ownDid))
+    if (audienceVerdict(payload.aud, this.trust) !== "accepted")
       return false;
     return this.isPinnedIssuer(grantedIssuer);
   }
@@ -153005,15 +153033,13 @@ var DelegationService = class {
    * only fetch an unpinned issuer can cause is the configured Checkpoint's own
    * DID document (cached).
    *
-   * Audience: `aud` must name this worker (see ./delegation-trust). Only a
-   * self-issued credential (issuer = this worker's own DID) may omit it: the
-   * anchor flow mints self-issued delegations without `aud`, while the
-   * Checkpoint platform mint, the hosted-consent org mint and the native
-   * issuer always set it. One exception: with a Checkpoint API key, a
-   * platform-signed credential may carry an `aud` this worker cannot name
-   * (its project UUID, while CHECKPOINT_PROJECT_ID is often the friendly id).
-   * Checkpoint's confirm pins that `aud` to the API key's project, so the
-   * check is left to it.
+   * Audience: `aud` must be `did:web:<the host this request was routed for>`,
+   * and that DID must be in `KYA_OS_RESOURCE_DIDS` (see ./delegation-trust),
+   * whoever the issuer and whether or not a Checkpoint API key is set. A
+   * credential without `aud`, or naming anything else (another of this
+   * worker's hosts, the org DID, the worker's own DID, a project id), is
+   * refused. Without a valid resource list, or without a routed host (a
+   * verification with no request behind it), every credential is refused.
    *
    * Issuer: only pinned issuers are resolved and verified. An untrusted or
    * unresolvable issuer fails closed.
@@ -153033,15 +153059,14 @@ var DelegationService = class {
       const issuerDid2 = parsed.payload.iss;
       if (!issuerDid2 || typeof issuerDid2 !== "string")
         return reject("Missing issuer (iss)");
+      if (!this.trust.resourceDid)
+        return reject(RESOURCE_REFUSALS[this.trust.resourceRefusal]);
       const audience = audienceVerdict(parsed.payload.aud, this.trust);
-      if (audience === "missing" && issuerDid2 !== this.trust.ownDid)
+      if (audience === "missing")
         return reject("Missing audience (aud)");
-      if (audience === "unmatched" && !this.env.CHECKPOINT_API_KEY)
+      if (audience !== "accepted")
         return reject("Audience not accepted");
-      if (this.trust.issuers.has(issuerDid2)) {
-        if (audience === "unmatched")
-          return reject("Audience not accepted");
-      } else if (!await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
+      if (!this.trust.issuers.has(issuerDid2) && !await isCheckpointPlatformIssuer(issuerDid2, this.trust, this.didResolver)) {
         return reject(`Untrusted issuer: ${logSafe(issuerDid2)}`);
       }
       const kid = parsed.header.kid;
@@ -166382,7 +166407,7 @@ function mapPrefixedEnv(source, prefix) {
     // Delegation trust policy (DelegationService); set unprefixed like the
     // native issuer binding above.
     KYA_OS_TRUSTED_DELEGATION_ISSUERS: stringValue(env2.KYA_OS_TRUSTED_DELEGATION_ISSUERS),
-    KYA_OS_DELEGATION_AUDIENCES: stringValue(env2.KYA_OS_DELEGATION_AUDIENCES),
+    KYA_OS_RESOURCE_DIDS: stringValue(env2.KYA_OS_RESOURCE_DIDS),
     KYA_OS_INSECURE_DEV_TOKENS: stringValue(env2.KYA_OS_INSECURE_DEV_TOKENS),
     CHECKPOINT_API_URL: typeof env2.CHECKPOINT_API_URL === "string" ? env2.CHECKPOINT_API_URL : void 0,
     CHECKPOINT_API_KEY: typeof env2.CHECKPOINT_API_KEY === "string" ? env2.CHECKPOINT_API_KEY : void 0,
@@ -166725,7 +166750,7 @@ init_native_oauth_state_do();
 // ../mcp-i-cloudflare/package.json
 var package_default = {
   name: "@kya-os/mcp-i-cloudflare",
-  version: "1.16.0",
+  version: "1.17.0",
   description: "Cloudflare Workers adapter for MCP-I framework",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -174214,7 +174239,7 @@ async function applyBearerDelegation(request, env2, cfg, getProofSupport = getCa
   const native = cfg.native ?? void 0;
   const isValid2 = await new DelegationService(env2, void 0, {
     trustedIssuers: [native?.issuerDid],
-    audiences: [native?.issuerDid, native?.projectId]
+    routedHost: new URL(request.url).host
   }).verifyDelegation(vcJwt);
   if (!isValid2) {
     if (isVcJwtExpired(vcJwt)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/create-mcpi-app",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "Scaffold a new MCP-I application",
   "type": "module",
   "main": "./dist/helpers/index.js",
@@ -51,7 +51,7 @@
     "@kya-os/cli-effects": "^1.0.19",
     "@kya-os/contracts": "^1.13.1",
     "@kya-os/mcp-i": "^1.13.1",
-    "@kya-os/mcp-i-cloudflare": "^1.16.0",
+    "@kya-os/mcp-i-cloudflare": "^1.17.0",
     "base-x": "^5.0.0",
     "chalk": "^4.1.2",
     "commander": "^12.1.0",