@kya-os/mcp-i-cloudflare 1.7.76 → 1.8.1

package/dist/services/vault-resolver.d.ts

@@ -0,0 +1,55 @@
+/**
+ * VaultResolver — Runtime Secret Resolution Service
+ *
+ * Calls AgentShield's vault /resolve endpoint to retrieve per-user
+ * API keys at tool execution time. Generates signed assertion JWTs
+ * to prove request legitimacy and caches results per session.
+ *
+ * @module mcp-i-cloudflare/services/vault-resolver
+ */
+export interface VaultResolverConfig {
+    /** AgentShield API base URL (e.g., https://kya.vouched.id) */
+    apiUrl: string;
+    /** AgentShield API key for X-API-Key header */
+    apiKey: string;
+    /** Worker's Ed25519 private key for signing assertion JWTs */
+    identityKey: CryptoKey;
+    /** Worker's DID (iss/sub claim in assertion) */
+    agentDid: string;
+    /** Injectable fetch (defaults to globalThis.fetch) */
+    fetch?: typeof globalThis.fetch;
+    /** Optional audit logger */
+    auditLogger?: {
+        logEvent(ctx: {
+            eventType: string;
+            eventData?: Record<string, unknown>;
+        }): Promise<void>;
+    };
+}
+export declare class VaultResolver {
+    private readonly config;
+    private readonly cache;
+    private readonly _fetch;
+    constructor(config: VaultResolverConfig);
+    /**
+     * Resolve per-user secrets from the vault.
+     *
+     * Returns a map of env var names to their decrypted values.
+     * Returns empty `{}` on 403/404 (graceful degradation).
+     * Throws on 5xx and network errors.
+     */
+    resolve(projectId: string, userDid: string, toolName: string, envVarNames: string[], sessionId: string): Promise<Record<string, string>>;
+    /** Clear all cached entries for a given session. */
+    invalidate(sessionId: string): void;
+    private isExpired;
+    /**
+     * Build a short-lived EdDSA assertion JWT.
+     *
+     * Proves to AgentShield that this resolve request is legitimate —
+     * not a forged call with an arbitrary userDid.
+     */
+    private buildAssertionJWT;
+    private base64urlEncode;
+    private emitAudit;
+}
+//# sourceMappingURL=vault-resolver.d.ts.map

package/dist/services/vault-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-resolver.d.ts","sourceRoot":"","sources":["../../src/services/vault-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,WAAW,EAAE,SAAS,CAAC;IACvB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,4BAA4B;IAC5B,WAAW,CAAC,EAAE;QACZ,QAAQ,CAAC,GAAG,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1F,CAAC;CACH;AAcD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;gBAErC,MAAM,EAAE,mBAAmB;IAKvC;;;;;;OAMG;IACG,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EAAE,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAwElC,oDAAoD;IACpD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAWnC,OAAO,CAAC,SAAS;IAIjB;;;;;OAKG;YACW,iBAAiB;IAqC/B,OAAO,CAAC,eAAe;YAWT,SAAS;CAUxB"}

package/dist/services/vault-resolver.js

@@ -0,0 +1,144 @@
+/**
+ * VaultResolver — Runtime Secret Resolution Service
+ *
+ * Calls AgentShield's vault /resolve endpoint to retrieve per-user
+ * API keys at tool execution time. Generates signed assertion JWTs
+ * to prove request legitimacy and caches results per session.
+ *
+ * @module mcp-i-cloudflare/services/vault-resolver
+ */
+import { VAULT_AUDIT_EVENTS } from '@kya-os/contracts/vault';
+// ── Constants ────────────────────────────────────────────────────────
+const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
+const ASSERTION_TTL_SEC = 60;
+// ── Implementation ───────────────────────────────────────────────────
+export class VaultResolver {
+    config;
+    cache = new Map();
+    _fetch;
+    constructor(config) {
+        this.config = config;
+        this._fetch = config.fetch ?? globalThis.fetch.bind(globalThis);
+    }
+    /**
+     * Resolve per-user secrets from the vault.
+     *
+     * Returns a map of env var names to their decrypted values.
+     * Returns empty `{}` on 403/404 (graceful degradation).
+     * Throws on 5xx and network errors.
+     */
+    async resolve(projectId, userDid, toolName, envVarNames, sessionId) {
+        // Cache key includes toolName (server may authorize per-tool) and
+        // sorted envVarNames (different tools may request different vars)
+        const envKey = [...envVarNames].sort().join(',');
+        const cacheKey = `${projectId}\0${userDid}\0${sessionId}\0${toolName}\0${envKey}`;
+        const cached = this.cache.get(cacheKey);
+        if (cached && !this.isExpired(cached)) {
+            return { ...cached.secrets };
+        }
+        // Build signed assertion JWT
+        const assertion = await this.buildAssertionJWT(projectId, userDid, toolName, sessionId);
+        const url = `${this.config.apiUrl.replace(/\/$/, '')}/api/v1/vault/${projectId}/resolve`;
+        await this.emitAudit(VAULT_AUDIT_EVENTS.RESOLVE_REQUESTED, {
+            projectId, userDid, toolName, sessionId,
+        });
+        const response = await this._fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-API-Key': this.config.apiKey,
+            },
+            body: JSON.stringify({
+                userDid,
+                envVarNames,
+                toolName,
+                assertion,
+            }),
+        });
+        // Graceful degradation on 403/404
+        if (response.status === 403 || response.status === 404) {
+            const empty = {};
+            this.cache.set(cacheKey, { secrets: empty, cachedAt: Date.now() });
+            await this.emitAudit(VAULT_AUDIT_EVENTS.RESOLVE_DENIED, {
+                projectId, userDid, toolName, sessionId, status: response.status,
+            });
+            return { ...empty };
+        }
+        // Throw on server/infra errors
+        if (!response.ok) {
+            await this.emitAudit(VAULT_AUDIT_EVENTS.RESOLVE_DENIED, {
+                projectId, userDid, toolName, sessionId, status: response.status,
+            });
+            throw new Error(`Vault resolve failed: ${response.status} ${response.statusText}`);
+        }
+        const data = (await response.json());
+        const secrets = data.secrets ?? {};
+        // Cache the result
+        this.cache.set(cacheKey, { secrets, cachedAt: Date.now() });
+        await this.emitAudit(VAULT_AUDIT_EVENTS.RESOLVE_GRANTED, {
+            projectId, userDid, toolName, sessionId,
+            resolvedCount: Object.keys(secrets).length,
+        });
+        return { ...secrets };
+    }
+    /** Clear all cached entries for a given session. */
+    invalidate(sessionId) {
+        // Cache key format: projectId\0userDid\0sessionId\0toolName\0envKey
+        for (const [key] of this.cache) {
+            if (key.split('\0')[2] === sessionId) {
+                this.cache.delete(key);
+            }
+        }
+    }
+    // ── Private ──────────────────────────────────────────────────────
+    isExpired(entry) {
+        return Date.now() - entry.cachedAt > CACHE_TTL_MS;
+    }
+    /**
+     * Build a short-lived EdDSA assertion JWT.
+     *
+     * Proves to AgentShield that this resolve request is legitimate —
+     * not a forged call with an arbitrary userDid.
+     */
+    async buildAssertionJWT(projectId, userDid, toolName, sessionId) {
+        const now = Math.floor(Date.now() / 1000);
+        const header = { alg: 'EdDSA', typ: 'JWT' };
+        const payload = {
+            iss: this.config.agentDid,
+            sub: this.config.agentDid,
+            projectId,
+            userDid,
+            toolName,
+            sessionId,
+            nonce: crypto.randomUUID(),
+            iat: now,
+            exp: now + ASSERTION_TTL_SEC,
+        };
+        const headerB64 = this.base64urlEncode(JSON.stringify(header));
+        const payloadB64 = this.base64urlEncode(JSON.stringify(payload));
+        const signingInput = `${headerB64}.${payloadB64}`;
+        const signature = await crypto.subtle.sign('Ed25519', this.config.identityKey, new TextEncoder().encode(signingInput));
+        const signatureB64 = this.base64urlEncode(new Uint8Array(signature));
+        return `${headerB64}.${payloadB64}.${signatureB64}`;
+    }
+    base64urlEncode(data) {
+        let bytes;
+        if (typeof data === 'string') {
+            bytes = new TextEncoder().encode(data);
+        }
+        else {
+            bytes = data;
+        }
+        const base64 = btoa(String.fromCharCode(...bytes));
+        return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+    }
+    async emitAudit(eventType, eventData) {
+        try {
+            await this.config.auditLogger?.logEvent({ eventType, eventData });
+        }
+        catch {
+            // Audit logging is non-fatal
+        }
+    }
+}
+//# sourceMappingURL=vault-resolver.js.map

package/dist/services/vault-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-resolver.js","sourceRoot":"","sources":["../../src/services/vault-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AA0B7D,wEAAwE;AAExE,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAChD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,wEAAwE;AAExE,MAAM,OAAO,aAAa;IACP,MAAM,CAAsB;IAC5B,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,MAAM,CAA0B;IAEjD,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,OAAe,EACf,QAAgB,EAChB,WAAqB,EACrB,SAAiB;QAEjB,kEAAkE;QAClE,kEAAkE;QAClE,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,QAAQ,KAAK,MAAM,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,6BAA6B;QAC7B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC5C,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CACxC,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,SAAS,UAAU,CAAC;QAEzF,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,iBAAiB,EAAE;YACzD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS;SACxC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;aAChC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO;gBACP,WAAW;gBACX,QAAQ;gBACR,SAAS;aACV,CAAC;SACH,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAEnE,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,cAAc,EAAE;gBACtD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;aACjE,CAAC,CAAC;YAEH,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,cAAc,EAAE;gBACtD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;aACjE,CAAC,CAAC;YAEH,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwC,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAEnC,mBAAmB;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe,EAAE;YACvD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS;YACvC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;SAC3C,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,oDAAoD;IACpD,UAAU,CAAC,SAAiB;QAC1B,oEAAoE;QACpE,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IAE5D,SAAS,CAAC,KAAiB;QACjC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAC7B,SAAiB,EACjB,OAAe,EACf,QAAgB,EAChB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAE5C,MAAM,OAAO,GAAG;YACd,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YACzB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YACzB,SAAS;YACT,OAAO;YACP,QAAQ;YACR,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;YAC1B,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,iBAAiB;SAC7B,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAElD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAErE,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,IAAyB;QAC/C,IAAI,KAAiB,CAAC;QACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,SAAiB,EACjB,SAAkC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -64,5 +64,7 @@ export interface CloudflareEnv {
     DO_ROUTING_STRATEGY?: string;
     /** Number of shards for shard routing (default: "10") */
     DO_SHARD_COUNT?: string;
+    /** Enable MCP Apps inline consent UI ("true" to enable) */
+    MCPI_INLINE_CONSENT?: string;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEzG;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,wFAAwF;IACxF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEzG;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,wFAAwF;IACxF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-cloudflare",
-  "version": "1.7.76",
+  "version": "1.8.1",
   "description": "Cloudflare Workers adapter for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -29,27 +29,36 @@
   },
   "dependencies": {
     "@kya-os/consent": "^0.1.23",
-    "@kya-os/contracts": "^1.7.21",
-    "@kya-os/mcp-i-core": "^1.4.19",
+    "@kya-os/contracts": "^1.7.26",
+    "@kya-os/mcp-i-core": "^1.6.2",
     "@kya-os/provider-registry": "^0.1.7",
     "@modelcontextprotocol/sdk": "^1.25.2",
-    "agents": "^0.3.6",
+    "agents": "^0.4.1",
     "base-x": "^5.0.0",
-    "hono": "^4.11.7",
+    "hono": "^4.12.4",
     "jose": "^5.6.3",
-    "zod": "^3.25.76"
+    "zod": "^3.25.67"
+  },
+  "peerDependencies": {
+    "@modelcontextprotocol/ext-apps": "^1.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@modelcontextprotocol/ext-apps": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20240701.0",
+    "@modelcontextprotocol/ext-apps": "^1.0.0",
     "@playwright/test": "^1.57.0",
     "@types/node": "^20.14.9",
-    "@vitest/coverage-v8": "^4.0.5",
+    "@vitest/coverage-v8": "^4.0.18",
     "dotenv": "^16.3.1",
     "eslint": "^9.26.0",
     "miniflare": "^3.20241218.0",
-    "msw": "^2.12.4",
+    "msw": "^2.12.10",
     "typescript": "^5.5.3",
-    "vitest": "^4.0.5",
+    "vitest": "^4.0.18",
     "wrangler": "^4.59.1"
   },
   "publishConfig": {