@kya-os/mcp-i-core 1.6.0 → 1.6.2

package/dist/delegation/did-key-resolver.js

@@ -21,6 +21,7 @@ exports.publicKeyToJwk = publicKeyToJwk;
 exports.createDidKeyResolver = createDidKeyResolver;
 exports.resolveDidKeySync = resolveDidKeySync;
 const base58_1 = require("../utils/base58");
+const did_helpers_1 = require("../utils/did-helpers");
 const base64_1 = require("../utils/base64");
 /** Ed25519 multicodec prefix (0xed 0x01) */
 const ED25519_MULTICODEC_PREFIX = new Uint8Array([0xed, 0x01]);
@@ -106,9 +107,10 @@ function createDidKeyResolver() {
             const publicKeyJwk = publicKeyToJwk(publicKeyBytes);
             // Get the multibase-encoded key for publicKeyMultibase
             const multibaseKey = did.replace('did:key:', '');
+            const fragment = (0, did_helpers_1.didKeyFragment)(did);
             // Construct the verification method
             const verificationMethod = {
-                id: `${did}#keys-1`,
+                id: `${did}#${fragment}`,
                 type: 'Ed25519VerificationKey2020',
                 controller: did,
                 publicKeyJwk,
@@ -118,8 +120,8 @@ function createDidKeyResolver() {
             return {
                 id: did,
                 verificationMethod: [verificationMethod],
-                authentication: [`${did}#keys-1`],
-                assertionMethod: [`${did}#keys-1`],
+                authentication: [`${did}#${fragment}`],
+                assertionMethod: [`${did}#${fragment}`],
             };
         },
     };
@@ -142,8 +144,9 @@ function resolveDidKeySync(did) {
     }
     const publicKeyJwk = publicKeyToJwk(publicKeyBytes);
     const multibaseKey = did.replace('did:key:', '');
+    const fragment = (0, did_helpers_1.didKeyFragment)(did);
     const verificationMethod = {
-        id: `${did}#keys-1`,
+        id: `${did}#${fragment}`,
         type: 'Ed25519VerificationKey2020',
         controller: did,
         publicKeyJwk,
@@ -152,8 +155,8 @@ function resolveDidKeySync(did) {
     return {
         id: did,
         verificationMethod: [verificationMethod],
-        authentication: [`${did}#keys-1`],
-        assertionMethod: [`${did}#keys-1`],
+        authentication: [`${did}#${fragment}`],
+        assertionMethod: [`${did}#${fragment}`],
     };
 }
 //# sourceMappingURL=did-key-resolver.js.map

package/dist/identity/user-did-manager.js

@@ -16,6 +16,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserDidManager = void 0;
+const did_helpers_1 = require("../utils/did-helpers");
 /**
  * User DID Manager
  *
@@ -235,8 +236,8 @@ class UserDidManager {
         const publicKeyBytes = this.base64ToBytes(keyPair.publicKey);
         // Generate did:key from public key
         const did = this.generateDidKeyFromPublicKey(publicKeyBytes);
-        // Key ID is the DID with #keys-1 fragment (standard for did:key)
-        const keyId = `${did}#keys-1`;
+        // Key ID uses spec-compliant fragment (multibase value for did:key)
+        const keyId = `${did}#${(0, did_helpers_1.didKeyFragment)(did)}`;
         return {
             did,
             publicKey: keyPair.publicKey,

package/dist/services/delegation-error-formatter.js

@@ -18,19 +18,19 @@ exports.createDelegationErrorFormatter = createDelegationErrorFormatter;
  * Default message template (matches original adapter/agent behavior)
  */
 const DEFAULT_TEMPLATE = {
-    message: `Authorization required.
+    message: `Authorization required for "{toolName}".
 
-[Authorize {toolName}]({consentUrl})
+Authorization URL: {consentUrl}
 
-Retry after authorizing.`,
+Share this URL with the user so they can authorize in their browser, then retry.`,
     noUrlMessage: `Authorization required for "{toolName}" but no consent URL is available.
 
 Please contact the administrator to configure delegation for this tool.`,
-    oauthMessage: `Authorization required.
+    oauthMessage: `Authorization required for "{toolName}".
 
-[Sign in with {provider}]({oauthUrl})
+Sign in with {provider}: {oauthUrl}
 
-Retry after authorizing.`,
+Share this URL with the user so they can sign in with {provider}, then retry.`,
     noOAuthUrlMessage: `Authorization required for "{toolName}" but no {provider} URL is available.
 
 Please contact the administrator to configure OAuth for this tool.`,

package/dist/utils/did-helpers.d.ts

@@ -153,4 +153,16 @@ export declare function generateDidKeyFromBytes(publicKeyBytes: Uint8Array): str
  * ```
  */
 export declare function generateDidKeyFromBase64(publicKeyBase64: string): string;
+/**
+ * Get the spec-compliant fragment identifier for a did:key DID.
+ *
+ * Per the W3C CCG did:key spec, the fragment equals the multibase-encoded
+ * public key value (the DID-specific-id). For example:
+ *   did:key:z6MkABC... → z6MkABC...
+ *
+ * @see https://w3c-ccg.github.io/did-key-spec/#document-creation-algorithm
+ * @param did - A DID string
+ * @returns The fragment identifier (multibase value for did:key, or 'keys-1' fallback)
+ */
+export declare function didKeyFragment(did: string): string;
 //# sourceMappingURL=did-helpers.d.ts.map

package/dist/utils/did-helpers.js

@@ -17,6 +17,7 @@ exports.extractAgentId = extractAgentId;
 exports.extractAgentSlug = extractAgentSlug;
 exports.generateDidKeyFromBytes = generateDidKeyFromBytes;
 exports.generateDidKeyFromBase64 = generateDidKeyFromBase64;
+exports.didKeyFragment = didKeyFragment;
 const base58_1 = require("./base58");
 /**
  * Check if a string is a valid DID format
@@ -200,4 +201,22 @@ function generateDidKeyFromBase64(publicKeyBase64) {
     const publicKeyBytes = Uint8Array.from(atob(publicKeyBase64), (c) => c.charCodeAt(0));
     return generateDidKeyFromBytes(publicKeyBytes);
 }
+/**
+ * Get the spec-compliant fragment identifier for a did:key DID.
+ *
+ * Per the W3C CCG did:key spec, the fragment equals the multibase-encoded
+ * public key value (the DID-specific-id). For example:
+ *   did:key:z6MkABC... → z6MkABC...
+ *
+ * @see https://w3c-ccg.github.io/did-key-spec/#document-creation-algorithm
+ * @param did - A DID string
+ * @returns The fragment identifier (multibase value for did:key, or 'keys-1' fallback)
+ */
+function didKeyFragment(did) {
+    if (did.startsWith('did:key:')) {
+        return did.slice('did:key:'.length);
+    }
+    // Fallback for non-did:key methods
+    return 'keys-1';
+}
 //# sourceMappingURL=did-helpers.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-core",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "description": "Core runtime and types for MCP-I framework",
   "license": "MIT",
   "author": "Dylan Hobbs",