@kya-os/mcp-i 1.11.0 → 1.11.2

package/dist/runtime/mcpi-runtime-wrapper.d.ts

@@ -4,7 +4,7 @@
  * Node.js-specific runtime that extends the core runtime with Node.js providers.
  * Provides backward compatibility by accepting legacy configuration format.
  */
-import { MCPIRuntimeBase, AccessControlApiService, ProofVerifier } from "@kya-os/mcp-i-core";
+import { MCPIRuntimeBase, AccessControlApiService, ProofVerifier } from "@kya-os/mcp-i-runtime";
 import type { MCPIRuntimeConfig } from "./mcpi-runtime";
 /**
  * Node.js-specific runtime implementation

package/dist/runtime/mcpi-runtime-wrapper.js

@@ -11,7 +11,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MCPIRuntimeWrapper = exports.MCPINodeRuntimeWrapper = void 0;
 exports.createMCPIRuntime = createMCPIRuntime;
-const mcp_i_core_1 = require("@kya-os/mcp-i-core");
+const mcp_i_runtime_1 = require("@kya-os/mcp-i-runtime");
 const node_providers_1 = require("../providers/node-providers");
 const path_1 = __importDefault(require("path"));
 /**
@@ -56,7 +56,7 @@ function createProvidersFromConfig(config) {
 /**
  * Node.js-specific runtime implementation
  */
-class MCPINodeRuntimeWrapper extends mcp_i_core_1.MCPIRuntimeBase {
+class MCPINodeRuntimeWrapper extends mcp_i_runtime_1.MCPIRuntimeBase {
     legacyConfig;
     // accessControlService is inherited from MCPIRuntimeBase (protected), no need to redeclare
     // proofVerifier is inherited from MCPIRuntimeBase (protected), no need to redeclare
@@ -66,7 +66,7 @@ class MCPINodeRuntimeWrapper extends mcp_i_core_1.MCPIRuntimeBase {
         this.legacyConfig = config;
         // Instantiate ProofVerifier
         // Access protected property from base class using type assertion
-        this.proofVerifier = new mcp_i_core_1.ProofVerifier({
+        this.proofVerifier = new mcp_i_runtime_1.ProofVerifier({
             cryptoProvider: coreConfig.cryptoProvider,
             clockProvider: coreConfig.clockProvider,
             nonceCacheProvider: coreConfig.nonceCacheProvider,
@@ -77,7 +77,7 @@ class MCPINodeRuntimeWrapper extends mcp_i_core_1.MCPIRuntimeBase {
         const apiKey = process.env.AGENTSHIELD_API_KEY;
         const apiUrl = process.env.AGENTSHIELD_API_URL || "https://kya.vouched.id";
         if (apiKey) {
-            this.accessControlService = new mcp_i_core_1.AccessControlApiService({
+            this.accessControlService = new mcp_i_runtime_1.AccessControlApiService({
                 baseUrl: apiUrl,
                 apiKey,
                 fetchProvider: coreConfig.fetchProvider,

package/dist/runtime/mcpi-runtime.js

@@ -22,6 +22,7 @@ const request_context_1 = require("./request-context");
 const outbound_identity_bridge_1 = require("./outbound-identity-bridge");
 const tool_protection_1 = require("./tool-protection");
 const tool_protection_registry_1 = require("./tool-protection-registry");
+// C4 drain: delegation-layer symbol stays on @kya-os/mcp-i-core (src/delegation/** not relocated to mcp-i-runtime - pinned by E3.5 #2904).
 const mcp_i_core_1 = require("@kya-os/mcp-i-core");
 /**
  * XMCP-I Runtime class

package/dist/runtime/outbound-delegation.js

@@ -21,6 +21,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isInternalDelegationTarget = isInternalDelegationTarget;
 exports.installDelegationInterceptor = installDelegationInterceptor;
+// C4 drain: delegation-layer symbol stays on @kya-os/mcp-i-core (src/delegation/** not relocated to mcp-i-runtime - pinned by E3.5 #2904).
 const mcp_i_core_1 = require("@kya-os/mcp-i-core");
 // C2/C3: @kya-os/mcp-i is CJS; @kya-os/mcp is ESM-only (TS1479 blocks static import).
 const request_context_js_1 = require("./request-context.js");

package/dist/runtime/outbound-identity-bridge.js

@@ -57,6 +57,10 @@ function delegationProvider() {
     const delegationScopes = ctx.delegationScopes ?? [];
     const agentDid = ctx.session?.serverDid ?? "";
     const userDid = ctx.session?.userDid ?? "";
+    // Surface the calling client's DID (xmcp-i#413) so the compute interceptor
+    // can attach it to KTA attestations. Spread conditionally below so the field
+    // is absent (not `undefined`) when the session carries no client identity.
+    const clientDid = ctx.session?.clientDid;
     const privateKeyJwk = ctx.delegationPrivateKeyJwk;
     const kid = ctx.delegationAgentKid;
     const delegationRef = ctx.delegationRef;
@@ -66,6 +70,7 @@ function delegationProvider() {
         delegationScopes,
         agentDid,
         userDid,
+        ...(clientDid ? { clientDid } : {}),
         kid,
         delegationCredential: ctx.delegationCredential,
         buildProof: (targetHostname) => (0, mcp_i_core_1.buildDelegationProofJWT)({

package/dist/runtime/proof.d.ts

@@ -7,8 +7,8 @@
  *
  * Requirements: 5.1, 5.2, 5.3, 5.6
  */
-import { ProofGenerator as CoreProofGenerator, type ProofAgentIdentity, type ToolRequest, type ToolResponse, type ProofOptions, extractCanonicalData } from "@kya-os/mcp-i-core";
-import { CryptoProvider } from "@kya-os/mcp-i-core";
+import { ProofGenerator as CoreProofGenerator, type ProofAgentIdentity, type ToolRequest, type ToolResponse, type ProofOptions, extractCanonicalData } from "@kya-os/mcp-i-runtime";
+import { CryptoProvider } from "@kya-os/mcp-i-runtime";
 import { SessionContext } from "@kya-os/contracts/handshake";
 export declare class ProofGenerator extends CoreProofGenerator {
     constructor(identity: ProofAgentIdentity, cryptoProvider?: CryptoProvider);

package/dist/runtime/proof.js

@@ -11,10 +11,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractCanonicalData = exports.ProofGenerator = void 0;
 exports.createProofResponse = createProofResponse;
-const mcp_i_core_1 = require("@kya-os/mcp-i-core");
-Object.defineProperty(exports, "extractCanonicalData", { enumerable: true, get: function () { return mcp_i_core_1.extractCanonicalData; } });
+const mcp_i_runtime_1 = require("@kya-os/mcp-i-runtime");
+Object.defineProperty(exports, "extractCanonicalData", { enumerable: true, get: function () { return mcp_i_runtime_1.extractCanonicalData; } });
 const node_providers_1 = require("../providers/node-providers");
-class ProofGenerator extends mcp_i_core_1.ProofGenerator {
+class ProofGenerator extends mcp_i_runtime_1.ProofGenerator {
     constructor(identity, cryptoProvider = new node_providers_1.NodeCryptoProvider()) {
         super(identity, cryptoProvider);
     }

package/dist/runtime/session.d.ts

@@ -7,8 +7,8 @@
  *
  * Requirements: 4.5-4.9, 19.1-19.2
  */
-import { SessionManager as CoreSessionManager, createHandshakeRequest, validateHandshakeFormat, type SessionConfig, type HandshakeResult } from "@kya-os/mcp-i-core";
-import { CryptoProvider } from "@kya-os/mcp-i-core";
+import { SessionManager as CoreSessionManager, createHandshakeRequest, validateHandshakeFormat, type SessionConfig, type HandshakeResult } from "@kya-os/mcp-i-runtime";
+import { CryptoProvider } from "@kya-os/mcp-i-runtime";
 export type { SessionConfig, HandshakeResult };
 export { createHandshakeRequest, validateHandshakeFormat };
 export declare class SessionManager extends CoreSessionManager {

package/dist/runtime/session.js

@@ -10,10 +10,10 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.defaultSessionManager = exports.SessionManager = exports.validateHandshakeFormat = exports.createHandshakeRequest = void 0;
-const mcp_i_core_1 = require("@kya-os/mcp-i-core");
-Object.defineProperty(exports, "createHandshakeRequest", { enumerable: true, get: function () { return mcp_i_core_1.createHandshakeRequest; } });
-Object.defineProperty(exports, "validateHandshakeFormat", { enumerable: true, get: function () { return mcp_i_core_1.validateHandshakeFormat; } });
-const mcp_i_core_2 = require("@kya-os/mcp-i-core");
+const mcp_i_runtime_1 = require("@kya-os/mcp-i-runtime");
+Object.defineProperty(exports, "createHandshakeRequest", { enumerable: true, get: function () { return mcp_i_runtime_1.createHandshakeRequest; } });
+Object.defineProperty(exports, "validateHandshakeFormat", { enumerable: true, get: function () { return mcp_i_runtime_1.validateHandshakeFormat; } });
+const mcp_i_runtime_2 = require("@kya-os/mcp-i-runtime");
 // C2 (#2916): the CJS/ESM (TS1479) blocker is resolved — PR-0's loadDifCore()
 // seam (mcp-i-core/src/runtime/dif-core.ts) reaches the ESM-only @kya-os/mcp from
 // CJS. The SessionManager re-home stays deferred on the remaining blocker: DIF
@@ -34,9 +34,9 @@ function resolveNodeConfig(config) {
             (parsedTtl !== undefined && !isNaN(parsedTtl) ? parsedTtl : undefined),
     };
 }
-class SessionManager extends mcp_i_core_1.SessionManager {
+class SessionManager extends mcp_i_runtime_1.SessionManager {
     constructor(configOrCrypto, config) {
-        if (configOrCrypto instanceof mcp_i_core_2.CryptoProvider) {
+        if (configOrCrypto instanceof mcp_i_runtime_2.CryptoProvider) {
             super(configOrCrypto, resolveNodeConfig(config ?? {}));
         }
         else {