@kya-os/mcp-i 1.3.2 → 1.4.0

package/dist/cache/cloudflare-kv-nonce-cache.js

@@ -52,16 +52,11 @@ class CloudflareKVNonceCache {
             const existingWithMetadata = await this.kv.getWithMetadata(key);
             if (existingWithMetadata && existingWithMetadata.value !== null) {
                 // Key exists, check if it's still valid
-                try {
-                    const existingData = JSON.parse(existingWithMetadata.value);
-                    if (Date.now() <= existingData.expiresAt) {
-                        throw new Error(`Nonce ${nonce} already exists - potential replay attack`);
-                    }
-                    // If expired, we can proceed to overwrite
-                }
-                catch {
-                    // If we can't parse existing data, assume it's corrupted and overwrite
+                const existingData = JSON.parse(existingWithMetadata.value);
+                if (Date.now() <= existingData.expiresAt) {
+                    throw new Error(`Nonce ${nonce} already exists - potential replay attack`);
                 }
+                // If expired, we can proceed to overwrite
             }
             // Store with KV TTL as backup (convert to seconds)
             await this.kv.put(key, JSON.stringify(data), {
@@ -69,6 +64,10 @@ class CloudflareKVNonceCache {
             });
         }
         catch (error) {
+            // If this is a replay attack error, always rethrow it
+            if (error.message?.includes("potential replay attack")) {
+                throw error;
+            }
             // If getWithMetadata is not available, fall back to basic approach
             if (error.message?.includes("getWithMetadata")) {
                 // Check if already exists first (less atomic but still functional)

package/dist/cache/memory-nonce-cache.js

@@ -15,6 +15,8 @@ class MemoryNonceCache {
     cleanupInterval;
     constructor(cleanupIntervalMs = 60000) {
         // Default: 1 minute cleanup
+        console.warn("⚠️  MemoryNonceCache is not suitable for multi-instance deployments. " +
+            "For production use with multiple instances, configure Redis, DynamoDB, or Cloudflare KV.");
         // Start periodic cleanup
         this.cleanupInterval = setInterval(() => {
             this.cleanup().catch(console.error);
@@ -43,7 +45,7 @@ class MemoryNonceCache {
         // Check if nonce already exists (atomic check-and-set)
         const existing = this.cache.get(nonce);
         if (existing && Date.now() <= existing.expiresAt) {
-            throw new Error(`Nonce ${nonce} already exists`);
+            throw new Error(`Nonce ${nonce} already exists - potential replay attack`);
         }
         // Handle zero or negative TTL - set expiration to past time
         const expiresAt = ttlSeconds <= 0 ? Date.now() - 1 : Date.now() + ttlSeconds * 1000;

package/dist/cache/nonce-cache-factory.d.ts

@@ -6,7 +6,9 @@ export declare function detectCacheType(): "memory" | "redis" | "dynamodb" | "cl
 /**
  * Create a nonce cache instance based on configuration or environment detection
  */
-export declare function createNonceCache(config?: NonceCacheConfig): Promise<NonceCache>;
+export declare function createNonceCache(config?: NonceCacheConfig, options?: {
+    throwOnError?: boolean;
+}): Promise<NonceCache>;
 /**
  * Configuration override options for nonce cache
  */

package/dist/cache/nonce-cache-factory.js

@@ -70,7 +70,7 @@ function detectCacheType() {
 /**
  * Create a nonce cache instance based on configuration or environment detection
  */
-async function createNonceCache(config) {
+async function createNonceCache(config, options) {
     const cacheType = config?.type || detectCacheType();
     switch (cacheType) {
         case "redis": {
@@ -78,6 +78,10 @@ async function createNonceCache(config) {
                 process.env.REDIS_URL ||
                 getEnvWithFallback("MCPI_REDIS_URL", "XMCPI_REDIS_URL");
             if (!redisUrl) {
+                const error = new Error("Redis URL not found");
+                if (options?.throwOnError) {
+                    throw error;
+                }
                 console.warn("Redis URL not found, falling back to memory cache");
                 return new memory_nonce_cache_1.MemoryNonceCache();
             }
@@ -97,6 +101,9 @@ async function createNonceCache(config) {
                 return new redis_nonce_cache_1.RedisNonceCache(redis, config?.redis?.keyPrefix);
             }
             catch (error) {
+                if (options?.throwOnError) {
+                    throw error;
+                }
                 const errorMessage = error instanceof Error ? error.message : String(error);
                 console.warn("Failed to connect to Redis, falling back to memory cache:", errorMessage);
                 return new memory_nonce_cache_1.MemoryNonceCache();
@@ -106,6 +113,10 @@ async function createNonceCache(config) {
             const tableName = config?.dynamodb?.tableName ||
                 getEnvWithFallback("MCPI_DYNAMODB_TABLE", "XMCPI_DYNAMODB_TABLE");
             if (!tableName) {
+                const error = new Error("DynamoDB table name not found");
+                if (options?.throwOnError) {
+                    throw error;
+                }
                 console.warn("DynamoDB table name not found, falling back to memory cache");
                 return new memory_nonce_cache_1.MemoryNonceCache();
             }
@@ -139,6 +150,9 @@ async function createNonceCache(config) {
                 return new dynamodb_nonce_cache_1.DynamoNonceCache(dynamodb, tableName, config?.dynamodb?.keyAttribute, config?.dynamodb?.ttlAttribute);
             }
             catch (error) {
+                if (options?.throwOnError) {
+                    throw error;
+                }
                 const errorMessage = error instanceof Error ? error.message : String(error);
                 console.warn("Failed to initialize DynamoDB, falling back to memory cache:", errorMessage);
                 return new memory_nonce_cache_1.MemoryNonceCache();
@@ -148,6 +162,10 @@ async function createNonceCache(config) {
             const namespace = config?.cloudflareKv?.namespace ||
                 getEnvWithFallback("MCPI_KV_NAMESPACE", "XMCPI_KV_NAMESPACE");
             if (!namespace) {
+                const error = new Error("Cloudflare KV namespace not found");
+                if (options?.throwOnError) {
+                    throw error;
+                }
                 console.warn("Cloudflare KV namespace not found, falling back to memory cache");
                 return new memory_nonce_cache_1.MemoryNonceCache();
             }
@@ -181,6 +199,9 @@ async function createNonceCache(config) {
                 return new cloudflare_kv_nonce_cache_1.CloudflareKVNonceCache(kv, config?.cloudflareKv?.keyPrefix);
             }
             catch (error) {
+                if (options?.throwOnError) {
+                    throw error;
+                }
                 const errorMessage = error instanceof Error ? error.message : String(error);
                 console.warn("Failed to initialize Cloudflare KV, falling back to memory cache:", errorMessage);
                 return new memory_nonce_cache_1.MemoryNonceCache();
@@ -196,7 +217,9 @@ async function createNonceCache(config) {
  */
 async function createNonceCacheWithConfig(options = {}) {
     try {
-        return await createNonceCache(options.config);
+        return await createNonceCache(options.config, {
+            throwOnError: options.fallbackToMemory === false,
+        });
     }
     catch (error) {
         if (options.fallbackToMemory !== false) {

package/dist/cli-adapter/index.js

@@ -23,7 +23,13 @@ async function enableMCPIdentityCLI(options = {}) {
     // Helper to emit progress events
     const emitProgress = async (stage, message, data) => {
         if (onProgress) {
-            await onProgress({ stage, message, data });
+            try {
+                await onProgress({ stage, message, data });
+            }
+            catch (error) {
+                // Continue even if progress callback throws
+                console.warn("Warning: Progress callback threw an error:", error);
+            }
         }
     };
     // Step 1: Check for existing identity

package/dist/cli-adapter/kta-registration.js

@@ -57,11 +57,12 @@ async function registerWithKTA(options) {
         // Extract agent ID from DID
         const agentId = did.split(":").pop() || `agent-${Date.now()}`;
         // Build result structure
+        // Handle both camelCase (agentUrl, claimUrl) and uppercase (agentURL, claimURL) from API
         const result = {
             agentDID: did,
-            agentURL: data.agentURL || `${endpoint}/agents/by-did/${encodeURIComponent(did)}`,
+            agentURL: data.agentURL || data.agentUrl || `${endpoint}/agents/by-did/${encodeURIComponent(did)}`,
             agentId: data.agentId || agentId,
-            claimURL: data.claimURL || `${endpoint}/claim/${agentId}`,
+            claimURL: data.claimURL || data.claimUrl || `${endpoint}/claim/${agentId}`,
             verificationEndpoint,
             conformanceCapabilities: MCP_I_CAPABILITIES,
             mirrorStatus: data.mirrorStatus || "pending",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i",
-  "version": "1.3.2",
+  "version": "1.4.0",
   "description": "The TypeScript MCP framework with identity features built-in",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -25,6 +25,11 @@
       "require": "./dist/runtime/headers.js",
       "import": "./dist/runtime/headers.js",
       "types": "./dist/runtime/headers.d.ts"
+    },
+    "./cli-internal": {
+      "require": "./dist/cli-adapter/index.js",
+      "import": "./dist/cli-adapter/index.js",
+      "types": "./dist/cli-adapter/index.d.ts"
     }
   },
   "files": [
@@ -34,7 +39,8 @@
   "scripts": {
     "dev": "cross-env NODE_ENV=development tsx --watch --tsconfig ./bundler.tsconfig.json ./bundler/index.ts",
     "build": "cross-env NODE_ENV=production tsx --tsconfig ./bundler.tsconfig.json ./bundler/index.ts && node scripts/fix-esm-imports.js",
-    "test": "vitest",
+    "test": "vitest --run",
+    "test:coverage": "vitest --run --coverage",
     "lint": "eslint src/**/*.ts",
     "type-check": "tsc --noEmit",
     "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
@@ -47,8 +53,8 @@
     "model-context-protocol"
   ],
   "dependencies": {
-    "@kya-os/contracts": "^1.2.0",
-    "@kya-os/mcp-i-core": "^1.0.0",
+    "@kya-os/contracts": "^1.3.0",
+    "@kya-os/mcp-i-core": "^1.1.0",
     "@modelcontextprotocol/sdk": "^1.11.4",
     "@swc/core": "^1.11.24",
     "@types/express": "^5.0.1",
@@ -93,13 +99,14 @@
     "@types/node": "^20.0.0",
     "@typescript-eslint/eslint-plugin": "^6.0.0",
     "@typescript-eslint/parser": "^6.0.0",
+    "@vitest/coverage-v8": "^3.2.4",
     "copy-webpack-plugin": "^12.0.2",
     "eslint": "^8.0.0",
     "node-loader": "^1.0.1",
     "redis": "^4.0.0",
     "ts-loader": "^9.4.2",
     "typescript": "^5.3.0",
-    "vitest": "^1.0.0",
+    "vitest": "^3.2.4",
     "zod": "^3.22.4"
   },
   "engines": {