@kya-os/mcp-i 1.5.1 → 1.5.2

package/dist/runtime/auth-handshake.d.ts

@@ -42,6 +42,8 @@ export interface AgentReputation {
 export interface AuthHandshakeConfig {
     /** Delegation verifier instance */
     delegationVerifier: DelegationVerifier;
+    /** Resume token store (REQUIRED to persist tokens across calls) */
+    resumeTokenStore: ResumeTokenStore;
     /** KTA API configuration (optional, for reputation checks) */
     kta?: {
         apiUrl: string;

package/dist/runtime/auth-handshake.js

@@ -205,9 +205,8 @@ async function fetchAgentReputation(agentDid, ktaConfig) {
  * @returns NeedsAuthorizationError
  */
 async function buildNeedsAuthorizationError(agentDid, scopes, config, message) {
-    // Generate resume token (simple implementation - use proper store in production)
-    const resumeTokenStore = new MemoryResumeTokenStore(config.bouncer.resumeTokenTtl || 600_000);
-    const resumeToken = await resumeTokenStore.create(agentDid, scopes, {
+    // Use the persistent resume token store from config
+    const resumeToken = await config.resumeTokenStore.create(agentDid, scopes, {
         requestedAt: Date.now(),
     });
     const expiresAt = Date.now() + (config.bouncer.resumeTokenTtl || 600_000);

package/dist/runtime/mcpi-runtime.d.ts

@@ -82,6 +82,7 @@ export declare class MCPIRuntime {
     private debugManager?;
     private demoManager?;
     private delegationVerifier?;
+    private resumeTokenStore;
     private config;
     private cachedIdentity?;
     constructor(config?: MCPIRuntimeConfig);

package/dist/runtime/mcpi-runtime.js

@@ -28,6 +28,7 @@ class MCPIRuntime {
     debugManager;
     demoManager;
     delegationVerifier; // NEW - Phase 1
+    resumeTokenStore; // NEW - Phase 1
     config;
     cachedIdentity;
     constructor(config = {}) {
@@ -41,6 +42,9 @@ class MCPIRuntime {
         this.sessionManager = new session_1.SessionManager(config.session);
         // Initialize audit logger
         this.auditLogger = new audit_1.AuditLogger(config.audit);
+        // Initialize resume token store (NEW - Phase 1)
+        // Use in-memory store by default (sufficient for most use cases)
+        this.resumeTokenStore = new auth_handshake_1.MemoryResumeTokenStore(config.delegation?.authorization?.resumeTokenTtl || 600_000);
         // Initialize delegation verifier (NEW - Phase 1)
         if (config.delegation?.enabled && config.delegation?.verifier) {
             this.delegationVerifier = (0, delegation_verifier_1.createDelegationVerifier)(config.delegation.verifier);
@@ -113,6 +117,7 @@ class MCPIRuntime {
             // Build auth handshake config
             const authConfig = {
                 delegationVerifier: this.delegationVerifier,
+                resumeTokenStore: this.resumeTokenStore,
                 kta: this.config.delegation.authorization?.kta,
                 bouncer: {
                     authorizationUrl: this.config.delegation.authorization?.authorizationUrl ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "The TypeScript MCP framework with identity features built-in",
   "type": "commonjs",
   "main": "dist/index.js",