@kya-os/mcp-i 1.5.3-canary.0 → 1.5.4

package/dist/auth/jwt.d.ts

@@ -7,7 +7,7 @@ declare global {
             ctx?: {
                 agent?: {
                     did?: string;
-                    keyId?: string;
+                    kid?: string;
                     session?: string;
                     scopes?: string[];
                     delegationRef?: string;

package/dist/auth/oauth/router.js

@@ -3,18 +3,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createOAuthRouter = createOAuthRouter;
 exports.createOAuthMiddleware = createOAuthMiddleware;
 const express_1 = require("express");
+const mcp_i_core_1 = require("@kya-os/mcp-i-core");
 function createOAuthRouter(config) {
     const router = (0, express_1.Router)();
     const { provider, issuerUrl, baseUrl, serviceDocumentationUrl, pathPrefix = "/oauth2", } = config;
     router.use((req, res, next) => {
-        // to do check: cors config from ts file is overriding and failing to add headers
-        res.setHeader("Access-Control-Allow-Origin", "*");
-        res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
-        res.setHeader("Access-Control-Allow-Headers", 
-        // should also pass the mcp-protocol-version header
-        // probably only that one since the rest can be set from the config side
-        "Content-Type, Authorization, Accept, mcp-protocol-version");
-        res.setHeader("Access-Control-Expose-Headers", "Content-Type");
+        // Apply shared CORS headers for OAuth endpoints
+        (0, mcp_i_core_1.applyCORSHeaders)(res, mcp_i_core_1.OAUTH_CORS_HEADERS);
         if (req.method === "OPTIONS") {
             res.sendStatus(200);
             return;

package/dist/cli-adapter/index.js

@@ -55,7 +55,7 @@ async function enableMCPIdentityCLI(options = {}) {
             registrationResult = await (0, kta_registration_1.registerWithKTA)({
                 did: identity.did,
                 publicKey: identity.publicKey,
-                keyId: identity.keyId,
+                kid: identity.kid,
                 name: name || "My Agent",
                 description: description || "XMCP-I agent with identity features",
                 repository,

package/dist/cli-adapter/kta-registration.d.ts

@@ -10,7 +10,7 @@
 export interface KTARegistrationOptions {
     did: string;
     publicKey: string;
-    keyId: string;
+    kid: string;
     name: string;
     description: string;
     repository?: string;

package/dist/cli-adapter/kta-registration.js

@@ -28,7 +28,7 @@ const MCP_I_CAPABILITIES = [
  * Returns registration details including claim URL.
  */
 async function registerWithKTA(options) {
-    const { did, publicKey, keyId, name, description, repository, endpoint = "https://knowthat.ai", } = options;
+    const { did, publicKey, kid, name, description, repository, endpoint = "https://knowthat.ai", } = options;
     try {
         // Construct verification endpoint from DID
         const verificationEndpoint = did.includes("localhost")
@@ -38,7 +38,7 @@ async function registerWithKTA(options) {
         const payload = {
             did,
             publicKey,
-            keyId,
+            kid,
             name,
             description,
             repository: repository || undefined,

package/dist/compiler/config/injection.js

@@ -115,8 +115,8 @@ function injectRuntimeConfigPath(projectRoot) {
             break;
         }
     }
-    // Double-stringify for webpack DefinePlugin
+    // Single-stringify for webpack DefinePlugin (path strings don't need double-stringify)
     return {
-        RUNTIME_CONFIG_PATH: JSON.stringify(JSON.stringify(runtimeConfigPath)),
+        RUNTIME_CONFIG_PATH: JSON.stringify(runtimeConfigPath),
     };
 }

package/dist/compiler/get-webpack-config/get-entries.js

@@ -8,25 +8,29 @@ const path_1 = __importDefault(require("path"));
 /** Get what packages are gonna be built by xmcp */
 function getEntries(xmcpConfig) {
     const entries = {};
-    // Point to SOURCE files in the mcp-i package, not pre-built runtime files
-    // This allows webpack to compile them directly without double-wrapping
-    // Cache bust: Updated adapter paths to correct locations (2025-10-09)
+    // Resolve to the mcp-i package root (works for both workspace and published packages)
     const mcpiPackageRoot = path_1.default.resolve(__dirname, "../../..");
-    const runtimeSourcePath = path_1.default.join(mcpiPackageRoot, "src/runtime");
+    // Check if source files exist (workspace/development) or use dist files (published package)
+    const fs = require("fs");
+    const srcRuntimePath = path_1.default.join(mcpiPackageRoot, "src/runtime");
+    const distRuntimePath = path_1.default.join(mcpiPackageRoot, "dist/runtime");
+    const useSourceFiles = fs.existsSync(srcRuntimePath);
+    const runtimePath = useSourceFiles ? srcRuntimePath : distRuntimePath;
+    const fileExt = useSourceFiles ? ".ts" : ".js";
     if (xmcpConfig.stdio) {
-        entries.stdio = path_1.default.join(runtimeSourcePath, "transports/stdio/index.ts");
+        entries.stdio = path_1.default.join(runtimePath, `transports/stdio/index${fileExt}`);
     }
     if (xmcpConfig["http"]) {
         // non adapter mode
         if (!xmcpConfig.experimental?.adapter) {
-            entries["http"] = path_1.default.join(runtimeSourcePath, "transports/http/index.ts");
+            entries["http"] = path_1.default.join(runtimePath, `transports/http/index${fileExt}`);
         }
         // adapter mode enabled
         if (xmcpConfig.experimental?.adapter === "express") {
-            entries["adapter"] = path_1.default.join(runtimeSourcePath, "adapters/express/index.ts");
+            entries["adapter"] = path_1.default.join(runtimePath, `adapters/express/index${fileExt}`);
         }
         if (xmcpConfig.experimental?.adapter === "nextjs") {
-            entries["adapter"] = path_1.default.join(runtimeSourcePath, "adapters/nextjs/index.ts");
+            entries["adapter"] = path_1.default.join(runtimePath, `adapters/nextjs/index${fileExt}`);
         }
     }
     return entries;

package/dist/providers/node-providers.d.ts

@@ -34,7 +34,7 @@ export declare class NodeClockProvider extends ClockProvider {
 export declare class NodeFetchProvider extends FetchProvider {
     resolveDID(did: string): Promise<any>;
     fetchStatusList(url: string): Promise<any>;
-    fetchDelegationChain(id: string): Promise<any[]>;
+    fetchDelegationChain(_id: string): Promise<any[]>;
     fetch(url: string, options?: any): Promise<Response>;
 }
 /**

package/dist/providers/node-providers.js

@@ -166,7 +166,7 @@ class NodeFetchProvider extends mcp_i_core_1.FetchProvider {
         const response = await axios_1.default.get(url);
         return response.data;
     }
-    async fetchDelegationChain(id) {
+    async fetchDelegationChain(_id) {
         // Would fetch from a delegation registry
         return [];
     }
@@ -287,7 +287,7 @@ class FileIdentityProvider extends mcp_i_core_1.IdentityProvider {
             process.env.MCP_IDENTITY_AGENT_DID) {
             return {
                 did: process.env.MCP_IDENTITY_AGENT_DID,
-                keyId: `${process.env.MCP_IDENTITY_AGENT_DID}#key-1`,
+                kid: `${process.env.MCP_IDENTITY_AGENT_DID}#key-1`,
                 privateKey: process.env.MCP_IDENTITY_PRIVATE_KEY,
                 publicKey: process.env.MCP_IDENTITY_PUBLIC_KEY,
                 createdAt: new Date().toISOString(),
@@ -304,7 +304,7 @@ class FileIdentityProvider extends mcp_i_core_1.IdentityProvider {
         const did = this.generateDIDFromPublicKey(keyPair.publicKey);
         const identity = {
             did,
-            keyId: `${did}#key-1`,
+            kid: `${did}#key-1`,
             privateKey: keyPair.privateKey,
             publicKey: keyPair.publicKey,
             createdAt: new Date().toISOString(),
@@ -321,7 +321,7 @@ class FileIdentityProvider extends mcp_i_core_1.IdentityProvider {
         const did = this.generateDIDFromPublicKey(keyPair.publicKey);
         const identity = {
             did,
-            keyId: `${did}#key-1`,
+            kid: `${did}#key-1`,
             privateKey: keyPair.privateKey,
             publicKey: keyPair.publicKey,
             createdAt: new Date().toISOString(),