@kya-os/mcp-i 1.5.6-canary.3 → 1.5.8-canary.1

package/dist/runtime/mcpi-runtime-wrapper.d.ts

@@ -4,14 +4,23 @@
  * Node.js-specific runtime that extends the core runtime with Node.js providers.
  * Provides backward compatibility by accepting legacy configuration format.
  */
-import { MCPIRuntimeBase } from '@kya-os/mcp-i-core';
+import { MCPIRuntimeBase, AccessControlApiService, ProofVerifier } from '@kya-os/mcp-i-core';
 import type { MCPIRuntimeConfig } from './mcpi-runtime';
 /**
  * Node.js-specific runtime implementation
  */
 export declare class MCPINodeRuntimeWrapper extends MCPIRuntimeBase {
     private legacyConfig;
+    protected accessControlService?: AccessControlApiService;
     constructor(config?: MCPIRuntimeConfig);
+    /**
+     * Set AccessControlApiService (for testing or manual injection)
+     */
+    setAccessControlService(service: AccessControlApiService): void;
+    /**
+     * Set ProofVerifier (for testing or manual injection)
+     */
+    setProofVerifier(verifier: ProofVerifier): void;
 }
 /**
  * Factory function for creating Node.js runtime

package/dist/runtime/mcpi-runtime-wrapper.js

@@ -55,10 +55,50 @@ function createProvidersFromConfig(config) {
  */
 class MCPINodeRuntimeWrapper extends mcp_i_core_1.MCPIRuntimeBase {
     legacyConfig;
+    accessControlService; // Access control API service
+    // proofVerifier is inherited from MCPIRuntimeBase (protected), no need to redeclare
     constructor(config = {}) {
         const coreConfig = createProvidersFromConfig(config);
         super(coreConfig);
         this.legacyConfig = config;
+        // Instantiate ProofVerifier
+        // Access protected property from base class using type assertion
+        this.proofVerifier = new mcp_i_core_1.ProofVerifier({
+            cryptoProvider: coreConfig.cryptoProvider,
+            clockProvider: coreConfig.clockProvider,
+            nonceCacheProvider: coreConfig.nonceCacheProvider,
+            fetchProvider: coreConfig.fetchProvider,
+            timestampSkewSeconds: coreConfig.session?.timestampSkewSeconds || 120,
+        });
+        // Instantiate AccessControlApiService if API key is available
+        const apiKey = process.env.AGENTSHIELD_API_KEY;
+        const apiUrl = process.env.AGENTSHIELD_API_URL || 'https://kya.vouched.id';
+        if (apiKey) {
+            this.accessControlService = new mcp_i_core_1.AccessControlApiService({
+                baseUrl: apiUrl,
+                apiKey,
+                fetchProvider: coreConfig.fetchProvider,
+                logger: (msg, data) => {
+                    if (coreConfig.environment === 'development') {
+                        console.log(`[AccessControl] ${msg}`, data);
+                    }
+                },
+            });
+        }
+    }
+    /**
+     * Set AccessControlApiService (for testing or manual injection)
+     */
+    setAccessControlService(service) {
+        this.accessControlService = service;
+    }
+    /**
+     * Set ProofVerifier (for testing or manual injection)
+     */
+    setProofVerifier(verifier) {
+        // Set the base class protected property directly
+        // Use type assertion to access protected property from base class
+        this.proofVerifier = verifier;
     }
 }
 exports.MCPINodeRuntimeWrapper = MCPINodeRuntimeWrapper;

package/dist/runtime/session.js

@@ -60,7 +60,7 @@ class SessionManager {
                 };
             }
             // Validate nonce (must be unique within session window)
-            const nonceExists = await this.config.nonceCache.has(request.nonce);
+            const nonceExists = await this.config.nonceCache.has(request.nonce, request.agentDid);
             if (nonceExists) {
                 return {
                     success: false,
@@ -73,7 +73,7 @@ class SessionManager {
             }
             // Add nonce to cache with TTL >= session TTL
             const nonceTtlSeconds = this.config.sessionTtlMinutes * 60 + 60; // Session TTL + 1 minute buffer
-            await this.config.nonceCache.add(request.nonce, nonceTtlSeconds);
+            await this.config.nonceCache.add(request.nonce, nonceTtlSeconds, request.agentDid);
             // Generate session ID
             const sessionId = this.generateSessionId();
             // Create session context