@kya-os/mcp 1.13.0 → 1.14.0

package/dist/integrations/cheqd/statuslist-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statuslist-resolver.js","sourceRoot":"","sources":["../../../src/integrations/cheqd/statuslist-resolver.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,GACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAsBpD,MAAM,OAAO,uBAAuB;IACjB,IAAI,CAAiC;IACrC,UAAU,CAAS;IAC5B,KAAK,CAAqC;IAC1C,aAAa,GAAG,KAAK,CAAC;IAE9B,YAAY,OAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;QAC/C,yEAAyE;QACzE,uCAAuC;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAA2B;YAClD,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,eAAe;QACb,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,WAAW,CAAC,MAAwB;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEtD,2EAA2E;QAC3E,yEAAyE;QACzE,cAAc;QACd,mBAAmB,CACjB,UAAU,CAAC,iBAAiB,CAAC,aAAa,EAC1C,MAAM,CAAC,aAAa,CACrB,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,uBAAuB,CACxC,UAAU,CAAC,iBAAiB,CAAC,WAAW,EACxC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CACpD,CAAC;QACF,OAAO,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAW;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE;YACxD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,IAAI,CAAC,aAAa;oBACpB,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;oBACrD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,EAA4B;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,iBAAiB,CAAC;QACrC,IACE,OAAO,EAAE,IAAI,KAAK,gBAAgB;YAClC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;YACvC,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,EAA4B;QAC/C,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACzE,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,iCAAiC,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,eAAe,CAAC,EAA4B;QACxD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAgC,CAAC;QAClD,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,QAAQ,GAA4B,EAAE,GAAG,EAAE,EAAE,CAAC;QACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,oBAAoB,GACxB,OAAO,KAAK,CAAC,oBAAoB,CAAC,KAAK,QAAQ;YAC7C,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;YAC7B,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,oBAAoB;YACrC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,oBAAoB,CAAC;YACtD,CAAC,CAAC,OAAO,CAAC;QACZ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,4DAA4D,oBAAoB,IAAI,OAAO,GAAG,CAC/F,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,eAAe,GAAG,aAAa,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;gBAC5E,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAuC;IAEvC,OAAO,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC"}

package/dist/utils/statuslist-bits.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Hard ceiling on an INFLATED status bitstring (16 MiB ≈ 134M entries — far
+ * beyond any herd-privacy list). A fixed cap costs nothing legitimate while
+ * stopping a decompression bomb; exceeding it throws (fail-closed).
+ */
+export declare const MAX_STATUS_LIST_BYTES: number;
+/**
+ * The W3C Bitstring Status List `encodedList` multibase prefix (base64url,
+ * no padding). A gzip stream's fixed magic byte (0x1f) makes its base64url
+ * start with `H`, never `u`, so a leading `u` is unambiguously the multibase
+ * code rather than payload.
+ */
+export declare const MULTIBASE_BASE64URL = "u";
+/**
+ * Parse a decimal `statusListIndex` (a non-negative integer expressed as a
+ * string), fail-closed. Canonical decimal ONLY: `Number()` alone would coerce
+ * whitespace (`" "` → 0), hex (`"0x2A"` → 42), `"+42"`, and `"1e1"` → 10 —
+ * silently reading a DIFFERENT (often clear) bit than the credential names,
+ * so a revoked credential could read as live.
+ */
+export declare function parseStatusListIndex(raw: string): number;
+/**
+ * Decode a status-list `encodedList` to the raw bitstring: strip the optional
+ * multibase `u` prefix, base64url-decode, run the injected decompressor, and
+ * re-check the {@link MAX_STATUS_LIST_BYTES} cap POST-inflation as a backstop
+ * (a production decompressor SHOULD also bound output during inflation).
+ * The decompressor is the bare-function common denominator — an
+ * object-shaped `DecompressionFunction` adapts inline:
+ * `(b) => decompressor.decompress(b)`.
+ */
+export declare function decodeStatusListPayload(encodedList: string, decompress: (bytes: Uint8Array) => Uint8Array | Promise<Uint8Array>): Promise<Uint8Array>;
+/**
+ * Read the status bit at `index` — MSB-first within each byte (W3C Bitstring
+ * encoding). Uses FULL-PRECISION arithmetic (`Math.floor(index / 8)`) rather
+ * than 32-bit bitwise ops, which coerce to uint32 first: an index ≥ 2^32
+ * would silently wrap onto a low byte and read the WRONG — often clear — bit,
+ * turning an out-of-range index that MUST fail-closed into a fail-OPEN "not
+ * revoked". NaN/negative/fractional/out-of-buffer indexes throw.
+ */
+export declare function readStatusBit(bits: Uint8Array, index: number): boolean;
+/**
+ * Assert a status-list credential is fit to ANCHOR (publish) — signed, and
+ * actually carrying a bitstring. Method-agnostic on purpose: the cheqd DLR
+ * publisher enforces it today; any future anchoring integration (another
+ * DLR-bearing DID method, a different chain) imports the same guard rather
+ * than re-deriving "what makes a status list publishable". An unsigned or
+ * bitstring-less list anchored on-chain would be an unverifiable — and
+ * therefore fail-closed-unusable — revocation source for every holder.
+ */
+export declare function assertAnchorableStatusListCredential(content: unknown): void;
+//# sourceMappingURL=statuslist-bits.d.ts.map

package/dist/utils/statuslist-bits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"statuslist-bits.d.ts","sourceRoot":"","sources":["../../src/utils/statuslist-bits.ts"],"names":[],"mappings":"AAmBA;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWxD;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAClE,OAAO,CAAC,UAAU,CAAC,CAUrB;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAUtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiB3E"}

package/dist/utils/statuslist-bits.js

@@ -0,0 +1,106 @@
+/**
+ * Status-list primitives — the ONE home for the mechanics every W3C
+ * status-list reader AND publisher in this package shares (StatusList2021 /
+ * Bitstring Status List v1.0): canonical index parsing, bounded payload
+ * inflation, the MSB-first bit read, and the anchor-fitness guard.
+ *
+ * Consumers: `delegation/bitstring.ts` (+ `statuslist-manager.ts`) and
+ * `card/revocation.ts` — previously each carried its own copy of exactly this
+ * knowledge, with the drift risk the source comments could only pledge away.
+ * The seams' POLICIES stay where they are (the delegation path throws and the
+ * caller maps to `status_unresolvable`; the card path catches everything into
+ * `FAIL_CLOSED` and models freshness) — only the mechanics live here.
+ *
+ * FAIL-CLOSED throughout: a non-canonical index, an oversized inflation, or
+ * an unreadable bit throws rather than reading as "not revoked".
+ */
+import { base64urlDecodeToBytes } from './base64.js';
+import { isRecord } from './guards.js';
+/**
+ * Hard ceiling on an INFLATED status bitstring (16 MiB ≈ 134M entries — far
+ * beyond any herd-privacy list). A fixed cap costs nothing legitimate while
+ * stopping a decompression bomb; exceeding it throws (fail-closed).
+ */
+export const MAX_STATUS_LIST_BYTES = 16 * 1024 * 1024;
+/**
+ * The W3C Bitstring Status List `encodedList` multibase prefix (base64url,
+ * no padding). A gzip stream's fixed magic byte (0x1f) makes its base64url
+ * start with `H`, never `u`, so a leading `u` is unambiguously the multibase
+ * code rather than payload.
+ */
+export const MULTIBASE_BASE64URL = 'u';
+/**
+ * Parse a decimal `statusListIndex` (a non-negative integer expressed as a
+ * string), fail-closed. Canonical decimal ONLY: `Number()` alone would coerce
+ * whitespace (`" "` → 0), hex (`"0x2A"` → 42), `"+42"`, and `"1e1"` → 10 —
+ * silently reading a DIFFERENT (often clear) bit than the credential names,
+ * so a revoked credential could read as live.
+ */
+export function parseStatusListIndex(raw) {
+    if (!/^[0-9]+$/.test(raw)) {
+        throw new Error(`Invalid statusListIndex "${raw}" — must be a canonical non-negative decimal`);
+    }
+    const index = Number(raw);
+    if (!Number.isSafeInteger(index)) {
+        throw new Error(`statusListIndex "${raw}" exceeds the safe integer range`);
+    }
+    return index;
+}
+/**
+ * Decode a status-list `encodedList` to the raw bitstring: strip the optional
+ * multibase `u` prefix, base64url-decode, run the injected decompressor, and
+ * re-check the {@link MAX_STATUS_LIST_BYTES} cap POST-inflation as a backstop
+ * (a production decompressor SHOULD also bound output during inflation).
+ * The decompressor is the bare-function common denominator — an
+ * object-shaped `DecompressionFunction` adapts inline:
+ * `(b) => decompressor.decompress(b)`.
+ */
+export async function decodeStatusListPayload(encodedList, decompress) {
+    const payload = encodedList[0] === MULTIBASE_BASE64URL ? encodedList.slice(1) : encodedList;
+    const inflated = await decompress(base64urlDecodeToBytes(payload));
+    if (inflated.length > MAX_STATUS_LIST_BYTES) {
+        throw new Error(`Status list too large: ${inflated.length} bytes exceeds ${MAX_STATUS_LIST_BYTES}`);
+    }
+    return inflated instanceof Uint8Array ? inflated : new Uint8Array(inflated);
+}
+/**
+ * Read the status bit at `index` — MSB-first within each byte (W3C Bitstring
+ * encoding). Uses FULL-PRECISION arithmetic (`Math.floor(index / 8)`) rather
+ * than 32-bit bitwise ops, which coerce to uint32 first: an index ≥ 2^32
+ * would silently wrap onto a low byte and read the WRONG — often clear — bit,
+ * turning an out-of-range index that MUST fail-closed into a fail-OPEN "not
+ * revoked". NaN/negative/fractional/out-of-buffer indexes throw.
+ */
+export function readStatusBit(bits, index) {
+    const byte = Number.isInteger(index) && index >= 0
+        ? bits[Math.floor(index / 8)]
+        : undefined;
+    if (byte === undefined) {
+        throw new Error(`Bit index ${index} out of range for the status list`);
+    }
+    return (byte & (0x80 >> index % 8)) !== 0;
+}
+/**
+ * Assert a status-list credential is fit to ANCHOR (publish) — signed, and
+ * actually carrying a bitstring. Method-agnostic on purpose: the cheqd DLR
+ * publisher enforces it today; any future anchoring integration (another
+ * DLR-bearing DID method, a different chain) imports the same guard rather
+ * than re-deriving "what makes a status list publishable". An unsigned or
+ * bitstring-less list anchored on-chain would be an unverifiable — and
+ * therefore fail-closed-unusable — revocation source for every holder.
+ */
+export function assertAnchorableStatusListCredential(content) {
+    if (!isRecord(content)) {
+        throw new Error('Status list credential must be an object');
+    }
+    if (!content.proof) {
+        throw new Error('Refusing to publish an UNSIGNED status list credential');
+    }
+    const subject = content.credentialSubject;
+    if (!isRecord(subject) ||
+        typeof subject.encodedList !== 'string' ||
+        subject.encodedList.length === 0) {
+        throw new Error('Status list credential is missing credentialSubject.encodedList');
+    }
+}
+//# sourceMappingURL=statuslist-bits.js.map

package/dist/utils/statuslist-bits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statuslist-bits.js","sourceRoot":"","sources":["../../src/utils/statuslist-bits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,8CAA8C,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,kCAAkC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,UAAmE;IAEnE,MAAM,OAAO,GACX,WAAW,CAAC,CAAC,CAAC,KAAK,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,MAAM,kBAAkB,qBAAqB,EAAE,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,YAAY,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB,EAAE,KAAa;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,mCAAmC,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oCAAoC,CAAC,OAAgB;IACnE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC1C,IACE,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "Reference implementation of the KYA-OS protocol for Model Context Protocol servers: identity, delegation, proofs, sessions, and verifiable audit trails",
   "license": "MIT",
   "type": "module",