@kya-os/mcp 1.14.2 → 1.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/CHANGELOG.md +95 -0
  2. package/CONFORMANCE.md +31 -4
  3. package/README.md +30 -160
  4. package/SPEC.md +53 -14
  5. package/dist/delegation/holder-binding.d.ts.map +1 -1
  6. package/dist/delegation/holder-binding.js +8 -1
  7. package/dist/delegation/holder-binding.js.map +1 -1
  8. package/dist/delegation/scope-matcher.d.ts +8 -3
  9. package/dist/delegation/scope-matcher.d.ts.map +1 -1
  10. package/dist/delegation/scope-matcher.js +15 -1
  11. package/dist/delegation/scope-matcher.js.map +1 -1
  12. package/dist/delegation/vc-verification-checks.d.ts.map +1 -1
  13. package/dist/delegation/vc-verification-checks.js +10 -2
  14. package/dist/delegation/vc-verification-checks.js.map +1 -1
  15. package/dist/delegation/vc-verifier.types.d.ts +4 -0
  16. package/dist/delegation/vc-verifier.types.d.ts.map +1 -1
  17. package/dist/index.d.ts +3 -3
  18. package/dist/index.d.ts.map +1 -1
  19. package/dist/index.js +2 -2
  20. package/dist/index.js.map +1 -1
  21. package/dist/middleware/with-kya-os.config-types.d.ts +22 -1
  22. package/dist/middleware/with-kya-os.config-types.d.ts.map +1 -1
  23. package/dist/middleware/with-kya-os.d.ts.map +1 -1
  24. package/dist/middleware/with-kya-os.deps.d.ts +7 -0
  25. package/dist/middleware/with-kya-os.deps.d.ts.map +1 -1
  26. package/dist/middleware/with-kya-os.js +6 -1
  27. package/dist/middleware/with-kya-os.js.map +1 -1
  28. package/dist/middleware/with-kya-os.session.d.ts.map +1 -1
  29. package/dist/middleware/with-kya-os.session.js +28 -6
  30. package/dist/middleware/with-kya-os.session.js.map +1 -1
  31. package/dist/proof/generator.d.ts +38 -5
  32. package/dist/proof/generator.d.ts.map +1 -1
  33. package/dist/proof/generator.js +95 -25
  34. package/dist/proof/generator.js.map +1 -1
  35. package/dist/proof/index.d.ts +1 -1
  36. package/dist/proof/index.d.ts.map +1 -1
  37. package/dist/proof/index.js +1 -1
  38. package/dist/proof/index.js.map +1 -1
  39. package/dist/proof/verifier.d.ts +6 -1
  40. package/dist/proof/verifier.d.ts.map +1 -1
  41. package/dist/proof/verifier.js +20 -27
  42. package/dist/proof/verifier.js.map +1 -1
  43. package/dist/types/protocol.d.ts +28 -1
  44. package/dist/types/protocol.d.ts.map +1 -1
  45. package/dist/types/protocol.js +31 -0
  46. package/dist/types/protocol.js.map +1 -1
  47. package/package.json +1 -1
  48. package/schemas/delegation-credential.json +1 -1
  49. package/schemas/detached-proof.json +6 -1
  50. package/schemas/well-known-mcpi.json +3 -4
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kya-os/mcp",
3
- "version": "1.14.2",
3
+ "version": "1.16.0",
4
4
  "description": "Reference implementation of the KYA-OS protocol for Model Context Protocol servers: identity, delegation, proofs, sessions, and verifiable audit trails",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -206,7 +206,7 @@
206
206
  "resource": { "type": "string" },
207
207
  "matcher": {
208
208
  "type": "string",
209
- "enum": ["exact", "prefix", "regex"]
209
+ "enum": ["exact", "prefix", "path-prefix", "regex"]
210
210
  },
211
211
  "constraints": {
212
212
  "type": "object",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "https://schema.kya-os.org/v1/protocol/proof/detached/v1.0.0",
3
+ "$id": "https://schema.kya-os.org/v1/protocol/proof/detached/v1.1.0",
4
4
  "title": "KYA-OS Detached Proof",
5
5
  "description": "Cryptographic proof binding an MCP tool request/response pair to an agent's identity and session context.",
6
6
  "type": "object",
@@ -83,6 +83,11 @@
83
83
  "reason": {
84
84
  "type": "string",
85
85
  "description": "Human-readable reason accompanying a denied / step-up / needs-authorization outcome."
86
+ },
87
+ "prf": {
88
+ "type": "string",
89
+ "const": "org.kya-os/response-proof.envelope",
90
+ "description": "Response-proof profile discriminator, covered by the JWS signature. Absent on body-profile proofs (body-only responseHash); present with this exact value on envelope-profile proofs (responseHash covers the result envelope minus top-level _meta). Verifiers reject any other value fail-closed (SPEC §7.3)."
86
91
  }
87
92
  },
88
93
  "additionalProperties": false
@@ -8,8 +8,8 @@
8
8
  "properties": {
9
9
  "version": {
10
10
  "type": "string",
11
- "pattern": "^\\d+\\.\\d+$",
12
- "description": "KYA-OS protocol version supported by this server."
11
+ "pattern": "^\\d+\\.\\d+(\\.\\d+)?$",
12
+ "description": "KYA-OS protocol version supported by this server (the reference implementation advertises \"1.0.0\")."
13
13
  },
14
14
  "serverDid": {
15
15
  "type": "string",
@@ -18,12 +18,11 @@
18
18
  },
19
19
  "endpoints": {
20
20
  "type": "object",
21
- "required": ["handshake"],
22
21
  "properties": {
23
22
  "handshake": {
24
23
  "type": "string",
25
24
  "format": "uri-reference",
26
- "description": "Relative or absolute URL for the handshake endpoint."
25
+ "description": "Relative or absolute URL for the handshake endpoint. Legacy 1.x session profile only (SPEC-MCP-EXTENSION.md §4); servers on the stateless card-proof profile omit it."
27
26
  },
28
27
  "tools": {
29
28
  "type": "string",