@kya-os/mcp 1.18.0 → 1.20.0

package/dist/middleware/kya-os-transport.js

@@ -13,33 +13,72 @@
  *   1. Incoming `tools/call` requests are captured (by id) to record tool
  *      name and arguments for proof generation.
  *   2. Outgoing responses for those ids get a proof injected into `_meta`,
- *      unless the middleware's own wrappers already proved or audited the
- *      result, which they mark with a private per-middleware stamp.
- *   3. All other message types pass through unmodified, except that the
- *      stamp is removed from every result before it is sent.
+ *      unless the middleware's own wrappers produced the result, which they
+ *      mark with a private per-middleware stamp.
+ *   3. The wrappers leave their proofs here, and every proof is made in
+ *      `send()`, over the result as the MCP SDK finished it: the SDK changes
+ *      a result after the handler returns (`resultType` on the 2026-07-28
+ *      revision, a filled-in or appended `content`), and the proof covers
+ *      what it covers of the result the client receives.
+ *   4. All other message types pass through unmodified, except that the
+ *      middleware's private members are removed from every result before it
+ *      is sent.
  *
  * @module kya-os-transport
  */
-import { attachOuterProofLayer, withoutLifecycleStamp, withoutOutcomeMeta, } from "./with-kya-os.session.js";
+import { attachOuterProofLayer, withoutOutcomeMeta, withoutPrivateMeta, withoutPrivateMembers, } from "./with-kya-os.session.js";
 import { logger } from "../logging/index.js";
 /**
  * Creates a transport wrapper that injects KYA-OS proofs into `tools/call`
- * responses.
+ * responses, and makes the proofs the middleware's wrappers and
+ * `proveOutcome` leave to it, over each result as it is sent. A server on the
+ * low-level `Server` API connects through it:
+ * `server.connect(createKyaOsTransport(transport, kyaos))`.
+ *
+ * It proves and audits the result of every tool it is not told to exclude,
+ * including tools registered without a wrapper, as `withKyaOs` does. A
+ * low-level server that used only the wrappers on an unwrapped transport,
+ * which 1.19.0 allowed, sent its unwrapped tools' results unproven; through
+ * this transport they carry a proof too.
  *
  * @param inner   - The real transport (Stdio, HTTP, etc.)
  * @param kyaos    - Configured KyaOsMiddleware instance
- * @param exclude - Tool names to skip proof generation for
+ * @param exclude - More tool names whose results are not proved by the
+ *   transport itself, in addition to the protocol tools `_kyaos` and
+ *   `_kyaos_handshake`, which are always excluded (as `excludeTools` adds
+ *   to them in `withKyaOs`). A wrapper's own proof is made whatever this
+ *   says.
  */
-export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_handshake"]) {
+export function createKyaOsTransport(inner, kyaos, exclude = []) {
     // Request id → { toolName, args } for pending tool calls
     const pending = new Map();
-    // From here on the middleware's wrappers stamp what they return, and this
-    // tells a stamped result from one that only looks proven. Undefined for a
-    // custom middleware, whose results are all proved here.
-    const isOwnResult = attachOuterProofLayer(kyaos.wrapWithProof);
+    const excluded = new Set(["_kyaos", "_kyaos_handshake", ...exclude]);
+    // From here on the middleware's wrappers stamp what they return, and the
+    // layer tells a stamped result from one that only looks proven, and makes
+    // the proofs they leave to it. Undefined for a custom middleware, whose
+    // results are all proved here.
+    const layer = attachOuterProofLayer(kyaos.wrapWithProof);
+    // While started and not closed, this transport counts as open for the
+    // middleware; its wrappers run only then.
+    let release;
+    const releaseOpen = () => {
+        release?.();
+        release = undefined;
+    };
+    // The close handler the server installed through the wrapper. It runs the
+    // handler the caller set on the inner transport before connecting, which
+    // the server read through the getter below and chained.
+    let closeHandler;
+    const closed = () => {
+        releaseOpen();
+        closeHandler?.();
+    };
     const wrapper = {
         start: () => inner.start(),
-        close: () => inner.close(),
+        close: async () => {
+            releaseOpen();
+            await inner.close();
+        },
         // McpServer writes into wrapper.onmessage — forward to inner so the
         // real transport can drive it.
         set onmessage(handler) {
@@ -48,11 +87,17 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
         get onmessage() {
             return inner.onmessage;
         },
+        // The inner transport may close on its own (the client went away), so
+        // its close also ends this transport's count. Before a handler is set
+        // here, the getter reports the inner transport's own: the SDK reads it
+        // when it connects and chains it (a session map's cleanup, say), so it
+        // keeps running.
         set onclose(handler) {
-            inner.onclose = handler;
+            closeHandler = handler;
+            inner.onclose = closed;
         },
         get onclose() {
-            return inner.onclose;
+            return closeHandler ?? (inner.onclose === closed ? undefined : inner.onclose);
         },
         set onerror(handler) {
             inner.onerror = handler;
@@ -60,9 +105,43 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
         get onerror() {
             return inner.onerror;
         },
+        // What the SDK reads off, or hands to, the transport it connects passes
+        // through to the inner transport: its session id (which the SDK puts on
+        // each request's context), the negotiated protocol versions, the scope
+        // challenge resolver, and whether it streams per request. These are every
+        // transport member SDK 1 and SDK 2 servers read or feature-detect.
+        get sessionId() {
+            return inner.sessionId;
+        },
+        set sessionId(sessionId) {
+            inner.sessionId = sessionId;
+        },
+        get setProtocolVersion() {
+            return inner.setProtocolVersion === undefined
+                ? undefined
+                : (version) => inner.setProtocolVersion(version);
+        },
+        get setSupportedProtocolVersions() {
+            return inner.setSupportedProtocolVersions === undefined
+                ? undefined
+                : (versions) => inner.setSupportedProtocolVersions(versions);
+        },
+        // SDK 2's McpServer installs per-tool OAuth scope enforcement only when
+        // the transport has this member (an `in` check), so a wrapper without it
+        // silently switched the enforcement off.
+        get setScopeChallengeResolver() {
+            return inner.setScopeChallengeResolver === undefined
+                ? undefined
+                : (resolver) => inner.setScopeChallengeResolver(resolver);
+        },
+        get hasPerRequestStream() {
+            return inner.hasPerRequestStream;
+        },
         // McpServer calls send() for every outgoing message.
         // Intercept tools/call responses here to inject proofs.
-        async send(message) {
+        // The SDK's send options (relatedRequestId, resumption tokens) are
+        // passed through unchanged.
+        async send(message, options) {
             // Only a response (result or error, no method) can answer a pending call:
             // a server-initiated request such as elicitation/create numbers its ids
             // in the server's own space, so its id can equal a pending client id.
@@ -74,11 +153,12 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
                 const rawResult = message.result;
                 // A result the middleware's wrappers already proved or audited (a
                 // delegated call's scope-bearing proof, a signed needs_authorization
-                // outcome, an audited error) passes through: proving it again would
-                // replace its proof and record its lifecycle twice. Only the stamp
-                // shows that; proof, proofError and audit members can come from any
-                // handler, including one relaying an upstream server's result.
-                if (rawResult && isOwnResult?.(rawResult) !== true) {
+                // outcome, an outcome application code proved with proveOutcome, an
+                // audited error) passes through: proving it again would replace its
+                // proof and record its lifecycle twice. Only the stamp shows that;
+                // proof, proofError and audit members can come from any handler,
+                // including one relaying an upstream server's result.
+                if (rawResult && layer?.owns(rawResult) !== true) {
                     // Those members are untrusted here, so they are removed and the
                     // result is proved and audited as any other. Other members stay.
                     const received = withoutOutcomeMeta(rawResult);
@@ -116,13 +196,33 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
                     }
                 }
             }
-            // The stamp never leaves the process, whichever path the message took.
+            // Whichever path the message took: a proof a wrapper left for the wire
+            // is made now, over the result as it is sent, and only by a proof left
+            // for the tool this answers. The private members never leave the
+            // process, from a result or from any other part of a message: a
+            // notification or request's params (a tool logging a wrapped result,
+            // say) or an error's data.
             if (typeof message.result === "object" && message.result !== null) {
-                const sent = withoutLifecycleStamp(message.result);
+                const result = message.result;
+                const sent = layer
+                    ? await layer.send(result, call === undefined ? undefined : { toolName: call.toolName })
+                    : withoutPrivateMeta(result);
                 if (sent !== message.result)
                     message = { ...message, result: sent };
             }
-            return inner.send(message);
+            const scrub = (value) => (layer ? layer.scrub(value) : withoutPrivateMembers(value));
+            if (message.params !== undefined) {
+                const params = scrub(message.params);
+                if (params !== message.params)
+                    message = { ...message, params };
+            }
+            const error = message.error;
+            if (error !== null && typeof error === "object" && error.data !== undefined) {
+                const data = scrub(error.data);
+                if (data !== error.data)
+                    message = { ...message, error: { ...error, data } };
+            }
+            return options === undefined ? inner.send(message) : inner.send(message, options);
         },
     };
     // Intercept incoming messages from the real transport to capture
@@ -131,18 +231,35 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
     // via server.connect() — so we proxy through the getter/setter above and
     // add our interception in a one-time initializer on start().
     const originalStart = inner.start.bind(inner);
+    let interceptor;
     wrapper.start = async () => {
         await originalStart();
+        // Counted once however often start() is called, until the transport closes.
+        release ??= layer?.open();
+        // A close handler set on the inner transport and never read through the
+        // wrapper is adopted, so it still runs, after the one installed here.
+        const foreign = inner.onclose;
+        if (foreign !== undefined && foreign !== closed) {
+            const installed = closeHandler;
+            closeHandler = installed === undefined ? foreign : () => {
+                foreign();
+                installed();
+            };
+        }
+        inner.onclose = closed;
         // At this point McpServer has called server.connect(wrapper) which set
         // wrapper.onmessage = <McpServer handler>. That assignment forwarded to
-        // inner.onmessage via the setter above. Now we inject our interceptor.
+        // inner.onmessage via the setter above. Now we inject our interceptor,
+        // once.
+        if (interceptor !== undefined && inner.onmessage === interceptor)
+            return;
         const downstream = inner.onmessage;
-        inner.onmessage = (message) => {
+        interceptor = (message, extra) => {
             if (message.method === "tools/call" &&
                 message.id !== undefined) {
                 const params = message.params;
                 const toolName = params?.name;
-                if (toolName && !exclude.includes(toolName)) {
+                if (toolName && !excluded.has(toolName)) {
                     pending.set(message.id, {
                         toolName,
                         args: params?.arguments ?? {},
@@ -155,8 +272,14 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
                 const params = message.params;
                 pending.delete(params?.requestId);
             }
-            downstream?.(message);
+            // The SDK's message context (session id, authInfo, requestInfo) rides
+            // through unchanged.
+            if (extra === undefined)
+                downstream?.(message);
+            else
+                downstream?.(message, extra);
         };
+        inner.onmessage = interceptor;
     };
     return wrapper;
 }

package/dist/middleware/kya-os-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"kya-os-transport.js","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAyB7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,KAAsB,EACtB,UAAoB,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAElD,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,0EAA0E;IAC1E,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAc;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAE1B,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,SAAS,CAAC,OAAoD;YAChE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,OAAO,CAAC,OAAiC;YAC3C,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,CAAC,OAA2C;YACrD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,KAAK,CAAC,IAAI,CAAC,OAAuB;YAChC,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE1E,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;gBAC3D,kEAAkE;gBAClE,qEAAqE;gBACrE,oEAAoE;gBACpE,mEAAmE;gBACnE,oEAAoE;gBACpE,+DAA+D;gBAC/D,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;oBACnD,gEAAgE;oBAChE,iEAAiE;oBACjE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBAC/C,IAAI,CAAC;wBACH,gEAAgE;wBAChE,kEAAkE;wBAClE,kEAAkE;wBAClE,0DAA0D;wBAC1D,MAAM,OAAO,GAAqB,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;wBAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1C,gEAAgE;wBAChE,+DAA+D;wBAC/D,+DAA+D;wBAC/D,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;yBAC9E,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;4BACxD,IAAI,EAAE,IAAI,CAAC,QAAQ;4BACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;wBACH,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE;gCACN,GAAG,QAAQ;gCACX,KAAK,EAAE;oCACL,GAAG,CAAE,QAAQ,CAAC,KAA6C,IAAI,EAAE,CAAC;oCAClE,UAAU,EAAE,gDAAgD;iCAC7D;6BACF;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,uEAAuE;YACvE,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAoB,CAAC,CAAC;gBACjE,IAAI,IAAI,KAAK,OAAO,CAAC,MAAM;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACtE,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;IAEF,iEAAiE;IACjE,uDAAuD;IACvD,6EAA6E;IAC7E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,aAAa,EAAE,CAAC;QACtB,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE;YAC5C,IACE,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC/B,OAAO,CAAC,EAAE,KAAK,SAAS,EACxB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAEV,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;gBAC9B,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;wBACtB,QAAQ;wBACR,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACxD,oEAAoE;gBACpE,sBAAsB;gBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAA6C,CAAC;gBACrE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YACD,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"kya-os-transport.js","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAqC7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,KAAsB,EACtB,UAA6B,EAAE;IAE/B,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACrE,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACzD,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,OAAiC,CAAC;IACtC,MAAM,WAAW,GAAG,GAAS,EAAE;QAC7B,OAAO,EAAE,EAAE,CAAC;QACZ,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC,CAAC;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,wDAAwD;IACxD,IAAI,YAAsC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAc;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,WAAW,EAAE,CAAC;YACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,SAAS,CAAC,OAAqE;YACjF,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,iBAAiB;QACjB,IAAI,OAAO,CAAC,OAAiC;YAC3C,YAAY,GAAG,OAAO,CAAC;YACvB,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;QACzB,CAAC;QACD,IAAI,OAAO;YACT,OAAO,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,OAAO,CAAC,OAA2C;YACrD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QACD,IAAI,SAAS,CAAC,SAA6B;YACzC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,kBAAkB;YACpB,OAAO,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBAC3C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAmB,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,4BAA4B;YAC9B,OAAO,KAAK,CAAC,4BAA4B,KAAK,SAAS;gBACrD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA6B,CAAC,QAAQ,CAAC,CAAC;QAC5E,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,yCAAyC;QACzC,IAAI,yBAAyB;YAC3B,OAAO,KAAK,CAAC,yBAAyB,KAAK,SAAS;gBAClD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,yBAA0B,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,mBAAmB;YACrB,OAAO,KAAK,CAAC,mBAAmB,CAAC;QACnC,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,mEAAmE;QACnE,4BAA4B;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAuB,EAAE,OAAiB;YACnD,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE1E,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;gBAC3D,kEAAkE;gBAClE,qEAAqE;gBACrE,oEAAoE;gBACpE,oEAAoE;gBACpE,mEAAmE;gBACnE,iEAAiE;gBACjE,sDAAsD;gBACtD,IAAI,SAAS,IAAI,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;oBACjD,gEAAgE;oBAChE,iEAAiE;oBACjE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBAC/C,IAAI,CAAC;wBACH,gEAAgE;wBAChE,kEAAkE;wBAClE,kEAAkE;wBAClE,0DAA0D;wBAC1D,MAAM,OAAO,GAAqB,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;wBAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1C,gEAAgE;wBAChE,+DAA+D;wBAC/D,+DAA+D;wBAC/D,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;yBAC9E,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;4BACxD,IAAI,EAAE,IAAI,CAAC,QAAQ;4BACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;wBACH,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE;gCACN,GAAG,QAAQ;gCACX,KAAK,EAAE;oCACL,GAAG,CAAE,QAAQ,CAAC,KAA6C,IAAI,EAAE,CAAC;oCAClE,UAAU,EAAE,gDAAgD;iCAC7D;6BACF;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,gEAAgE;YAChE,qEAAqE;YACrE,2BAA2B;YAC3B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAoB,CAAC;gBAC5C,MAAM,IAAI,GAAG,KAAK;oBAChB,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACxF,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,OAAO,CAAC,MAAM;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACtE,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YACvG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC;YAClE,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAuC,CAAC;YAC9D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/E,CAAC;YAED,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpF,CAAC;KACF,CAAC;IAEF,iEAAiE;IACjE,uDAAuD;IACvD,6EAA6E;IAC7E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,WAA4D,CAAC;IACjE,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,aAAa,EAAE,CAAC;QACtB,4EAA4E;QAC5E,OAAO,KAAK,KAAK,EAAE,IAAI,EAAE,CAAC;QAC1B,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,YAAY,CAAC;YAC/B,YAAY,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE;gBACtD,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,CAAC;YACd,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;QACvB,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,QAAQ;QACR,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW;YAAE,OAAO;QACzE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,WAAW,GAAG,CAAC,OAAuB,EAAE,KAAe,EAAE,EAAE;YACzD,IACE,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC/B,OAAO,CAAC,EAAE,KAAK,SAAS,EACxB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAEV,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;gBAC9B,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;wBACtB,QAAQ;wBACR,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACxD,oEAAoE;gBACpE,sBAAsB;gBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAA6C,CAAC;gBACrE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YACD,sEAAsE;YACtE,qBAAqB;YACrB,IAAI,KAAK,KAAK,SAAS;gBAAE,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;;gBAC1C,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/middleware/mcp-tool-callback.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Register a middleware-wrapped handler with the MCP SDK's `registerTool`.
+ *
+ * A {@link KyaOsToolHandler} takes `(args, sessionId?, context?)`; the SDK
+ * calls a tool callback with `(args, extra)`, where `extra` is its own request
+ * context. Passed straight in, the handler needs a cast, and the SDK's context
+ * then arrives as the KYA-OS session id: no session matches it, and the
+ * result goes out unproven. The adapter passes the arguments alone, so the
+ * handler resolves its session as any unthreaded call does. The SDK's
+ * transport session id is a different thing from a KYA-OS session id, so
+ * nothing from `extra` is forwarded.
+ *
+ * Typed structurally, so this package keeps no type dependency on the SDK.
+ */
+import type { KyaOsToolHandler } from "./with-kya-os.types.js";
+/** A tool result in the shape the MCP SDK's `registerTool` callback returns. */
+export interface McpToolCallbackResult {
+    content: Array<{
+        type: "text";
+        text: string;
+        [key: string]: unknown;
+    }>;
+    structuredContent?: Record<string, unknown>;
+    isError?: boolean;
+    _meta?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+/**
+ * A callback for a tool registered with an `inputSchema` (an empty one for a
+ * tool without arguments): the SDK calls it with the parsed arguments and its
+ * request context.
+ */
+export type McpToolCallback<T extends Record<string, unknown> = Record<string, unknown>> = (args: T, extra: unknown) => Promise<McpToolCallbackResult>;
+/**
+ * Adapt a handler (one from `wrapWithProof`, `wrapWithDelegation`,
+ * `withPolicyGate`, or one returning `proveOutcome`'s result) to the MCP
+ * SDK's `registerTool`, with no cast:
+ *
+ * ```ts
+ * server.registerTool('checkout', { inputSchema }, toMcpToolCallback(gated));
+ * ```
+ *
+ * The handler's result is returned as it is; the SDK validates it. Called
+ * with one argument, which is how the SDK calls a tool registered without an
+ * `inputSchema`, the handler gets empty arguments instead of the SDK's
+ * request context.
+ */
+export declare function toMcpToolCallback<T extends Record<string, unknown> = Record<string, unknown>>(handler: KyaOsToolHandler<T>): McpToolCallback<T>;

package/dist/middleware/mcp-tool-callback.js

@@ -0,0 +1,38 @@
+/**
+ * Register a middleware-wrapped handler with the MCP SDK's `registerTool`.
+ *
+ * A {@link KyaOsToolHandler} takes `(args, sessionId?, context?)`; the SDK
+ * calls a tool callback with `(args, extra)`, where `extra` is its own request
+ * context. Passed straight in, the handler needs a cast, and the SDK's context
+ * then arrives as the KYA-OS session id: no session matches it, and the
+ * result goes out unproven. The adapter passes the arguments alone, so the
+ * handler resolves its session as any unthreaded call does. The SDK's
+ * transport session id is a different thing from a KYA-OS session id, so
+ * nothing from `extra` is forwarded.
+ *
+ * Typed structurally, so this package keeps no type dependency on the SDK.
+ */
+/**
+ * Adapt a handler (one from `wrapWithProof`, `wrapWithDelegation`,
+ * `withPolicyGate`, or one returning `proveOutcome`'s result) to the MCP
+ * SDK's `registerTool`, with no cast:
+ *
+ * ```ts
+ * server.registerTool('checkout', { inputSchema }, toMcpToolCallback(gated));
+ * ```
+ *
+ * The handler's result is returned as it is; the SDK validates it. Called
+ * with one argument, which is how the SDK calls a tool registered without an
+ * `inputSchema`, the handler gets empty arguments instead of the SDK's
+ * request context.
+ */
+export function toMcpToolCallback(handler) {
+    return async (...params) => {
+        const args = params.length > 1 ? params[0] : {};
+        // KyaOsToolHandler types content items' `type` as string; the SDK checks
+        // the result it receives, so the narrower declared type is not a claim
+        // this adapter has to prove.
+        return (await handler(args));
+    };
+}
+//# sourceMappingURL=mcp-tool-callback.js.map

package/dist/middleware/mcp-tool-callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-callback.js","sourceRoot":"","sources":["../../src/middleware/mcp-tool-callback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAuBH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA4B;IAE5B,OAAO,KAAK,EAAE,GAAG,MAAqB,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,EAAQ,CAAC;QACvD,yEAAyE;QACzE,uEAAuE;QACvE,6BAA6B;QAC7B,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAA0B,CAAC;IACxD,CAAC,CAAC;AACJ,CAAC"}

package/dist/middleware/serve-in-process.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Call KYA-OS-wrapped tool handlers in process, outside an MCP server, and
+ * get the results a client would receive.
+ *
+ * The middleware makes its response proofs where the KYA-OS transport sends a
+ * result, because the MCP SDK changes a result after the handler returns it.
+ * A script, a walkthrough or a test that calls a wrapped handler directly
+ * therefore needs a KYA-OS transport to send what the handler returns, as a
+ * server connected through `withKyaOs()` or `createKyaOsTransport()` has. This
+ * module is that transport, with nothing on the far end but the caller.
+ *
+ * ```ts
+ * const local = serveInProcess(kyaos);
+ * const checkout = local.tool('checkout', kyaos.wrapWithDelegation('checkout', consent, handler));
+ * const result = await checkout({ item: 'laptop' }); // proved, as a client receives it
+ * await local.close();
+ * ```
+ *
+ * @module serve-in-process
+ */
+import type { KyaOsMiddleware, KyaOsToolHandler, KyaOsToolResult } from "./with-kya-os.types.js";
+/** A KYA-OS transport for in-process calls, open until {@link InProcessServer.close}. */
+export interface InProcessServer {
+    /**
+     * `handler`, answering as an MCP server would: its result goes through the
+     * KYA-OS transport, and the caller gets what a client receives, proof
+     * included. `toolName` names the call, as a client's `tools/call` would.
+     */
+    tool<R = KyaOsToolResult>(toolName: string, handler: KyaOsToolHandler): (args: Record<string, unknown>, sessionId?: string) => Promise<R>;
+    /**
+     * Close the transport. It no longer counts as open for the middleware, and
+     * its tools refuse further calls.
+     */
+    close(): Promise<void>;
+}
+/**
+ * Open a KYA-OS transport for `kyaos` whose far end is the caller. While it
+ * is open it counts as an open KYA-OS transport for the middleware, so close
+ * it when done.
+ */
+export declare function serveInProcess(kyaos: KyaOsMiddleware): InProcessServer;

package/dist/middleware/serve-in-process.js

@@ -0,0 +1,86 @@
+/**
+ * Call KYA-OS-wrapped tool handlers in process, outside an MCP server, and
+ * get the results a client would receive.
+ *
+ * The middleware makes its response proofs where the KYA-OS transport sends a
+ * result, because the MCP SDK changes a result after the handler returns it.
+ * A script, a walkthrough or a test that calls a wrapped handler directly
+ * therefore needs a KYA-OS transport to send what the handler returns, as a
+ * server connected through `withKyaOs()` or `createKyaOsTransport()` has. This
+ * module is that transport, with nothing on the far end but the caller.
+ *
+ * ```ts
+ * const local = serveInProcess(kyaos);
+ * const checkout = local.tool('checkout', kyaos.wrapWithDelegation('checkout', consent, handler));
+ * const result = await checkout({ item: 'laptop' }); // proved, as a client receives it
+ * await local.close();
+ * ```
+ *
+ * @module serve-in-process
+ */
+import { createKyaOsTransport } from "./kya-os-transport.js";
+/**
+ * Open a KYA-OS transport for `kyaos` whose far end is the caller. While it
+ * is open it counts as an open KYA-OS transport for the middleware, so close
+ * it when done.
+ */
+export function serveInProcess(kyaos) {
+    // Each call's answer, by its request id, as it crossed the wire.
+    const answers = new Map();
+    let closed = false;
+    const inner = {
+        start: async () => { },
+        close: async () => { },
+        send: async (message) => {
+            // What crosses the wire is JSON.
+            if (typeof message.id === "number")
+                answers.set(message.id, JSON.parse(JSON.stringify(message)));
+        },
+    };
+    const transport = createKyaOsTransport(inner, kyaos);
+    const ready = transport.start();
+    let nextId = 0;
+    return {
+        tool(toolName, handler) {
+            return async (args, sessionId) => {
+                if (closed)
+                    throw new Error("[kya-os] serveInProcess: the transport is closed");
+                await ready;
+                const id = ++nextId;
+                inner.onmessage?.({
+                    jsonrpc: "2.0",
+                    id,
+                    method: "tools/call",
+                    params: { name: toolName, arguments: args },
+                });
+                let result;
+                try {
+                    result = await handler(args, sessionId);
+                }
+                catch (error) {
+                    // Answered as a server answers a failed request, so the transport
+                    // forgets the call; then the caller gets the handler's error.
+                    await transport.send({
+                        jsonrpc: "2.0",
+                        id,
+                        error: { code: -32603, message: error instanceof Error ? error.message : String(error) },
+                    });
+                    answers.delete(id);
+                    throw error;
+                }
+                await transport.send({ jsonrpc: "2.0", id, result });
+                const answer = answers.get(id);
+                answers.delete(id);
+                return answer.result;
+            };
+        },
+        async close() {
+            if (closed)
+                return;
+            closed = true;
+            await ready;
+            await transport.close();
+        },
+    };
+}
+//# sourceMappingURL=serve-in-process.js.map

package/dist/middleware/serve-in-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-in-process.js","sourceRoot":"","sources":["../../src/middleware/serve-in-process.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,oBAAoB,EAAuB,MAAM,uBAAuB,CAAC;AAqBlF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAMP;QACF,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACrB,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACrB,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACtB,iCAAiC;YACjC,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAmB,CAAC,CAAC;QACrH,CAAC;KACF,CAAC;IACF,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO;QACL,IAAI,CAAsB,QAAgB,EAAE,OAAyB;YACnE,OAAO,KAAK,EAAE,IAA6B,EAAE,SAAkB,EAAc,EAAE;gBAC7E,IAAI,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBAChF,MAAM,KAAK,CAAC;gBACZ,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;gBACpB,KAAK,CAAC,SAAS,EAAE,CAAC;oBAChB,OAAO,EAAE,KAAK;oBACd,EAAE;oBACF,MAAM,EAAE,YAAY;oBACpB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;iBAC5C,CAAC,CAAC;gBACH,IAAI,MAAuB,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,kEAAkE;oBAClE,8DAA8D;oBAC9D,MAAM,SAAS,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,EAAE;wBACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;qBACzF,CAAC,CAAC;oBACH,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnB,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAkB,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,OAAO,MAAM,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,KAAK,CAAC;YACZ,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/middleware/with-kya-os-server.d.ts

@@ -42,16 +42,27 @@ export interface WithKyaOsOptions {
      * once. Passed through to the middleware (see `KyaOsConfig.requireAtomicNonce`).
      */
     requireAtomicNonce?: boolean;
+    /**
+     * How long a wrapper's result may wait to be sent before its proof is
+     * given up (default five minutes, at most 2147483647). Passed through to
+     * the middleware (see `KyaOsConfig.pendingProofTtlMs`).
+     */
+    pendingProofTtlMs?: number;
     /**
      * Response-proof profile for every proof this server mints (SPEC §7.3).
      * Defaults to the body profile; the envelope profile also binds
-     * `structuredContent` and `isError`. Passed through to the middleware (see
-     * `KyaOsConfig.responseProofProfile`).
+     * `structuredContent`, `isError` and `resultType`. Under either profile the
+     * proofs are made by the transport this function wraps. Passed through to
+     * the middleware (see `KyaOsConfig.responseProofProfile`).
      */
     responseProofProfile?: ResponseProofProfile;
     /** Auto-create sessions for non-KYA-OS clients (default: true) */
     autoSession?: boolean;
-    /** Attach proofs to all tool responses (default: true) */
+    /**
+     * Attach proofs to all tool responses (default: true). With `false` no
+     * transport is wrapped, so nothing is proven, and the wrappers refuse to
+     * run; leave a tool unproven with `excludeTools` instead.
+     */
     proofAllTools?: boolean;
     /**
      * Also emit the proof under the legacy bare `_meta.proof` key (default: true),

package/dist/middleware/with-kya-os-server.js

@@ -80,6 +80,9 @@ export async function withKyaOs(server, options) {
         ...(options.requireAtomicNonce !== undefined
             ? { requireAtomicNonce: options.requireAtomicNonce }
             : {}),
+        ...(options.pendingProofTtlMs !== undefined
+            ? { pendingProofTtlMs: options.pendingProofTtlMs }
+            : {}),
         ...(options.responseProofProfile !== undefined
             ? { responseProofProfile: options.responseProofProfile }
             : {}),
@@ -125,7 +128,7 @@ export async function withKyaOs(server, options) {
     // Tool registration order does not matter — proofs are injected at the
     // transport boundary, after McpServer has already dispatched the call.
     if (options.proofAllTools !== false) {
-        const exclude = ["_kyaos", "_kyaos_handshake", ...(options.excludeTools ?? [])];
+        const exclude = options.excludeTools ?? [];
         const originalConnect = server.connect.bind(server);
         server.connect = (transport) => originalConnect(createKyaOsTransport(transport, kyaos, exclude));
     }

package/dist/middleware/with-kya-os-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"with-kya-os-server.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EACL,cAAc,EACd,qBAAqB,GAItB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkExB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,GAAG;QACH,GAAG,EAAE,GAAG,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;QACpC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAeD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAqB,EACrB,OAAyB;IAEzB,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,gBAAgB,GACpB,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC;IACnE,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CACT,iFAAiF;YAC/E,6EAA6E;YAC7E,mEAAmE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,qBAAqB,CACjC;QACE,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;KACR,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QACrD,4DAA4D;QAC5D,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,WAAW,EACT,iFAAiF;YACnF,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE;YAC7D,WAAW,EAAE;gBACX,MAAM,EAAE,CAAC;qBACN,IAAI,CAAC,cAAc,CAAC;qBACpB,QAAQ,CAAC,+BAA+B,CAAC;gBAC5C,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,2CAA2C,CAAC;gBACxD,QAAQ,EAAE,CAAC;qBACR,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,+BAA+B,CAAC;gBAC5C,SAAS,EAAE,CAAC;qBACT,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,gCAAgC,CAAC;gBAC7C,QAAQ,EAAE,CAAC;qBACR,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,wCAAwC,CAAC;aACtD;SACF,EACD,KAAK,EAAE,IAAa,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CACpC,IAA+B,CAChC,CAAC;YACF,OAAO;gBACL,GAAG,MAAM;gBACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;aACtE,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,EAAE;IACF,yEAAyE;IACzE,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,CAAC,OAAO,GAAG,CAAC,SAAoB,EAAE,EAAE,CACxC,eAAe,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"with-kya-os-server.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EACL,cAAc,EACd,qBAAqB,GAItB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA6ExB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,GAAG;QACH,GAAG,EAAE,GAAG,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;QACpC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAeD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAqB,EACrB,OAAyB;IAEzB,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,gBAAgB,GACpB,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC;IACnE,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CACT,iFAAiF;YAC/E,6EAA6E;YAC7E,mEAAmE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,qBAAqB,CACjC;QACE,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;KACR,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QACrD,4DAA4D;QAC5D,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,WAAW,EACT,iFAAiF;YACnF,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE;YAC7D,WAAW,EAAE;gBACX,MAAM,EAAE,CAAC;qBACN,IAAI,CAAC,cAAc,CAAC;qBACpB,QAAQ,CAAC,+BAA+B,CAAC;gBAC5C,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,2CAA2C,CAAC;gBACxD,QAAQ,EAAE,CAAC;qBACR,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,+BAA+B,CAAC;gBAC5C,SAAS,EAAE,CAAC;qBACT,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,gCAAgC,CAAC;gBAC7C,QAAQ,EAAE,CAAC;qBACR,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,wCAAwC,CAAC;aACtD;SACF,EACD,KAAK,EAAE,IAAa,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CACpC,IAA+B,CAChC,CAAC;YACF,OAAO;gBACL,GAAG,MAAM;gBACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;aACtE,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,EAAE;IACF,yEAAyE;IACzE,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,CAAC,OAAO,GAAG,CAAC,SAAoB,EAAE,EAAE,CACxC,eAAe,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/middleware/with-kya-os.config-types.d.ts

@@ -147,6 +147,20 @@ export interface KyaOsConfig {
      * holder binding. Default false, with a startup warning for such a cache.
      */
     requireAtomicNonce?: boolean;
+    /**
+     * How long, in milliseconds, a wrapper's result may wait to be sent before
+     * its proof is given up (default 300000, five minutes). Proofs are made
+     * where the KYA-OS transport sends a result, once: a result delivered later
+     * than this, or a second time (an MCP task result fetched again), goes out
+     * without a proof and with `proofError`, and the audit trail records
+     * `PROOF_EXPIRED`. A result never sent is closed with `PROOF_NOT_SENT` when
+     * the window ends. Raise it for task results fetched later; memory stays
+     * bounded by the count and size caps on waiting proofs. At most
+     * 2147483647 (2^31 - 1, about 24.8 days), the longest timer a JavaScript
+     * runtime keeps; a larger value, zero, or a value that is not a finite
+     * number is refused.
+     */
+    pendingProofTtlMs?: number;
     /**
      * Durable store for approved authorization grants, enabling the no-paste
      * retry: an agent that already obtained a grant can call again — even on a
@@ -198,6 +212,16 @@ export interface KyaOsConfig {
      * outright rather than mis-verifying them. The default stays body-only so
      * existing verifiers keep working; opt in once your client population
      * verifies the envelope profile.
+     *
+     * Proofs under either profile are made by the KYA-OS transport when it
+     * sends a result, after the MCP SDK has finished it: the SDK changes a
+     * result after the handler returns (`resultType` on the 2026-07-28
+     * revision, a filled-in or appended `content`), and the proof covers what
+     * the client receives. `withKyaOs` wraps the transport it is connected
+     * through; wrap one yourself with `createKyaOsTransport`. Once a KYA-OS
+     * transport has been created for the middleware, every wrapper result must
+     * go out through one: while none is open, every wrapper and `proveOutcome`
+     * throws on entry.
      */
     responseProofProfile?: ResponseProofProfile;
     /** Delegation verification overrides */

package/dist/middleware/with-kya-os.d.ts

@@ -29,6 +29,10 @@ export * from "./with-kya-os.types.js";
  * - You need custom request handler patterns
  * - You want per-tool control over proof/delegation wrapping
  *
+ * Connect such a server through `createKyaOsTransport`: proofs are made where
+ * that transport sends a result, and the wrappers refuse to run while no
+ * KYA-OS transport is open.
+ *
  * @param config - Agent identity and session configuration
  * @param cryptoProvider - Platform-specific crypto implementation
  * @returns Middleware components for session management and proof generation