@kya-os/mcp 1.18.0 → 1.21.0

package/dist/delegation/verification-method-key.d.ts

@@ -1,4 +1,6 @@
 import type { VerificationMethod } from './vc-verifier.types.js';
+/** The verification-method fields that can carry an Ed25519 public key. */
+type VerificationMethodKeyMaterial = Pick<VerificationMethod, 'publicKeyJwk' | 'publicKeyMultibase' | 'publicKeyBase58'>;
 /**
  * The verification method's public key as an Ed25519 OKP JWK: an existing
  * `publicKeyJwk` is returned untouched (byte-for-byte — zero behavior change
@@ -7,8 +9,9 @@ import type { VerificationMethod } from './vc-verifier.types.js';
  * prefix) or legacy `publicKeyBase58`. `undefined` when no usable Ed25519 key
  * is present (fail-closed).
  */
-export declare function verificationMethodJwk(method: VerificationMethod): {
+export declare function verificationMethodJwk(method: VerificationMethodKeyMaterial): {
     kty: string;
     crv: string;
     x: string;
 } | undefined;
+export {};

package/dist/delegation/verification-method-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-method-key.js","sourceRoot":"","sources":["../../src/delegation/verification-method-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAG/B,sCAAsC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA0B;IAE1B,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,YAAuD,CAAC;IACxE,CAAC;IAED,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,iHAAiH;AACjH,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC/D,wEAAwE;YACxE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC3F,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,yBAAyB,GAAG,yBAAyB,CAAC,MAAM;gBAC/E,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBAC3C,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBACzC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC;gBACjD,CAAC,CAAC,OAAO,CAAC;YACd,OAAO,QAAQ,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;YAC/E,OAAO,OAAO,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,iCAAiC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"verification-method-key.js","sourceRoot":"","sources":["../../src/delegation/verification-method-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAG/B,sCAAsC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAQhC;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAqC;IAErC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,YAAuD,CAAC;IACxE,CAAC;IAED,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,iHAAiH;AACjH,SAAS,aAAa,CAAC,MAAqC;IAC1D,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC/D,wEAAwE;YACxE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC3F,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,yBAAyB,GAAG,yBAAyB,CAAC,MAAM;gBAC/E,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBAC3C,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBACzC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC;gBACjD,CAAC,CAAC,OAAO,CAAC;YACd,OAAO,QAAQ,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;YAC/E,OAAO,OAAO,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,iCAAiC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -24,6 +24,7 @@ export { DelegationGraphManager, createDelegationGraph, type DelegationNode, typ
 export { StatusList2021Manager, createStatusListManager, type StatusListStorageProvider, type StatusListIdentityProvider, } from './delegation/statuslist-manager.js';
 export { CascadingRevocationManager, createCascadingRevocationManager, type RevocationEvent, type RevocationHook, type CascadingRevocationOptions, } from './delegation/cascading-revocation.js';
 export { BitstringManager, isIndexSet, type CompressionFunction, type DecompressionFunction, } from './delegation/bitstring.js';
+export { statusListGzipCodec } from './utils/statuslist-gzip.js';
 export { verifyDelegationAudience, } from './delegation/audience-validator.js';
 export { buildDelegationProofJWT, buildChainString, type DelegationProofOptions, type Ed25519PrivateJWK, } from './delegation/outbound-proof.js';
 export { buildOutboundDelegationHeaders, OUTBOUND_HEADER_NAMES, type OutboundDelegationContext, type OutboundDelegationHeaders, } from './delegation/outbound-headers.js';
@@ -51,7 +52,7 @@ export { AuditLogProvider, MemoryAuditLogProvider, NoopAuditLogProvider, buildAu
 export * from './audit/index.js';
 export { GrantStore, MemoryGrantStore, type Grant, type MemoryGrantStoreOptions, } from './providers/grant-store.js';
 export { PendingFlowStore, MemoryPendingFlowStore, type PendingFlow, type MemoryPendingFlowStoreOptions, } from './authz/oidc/pending-flow-store.js';
-export { createKyaOsMiddleware, type KyaOsConfig, type KyaOsDelegationConfig, type KyaOsIdentityConfig, type KyaOsMiddleware, type KyaOsToolDefinition, type KyaOsToolHandler, type KyaOsServer, withKyaOs, generateIdentity, type WithKyaOsOptions, } from './middleware/index.js';
+export { createKyaOsMiddleware, type KyaOsConfig, type KyaOsDelegationConfig, type KyaOsIdentityConfig, type KyaOsMiddleware, type KyaOsToolDefinition, type KyaOsToolHandler, type KyaOsToolResult, type KyaOsServer, type KyaOsAuthorizationOutcome, type KyaOsOutcomeProofRequest, type KyaOsOutcomeProver, type KyaOsChallengeResult, type KyaOsChallengeFormatter, withKyaOs, generateIdentity, type WithKyaOsOptions, toMcpToolCallback, type McpToolCallback, type McpToolCallbackResult, createKyaOsTransport, serveInProcess, type InProcessServer, } from './middleware/index.js';
 export * from './policy/index.js';
 export { matchScope, scopeSatisfies, type ScopeMatcher, type ScopeSatisfaction, } from './delegation/scope-matcher.js';
 export { logger, createDefaultConsoleLogger, type Logger, type Level, } from './logging/index.js';

package/dist/index.js

@@ -26,6 +26,7 @@ export { DelegationGraphManager, createDelegationGraph, } from './delegation/del
 export { StatusList2021Manager, createStatusListManager, } from './delegation/statuslist-manager.js';
 export { CascadingRevocationManager, createCascadingRevocationManager, } from './delegation/cascading-revocation.js';
 export { BitstringManager, isIndexSet, } from './delegation/bitstring.js';
+export { statusListGzipCodec } from './utils/statuslist-gzip.js';
 export { verifyDelegationAudience, } from './delegation/audience-validator.js';
 export { buildDelegationProofJWT, buildChainString, } from './delegation/outbound-proof.js';
 export { buildOutboundDelegationHeaders, OUTBOUND_HEADER_NAMES, } from './delegation/outbound-headers.js';
@@ -63,7 +64,7 @@ export { GrantStore, MemoryGrantStore, } from './providers/grant-store.js';
 // Pending OAuth/OIDC PKCE-flow store (durable resume across instances/restarts).
 export { PendingFlowStore, MemoryPendingFlowStore, } from './authz/oidc/pending-flow-store.js';
 // Middleware
-export { createKyaOsMiddleware, withKyaOs, generateIdentity, } from './middleware/index.js';
+export { createKyaOsMiddleware, withKyaOs, generateIdentity, toMcpToolCallback, createKyaOsTransport, serveInProcess, } from './middleware/index.js';
 // Policy-as-Code subsystem + step-up gate
 export * from './policy/index.js';
 export { matchScope, scopeSatisfies, } from './delegation/scope-matcher.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,iBAAiB;AACjB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,aAAa,CAAC;AAErB,2EAA2E;AAC3E,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AA+B3B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,6BAA6B,EAC7B,iCAAiC,EACjC,4BAA4B,EAC5B,qBAAqB,EACrB,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,+BAA+B,GAEhC,MAAM,qBAAqB,CAAC;AAE7B,oBAAoB;AACpB,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GAIvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,GASzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GAGtB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAGxB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GAIjC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,gBAAgB,EAChB,UAAU,GAGX,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GAGjB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,GAGtB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,UAAU,GAGX,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,GAKrB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAE5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAE5F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,cAAc,GACf,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,QAAQ,EACR,WAAW,EACX,WAAW,EACX,mBAAmB,GAEpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,gBAAgB,GAGjB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,wBAAwB,GAIzB,MAAM,uCAAuC,CAAC;AAE/C,QAAQ;AACR,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,cAAc;AACd,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,sBAAsB,GAQvB,MAAM,iBAAiB,CAAC;AAEzB,eAAe;AACf,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,gCAAgC,EAChC,qBAAqB,GAKtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,GAIvB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,GAE7B,MAAM,mBAAmB,CAAC;AAE3B,iBAAiB;AACjB,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,YAAY,EACZ,kBAAkB,GAInB,MAAM,oBAAoB,CAAC;AAE5B,YAAY;AACZ,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEvF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,8CAA8C;AAC9C,cAAc,kBAAkB,CAAC;AAEjC,8EAA8E;AAC9E,8EAA8E;AAC9E,OAAO,EACL,UAAU,EACV,gBAAgB,GAGjB,MAAM,4BAA4B,CAAC;AAEpC,iFAAiF;AACjF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GAGvB,MAAM,oCAAoC,CAAC;AAE5C,aAAa;AACb,OAAO,EACL,qBAAqB,EAQrB,SAAS,EACT,gBAAgB,GAEjB,MAAM,uBAAuB,CAAC;AAE/B,0CAA0C;AAC1C,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,UAAU,EACV,cAAc,GAGf,MAAM,+BAA+B,CAAC;AAEvC,UAAU;AACV,OAAO,EACL,MAAM,EACN,0BAA0B,GAG3B,MAAM,oBAAoB,CAAC;AAE5B,oBAAoB;AACpB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,yFAAyF;AACzF,OAAO,EACL,mBAAmB,EACnB,gCAAgC,EAChC,uCAAuC,EACvC,6BAA6B,EAC7B,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,8BAA8B,EAC9B,uBAAuB,GAUxB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,iBAAiB;AACjB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,aAAa,CAAC;AAErB,2EAA2E;AAC3E,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AA+B3B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,6BAA6B,EAC7B,iCAAiC,EACjC,4BAA4B,EAC5B,qBAAqB,EACrB,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,+BAA+B,GAEhC,MAAM,qBAAqB,CAAC;AAE7B,oBAAoB;AACpB,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GAIvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,GASzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GAGtB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAGxB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GAIjC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,gBAAgB,EAChB,UAAU,GAGX,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EACL,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GAGjB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,GAGtB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,UAAU,GAGX,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,GAKrB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAE5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAE5F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,cAAc,GACf,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,QAAQ,EACR,WAAW,EACX,WAAW,EACX,mBAAmB,GAEpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,gBAAgB,GAGjB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,wBAAwB,GAIzB,MAAM,uCAAuC,CAAC;AAE/C,QAAQ;AACR,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,cAAc;AACd,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,sBAAsB,GAQvB,MAAM,iBAAiB,CAAC;AAEzB,eAAe;AACf,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,gCAAgC,EAChC,qBAAqB,GAKtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,GAIvB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,GAE7B,MAAM,mBAAmB,CAAC;AAE3B,iBAAiB;AACjB,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,YAAY,EACZ,kBAAkB,GAInB,MAAM,oBAAoB,CAAC;AAE5B,YAAY;AACZ,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEvF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,8CAA8C;AAC9C,cAAc,kBAAkB,CAAC;AAEjC,8EAA8E;AAC9E,8EAA8E;AAC9E,OAAO,EACL,UAAU,EACV,gBAAgB,GAGjB,MAAM,4BAA4B,CAAC;AAEpC,iFAAiF;AACjF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GAGvB,MAAM,oCAAoC,CAAC;AAE5C,aAAa;AACb,OAAO,EACL,qBAAqB,EAcrB,SAAS,EACT,gBAAgB,EAEhB,iBAAiB,EAGjB,oBAAoB,EACpB,cAAc,GAEf,MAAM,uBAAuB,CAAC;AAE/B,0CAA0C;AAC1C,cAAc,mBAAmB,CAAC;AAClC,OAAO,EACL,UAAU,EACV,cAAc,GAGf,MAAM,+BAA+B,CAAC;AAEvC,UAAU;AACV,OAAO,EACL,MAAM,EACN,0BAA0B,GAG3B,MAAM,oBAAoB,CAAC;AAE5B,oBAAoB;AACpB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,yFAAyF;AACzF,OAAO,EACL,mBAAmB,EACnB,gCAAgC,EAChC,uCAAuC,EACvC,6BAA6B,EAC7B,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,8BAA8B,EAC9B,uBAAuB,GAUxB,MAAM,sBAAsB,CAAC"}

package/dist/middleware/index.d.ts

@@ -6,8 +6,10 @@
  *
  * For the low-level `Server` API or custom patterns, use `createKyaOsMiddleware` directly.
  */
-export { createKyaOsMiddleware, type KyaOsConfig, type KyaOsDelegationConfig, type KyaOsIdentityConfig, type KyaOsMiddleware, type KyaOsToolDefinition, type KyaOsToolHandler, type KyaOsServer, } from './with-kya-os.js';
+export { createKyaOsMiddleware, type KyaOsConfig, type KyaOsDelegationConfig, type KyaOsIdentityConfig, type KyaOsMiddleware, type KyaOsToolDefinition, type KyaOsToolHandler, type KyaOsToolResult, type KyaOsServer, type KyaOsAuthorizationOutcome, type KyaOsOutcomeProofRequest, type KyaOsOutcomeProver, type KyaOsChallengeResult, type KyaOsChallengeFormatter, } from './with-kya-os.js';
 export { withKyaOs, generateIdentity, type WithKyaOsOptions, } from './with-kya-os-server.js';
+export { toMcpToolCallback, type McpToolCallback, type McpToolCallbackResult, } from './mcp-tool-callback.js';
 export { createKyaOsTransport, type Transport, type JSONRPCMessage, } from './kya-os-transport.js';
+export { serveInProcess, type InProcessServer } from './serve-in-process.js';
 export { card, CardBuilder, type CardBuilderInit, type AccountableToOptions, type VcInput, } from '../card/builder.js';
 export { withKyaOsCard, requireProof, readCardProof, type KyaOsCardMount, type ServerJsonLike, type DidDocumentLike, type ProofGuard, type ProofGateResult, type ProofGateError, type ProofGateCode, type RequireProofOptions, type MinProofLevel, } from '../card/middleware.js';

package/dist/middleware/index.js

@@ -8,7 +8,9 @@
  */
 export { createKyaOsMiddleware, } from './with-kya-os.js';
 export { withKyaOs, generateIdentity, } from './with-kya-os-server.js';
+export { toMcpToolCallback, } from './mcp-tool-callback.js';
 export { createKyaOsTransport, } from './kya-os-transport.js';
+export { serveInProcess } from './serve-in-process.js';
 // Entity Card DevX surface — the 10-minute adoption path. The fluent `card()` builder and the
 // `withKyaOsCard` / `requireProof` wrappers hide the RFC 9421/9449/8785 machinery behind
 // ergonomics (see `src/card/builder.ts` + `src/card/middleware.ts`).

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,qBAAqB,GAQtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAE/B,8FAA8F;AAC9F,yFAAyF;AACzF,qEAAqE;AACrE,OAAO,EACL,IAAI,EACJ,WAAW,GAIZ,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,GAUd,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,qBAAqB,GActB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,iBAAiB,GAGlB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAwB,MAAM,uBAAuB,CAAC;AAE7E,8FAA8F;AAC9F,yFAAyF;AACzF,qEAAqE;AACrE,OAAO,EACL,IAAI,EACJ,WAAW,GAIZ,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,GAUd,MAAM,uBAAuB,CAAC"}

package/dist/middleware/kya-os-transport.d.ts

@@ -13,30 +13,61 @@
  *   1. Incoming `tools/call` requests are captured (by id) to record tool
  *      name and arguments for proof generation.
  *   2. Outgoing responses for those ids get a proof injected into `_meta`,
- *      unless the middleware's own wrappers already proved or audited the
- *      result, which they mark with a private per-middleware stamp.
- *   3. All other message types pass through unmodified, except that the
- *      stamp is removed from every result before it is sent.
+ *      unless the middleware's own wrappers produced the result, which they
+ *      mark with a private per-middleware stamp.
+ *   3. The wrappers leave their proofs here, and every proof is made in
+ *      `send()`, over the result as the MCP SDK finished it: the SDK changes
+ *      a result after the handler returns (`resultType` on the 2026-07-28
+ *      revision, a filled-in or appended `content`), and the proof covers
+ *      what it covers of the result the client receives.
+ *   4. All other message types pass through unmodified, except that the
+ *      middleware's private members are removed from every result before it
+ *      is sent.
  *
  * @module kya-os-transport
  */
 import type { KyaOsMiddleware } from "./with-kya-os.js";
-/** Minimal Transport interface — matches @modelcontextprotocol/sdk Transport */
+/**
+ * Minimal Transport interface — matches @modelcontextprotocol/sdk Transport.
+ * The callbacks are declared as methods, so an SDK transport, whose callbacks
+ * take the SDK's own message type, is accepted as it is (SDK 1 and SDK 2).
+ * The SDK's send options and message context (`extra`: the session id,
+ * `authInfo`, `requestInfo`) are opaque here and passed through unchanged.
+ */
 export interface Transport {
     start(): Promise<void>;
-    send(message: JSONRPCMessage): Promise<void>;
+    send(message: JSONRPCMessage, options?: unknown): Promise<void>;
     close(): Promise<void>;
-    onmessage?: (message: JSONRPCMessage) => void;
-    onclose?: () => void;
-    onerror?: (error: Error) => void;
+    onmessage?(message: JSONRPCMessage, extra?: unknown): void;
+    onclose?(): void;
+    onerror?(error: Error): void;
+    sessionId?: string;
+    setProtocolVersion?(version: string): void;
+    setSupportedProtocolVersions?(versions: string[]): void;
+    /** SDK 2: installs per-tool OAuth `scopeChallenge` enforcement on an HTTP transport. */
+    setScopeChallengeResolver?(resolver: unknown): void;
+    readonly hasPerRequestStream?: boolean;
 }
 export type JSONRPCMessage = Record<string, unknown>;
 /**
  * Creates a transport wrapper that injects KYA-OS proofs into `tools/call`
- * responses.
+ * responses, and makes the proofs the middleware's wrappers and
+ * `proveOutcome` leave to it, over each result as it is sent. A server on the
+ * low-level `Server` API connects through it:
+ * `server.connect(createKyaOsTransport(transport, kyaos))`.
+ *
+ * It proves and audits the result of every tool it is not told to exclude,
+ * including tools registered without a wrapper, as `withKyaOs` does. A
+ * low-level server that used only the wrappers on an unwrapped transport,
+ * which 1.19.0 allowed, sent its unwrapped tools' results unproven; through
+ * this transport they carry a proof too.
  *
  * @param inner   - The real transport (Stdio, HTTP, etc.)
  * @param kyaos    - Configured KyaOsMiddleware instance
- * @param exclude - Tool names to skip proof generation for
+ * @param exclude - More tool names whose results are not proved by the
+ *   transport itself, in addition to the protocol tools `_kyaos` and
+ *   `_kyaos_handshake`, which are always excluded (as `excludeTools` adds
+ *   to them in `withKyaOs`). A wrapper's own proof is made whatever this
+ *   says.
  */
-export declare function createKyaOsTransport(inner: Transport, kyaos: KyaOsMiddleware, exclude?: string[]): Transport;
+export declare function createKyaOsTransport(inner: Transport, kyaos: KyaOsMiddleware, exclude?: readonly string[]): Transport;

package/dist/middleware/kya-os-transport.js

@@ -13,33 +13,72 @@
  *   1. Incoming `tools/call` requests are captured (by id) to record tool
  *      name and arguments for proof generation.
  *   2. Outgoing responses for those ids get a proof injected into `_meta`,
- *      unless the middleware's own wrappers already proved or audited the
- *      result, which they mark with a private per-middleware stamp.
- *   3. All other message types pass through unmodified, except that the
- *      stamp is removed from every result before it is sent.
+ *      unless the middleware's own wrappers produced the result, which they
+ *      mark with a private per-middleware stamp.
+ *   3. The wrappers leave their proofs here, and every proof is made in
+ *      `send()`, over the result as the MCP SDK finished it: the SDK changes
+ *      a result after the handler returns (`resultType` on the 2026-07-28
+ *      revision, a filled-in or appended `content`), and the proof covers
+ *      what it covers of the result the client receives.
+ *   4. All other message types pass through unmodified, except that the
+ *      middleware's private members are removed from every result before it
+ *      is sent.
  *
  * @module kya-os-transport
  */
-import { attachOuterProofLayer, withoutLifecycleStamp, withoutOutcomeMeta, } from "./with-kya-os.session.js";
+import { attachOuterProofLayer, withoutOutcomeMeta, withoutPrivateMeta, withoutPrivateMembers, } from "./with-kya-os.session.js";
 import { logger } from "../logging/index.js";
 /**
  * Creates a transport wrapper that injects KYA-OS proofs into `tools/call`
- * responses.
+ * responses, and makes the proofs the middleware's wrappers and
+ * `proveOutcome` leave to it, over each result as it is sent. A server on the
+ * low-level `Server` API connects through it:
+ * `server.connect(createKyaOsTransport(transport, kyaos))`.
+ *
+ * It proves and audits the result of every tool it is not told to exclude,
+ * including tools registered without a wrapper, as `withKyaOs` does. A
+ * low-level server that used only the wrappers on an unwrapped transport,
+ * which 1.19.0 allowed, sent its unwrapped tools' results unproven; through
+ * this transport they carry a proof too.
  *
  * @param inner   - The real transport (Stdio, HTTP, etc.)
  * @param kyaos    - Configured KyaOsMiddleware instance
- * @param exclude - Tool names to skip proof generation for
+ * @param exclude - More tool names whose results are not proved by the
+ *   transport itself, in addition to the protocol tools `_kyaos` and
+ *   `_kyaos_handshake`, which are always excluded (as `excludeTools` adds
+ *   to them in `withKyaOs`). A wrapper's own proof is made whatever this
+ *   says.
  */
-export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_handshake"]) {
+export function createKyaOsTransport(inner, kyaos, exclude = []) {
     // Request id → { toolName, args } for pending tool calls
     const pending = new Map();
-    // From here on the middleware's wrappers stamp what they return, and this
-    // tells a stamped result from one that only looks proven. Undefined for a
-    // custom middleware, whose results are all proved here.
-    const isOwnResult = attachOuterProofLayer(kyaos.wrapWithProof);
+    const excluded = new Set(["_kyaos", "_kyaos_handshake", ...exclude]);
+    // From here on the middleware's wrappers stamp what they return, and the
+    // layer tells a stamped result from one that only looks proven, and makes
+    // the proofs they leave to it. Undefined for a custom middleware, whose
+    // results are all proved here.
+    const layer = attachOuterProofLayer(kyaos.wrapWithProof);
+    // While started and not closed, this transport counts as open for the
+    // middleware; its wrappers run only then.
+    let release;
+    const releaseOpen = () => {
+        release?.();
+        release = undefined;
+    };
+    // The close handler the server installed through the wrapper. It runs the
+    // handler the caller set on the inner transport before connecting, which
+    // the server read through the getter below and chained.
+    let closeHandler;
+    const closed = () => {
+        releaseOpen();
+        closeHandler?.();
+    };
     const wrapper = {
         start: () => inner.start(),
-        close: () => inner.close(),
+        close: async () => {
+            releaseOpen();
+            await inner.close();
+        },
         // McpServer writes into wrapper.onmessage — forward to inner so the
         // real transport can drive it.
         set onmessage(handler) {
@@ -48,11 +87,17 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
         get onmessage() {
             return inner.onmessage;
         },
+        // The inner transport may close on its own (the client went away), so
+        // its close also ends this transport's count. Before a handler is set
+        // here, the getter reports the inner transport's own: the SDK reads it
+        // when it connects and chains it (a session map's cleanup, say), so it
+        // keeps running.
         set onclose(handler) {
-            inner.onclose = handler;
+            closeHandler = handler;
+            inner.onclose = closed;
         },
         get onclose() {
-            return inner.onclose;
+            return closeHandler ?? (inner.onclose === closed ? undefined : inner.onclose);
         },
         set onerror(handler) {
             inner.onerror = handler;
@@ -60,9 +105,43 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
         get onerror() {
             return inner.onerror;
         },
+        // What the SDK reads off, or hands to, the transport it connects passes
+        // through to the inner transport: its session id (which the SDK puts on
+        // each request's context), the negotiated protocol versions, the scope
+        // challenge resolver, and whether it streams per request. These are every
+        // transport member SDK 1 and SDK 2 servers read or feature-detect.
+        get sessionId() {
+            return inner.sessionId;
+        },
+        set sessionId(sessionId) {
+            inner.sessionId = sessionId;
+        },
+        get setProtocolVersion() {
+            return inner.setProtocolVersion === undefined
+                ? undefined
+                : (version) => inner.setProtocolVersion(version);
+        },
+        get setSupportedProtocolVersions() {
+            return inner.setSupportedProtocolVersions === undefined
+                ? undefined
+                : (versions) => inner.setSupportedProtocolVersions(versions);
+        },
+        // SDK 2's McpServer installs per-tool OAuth scope enforcement only when
+        // the transport has this member (an `in` check), so a wrapper without it
+        // silently switched the enforcement off.
+        get setScopeChallengeResolver() {
+            return inner.setScopeChallengeResolver === undefined
+                ? undefined
+                : (resolver) => inner.setScopeChallengeResolver(resolver);
+        },
+        get hasPerRequestStream() {
+            return inner.hasPerRequestStream;
+        },
         // McpServer calls send() for every outgoing message.
         // Intercept tools/call responses here to inject proofs.
-        async send(message) {
+        // The SDK's send options (relatedRequestId, resumption tokens) are
+        // passed through unchanged.
+        async send(message, options) {
             // Only a response (result or error, no method) can answer a pending call:
             // a server-initiated request such as elicitation/create numbers its ids
             // in the server's own space, so its id can equal a pending client id.
@@ -74,11 +153,12 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
                 const rawResult = message.result;
                 // A result the middleware's wrappers already proved or audited (a
                 // delegated call's scope-bearing proof, a signed needs_authorization
-                // outcome, an audited error) passes through: proving it again would
-                // replace its proof and record its lifecycle twice. Only the stamp
-                // shows that; proof, proofError and audit members can come from any
-                // handler, including one relaying an upstream server's result.
-                if (rawResult && isOwnResult?.(rawResult) !== true) {
+                // outcome, an outcome application code proved with proveOutcome, an
+                // audited error) passes through: proving it again would replace its
+                // proof and record its lifecycle twice. Only the stamp shows that;
+                // proof, proofError and audit members can come from any handler,
+                // including one relaying an upstream server's result.
+                if (rawResult && layer?.owns(rawResult) !== true) {
                     // Those members are untrusted here, so they are removed and the
                     // result is proved and audited as any other. Other members stay.
                     const received = withoutOutcomeMeta(rawResult);
@@ -116,13 +196,33 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
                     }
                 }
             }
-            // The stamp never leaves the process, whichever path the message took.
+            // Whichever path the message took: a proof a wrapper left for the wire
+            // is made now, over the result as it is sent, and only by a proof left
+            // for the tool this answers. The private members never leave the
+            // process, from a result or from any other part of a message: a
+            // notification or request's params (a tool logging a wrapped result,
+            // say) or an error's data.
             if (typeof message.result === "object" && message.result !== null) {
-                const sent = withoutLifecycleStamp(message.result);
+                const result = message.result;
+                const sent = layer
+                    ? await layer.send(result, call === undefined ? undefined : { toolName: call.toolName })
+                    : withoutPrivateMeta(result);
                 if (sent !== message.result)
                     message = { ...message, result: sent };
             }
-            return inner.send(message);
+            const scrub = (value) => (layer ? layer.scrub(value) : withoutPrivateMembers(value));
+            if (message.params !== undefined) {
+                const params = scrub(message.params);
+                if (params !== message.params)
+                    message = { ...message, params };
+            }
+            const error = message.error;
+            if (error !== null && typeof error === "object" && error.data !== undefined) {
+                const data = scrub(error.data);
+                if (data !== error.data)
+                    message = { ...message, error: { ...error, data } };
+            }
+            return options === undefined ? inner.send(message) : inner.send(message, options);
         },
     };
     // Intercept incoming messages from the real transport to capture
@@ -131,18 +231,35 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
     // via server.connect() — so we proxy through the getter/setter above and
     // add our interception in a one-time initializer on start().
     const originalStart = inner.start.bind(inner);
+    let interceptor;
     wrapper.start = async () => {
         await originalStart();
+        // Counted once however often start() is called, until the transport closes.
+        release ??= layer?.open();
+        // A close handler set on the inner transport and never read through the
+        // wrapper is adopted, so it still runs, after the one installed here.
+        const foreign = inner.onclose;
+        if (foreign !== undefined && foreign !== closed) {
+            const installed = closeHandler;
+            closeHandler = installed === undefined ? foreign : () => {
+                foreign();
+                installed();
+            };
+        }
+        inner.onclose = closed;
         // At this point McpServer has called server.connect(wrapper) which set
         // wrapper.onmessage = <McpServer handler>. That assignment forwarded to
-        // inner.onmessage via the setter above. Now we inject our interceptor.
+        // inner.onmessage via the setter above. Now we inject our interceptor,
+        // once.
+        if (interceptor !== undefined && inner.onmessage === interceptor)
+            return;
         const downstream = inner.onmessage;
-        inner.onmessage = (message) => {
+        interceptor = (message, extra) => {
             if (message.method === "tools/call" &&
                 message.id !== undefined) {
                 const params = message.params;
                 const toolName = params?.name;
-                if (toolName && !exclude.includes(toolName)) {
+                if (toolName && !excluded.has(toolName)) {
                     pending.set(message.id, {
                         toolName,
                         args: params?.arguments ?? {},
@@ -155,8 +272,14 @@ export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_
                 const params = message.params;
                 pending.delete(params?.requestId);
             }
-            downstream?.(message);
+            // The SDK's message context (session id, authInfo, requestInfo) rides
+            // through unchanged.
+            if (extra === undefined)
+                downstream?.(message);
+            else
+                downstream?.(message, extra);
         };
+        inner.onmessage = interceptor;
     };
     return wrapper;
 }

package/dist/middleware/kya-os-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"kya-os-transport.js","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAyB7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,KAAsB,EACtB,UAAoB,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAElD,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,0EAA0E;IAC1E,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAc;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAE1B,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,SAAS,CAAC,OAAoD;YAChE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,OAAO,CAAC,OAAiC;YAC3C,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,CAAC,OAA2C;YACrD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,KAAK,CAAC,IAAI,CAAC,OAAuB;YAChC,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE1E,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;gBAC3D,kEAAkE;gBAClE,qEAAqE;gBACrE,oEAAoE;gBACpE,mEAAmE;gBACnE,oEAAoE;gBACpE,+DAA+D;gBAC/D,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;oBACnD,gEAAgE;oBAChE,iEAAiE;oBACjE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBAC/C,IAAI,CAAC;wBACH,gEAAgE;wBAChE,kEAAkE;wBAClE,kEAAkE;wBAClE,0DAA0D;wBAC1D,MAAM,OAAO,GAAqB,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;wBAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1C,gEAAgE;wBAChE,+DAA+D;wBAC/D,+DAA+D;wBAC/D,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;yBAC9E,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;4BACxD,IAAI,EAAE,IAAI,CAAC,QAAQ;4BACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;wBACH,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE;gCACN,GAAG,QAAQ;gCACX,KAAK,EAAE;oCACL,GAAG,CAAE,QAAQ,CAAC,KAA6C,IAAI,EAAE,CAAC;oCAClE,UAAU,EAAE,gDAAgD;iCAC7D;6BACF;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,uEAAuE;YACvE,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAoB,CAAC,CAAC;gBACjE,IAAI,IAAI,KAAK,OAAO,CAAC,MAAM;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACtE,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;IAEF,iEAAiE;IACjE,uDAAuD;IACvD,6EAA6E;IAC7E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,aAAa,EAAE,CAAC;QACtB,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE;YAC5C,IACE,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC/B,OAAO,CAAC,EAAE,KAAK,SAAS,EACxB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAEV,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;gBAC9B,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;wBACtB,QAAQ;wBACR,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACxD,oEAAoE;gBACpE,sBAAsB;gBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAA6C,CAAC;gBACrE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YACD,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"kya-os-transport.js","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAqC7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,KAAsB,EACtB,UAA6B,EAAE;IAE/B,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACrE,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACzD,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,OAAiC,CAAC;IACtC,MAAM,WAAW,GAAG,GAAS,EAAE;QAC7B,OAAO,EAAE,EAAE,CAAC;QACZ,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC,CAAC;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,wDAAwD;IACxD,IAAI,YAAsC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAc;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,WAAW,EAAE,CAAC;YACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,SAAS,CAAC,OAAqE;YACjF,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,iBAAiB;QACjB,IAAI,OAAO,CAAC,OAAiC;YAC3C,YAAY,GAAG,OAAO,CAAC;YACvB,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;QACzB,CAAC;QACD,IAAI,OAAO;YACT,OAAO,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,OAAO,CAAC,OAA2C;YACrD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QACD,IAAI,SAAS,CAAC,SAA6B;YACzC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,kBAAkB;YACpB,OAAO,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBAC3C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAmB,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,4BAA4B;YAC9B,OAAO,KAAK,CAAC,4BAA4B,KAAK,SAAS;gBACrD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA6B,CAAC,QAAQ,CAAC,CAAC;QAC5E,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,yCAAyC;QACzC,IAAI,yBAAyB;YAC3B,OAAO,KAAK,CAAC,yBAAyB,KAAK,SAAS;gBAClD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,yBAA0B,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,mBAAmB;YACrB,OAAO,KAAK,CAAC,mBAAmB,CAAC;QACnC,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,mEAAmE;QACnE,4BAA4B;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAuB,EAAE,OAAiB;YACnD,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE1E,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;gBAC3D,kEAAkE;gBAClE,qEAAqE;gBACrE,oEAAoE;gBACpE,oEAAoE;gBACpE,mEAAmE;gBACnE,iEAAiE;gBACjE,sDAAsD;gBACtD,IAAI,SAAS,IAAI,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;oBACjD,gEAAgE;oBAChE,iEAAiE;oBACjE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBAC/C,IAAI,CAAC;wBACH,gEAAgE;wBAChE,kEAAkE;wBAClE,kEAAkE;wBAClE,0DAA0D;wBAC1D,MAAM,OAAO,GAAqB,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;wBAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1C,gEAAgE;wBAChE,+DAA+D;wBAC/D,+DAA+D;wBAC/D,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;yBAC9E,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;4BACxD,IAAI,EAAE,IAAI,CAAC,QAAQ;4BACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;wBACH,OAAO,GAAG;4BACR,GAAG,OAAO;4BACV,MAAM,EAAE;gCACN,GAAG,QAAQ;gCACX,KAAK,EAAE;oCACL,GAAG,CAAE,QAAQ,CAAC,KAA6C,IAAI,EAAE,CAAC;oCAClE,UAAU,EAAE,gDAAgD;iCAC7D;6BACF;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,gEAAgE;YAChE,qEAAqE;YACrE,2BAA2B;YAC3B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAoB,CAAC;gBAC5C,MAAM,IAAI,GAAG,KAAK;oBAChB,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACxF,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,OAAO,CAAC,MAAM;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACtE,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YACvG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC;YAClE,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAuC,CAAC;YAC9D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/E,CAAC;YAED,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpF,CAAC;KACF,CAAC;IAEF,iEAAiE;IACjE,uDAAuD;IACvD,6EAA6E;IAC7E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,WAA4D,CAAC;IACjE,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,aAAa,EAAE,CAAC;QACtB,4EAA4E;QAC5E,OAAO,KAAK,KAAK,EAAE,IAAI,EAAE,CAAC;QAC1B,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,YAAY,CAAC;YAC/B,YAAY,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE;gBACtD,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,CAAC;YACd,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;QACvB,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,QAAQ;QACR,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW;YAAE,OAAO;QACzE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,WAAW,GAAG,CAAC,OAAuB,EAAE,KAAe,EAAE,EAAE;YACzD,IACE,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC/B,OAAO,CAAC,EAAE,KAAK,SAAS,EACxB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAEV,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;gBAC9B,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;wBACtB,QAAQ;wBACR,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACxD,oEAAoE;gBACpE,sBAAsB;gBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAA6C,CAAC;gBACrE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YACD,sEAAsE;YACtE,qBAAqB;YACrB,IAAI,KAAK,KAAK,SAAS;gBAAE,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;;gBAC1C,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/middleware/mcp-tool-callback.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Register a middleware-wrapped handler with the MCP SDK's `registerTool`.
+ *
+ * A {@link KyaOsToolHandler} takes `(args, sessionId?, context?)`; the SDK
+ * calls a tool callback with `(args, extra)`, where `extra` is its own request
+ * context. Passed straight in, the handler needs a cast, and the SDK's context
+ * then arrives as the KYA-OS session id: no session matches it, and the
+ * result goes out unproven. The adapter passes the arguments alone, so the
+ * handler resolves its session as any unthreaded call does. The SDK's
+ * transport session id is a different thing from a KYA-OS session id, so
+ * nothing from `extra` is forwarded.
+ *
+ * Typed structurally, so this package keeps no type dependency on the SDK.
+ */
+import type { KyaOsToolHandler } from "./with-kya-os.types.js";
+/** A tool result in the shape the MCP SDK's `registerTool` callback returns. */
+export interface McpToolCallbackResult {
+    content: Array<{
+        type: "text";
+        text: string;
+        [key: string]: unknown;
+    }>;
+    structuredContent?: Record<string, unknown>;
+    isError?: boolean;
+    _meta?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+/**
+ * A callback for a tool registered with an `inputSchema` (an empty one for a
+ * tool without arguments): the SDK calls it with the parsed arguments and its
+ * request context.
+ */
+export type McpToolCallback<T extends Record<string, unknown> = Record<string, unknown>> = (args: T, extra: unknown) => Promise<McpToolCallbackResult>;
+/**
+ * Adapt a handler (one from `wrapWithProof`, `wrapWithDelegation`,
+ * `withPolicyGate`, or one returning `proveOutcome`'s result) to the MCP
+ * SDK's `registerTool`, with no cast:
+ *
+ * ```ts
+ * server.registerTool('checkout', { inputSchema }, toMcpToolCallback(gated));
+ * ```
+ *
+ * The handler's result is returned as it is; the SDK validates it. Called
+ * with one argument, which is how the SDK calls a tool registered without an
+ * `inputSchema`, the handler gets empty arguments instead of the SDK's
+ * request context.
+ */
+export declare function toMcpToolCallback<T extends Record<string, unknown> = Record<string, unknown>>(handler: KyaOsToolHandler<T>): McpToolCallback<T>;

package/dist/middleware/mcp-tool-callback.js

@@ -0,0 +1,38 @@
+/**
+ * Register a middleware-wrapped handler with the MCP SDK's `registerTool`.
+ *
+ * A {@link KyaOsToolHandler} takes `(args, sessionId?, context?)`; the SDK
+ * calls a tool callback with `(args, extra)`, where `extra` is its own request
+ * context. Passed straight in, the handler needs a cast, and the SDK's context
+ * then arrives as the KYA-OS session id: no session matches it, and the
+ * result goes out unproven. The adapter passes the arguments alone, so the
+ * handler resolves its session as any unthreaded call does. The SDK's
+ * transport session id is a different thing from a KYA-OS session id, so
+ * nothing from `extra` is forwarded.
+ *
+ * Typed structurally, so this package keeps no type dependency on the SDK.
+ */
+/**
+ * Adapt a handler (one from `wrapWithProof`, `wrapWithDelegation`,
+ * `withPolicyGate`, or one returning `proveOutcome`'s result) to the MCP
+ * SDK's `registerTool`, with no cast:
+ *
+ * ```ts
+ * server.registerTool('checkout', { inputSchema }, toMcpToolCallback(gated));
+ * ```
+ *
+ * The handler's result is returned as it is; the SDK validates it. Called
+ * with one argument, which is how the SDK calls a tool registered without an
+ * `inputSchema`, the handler gets empty arguments instead of the SDK's
+ * request context.
+ */
+export function toMcpToolCallback(handler) {
+    return async (...params) => {
+        const args = params.length > 1 ? params[0] : {};
+        // KyaOsToolHandler types content items' `type` as string; the SDK checks
+        // the result it receives, so the narrower declared type is not a claim
+        // this adapter has to prove.
+        return (await handler(args));
+    };
+}
+//# sourceMappingURL=mcp-tool-callback.js.map

package/dist/middleware/mcp-tool-callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-callback.js","sourceRoot":"","sources":["../../src/middleware/mcp-tool-callback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAuBH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA4B;IAE5B,OAAO,KAAK,EAAE,GAAG,MAAqB,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,EAAQ,CAAC;QACvD,yEAAyE;QACzE,uEAAuE;QACvE,6BAA6B;QAC7B,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAA0B,CAAC;IACxD,CAAC,CAAC;AACJ,CAAC"}

package/dist/middleware/serve-in-process.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Call KYA-OS-wrapped tool handlers in process, outside an MCP server, and
+ * get the results a client would receive.
+ *
+ * The middleware makes its response proofs where the KYA-OS transport sends a
+ * result, because the MCP SDK changes a result after the handler returns it.
+ * A script, a walkthrough or a test that calls a wrapped handler directly
+ * therefore needs a KYA-OS transport to send what the handler returns, as a
+ * server connected through `withKyaOs()` or `createKyaOsTransport()` has. This
+ * module is that transport, with nothing on the far end but the caller.
+ *
+ * ```ts
+ * const local = serveInProcess(kyaos);
+ * const checkout = local.tool('checkout', kyaos.wrapWithDelegation('checkout', consent, handler));
+ * const result = await checkout({ item: 'laptop' }); // proved, as a client receives it
+ * await local.close();
+ * ```
+ *
+ * @module serve-in-process
+ */
+import type { KyaOsMiddleware, KyaOsToolHandler, KyaOsToolResult } from "./with-kya-os.types.js";
+/** A KYA-OS transport for in-process calls, open until {@link InProcessServer.close}. */
+export interface InProcessServer {
+    /**
+     * `handler`, answering as an MCP server would: its result goes through the
+     * KYA-OS transport, and the caller gets what a client receives, proof
+     * included. `toolName` names the call, as a client's `tools/call` would.
+     */
+    tool<R = KyaOsToolResult>(toolName: string, handler: KyaOsToolHandler): (args: Record<string, unknown>, sessionId?: string) => Promise<R>;
+    /**
+     * Close the transport. It no longer counts as open for the middleware, and
+     * its tools refuse further calls.
+     */
+    close(): Promise<void>;
+}
+/**
+ * Open a KYA-OS transport for `kyaos` whose far end is the caller. While it
+ * is open it counts as an open KYA-OS transport for the middleware, so close
+ * it when done.
+ */
+export declare function serveInProcess(kyaos: KyaOsMiddleware): InProcessServer;