@kya-os/mcp 1.18.0 → 1.21.0

package/dist/utils/statuslist-gzip.d.ts

@@ -0,0 +1,18 @@
+/** GZIP-compress a raw status bitstring. */
+declare function gzip(bits: Uint8Array): Promise<Uint8Array>;
+/**
+ * Inflate a GZIP status-list payload, refusing (rejecting) one that is not
+ * GZIP or that inflates past {@link MAX_STATUS_LIST_BYTES}.
+ */
+declare function gunzip(payload: Uint8Array): Promise<Uint8Array>;
+/**
+ * The default status-list codec. One object serves as both the
+ * `CompressionFunction` and the `DecompressionFunction` that
+ * `StatusList2021Manager` and `BitstringManager` take, and its `decompress`
+ * is the bare `Decompress` the Entity Card revocation checker takes.
+ */
+export declare const statusListGzipCodec: {
+    readonly compress: typeof gzip;
+    readonly decompress: typeof gunzip;
+};
+export {};

package/dist/utils/statuslist-gzip.js

@@ -0,0 +1,45 @@
+/**
+ * The GZIP codec for status-list bitstrings — the ONE implementation every
+ * publisher and reader in this package defaults to (StatusList2021 and W3C
+ * Bitstring Status List v1.0 both require the `encodedList` bitstring to be
+ * GZIP-compressed).
+ *
+ * `node:zlib` is loaded with a DYNAMIC import on first use, never statically,
+ * so a Workers / Deno / browser bundle that injects its own codec (for example
+ * one built on `CompressionStream` / `DecompressionStream`) keeps `node:zlib`
+ * out of its graph.
+ *
+ * Inflation is bounded to {@link MAX_STATUS_LIST_BYTES} while it runs, so a
+ * decompression bomb is refused mid-stream rather than allocated whole.
+ */
+import { MAX_STATUS_LIST_BYTES } from './statuslist-bits.js';
+/** Run a callback-style `node:zlib` operation as a promise of a plain `Uint8Array`. */
+function settle(run) {
+    return new Promise((resolve, reject) => {
+        run((error, result) => (error ? reject(error) : resolve(new Uint8Array(result))));
+    });
+}
+/** GZIP-compress a raw status bitstring. */
+async function gzip(bits) {
+    const zlib = await import('node:zlib');
+    return settle((done) => zlib.gzip(bits, done));
+}
+/**
+ * Inflate a GZIP status-list payload, refusing (rejecting) one that is not
+ * GZIP or that inflates past {@link MAX_STATUS_LIST_BYTES}.
+ */
+async function gunzip(payload) {
+    const zlib = await import('node:zlib');
+    return settle((done) => zlib.gunzip(payload, { maxOutputLength: MAX_STATUS_LIST_BYTES }, done));
+}
+/**
+ * The default status-list codec. One object serves as both the
+ * `CompressionFunction` and the `DecompressionFunction` that
+ * `StatusList2021Manager` and `BitstringManager` take, and its `decompress`
+ * is the bare `Decompress` the Entity Card revocation checker takes.
+ */
+export const statusListGzipCodec = {
+    compress: gzip,
+    decompress: gunzip,
+};
+//# sourceMappingURL=statuslist-gzip.js.map

package/dist/utils/statuslist-gzip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statuslist-gzip.js","sourceRoot":"","sources":["../../src/utils/statuslist-gzip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAI7D,uFAAuF;AACvF,SAAS,MAAM,CAAC,GAAiC;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4CAA4C;AAC5C,KAAK,UAAU,IAAI,CAAC,IAAgB;IAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,OAAmB;IACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,qBAAqB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,MAAM;CACV,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp",
-  "version": "1.18.0",
+  "version": "1.21.0",
   "description": "Reference implementation of the KYA-OS protocol for Model Context Protocol servers: identity, delegation, proofs, sessions, and verifiable audit trails",
   "license": "MIT",
   "type": "module",
@@ -134,7 +134,9 @@
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@kya-os/consent": "^0.1.47",
+    "@modelcontextprotocol/client": "^2.3.1",
     "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/server": "^2.3.1",
     "@types/express": "^5.0.6",
     "@types/node": "^26.2.0",
     "@typescript-eslint/eslint-plugin": "^8.67.0",