@kya-os/mcp 1.2.0 → 1.3.1

package/dist/middleware/{mcpi-transport.js → kya-os-transport.js}

@@ -1,8 +1,8 @@
 /**
- * MCPITransport — Proof-injecting Transport Wrapper
+ * KyaOsTransport — Proof-injecting Transport Wrapper
  *
  * Wraps any MCP Transport to intercept `tools/call` responses and attach
- * MCP-I detached proofs. Uses only the public Transport interface — no
+ * KYA-OS detached proofs. Uses only the public Transport interface — no
  * private SDK internals accessed.
  *
  * The McpServer never knows this wrapper exists. It sees a normal transport.
@@ -14,18 +14,18 @@
  *   2. Outgoing responses for those ids get a proof injected into `_meta`.
  *   3. All other message types pass through unmodified.
  *
- * @module mcpi-transport
+ * @module kya-os-transport
  */
 import { logger } from "../logging/index.js";
 /**
- * Creates a transport wrapper that injects MCP-I proofs into `tools/call`
+ * Creates a transport wrapper that injects KYA-OS proofs into `tools/call`
  * responses.
  *
  * @param inner   - The real transport (Stdio, HTTP, etc.)
- * @param mcpi    - Configured MCPIMiddleware instance
+ * @param kyaos    - Configured KyaOsMiddleware instance
  * @param exclude - Tool names to skip proof generation for
  */
-export function createMCPITransport(inner, mcpi, exclude = ["_mcpi", "_mcpi_handshake"]) {
+export function createKyaOsTransport(inner, kyaos, exclude = ["_kyaos", "_kyaos_handshake"]) {
     // Request id → { toolName, args } for pending tool calls
     const pending = new Map();
     const wrapper = {
@@ -62,7 +62,7 @@ export function createMCPITransport(inner, mcpi, exclude = ["_mcpi", "_mcpi_hand
                     const rawResult = message.result;
                     if (rawResult && !rawResult.isError) {
                         const handler = async () => rawResult;
-                        const addProof = mcpi.wrapWithProof(call.toolName, handler);
+                        const addProof = kyaos.wrapWithProof(call.toolName, handler);
                         const proofed = await addProof(call.args);
                         if (proofed._meta !== undefined) {
                             message = {
@@ -73,7 +73,7 @@ export function createMCPITransport(inner, mcpi, exclude = ["_mcpi", "_mcpi_hand
                     }
                 }
                 catch (error) {
-                    logger.error("[mcpi-transport] Proof injection failed", {
+                    logger.error("[kya-os-transport] Proof injection failed", {
                         tool: call.toolName,
                         error: error instanceof Error ? error.message : String(error),
                     });
@@ -118,4 +118,4 @@ export function createMCPITransport(inner, mcpi, exclude = ["_mcpi", "_mcpi_hand
     };
     return wrapper;
 }
-//# sourceMappingURL=mcpi-transport.js.map
+//# sourceMappingURL=kya-os-transport.js.map

package/dist/middleware/kya-os-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kya-os-transport.js","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAyB7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,KAAsB,EACtB,UAAoB,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAElD,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEhD,MAAM,OAAO,GAAc;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAE1B,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,SAAS,CAAC,OAAoD;YAChE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,OAAO,CAAC,OAAiC;YAC3C,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,CAAC,OAA2C;YACrD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,KAAK,CAAC,IAAI,CAAC,OAAuB;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE5D,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;oBAC3D,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;wBACpC,MAAM,OAAO,GAAqB,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;wBACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;4BAChC,OAAO,GAAG;gCACR,GAAG,OAAO;gCACV,MAAM,EAAE,OAAO;6BAChB,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;wBACxD,IAAI,EAAE,IAAI,CAAC,QAAQ;wBACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;oBAC3D,IAAI,SAAS,EAAE,CAAC;wBACd,SAAS,CAAC,KAAK,GAAG;4BAChB,UAAU,EAAE,gDAAgD;yBAC7D,CAAC;wBACF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;IAEF,iEAAiE;IACjE,uDAAuD;IACvD,6EAA6E;IAC7E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,aAAa,EAAE,CAAC;QACtB,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE;YAC5C,IACE,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC/B,OAAO,CAAC,EAAE,KAAK,SAAS,EACxB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAEV,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;gBAC9B,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;wBACtB,QAAQ;wBACR,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/middleware/{with-mcpi-server.d.ts → with-kya-os-server.d.ts}

@@ -1,78 +1,78 @@
 /**
- * McpServer Adapter for MCP-I
+ * McpServer Adapter for KYA-OS
  *
- * Adds MCP-I identity, session management, and proof generation to a
+ * Adds KYA-OS identity, session management, and proof generation to a
  * standard McpServer instance with a single function call.
  *
  * Usage:
- *   import { withMCPI } from '@kya-os/mcp/middleware';
- *   const mcpi = await withMCPI(server, { crypto: new NodeCryptoProvider() });
+ *   import { withKyaOs } from '@kya-os/mcp/middleware';
+ *   const kyaos = await withKyaOs(server, { crypto: new NodeCryptoProvider() });
  *   // All tools registered on `server` now get proofs automatically.
  *   await server.connect(transport); // transport is transparently wrapped
  */
 import type { CryptoProvider } from "../providers/base.js";
-import { type MCPIIdentityConfig, type MCPIDelegationConfig, type MCPIMiddleware } from "./with-mcpi.js";
-import { type Transport } from "./mcpi-transport.js";
-export interface WithMCPIOptions {
+import { type KyaOsIdentityConfig, type KyaOsDelegationConfig, type KyaOsMiddleware } from "./with-kya-os.js";
+import { type Transport } from "./kya-os-transport.js";
+export interface WithKyaOsOptions {
     /** Platform-specific crypto implementation (required) */
     crypto: CryptoProvider;
     /** Identity config — auto-generated if omitted */
-    identity?: MCPIIdentityConfig;
+    identity?: KyaOsIdentityConfig;
     /** Session configuration */
     session?: {
         sessionTtlMinutes?: number;
     };
-    /** Auto-create sessions for non-MCP-I clients (default: true) */
+    /** Auto-create sessions for non-KYA-OS clients (default: true) */
     autoSession?: boolean;
     /** Attach proofs to all tool responses (default: true) */
     proofAllTools?: boolean;
     /** Tools to skip proof generation for */
     excludeTools?: string[];
     /** Delegation verification config */
-    delegation?: MCPIDelegationConfig;
+    delegation?: KyaOsDelegationConfig;
     /**
-     * How the MCP-I protocol tool is exposed on the server.
-     * - "tool" (default): auto-register `_mcpi`
-     * - "none": do not register MCP-I tool (use middleware APIs for custom runtime hooks)
+     * How the KYA-OS protocol tool is exposed on the server.
+     * - "tool" (default): auto-register `_kyaos`
+     * - "none": do not register KYA-OS tool (use middleware APIs for custom runtime hooks)
      */
     handshakeExposure?: "tool" | "none";
 }
 /**
- * Generate a fresh Ed25519 identity for MCP-I.
+ * Generate a fresh Ed25519 identity for KYA-OS.
  *
  * @param crypto - Platform-specific crypto provider
  * @returns Identity config with DID, kid, and key material
  */
-export declare function generateIdentity(crypto: CryptoProvider): Promise<MCPIIdentityConfig>;
+export declare function generateIdentity(crypto: CryptoProvider): Promise<KyaOsIdentityConfig>;
 /**
  * Minimal McpServer interface — avoids hard dependency on @modelcontextprotocol/sdk.
- * Matches the subset of McpServer's public API that withMCPI() uses.
+ * Matches the subset of McpServer's public API that withKyaOs() uses.
  */
 interface McpServerLike {
     connect(transport: Transport): Promise<unknown>;
     registerTool(...args: unknown[]): void;
 }
 /**
- * Add MCP-I to a McpServer instance.
+ * Add KYA-OS to a McpServer instance.
  *
  * 1. Auto-generates Ed25519 identity (or uses provided one)
- * 2. Registers `_mcpi` tool by default (`handshakeExposure: "tool"`)
+ * 2. Registers `_kyaos` tool by default (`handshakeExposure: "tool"`)
  * 3. Patches `server.connect()` to transparently wrap the transport with
- *    MCPITransport, which injects detached proofs into all `tools/call`
+ *    KyaOsTransport, which injects detached proofs into all `tools/call`
  *    responses using only the public Transport interface.
  *
  * The user-facing API is unchanged — register tools before or after this
  * call, then connect as normal:
  *
  * ```ts
- * const mcpi = await withMCPI(server, { crypto: new NodeCryptoProvider() });
- * await server.connect(transport); // MCPITransport wraps silently
+ * const kyaos = await withKyaOs(server, { crypto: new NodeCryptoProvider() });
+ * await server.connect(transport); // KyaOsTransport wraps silently
  * ```
  *
  * @param server  - McpServer instance
  * @param options - Configuration
- * @returns The MCPIMiddleware instance for advanced usage (wrapWithDelegation, etc.)
+ * @returns The KyaOsMiddleware instance for advanced usage (wrapWithDelegation, etc.)
  */
-export declare function withMCPI(server: McpServerLike, options: WithMCPIOptions): Promise<MCPIMiddleware>;
+export declare function withKyaOs(server: McpServerLike, options: WithKyaOsOptions): Promise<KyaOsMiddleware>;
 export {};
-//# sourceMappingURL=with-mcpi-server.d.ts.map
+//# sourceMappingURL=with-kya-os-server.d.ts.map

package/dist/middleware/with-kya-os-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os-server.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAG7E,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,MAAM,EAAE,cAAc,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,4BAA4B;IAC5B,OAAO,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,kEAAkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qCAAqC;IACrC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAS9B;AAED;;;GAGG;AACH,UAAU,aAAa;IACrB,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,YAAY,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,eAAe,CAAC,CAuE1B"}

package/dist/middleware/{with-mcpi-server.js → with-kya-os-server.js}

@@ -1,21 +1,21 @@
 /**
- * McpServer Adapter for MCP-I
+ * McpServer Adapter for KYA-OS
  *
- * Adds MCP-I identity, session management, and proof generation to a
+ * Adds KYA-OS identity, session management, and proof generation to a
  * standard McpServer instance with a single function call.
  *
  * Usage:
- *   import { withMCPI } from '@kya-os/mcp/middleware';
- *   const mcpi = await withMCPI(server, { crypto: new NodeCryptoProvider() });
+ *   import { withKyaOs } from '@kya-os/mcp/middleware';
+ *   const kyaos = await withKyaOs(server, { crypto: new NodeCryptoProvider() });
  *   // All tools registered on `server` now get proofs automatically.
  *   await server.connect(transport); // transport is transparently wrapped
  */
 import { generateDidKeyFromBase64, didKeyFragment } from "../utils/did-helpers.js";
-import { MCPI_ACTIONS, createMCPIMiddleware, } from "./with-mcpi.js";
-import { createMCPITransport } from "./mcpi-transport.js";
+import { KYA_OS_ACTIONS, createKyaOsMiddleware, } from "./with-kya-os.js";
+import { createKyaOsTransport } from "./kya-os-transport.js";
 import { z } from "zod";
 /**
- * Generate a fresh Ed25519 identity for MCP-I.
+ * Generate a fresh Ed25519 identity for KYA-OS.
  *
  * @param crypto - Platform-specific crypto provider
  * @returns Identity config with DID, kid, and key material
@@ -31,42 +31,42 @@ export async function generateIdentity(crypto) {
     };
 }
 /**
- * Add MCP-I to a McpServer instance.
+ * Add KYA-OS to a McpServer instance.
  *
  * 1. Auto-generates Ed25519 identity (or uses provided one)
- * 2. Registers `_mcpi` tool by default (`handshakeExposure: "tool"`)
+ * 2. Registers `_kyaos` tool by default (`handshakeExposure: "tool"`)
  * 3. Patches `server.connect()` to transparently wrap the transport with
- *    MCPITransport, which injects detached proofs into all `tools/call`
+ *    KyaOsTransport, which injects detached proofs into all `tools/call`
  *    responses using only the public Transport interface.
  *
  * The user-facing API is unchanged — register tools before or after this
  * call, then connect as normal:
  *
  * ```ts
- * const mcpi = await withMCPI(server, { crypto: new NodeCryptoProvider() });
- * await server.connect(transport); // MCPITransport wraps silently
+ * const kyaos = await withKyaOs(server, { crypto: new NodeCryptoProvider() });
+ * await server.connect(transport); // KyaOsTransport wraps silently
  * ```
  *
  * @param server  - McpServer instance
  * @param options - Configuration
- * @returns The MCPIMiddleware instance for advanced usage (wrapWithDelegation, etc.)
+ * @returns The KyaOsMiddleware instance for advanced usage (wrapWithDelegation, etc.)
  */
-export async function withMCPI(server, options) {
+export async function withKyaOs(server, options) {
     const identity = options.identity ?? (await generateIdentity(options.crypto));
-    const mcpi = createMCPIMiddleware({
+    const kyaos = createKyaOsMiddleware({
         identity,
         session: options.session,
         delegation: options.delegation,
         autoSession: options.autoSession ?? true,
     }, options.crypto);
     if ((options.handshakeExposure ?? "tool") === "tool") {
-        // Register the unified _mcpi tool for protocol operations.
-        server.registerTool("_mcpi", {
-            description: "MCP-I protocol — identity verification, session handshake, and server metadata",
-            annotations: { title: "MCP-I Protocol", readOnlyHint: true },
+        // Register the unified _kyaos tool for protocol operations.
+        server.registerTool("_kyaos", {
+            description: "KYA-OS protocol — identity verification, session handshake, and server metadata",
+            annotations: { title: "KYA-OS Protocol", readOnlyHint: true },
             inputSchema: {
                 action: z
-                    .enum(MCPI_ACTIONS)
+                    .enum(KYA_OS_ACTIONS)
                     .describe("Protocol operation to perform"),
                 nonce: z
                     .string()
@@ -86,7 +86,7 @@ export async function withMCPI(server, options) {
                     .describe("Client agent DID (handshake, optional)"),
             },
         }, async (args) => {
-            const result = await mcpi.handleMCPI(args);
+            const result = await kyaos.handleKyaOs(args);
             return {
                 ...result,
                 content: result.content.map((c) => ({ ...c, type: "text" })),
@@ -96,14 +96,14 @@ export async function withMCPI(server, options) {
     // Auto-proof interception via transport wrapper (public API only).
     //
     // We patch server.connect() so that whatever transport the caller passes
-    // is silently wrapped with MCPITransport before McpServer sees it.
+    // is silently wrapped with KyaOsTransport before McpServer sees it.
     // Tool registration order does not matter — proofs are injected at the
     // transport boundary, after McpServer has already dispatched the call.
     if (options.proofAllTools !== false) {
-        const exclude = ["_mcpi", "_mcpi_handshake", ...(options.excludeTools ?? [])];
+        const exclude = ["_kyaos", "_kyaos_handshake", ...(options.excludeTools ?? [])];
         const originalConnect = server.connect.bind(server);
-        server.connect = (transport) => originalConnect(createMCPITransport(transport, mcpi, exclude));
+        server.connect = (transport) => originalConnect(createKyaOsTransport(transport, kyaos, exclude));
     }
-    return mcpi;
+    return kyaos;
 }
-//# sourceMappingURL=with-mcpi-server.js.map
+//# sourceMappingURL=with-kya-os-server.js.map

package/dist/middleware/with-kya-os-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os-server.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EACL,cAAc,EACd,qBAAqB,GAItB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBxB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,GAAG;QACH,GAAG,EAAE,GAAG,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;QACpC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAWD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAqB,EACrB,OAAyB;IAEzB,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,qBAAqB,CACjC;QACE,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;KACzC,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QACrD,4DAA4D;QAC5D,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,WAAW,EACT,iFAAiF;YACnF,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE;YAC7D,WAAW,EAAE;gBACX,MAAM,EAAE,CAAC;qBACN,IAAI,CAAC,cAAc,CAAC;qBACpB,QAAQ,CAAC,+BAA+B,CAAC;gBAC5C,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,2CAA2C,CAAC;gBACxD,QAAQ,EAAE,CAAC;qBACR,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,+BAA+B,CAAC;gBAC5C,SAAS,EAAE,CAAC;qBACT,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,gCAAgC,CAAC;gBAC7C,QAAQ,EAAE,CAAC;qBACR,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,wCAAwC,CAAC;aACtD;SACF,EACD,KAAK,EAAE,IAAa,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CACpC,IAA+B,CAChC,CAAC;YACF,OAAO;gBACL,GAAG,MAAM;gBACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;aACtE,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,EAAE;IACF,yEAAyE;IACzE,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,CAAC,OAAO,GAAG,CAAC,SAAoB,EAAE,EAAE,CACxC,eAAe,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/middleware/{with-mcpi.d.ts → with-kya-os.d.ts}

@@ -1,17 +1,17 @@
 /**
- * MCP-I Middleware — Core Implementation
+ * KYA-OS Middleware — Core Implementation
  *
  * Adds identity, session management, and proof generation to MCP servers.
  *
- * For most use cases, prefer the high-level `withMCPI()` adapter from
- * `./with-mcpi-server.ts` which (by default) auto-registers the handshake
+ * For most use cases, prefer the high-level `withKyaOs()` adapter from
+ * `./with-kya-os-server.ts` which (by default) auto-registers the handshake
  * tool and auto-attaches proofs to all tool responses:
  *
- *   import { withMCPI } from '@kya-os/mcp';
- *   await withMCPI(server, { crypto: new NodeCryptoProvider() });
+ *   import { withKyaOs } from '@kya-os/mcp';
+ *   await withKyaOs(server, { crypto: new NodeCryptoProvider() });
  *
- * `createMCPIMiddleware()` in this file is the lower-level API used
- * internally by `withMCPI()` and for advanced use cases like the
+ * `createKyaOsMiddleware()` in this file is the lower-level API used
+ * internally by `withKyaOs()` and for advanced use cases like the
  * low-level `Server` API or custom request handler patterns.
  */
 import { type CryptoProvider, FetchProvider } from "../providers/base.js";
@@ -19,15 +19,15 @@ import { SessionManager, type SessionConfig } from "../session/manager.js";
 import { ProofGenerator } from "../proof/generator.js";
 import { type DIDResolver, type StatusListResolver } from "../delegation/vc-verifier.js";
 import { type DelegationCredential } from "../types/protocol.js";
-export interface MCPIIdentityConfig {
+export interface KyaOsIdentityConfig {
     did: string;
     kid: string;
     privateKey: string;
     publicKey: string;
     agentName?: string;
 }
-export declare const MCPI_ACTIONS: readonly ["handshake", "identity", "reputation"];
-export interface MCPIDelegationConfig {
+export declare const KYA_OS_ACTIONS: readonly ["handshake", "identity", "reputation"];
+export interface KyaOsDelegationConfig {
     /**
      * Optional custom DID resolver. If it returns null, middleware falls back to
      * built-in did:key resolution and fetch-backed did:web resolution.
@@ -57,9 +57,12 @@ export interface MCPIDelegationConfig {
      * that receives the credential will accept it.
      *
      * Recommended for production. See: Alan Karp's transitive access analysis
-     * and MCP-I §11.6 (Confused Deputy Attacks).
+     * and KYA-OS §11.6 (Confused Deputy Attacks).
      *
-     * Default is false for backward compatibility.
+     * Default is `true` as of KYA-OS 1.3.x. Existing integrations that
+     * issue re-delegations without an `audience` constraint can set this
+     * to `false` to preserve legacy behavior; doing so logs a one-time
+     * warning per process.
      */
     requireAudienceOnRedelegation?: boolean;
     /**
@@ -74,22 +77,22 @@ export interface MCPIDelegationConfig {
      */
     allowLegacyUnsafeDelegation?: boolean;
 }
-export interface MCPIConfig {
+export interface KyaOsConfig {
     /** Agent identity (DID + key material) */
-    identity: MCPIIdentityConfig;
+    identity: KyaOsIdentityConfig;
     /** Session configuration overrides */
     session?: Omit<SessionConfig, "nonceCache">;
     /** Delegation verification overrides */
-    delegation?: MCPIDelegationConfig;
+    delegation?: KyaOsDelegationConfig;
     /**
      * When true, automatically creates a session on the first tool call
      * if no session exists. Useful for demos and development where
-     * MCP clients don't support the `_mcpi` handshake flow.
-     * In production, MCP-I-aware runtimes should execute handshake before tool calls.
+     * MCP clients don't support the `_kyaos` handshake flow.
+     * In production, KYA-OS-aware runtimes should execute handshake before tool calls.
      */
     autoSession?: boolean;
 }
-export interface MCPIToolDefinition {
+export interface KyaOsToolDefinition {
     name: string;
     description?: string;
     inputSchema: {
@@ -99,7 +102,7 @@ export interface MCPIToolDefinition {
         [key: string]: unknown;
     };
 }
-export interface MCPIToolHandler<T extends Record<string, unknown> = Record<string, unknown>> {
+export interface KyaOsToolHandler<T extends Record<string, unknown> = Record<string, unknown>> {
     (args: T, sessionId?: string): Promise<{
         content: Array<{
             type: string;
@@ -114,32 +117,32 @@ export interface MCPIToolHandler<T extends Record<string, unknown> = Record<stri
  * Server interface — minimal subset of @modelcontextprotocol/sdk Server.
  * This avoids a hard dependency on the SDK at the type level.
  */
-export interface MCPIServer {
+export interface KyaOsServer {
     setRequestHandler(schema: unknown, handler: (...args: unknown[]) => unknown): void;
 }
-export interface MCPIMiddleware {
+export interface KyaOsMiddleware {
     /** The identity config used by this middleware instance */
-    identity: MCPIIdentityConfig;
+    identity: KyaOsIdentityConfig;
     /** The SessionManager instance for manual session operations */
     sessionManager: SessionManager;
     /** The ProofGenerator instance for manual proof operations */
     proofGenerator: ProofGenerator;
     /**
-     * Unified tool definition for `_mcpi`.
+     * Unified tool definition for `_kyaos`.
      * Include this in your ListToolsRequest handler's tool list.
      */
-    mcpiTool: MCPIToolDefinition;
+    kyaOsTool: KyaOsToolDefinition;
     /**
-     * @deprecated Use `mcpiTool` (`_mcpi` with `action: "handshake"`).
-     * Tool definition for `_mcpi_handshake`.
+     * @deprecated Use `kyaOsTool` (`_kyaos` with `action: "handshake"`).
+     * Tool definition for `_kyaos_handshake`.
      * Include this in your ListToolsRequest handler's tool list.
      */
-    handshakeTool: MCPIToolDefinition;
+    handshakeTool: KyaOsToolDefinition;
     /**
-     * Handle a unified `_mcpi` action. Use this in your CallToolRequest handler
-     * when `request.params.name === '_mcpi'`.
+     * Handle a unified `_kyaos` action. Use this in your CallToolRequest handler
+     * when `request.params.name === '_kyaos'`.
      */
-    handleMCPI(args: Record<string, unknown>): Promise<{
+    handleKyaOs(args: Record<string, unknown>): Promise<{
         content: Array<{
             type: string;
             text: string;
@@ -147,9 +150,9 @@ export interface MCPIMiddleware {
         isError?: boolean;
     }>;
     /**
-     * @deprecated Use `handleMCPI` with `action: "handshake"`.
+     * @deprecated Use `handleKyaOs` with `action: "handshake"`.
      * Handle a handshake call. Use this in your CallToolRequest handler
-     * when `request.params.name === '_mcpi_handshake'`.
+     * when `request.params.name === '_kyaos_handshake'`.
      */
     handleHandshake(args: Record<string, unknown>): Promise<{
         content: Array<{
@@ -162,41 +165,19 @@ export interface MCPIMiddleware {
      * Wrap a tool handler to automatically generate proofs.
      * Returns a new handler that appends proof metadata to the response.
      */
-    wrapWithProof<T extends Record<string, unknown> = Record<string, unknown>>(toolName: string, handler: MCPIToolHandler<T>): MCPIToolHandler;
+    wrapWithProof<T extends Record<string, unknown> = Record<string, unknown>>(toolName: string, handler: KyaOsToolHandler<T>): KyaOsToolHandler;
     /**
      * Wrap a tool handler to require a valid W3C Delegation Credential.
      *
-     * Caller must pass the VC as `_mcpi_delegation` in the tool args.
+     * Caller must pass the VC as `_kyaos_delegation` in the tool args.
      * - If absent: returns a `needs_authorization` response with the consentUrl.
      * - If present but invalid: returns a structured error with reason.
-     * - If valid with correct scope: strips `_mcpi_delegation` and calls the handler.
+     * - If valid with correct scope: strips `_kyaos_delegation` and calls the handler.
      */
     wrapWithDelegation(toolName: string, config: {
         scopeId: string;
         consentUrl: string;
-    }, handler: MCPIToolHandler): MCPIToolHandler;
+    }, handler: KyaOsToolHandler): KyaOsToolHandler;
 }
-/**
- * Create MCP-I middleware for a standard MCP SDK Server.
- *
- * For most use cases, prefer {@link withMCPI} from `./with-mcpi-server.ts`
- * which wraps this function and (by default) auto-registers handshake +
- * auto-attaches proofs.
- *
- * Use `createMCPIMiddleware` directly when:
- * - You use the low-level `Server` API (not `McpServer`)
- * - You need custom request handler patterns
- * - You want per-tool control over proof/delegation wrapping
- *
- * @param config - Agent identity and session configuration
- * @param cryptoProvider - Platform-specific crypto implementation
- * @returns Middleware components for session management and proof generation
- *
- * @remarks
- * **Single-process only**: This middleware stores session state in memory using closure
- * variables (`activeSessionId`, `sessionNonces`). It is NOT suitable for multi-instance
- * deployments behind a load balancer. For distributed deployments, implement a custom
- * `SessionStore` backed by Redis, DynamoDB, or similar and pass it via `config.session`.
- */
-export declare function createMCPIMiddleware(config: MCPIConfig, cryptoProvider: CryptoProvider): MCPIMiddleware;
-//# sourceMappingURL=with-mcpi.d.ts.map
+export declare function createKyaOsMiddleware(config: KyaOsConfig, cryptoProvider: CryptoProvider): KyaOsMiddleware;
+//# sourceMappingURL=with-kya-os.d.ts.map

package/dist/middleware/with-kya-os.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,KAAK,cAAc,EACnB,aAAa,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EAIf,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAEL,KAAK,WAAW,EAEhB,KAAK,kBAAkB,EACxB,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAGL,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAM9B,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,kDAAmD,CAAC;AAG/E,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,sBAAsB,CAAC,EAAE,CACvB,cAAc,EAAE,oBAAoB,KACjC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACrC;;;;;;;;;;;;;;;OAeG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC;;;;;;;;;OASG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,sCAAsC;IACtC,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC5C,wCAAwC;IACxC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB,CAC/B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE3D,CACE,IAAI,EAAE,CAAC,EACP,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QACT,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAC;QACvE,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,iBAAiB,CACf,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GACvC,IAAI,CAAC;CACT;AAED,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,QAAQ,EAAE,mBAAmB,CAAC;IAE9B,gEAAgE;IAChE,cAAc,EAAE,cAAc,CAAC;IAE/B,8DAA8D;IAC9D,cAAc,EAAE,cAAc,CAAC;IAE/B;;;OAGG;IACH,SAAS,EAAE,mBAAmB,CAAC;IAE/B;;;;OAIG;IACH,aAAa,EAAE,mBAAmB,CAAC;IAEnC;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAClD,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IAEH;;;;OAIG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QACtD,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvE,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,gBAAgB,CAAC;IAEpB;;;;;;;OAOG;IACH,kBAAkB,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;KACpB,EACD,OAAO,EAAE,gBAAgB,GACxB,gBAAgB,CAAC;CACrB;AAkGD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,EACnB,cAAc,EAAE,cAAc,GAC7B,eAAe,CA6qBjB"}