@kya-os/mcp 1.6.1 → 1.9.0

package/dist/integrations/cheqd/registrar.js

@@ -0,0 +1,304 @@
+import { base64ToBytes, base64urlEncodeFromBytes, bytesToBase64 } from '../../utils/base64.js';
+import { isRecord, stripTrailingSlashes } from '../../utils/index.js';
+export class CheqdDidRegistrarClient {
+    registrarUrl;
+    fetchProvider;
+    headers;
+    constructor(options) {
+        this.registrarUrl = stripTrailingSlashes(options.registrarUrl);
+        this.fetchProvider = options.fetchProvider;
+        this.headers = options.headers;
+    }
+    async createDid(options) {
+        const body = {
+            didDocument: options.didDocument,
+            ...(options.options ? { options: options.options } : {}),
+        };
+        return this.runClientManagedSecretFlow({
+            operation: 'create',
+            did: options.didDocument.id,
+            path: '/create',
+            body,
+            signer: options.signer,
+            verificationMethodId: options.verificationMethodId,
+        });
+    }
+    async updateDid(options) {
+        const body = {
+            did: options.did,
+            didDocumentOperation: ['setDidDocument'],
+            didDocument: [options.didDocument],
+            ...(options.options ? { options: options.options } : {}),
+        };
+        return this.runClientManagedSecretFlow({
+            operation: 'update',
+            did: options.did,
+            path: '/update',
+            body,
+            signer: options.signer,
+            verificationMethodId: options.verificationMethodId,
+        });
+    }
+    async createResource(options) {
+        const body = {
+            ...options.resource,
+            ...(options.options ? { options: options.options } : {}),
+        };
+        return this.runClientManagedSecretFlow({
+            operation: 'create-resource',
+            did: options.did,
+            path: `/${options.did}/create-resource`,
+            body,
+            signer: options.signer,
+            verificationMethodId: options.verificationMethodId,
+        });
+    }
+    async runClientManagedSecretFlow(options) {
+        const requestResponse = await this.post(options.path, options.body);
+        if (!requestResponse.ok) {
+            return {
+                success: false,
+                operation: options.operation,
+                stage: 'request',
+                reason: `Registrar request failed with HTTP ${requestResponse.status}`,
+                response: requestResponse.body,
+            };
+        }
+        const jobId = findStringByKey(requestResponse.body, 'jobId');
+        const signingRequests = extractSigningRequests(requestResponse.body, options.operation, options.did, options.body, options.verificationMethodId);
+        const action = findStringByKey(requestResponse.body, 'action');
+        if (isFinished(requestResponse.body)) {
+            return {
+                success: true,
+                operation: options.operation,
+                stage: 'complete',
+                ...(jobId ? { jobId } : {}),
+                response: requestResponse.body,
+            };
+        }
+        if (!jobId) {
+            return {
+                success: false,
+                operation: options.operation,
+                stage: 'request',
+                action,
+                response: requestResponse.body,
+                reason: 'Registrar response did not include a jobId',
+            };
+        }
+        if (signingRequests.length === 0) {
+            return {
+                success: false,
+                operation: options.operation,
+                stage: 'request',
+                jobId,
+                action,
+                response: requestResponse.body,
+                reason: 'Registrar response did not include a serialized payload to sign',
+            };
+        }
+        let signingResponse;
+        try {
+            signingResponse = (await Promise.all(signingRequests.map(async (request) => flattenSigningResponses(await options.signer(request)).map((response) => ({
+                ...response,
+                requestId: response.requestId ?? request.requestId,
+            }))))).flat();
+        }
+        catch (error) {
+            return {
+                success: false,
+                operation: options.operation,
+                stage: 'sign',
+                jobId,
+                action,
+                response: requestResponse.body,
+                reason: `Signing failed: ${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
+        const submitBody = {
+            jobId,
+            secret: {
+                signingResponse: formatSigningResponseForRegistrar(signingResponse),
+            },
+        };
+        const submitResponse = await this.post(options.path, submitBody);
+        const success = submitResponse.ok && isFinished(submitResponse.body);
+        return {
+            success,
+            operation: options.operation,
+            stage: success ? 'complete' : 'submit',
+            jobId,
+            action,
+            response: submitResponse.body,
+            ...(success
+                ? {}
+                : {
+                    reason: submitResponse.ok
+                        ? 'Registrar did not finish the operation after signature submission'
+                        : `Registrar signature submission failed with HTTP ${submitResponse.status}`,
+                }),
+        };
+    }
+    async post(path, body) {
+        const response = await this.fetchProvider.fetch(`${this.registrarUrl}${path}`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                ...(await this.resolveHeaders()),
+            },
+            body: JSON.stringify(body),
+        });
+        let responseBody;
+        try {
+            responseBody = await response.json();
+        }
+        catch {
+            responseBody = undefined;
+        }
+        return {
+            ok: response.ok,
+            status: response.status,
+            body: responseBody,
+        };
+    }
+    async resolveHeaders() {
+        if (!this.headers) {
+            return {};
+        }
+        return typeof this.headers === 'function' ? this.headers() : this.headers;
+    }
+}
+export function createLocalEd25519CheqdRegistrarSigner(options) {
+    return async (request) => {
+        const payloadBytes = base64ToBytes(request.serializedPayload);
+        const signatureBytes = await options.cryptoProvider.sign(payloadBytes, options.privateKey);
+        const signature = options.signatureEncoding === 'base64url'
+            ? base64urlEncodeFromBytes(signatureBytes)
+            : bytesToBase64(signatureBytes);
+        return {
+            verificationMethodId: request.verificationMethodId || options.verificationMethodId,
+            signature,
+        };
+    };
+}
+function extractSigningRequests(response, operation, did, requestBody, fallbackVerificationMethodId) {
+    const candidates = [];
+    collectSigningRequestCandidates(response, candidates);
+    const completeCandidates = candidates.filter((candidate) => candidate.serializedPayload);
+    if (completeCandidates.length === 0) {
+        const serializedPayload = findStringByKey(response, 'serializedPayload');
+        if (serializedPayload) {
+            completeCandidates.push({
+                serializedPayload,
+                verificationMethodId: fallbackVerificationMethodId,
+            });
+        }
+    }
+    return completeCandidates
+        .filter((candidate) => candidate.serializedPayload)
+        .map((candidate) => ({
+        operation,
+        did,
+        ...(candidate.requestId ? { requestId: candidate.requestId } : {}),
+        verificationMethodId: candidate.verificationMethodId ??
+            candidate.kid ??
+            fallbackVerificationMethodId ??
+            inferVerificationMethodId(requestBody) ??
+            '',
+        serializedPayload: candidate.serializedPayload,
+        algorithm: 'Ed25519',
+        encoding: 'base64',
+        requestBody,
+    }))
+        .filter((request) => request.verificationMethodId.length > 0);
+}
+function collectSigningRequestCandidates(value, out, requestId) {
+    if (Array.isArray(value)) {
+        for (const entry of value) {
+            collectSigningRequestCandidates(entry, out);
+        }
+        return;
+    }
+    if (!isRecord(value)) {
+        return;
+    }
+    if (typeof value['serializedPayload'] === 'string') {
+        out.push({
+            ...value,
+            ...(requestId ? { requestId } : {}),
+        });
+    }
+    for (const [key, nested] of Object.entries(value)) {
+        const nestedRequestId = isRecord(nested) && typeof nested['serializedPayload'] === 'string'
+            ? key
+            : undefined;
+        collectSigningRequestCandidates(nested, out, nestedRequestId);
+    }
+}
+function flattenSigningResponses(response) {
+    return Array.isArray(response) ? response : [response];
+}
+function formatSigningResponseForRegistrar(responses) {
+    const formatted = responses.map(formatSingleSigningResponseForRegistrar);
+    if (!responses.some((response) => response.requestId)) {
+        return formatted;
+    }
+    return Object.fromEntries(responses.map((response, index) => [
+        response.requestId ?? `signingRequest${index}`,
+        formatSingleSigningResponseForRegistrar(response),
+    ]));
+}
+function formatSingleSigningResponseForRegistrar(response) {
+    return {
+        kid: response.verificationMethodId,
+        signature: response.signature,
+        ...(response.alg ? { alg: response.alg } : {}),
+        ...(response.purpose ? { purpose: response.purpose } : {}),
+    };
+}
+function findStringByKey(value, key) {
+    if (Array.isArray(value)) {
+        for (const entry of value) {
+            const found = findStringByKey(entry, key);
+            if (found) {
+                return found;
+            }
+        }
+        return undefined;
+    }
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const maybeString = value[key];
+    if (typeof maybeString === 'string') {
+        return maybeString;
+    }
+    for (const nested of Object.values(value)) {
+        const found = findStringByKey(nested, key);
+        if (found) {
+            return found;
+        }
+    }
+    return undefined;
+}
+function inferVerificationMethodId(value) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const didDocument = value['didDocument'];
+    if (isRecord(didDocument)) {
+        const verificationMethod = didDocument['verificationMethod'];
+        if (Array.isArray(verificationMethod)) {
+            const first = verificationMethod[0];
+            if (isRecord(first) && typeof first['id'] === 'string') {
+                return first['id'];
+            }
+        }
+    }
+    return undefined;
+}
+function isFinished(value) {
+    const state = findStringByKey(value, 'state');
+    return state === 'finished';
+}
+//# sourceMappingURL=registrar.js.map

package/dist/integrations/cheqd/registrar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registrar.js","sourceRoot":"","sources":["../../../src/integrations/cheqd/registrar.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AA+FtE,MAAM,OAAO,uBAAuB;IACjB,YAAY,CAAS;IACrB,aAAa,CAAgB;IAC7B,OAAO,CAAoE;IAE5F,YAAY,OAAoC;QAC9C,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAA8B;QAC5C,MAAM,IAAI,GAAG;YACX,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,0BAA0B,CAAC;YACrC,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE;YAC3B,IAAI,EAAE,SAAS;YACf,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAA8B;QAC5C,MAAM,IAAI,GAAG;YACX,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,oBAAoB,EAAE,CAAC,gBAAgB,CAAC;YACxC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,0BAA0B,CAAC;YACrC,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,SAAS;YACf,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAmC;QACtD,MAAM,IAAI,GAAG;YACX,GAAG,OAAO,CAAC,QAAQ;YACnB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,0BAA0B,CAAC;YACrC,SAAS,EAAE,iBAAiB;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,kBAAkB;YACvC,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,OAOxC;QACC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,sCAAsC,eAAe,CAAC,MAAM,EAAE;gBACtE,QAAQ,EAAE,eAAe,CAAC,IAAI;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,eAAe,GAAG,sBAAsB,CAC5C,eAAe,CAAC,IAAI,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,oBAAoB,CAC7B,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,UAAU;gBACjB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,QAAQ,EAAE,eAAe,CAAC,IAAI;aAC/B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,SAAS;gBAChB,MAAM;gBACN,QAAQ,EAAE,eAAe,CAAC,IAAI;gBAC9B,MAAM,EAAE,4CAA4C;aACrD,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,SAAS;gBAChB,KAAK;gBACL,MAAM;gBACN,QAAQ,EAAE,eAAe,CAAC,IAAI;gBAC9B,MAAM,EAAE,iEAAiE;aAC1E,CAAC;QACJ,CAAC;QAED,IAAI,eAAgD,CAAC;QACrD,IAAI,CAAC;YACH,eAAe,GAAG,CAChB,MAAM,OAAO,CAAC,GAAG,CACf,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACpC,uBAAuB,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACxE,GAAG,QAAQ;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;aACnD,CAAC,CAAC,CACJ,CACF,CACF,CAAC,IAAI,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,MAAM;gBACb,KAAK;gBACL,MAAM;gBACN,QAAQ,EAAE,eAAe,CAAC,IAAI;gBAC9B,MAAM,EAAE,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACpF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,KAAK;YACL,MAAM,EAAE;gBACN,eAAe,EAAE,iCAAiC,CAAC,eAAe,CAAC;aACpE;SACF,CAAC;QAEF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAErE,OAAO;YACL,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACtC,KAAK;YACL,MAAM;YACN,QAAQ,EAAE,cAAc,CAAC,IAAI;YAC7B,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,MAAM,EAAE,cAAc,CAAC,EAAE;wBACvB,CAAC,CAAC,mEAAmE;wBACrE,CAAC,CAAC,mDAAmD,cAAc,CAAC,MAAM,EAAE;iBAC/E,CAAC;SACP,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,IAAa;QAEb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,EAAE,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,YAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;QAED,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,YAAY;SACnB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAC5E,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CACpD,OAAyC;IAEzC,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3F,MAAM,SAAS,GACb,OAAO,CAAC,iBAAiB,KAAK,WAAW;YACvC,CAAC,CAAC,wBAAwB,CAAC,cAAc,CAAC;YAC1C,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QAEpC,OAAO;YACL,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,OAAO,CAAC,oBAAoB;YAClF,SAAS;SACV,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAiB,EACjB,SAAkC,EAClC,GAAuB,EACvB,WAAoB,EACpB,4BAAqC;IAErC,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,+BAA+B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEtD,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACzF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,iBAAiB,GAAG,eAAe,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACzE,IAAI,iBAAiB,EAAE,CAAC;YACtB,kBAAkB,CAAC,IAAI,CAAC;gBACtB,iBAAiB;gBACjB,oBAAoB,EAAE,4BAA4B;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB;SACtB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC;SAClD,GAAG,CAAC,CAAC,SAAS,EAAgC,EAAE,CAAC,CAAC;QACjD,SAAS;QACT,GAAG;QACH,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,oBAAoB,EAClB,SAAS,CAAC,oBAAoB;YAC9B,SAAS,CAAC,GAAG;YACb,4BAA4B;YAC5B,yBAAyB,CAAC,WAAW,CAAC;YACtC,EAAE;QACJ,iBAAiB,EAAE,SAAS,CAAC,iBAAkB;QAC/C,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,QAAQ;QAClB,WAAW;KACZ,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAc,EACd,GAA8B,EAC9B,SAAkB;IAElB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,+BAA+B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,mBAAmB,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC;YACP,GAAI,KAAiC;YACrC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,QAAQ;YACzF,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,SAAS,CAAC;QACd,+BAA+B,CAAC,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAyE;IAEzE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,iCAAiC,CACxC,SAA0C;IAE1C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IAEzE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QACjC,QAAQ,CAAC,SAAS,IAAI,iBAAiB,KAAK,EAAE;QAC9C,uCAAuC,CAAC,QAAQ,CAAC;KAClD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,uCAAuC,CAC9C,QAAuC;IAEvC,OAAO;QACL,GAAG,EAAE,QAAQ,CAAC,oBAAoB;QAClC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,GAAW;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1B,MAAM,kBAAkB,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,KAAK,KAAK,UAAU,CAAC;AAC9B,CAAC"}

package/dist/integrations/cheqd/resolver.d.ts

@@ -0,0 +1,38 @@
+/**
+ * DID:cheqd Resolver
+ *
+ * Resolves did:cheqd DIDs through an explicitly configured resolver endpoint.
+ * The resolver accepts both Universal Resolver-style DID Resolution Results
+ * (`{ didDocument: ... }`) and raw DID Documents.
+ */
+import type { FetchProvider } from '../../providers/base.js';
+import type { DIDResolverFactory } from '../../delegation/did-resolver-registry.js';
+import type { DIDDocument, DIDResolver } from '../../delegation/vc-verifier.js';
+export type DidCheqdNetwork = 'mainnet' | 'testnet';
+export interface ParsedDidCheqd {
+    network: DidCheqdNetwork;
+    uniqueId: string;
+}
+export interface DidCheqdResolverOptions {
+    resolverUrl: string;
+    cacheTtl?: number;
+    headers?: Record<string, string> | (() => Promise<Record<string, string>>);
+}
+export declare function isDidCheqd(did: string): boolean;
+export declare function parseDidCheqd(did: string): ParsedDidCheqd | null;
+export declare class DidCheqdResolver implements DIDResolver {
+    private readonly fetchProvider;
+    private readonly resolverUrl;
+    private readonly cache;
+    private readonly cacheTtl;
+    private readonly headers?;
+    constructor(fetchProvider: FetchProvider, options: DidCheqdResolverOptions);
+    resolve(did: string): Promise<DIDDocument | null>;
+    clearCache(): void;
+    clearCacheEntry(did: string): void;
+    private resolveHeaders;
+}
+export declare function createDidCheqdResolver(fetchProvider: FetchProvider, options: DidCheqdResolverOptions): DIDResolver;
+export declare function cheqdResolver(options: DidCheqdResolverOptions): DIDResolverFactory;
+export declare function didCheqdToResolverUrl(did: string, resolverUrl: string): string;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/integrations/cheqd/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/integrations/cheqd/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAsB,MAAM,iCAAiC,CAAC;AAIpG,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CAC5E;AAMD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAehE;AAED,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4D;IAClF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAmE;gBAEhF,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB;IAQpE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAyDvD,UAAU,IAAI,IAAI;IAIlB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;YAIpB,cAAc;CAM7B;AAED,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,uBAAuB,GAC/B,WAAW,CAEb;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,kBAAkB,CAElF;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAS9E"}

package/dist/integrations/cheqd/resolver.js

@@ -0,0 +1,156 @@
+/**
+ * DID:cheqd Resolver
+ *
+ * Resolves did:cheqd DIDs through an explicitly configured resolver endpoint.
+ * The resolver accepts both Universal Resolver-style DID Resolution Results
+ * (`{ didDocument: ... }`) and raw DID Documents.
+ */
+import { logger } from '../../logging/index.js';
+import { isRecord, stripTrailingSlashes } from '../../utils/index.js';
+export function isDidCheqd(did) {
+    return did.startsWith('did:cheqd:');
+}
+export function parseDidCheqd(did) {
+    const match = /^did:cheqd:(mainnet|testnet):([^/?#]+)$/.exec(did);
+    if (!match) {
+        return null;
+    }
+    const uniqueId = match[2] ?? '';
+    if (uniqueId.length === 0) {
+        return null;
+    }
+    return {
+        network: match[1],
+        uniqueId,
+    };
+}
+export class DidCheqdResolver {
+    fetchProvider;
+    resolverUrl;
+    cache;
+    cacheTtl;
+    headers;
+    constructor(fetchProvider, options) {
+        this.fetchProvider = fetchProvider;
+        this.resolverUrl = options.resolverUrl;
+        this.cacheTtl = options.cacheTtl ?? 300_000;
+        this.headers = options.headers;
+        this.cache = new Map();
+    }
+    async resolve(did) {
+        if (!parseDidCheqd(did)) {
+            return null;
+        }
+        const cached = this.cache.get(did);
+        if (cached && Date.now() < cached.expiresAt) {
+            return cached.document;
+        }
+        try {
+            const response = await this.fetchProvider.fetch(didCheqdToResolverUrl(did, this.resolverUrl), {
+                method: 'GET',
+                headers: await this.resolveHeaders(),
+            });
+            if (!response.ok) {
+                logger.warn(`[DidCheqdResolver] HTTP ${response.status} resolving ${did}`);
+                return null;
+            }
+            let json;
+            try {
+                json = await response.json();
+            }
+            catch {
+                logger.warn(`[DidCheqdResolver] Invalid JSON resolving ${did}`);
+                return null;
+            }
+            const document = extractDidDocument(json);
+            if (!document || !isValidDIDDocument(document)) {
+                logger.warn(`[DidCheqdResolver] Invalid DID Document resolving ${did}`);
+                return null;
+            }
+            if (document.id !== did) {
+                logger.warn(`[DidCheqdResolver] DID Document id mismatch: expected ${did}, got ${document.id}`);
+                return null;
+            }
+            this.cache.set(did, {
+                document,
+                expiresAt: Date.now() + this.cacheTtl,
+            });
+            return document;
+        }
+        catch (error) {
+            logger.warn(`[DidCheqdResolver] Error resolving ${did}: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return null;
+        }
+    }
+    clearCache() {
+        this.cache.clear();
+    }
+    clearCacheEntry(did) {
+        this.cache.delete(did);
+    }
+    async resolveHeaders() {
+        if (!this.headers) {
+            return undefined;
+        }
+        return typeof this.headers === 'function' ? this.headers() : this.headers;
+    }
+}
+export function createDidCheqdResolver(fetchProvider, options) {
+    return new DidCheqdResolver(fetchProvider, options);
+}
+export function cheqdResolver(options) {
+    return (fetchProvider) => createDidCheqdResolver(fetchProvider, options);
+}
+export function didCheqdToResolverUrl(did, resolverUrl) {
+    const base = stripTrailingSlashes(resolverUrl);
+    if (base.includes('{did}')) {
+        return base.replace('{did}', did);
+    }
+    if (base.endsWith('/1.0/identifiers')) {
+        return `${base}/${did}`;
+    }
+    return `${base}/1.0/identifiers/${did}`;
+}
+function extractDidDocument(value) {
+    if (isRecord(value) && value['didDocument'] !== undefined) {
+        return value.didDocument;
+    }
+    return value;
+}
+function isValidDIDDocument(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    if (typeof value['id'] !== 'string' || value['id'].length === 0) {
+        return false;
+    }
+    if (value['alsoKnownAs'] !== undefined && !isStringArray(value['alsoKnownAs'])) {
+        return false;
+    }
+    if (value['verificationMethod'] !== undefined) {
+        if (!Array.isArray(value['verificationMethod'])) {
+            return false;
+        }
+        for (const method of value['verificationMethod']) {
+            if (!isValidVerificationMethod(method)) {
+                return false;
+            }
+        }
+    }
+    return true;
+}
+function isValidVerificationMethod(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    return (typeof value['id'] === 'string' &&
+        value['id'].length > 0 &&
+        typeof value['type'] === 'string' &&
+        value['type'].length > 0 &&
+        typeof value['controller'] === 'string' &&
+        value['controller'].length > 0);
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
+}
+//# sourceMappingURL=resolver.js.map

package/dist/integrations/cheqd/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/integrations/cheqd/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAmBtE,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,CAAC,CAAoB;QACpC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IACV,aAAa,CAAgB;IAC7B,WAAW,CAAS;IACpB,KAAK,CAA4D;IACjE,QAAQ,CAAS;IACjB,OAAO,CAAoE;IAE5F,YAAY,aAA4B,EAAE,OAAgC;QACxE,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAC7C,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,EAC5C;gBACE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,MAAM,IAAI,CAAC,cAAc,EAAE;aACrC,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC;gBAC3E,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;gBACxE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,QAAQ,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,yDAAyD,GAAG,SAAS,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChG,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBAClB,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ;aACtC,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,sCAAsC,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACzG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,eAAe,CAAC,GAAW;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAC5E,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,aAA4B,EAC5B,OAAgC;IAEhC,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgC;IAC5D,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,sBAAsB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,WAAmB;IACpE,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,IAAI,oBAAoB,GAAG,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1D,OAAQ,KAA6B,CAAC,WAAW,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,oBAAoB,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ;QAC/B,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QACtB,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QACjC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QACxB,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,QAAQ;QACvC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC"}

package/dist/middleware/index.d.ts

@@ -9,4 +9,6 @@
 export { createKyaOsMiddleware, type KyaOsConfig, type KyaOsDelegationConfig, type KyaOsIdentityConfig, type KyaOsMiddleware, type KyaOsToolDefinition, type KyaOsToolHandler, type KyaOsServer, } from './with-kya-os.js';
 export { withKyaOs, generateIdentity, type WithKyaOsOptions, } from './with-kya-os-server.js';
 export { createKyaOsTransport, type Transport, type JSONRPCMessage, } from './kya-os-transport.js';
+export { card, CardBuilder, type CardBuilderInit, type AccountableToOptions, type VcInput, } from '../card/builder.js';
+export { withKyaOsCard, requireProof, readCardProof, type KyaOsCardMount, type ServerJsonLike, type DidDocumentLike, type ProofGuard, type ProofGateResult, type ProofGateError, type ProofGateCode, type RequireProofOptions, type MinProofLevel, } from '../card/middleware.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,EACpB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,EACpB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,IAAI,EACJ,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,OAAO,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,aAAa,GACnB,MAAM,uBAAuB,CAAC"}

package/dist/middleware/index.js

@@ -9,4 +9,9 @@
 export { createKyaOsMiddleware, } from './with-kya-os.js';
 export { withKyaOs, generateIdentity, } from './with-kya-os-server.js';
 export { createKyaOsTransport, } from './kya-os-transport.js';
+// Entity Card DevX surface — the 10-minute adoption path. The fluent `card()` builder and the
+// `withKyaOsCard` / `requireProof` wrappers hide the RFC 9421/9449/8785 machinery behind
+// ergonomics (see `src/card/builder.ts` + `src/card/middleware.ts`).
+export { card, CardBuilder, } from '../card/builder.js';
+export { withKyaOsCard, requireProof, readCardProof, } from '../card/middleware.js';
 //# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,qBAAqB,GAQtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,qBAAqB,GAQtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAE/B,8FAA8F;AAC9F,yFAAyF;AACzF,qEAAqE;AACrE,OAAO,EACL,IAAI,EACJ,WAAW,GAIZ,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,GAUd,MAAM,uBAAuB,CAAC"}

package/dist/middleware/kya-os-transport.d.ts

@@ -6,7 +6,8 @@
  * private SDK internals accessed.
  *
  * The McpServer never knows this wrapper exists. It sees a normal transport.
- * The connected client sees normal MCP responses with an added `_meta.proof`.
+ * The connected client sees normal MCP responses with the detached proof added
+ * under the namespaced `_meta` key `org.kya-os/proof` (see KYA_OS_PROOF_META_KEY).
  *
  * How it works:
  *   1. Incoming `tools/call` requests are captured (by id) to record tool

package/dist/middleware/kya-os-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kya-os-transport.d.ts","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAoB,MAAM,kBAAkB,CAAC;AAG1E,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAarD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE,MAAM,EAAmC,GACjD,SAAS,CAwGX"}
+{"version":3,"file":"kya-os-transport.d.ts","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAoB,MAAM,kBAAkB,CAAC;AAG1E,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAarD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE,MAAM,EAAmC,GACjD,SAAS,CAwGX"}

package/dist/middleware/kya-os-transport.js

@@ -6,7 +6,8 @@
  * private SDK internals accessed.
  *
  * The McpServer never knows this wrapper exists. It sees a normal transport.
- * The connected client sees normal MCP responses with an added `_meta.proof`.
+ * The connected client sees normal MCP responses with the detached proof added
+ * under the namespaced `_meta` key `org.kya-os/proof` (see KYA_OS_PROOF_META_KEY).
  *
  * How it works:
  *   1. Incoming `tools/call` requests are captured (by id) to record tool

package/dist/middleware/kya-os-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"kya-os-transport.js","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAyB7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,KAAsB,EACtB,UAAoB,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAElD,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEhD,MAAM,OAAO,GAAc;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAE1B,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,SAAS,CAAC,OAAoD;YAChE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,OAAO,CAAC,OAAiC;YAC3C,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,CAAC,OAA2C;YACrD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,KAAK,CAAC,IAAI,CAAC,OAAuB;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE5D,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;oBAC3D,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;wBACpC,MAAM,OAAO,GAAqB,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;wBACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;4BAChC,OAAO,GAAG;gCACR,GAAG,OAAO;gCACV,MAAM,EAAE,OAAO;6BAChB,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;wBACxD,IAAI,EAAE,IAAI,CAAC,QAAQ;wBACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;oBAC3D,IAAI,SAAS,EAAE,CAAC;wBACd,SAAS,CAAC,KAAK,GAAG;4BAChB,UAAU,EAAE,gDAAgD;yBAC7D,CAAC;wBACF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;IAEF,iEAAiE;IACjE,uDAAuD;IACvD,6EAA6E;IAC7E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,aAAa,EAAE,CAAC;QACtB,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE;YAC5C,IACE,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC/B,OAAO,CAAC,EAAE,KAAK,SAAS,EACxB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAEV,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;gBAC9B,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;wBACtB,QAAQ;wBACR,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"kya-os-transport.js","sourceRoot":"","sources":["../../src/middleware/kya-os-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAyB7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgB,EAChB,KAAsB,EACtB,UAAoB,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAElD,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEhD,MAAM,OAAO,GAAc;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;QAE1B,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,SAAS,CAAC,OAAoD;YAChE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS;YACX,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,OAAO,CAAC,OAAiC;YAC3C,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,CAAC,OAA2C;YACrD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO;YACT,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,KAAK,CAAC,IAAI,CAAC,OAAuB;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE5D,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;oBAC3D,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;wBACpC,MAAM,OAAO,GAAqB,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;wBACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;4BAChC,OAAO,GAAG;gCACR,GAAG,OAAO;gCACV,MAAM,EAAE,OAAO;6BAChB,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;wBACxD,IAAI,EAAE,IAAI,CAAC,QAAQ;wBACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAgC,CAAC;oBAC3D,IAAI,SAAS,EAAE,CAAC;wBACd,SAAS,CAAC,KAAK,GAAG;4BAChB,UAAU,EAAE,gDAAgD;yBAC7D,CAAC;wBACF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;IAEF,iEAAiE;IACjE,uDAAuD;IACvD,6EAA6E;IAC7E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,aAAa,EAAE,CAAC;QACtB,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE;YAC5C,IACE,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC/B,OAAO,CAAC,EAAE,KAAK,SAAS,EACxB,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAEV,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;gBAC9B,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;wBACtB,QAAQ;wBACR,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/middleware/with-kya-os-server.d.ts

@@ -11,6 +11,8 @@
  *   await server.connect(transport); // transport is transparently wrapped
  */
 import type { CryptoProvider } from "../providers/base.js";
+import type { GrantStore } from "../providers/grant-store.js";
+import type { SessionConfig } from "../session/manager.js";
 import { type KyaOsIdentityConfig, type KyaOsDelegationConfig, type KyaOsMiddleware } from "./with-kya-os.js";
 import { type Transport } from "./kya-os-transport.js";
 export interface WithKyaOsOptions {
@@ -18,18 +20,33 @@ export interface WithKyaOsOptions {
     crypto: CryptoProvider;
     /** Identity config — auto-generated if omitted */
     identity?: KyaOsIdentityConfig;
-    /** Session configuration */
-    session?: {
-        sessionTtlMinutes?: number;
-    };
+    /**
+     * Session configuration. Accepts the full {@link SessionConfig} (minus the
+     * `nonceCache`, which is set at the top level), so an optional durable
+     * `sessionStore` can be injected for cross-instance session continuity.
+     */
+    session?: Omit<SessionConfig, "nonceCache">;
     /** Auto-create sessions for non-KYA-OS clients (default: true) */
     autoSession?: boolean;
     /** Attach proofs to all tool responses (default: true) */
     proofAllTools?: boolean;
+    /**
+     * Also emit the proof under the legacy bare `_meta.proof` key (default: true),
+     * in addition to the namespaced `org.kya-os/proof`. Set `false` for a clean
+     * single-key view once clients read the namespaced key. Passed through to the
+     * middleware.
+     */
+    emitLegacyProofKey?: boolean;
     /** Tools to skip proof generation for */
     excludeTools?: string[];
     /** Delegation verification config */
     delegation?: KyaOsDelegationConfig;
+    /**
+     * Durable store for approved grants, enabling the no-paste retry across
+     * instances / restarts. Defaults to in-memory; inject a durable
+     * {@link GrantStore} for production. Passed through to the middleware.
+     */
+    grantStore?: GrantStore;
     /**
      * How the KYA-OS protocol tool is exposed on the server.
      * - "tool" (default): auto-register `_kyaos`