@kya-os/mcp 1.7.0 → 1.9.0

package/dist/middleware/with-kya-os.d.ts

@@ -14,273 +14,9 @@
  * internally by `withKyaOs()` and for advanced use cases like the
  * low-level `Server` API or custom request handler patterns.
  */
-import { type CryptoProvider, type FetchProvider, type NonceCacheProvider } from "../providers/base.js";
-import { AuditLogProvider } from "../providers/audit-log.js";
-import { GrantStore } from "../providers/grant-store.js";
-import { SessionManager, type SessionConfig } from "../session/manager.js";
-import { ProofGenerator } from "../proof/generator.js";
-import { type DIDResolver, type StatusListResolver } from "../delegation/vc-verifier.js";
-import { type RevocationChecker } from "../delegation/chain-enforcement.js";
-import { type DelegationCredential, type NeedsAuthorizationError } from "../types/protocol.js";
-import { RiskClassifier } from "../policy/classifier.js";
-import { type ApprovalGrant } from "../policy/approval.js";
-import type { PolicyEngine } from "../policy/engine.js";
-export interface KyaOsIdentityConfig {
-    did: string;
-    kid: string;
-    privateKey: string;
-    publicKey: string;
-    agentName?: string;
-}
-export declare const KYA_OS_ACTIONS: readonly ["handshake", "identity", "reputation"];
-export interface KyaOsDelegationConfig {
-    /**
-     * Optional custom DID resolver. If it returns null, middleware falls back to
-     * built-in did:key resolution and fetch-backed did:web resolution.
-     */
-    didResolver?: DIDResolver;
-    /**
-     * Optional fetch provider used for did:web resolution.
-     * If omitted, middleware falls back to the runtime global fetch when available.
-     */
-    fetchProvider?: FetchProvider;
-    /**
-     * Resolver for StatusList2021 checks. Credentials with credentialStatus are
-     * rejected when no resolver is configured.
-     */
-    statusListResolver?: StatusListResolver;
-    /**
-     * Resolve ancestor credentials for a delegated chain. The returned array may
-     * contain only ancestors (root -> parent) or the full chain (root -> leaf).
-     */
-    resolveDelegationChain?: (leafCredential: DelegationCredential) => Promise<DelegationCredential[]>;
-    /**
-     * Graph-backed ancestor-revocation check. When provided, the chain walk also
-     * verifies the leaf is not revoked via a cascade-revoked ANCESTOR — caught
-     * independently of how `resolveDelegationChain` hydrated the chain (it walks
-     * the delegation graph + StatusList). `CascadingRevocationManager` is the
-     * reference adapter. Omit to keep the prior per-credential-status behavior.
-     */
-    revocationChecker?: RevocationChecker;
-    /**
-     * Holder-of-key enforcement for inbound calls (spec §11.8). A valid delegation
-     * is a *bearer* credential; holder binding additionally requires the caller to
-     * present a per-request proof (`_kyaos_proof`) signed by the delegation
-     * SUBJECT's key, closing theft-replay for the key-bearing population.
-     *
-     * - `'off'` (default): no holder-binding check — current behavior, unchanged.
-     * - `'warn'`: check and log failures (missing/unbound proof), but still allow.
-     * - `'enforce'`: reject calls whose proof is missing or does not bind the
-     *   subject. **Breaking for callers that don't yet send `_kyaos_proof`** — opt
-     *   in only once your agents mint request proofs.
-     *
-     * Scope is did:key subjects (the DID encodes the key). did:web and other
-     * subjects are deferred to cnf-based binding (phase 2) and logged, never
-     * rejected — so enabling `'enforce'` never breaks did:web traffic.
-     */
-    holderBinding?: "off" | "warn" | "enforce";
-}
-export interface KyaOsConfig {
-    /** Agent identity (DID + key material) */
-    identity: KyaOsIdentityConfig;
-    /** Session configuration overrides */
-    session?: Omit<SessionConfig, "nonceCache">;
-    /**
-     * Replay-protection store, shared by the session handshake AND inbound holder
-     * binding so both draw on one nonce namespace. Defaults to an in-memory store
-     * (single-process only); inject a Redis / Durable Object / KV-backed
-     * {@link NonceCacheProvider} for multi-instance deployments. Set here, not on
-     * `session`, so there is exactly one cache and the two cannot diverge.
-     */
-    nonceCache?: NonceCacheProvider;
-    /**
-     * Durable store for approved authorization grants, enabling the no-paste
-     * retry: an agent that already obtained a grant can call again — even on a
-     * fresh instance with empty memory, or after a restart — without re-pasting
-     * the delegation. Defaults to an in-memory {@link MemoryGrantStore}
-     * (single-process only); inject a Redis / Durable Object / DB-backed
-     * {@link GrantStore} for multi-instance deployments. Mirrors `nonceCache?`.
-     *
-     * For the no-paste retry to actually RESOLVE a bound grant, the call must be
-     * resolvable: either holder binding is `'enforce'` and the agent presents a
-     * per-request `_kyaos_proof` (agent-anchored `getByAgent`), or the client
-     * threads its `sessionId` (session-bearer `getBySession`). A grant that would
-     * be unresolvable — holder binding `'off'` with no threaded `sessionId` — is
-     * NOT bound (it would only orphan a store row); such flows achieve durability
-     * by re-presenting the delegation instead.
-     */
-    grantStore?: GrantStore;
-    /**
-     * Whether to ALSO emit the detached proof under the legacy bare `_meta.proof`
-     * key (in addition to the namespaced `org.kya-os/proof`). The value is
-     * identical under both keys and `_meta` is excluded from the response hash
-     * (§7.6), so the mirror never affects signatures or verification.
-     *
-     * Default `true` — a transition aid so pre-1.1 clients that still read bare
-     * `proof` keep working. Set `false` once your clients read the namespaced key
-     * (the examples do this for a clean single-key Inspector view).
-     *
-     * Stays ON by default for the whole 1.x line (a pre-1.1 reader of bare
-     * `_meta.proof` would otherwise silently get no proof); the legacy mirror is
-     * dropped at 2.0.
-     */
-    emitLegacyProofKey?: boolean;
-    /** Delegation verification overrides */
-    delegation?: KyaOsDelegationConfig;
-    /**
-     * When true, automatically creates a session on the first tool call
-     * if no session exists. Useful for demos and development where
-     * MCP clients don't support the `_kyaos` handshake flow.
-     * In production, KYA-OS-aware runtimes should execute handshake before tool calls.
-     */
-    autoSession?: boolean;
-    /**
-     * Sink for retaining audit records of verified tool calls. Defaults to a
-     * no-op; supply an {@link AuditLogProvider} (e.g. a durable, append-only
-     * implementation) to capture an audit trail.
-     */
-    auditLog?: AuditLogProvider;
-}
-export interface KyaOsToolDefinition {
-    name: string;
-    description?: string;
-    inputSchema: {
-        type: "object";
-        properties?: Record<string, unknown>;
-        required?: string[];
-        [key: string]: unknown;
-    };
-}
-/**
- * Per-call context threaded through the middleware wrappers (not part of the
- * tool's public arguments). `wrapWithDelegation` populates `scopeId` so the
- * proof and audit record reflect the scope the call was authorized under.
- */
-export interface KyaOsCallContext {
-    scopeId?: string;
-}
-export interface KyaOsToolHandler<T extends Record<string, unknown> = Record<string, unknown>> {
-    (args: T, sessionId?: string, context?: KyaOsCallContext): Promise<{
-        content: Array<{
-            type: string;
-            text: string;
-            [key: string]: unknown;
-        }>;
-        isError?: boolean;
-        [key: string]: unknown;
-    }>;
-}
-/**
- * Server interface — minimal subset of @modelcontextprotocol/sdk Server.
- * This avoids a hard dependency on the SDK at the type level.
- */
-export interface KyaOsServer {
-    setRequestHandler(schema: unknown, handler: (...args: unknown[]) => unknown): void;
-}
-export interface KyaOsMiddleware {
-    /** The identity config used by this middleware instance */
-    identity: KyaOsIdentityConfig;
-    /** The SessionManager instance for manual session operations */
-    sessionManager: SessionManager;
-    /** The ProofGenerator instance for manual proof operations */
-    proofGenerator: ProofGenerator;
-    /**
-     * Unified tool definition for `_kyaos`.
-     * Include this in your ListToolsRequest handler's tool list.
-     */
-    kyaOsTool: KyaOsToolDefinition;
-    /**
-     * @deprecated Use `kyaOsTool` (`_kyaos` with `action: "handshake"`).
-     * Tool definition for `_kyaos_handshake`.
-     * Include this in your ListToolsRequest handler's tool list.
-     */
-    handshakeTool: KyaOsToolDefinition;
-    /**
-     * Handle a unified `_kyaos` action. Use this in your CallToolRequest handler
-     * when `request.params.name === '_kyaos'`.
-     */
-    handleKyaOs(args: Record<string, unknown>): Promise<{
-        content: Array<{
-            type: string;
-            text: string;
-        }>;
-        isError?: boolean;
-    }>;
-    /**
-     * @deprecated Use `handleKyaOs` with `action: "handshake"`.
-     * Handle a handshake call. Use this in your CallToolRequest handler
-     * when `request.params.name === '_kyaos_handshake'`.
-     */
-    handleHandshake(args: Record<string, unknown>): Promise<{
-        content: Array<{
-            type: string;
-            text: string;
-        }>;
-        isError?: boolean;
-    }>;
-    /**
-     * Wrap a tool handler to automatically generate proofs.
-     * Returns a new handler that appends proof metadata to the response.
-     */
-    wrapWithProof<T extends Record<string, unknown> = Record<string, unknown>>(toolName: string, handler: KyaOsToolHandler<T>): KyaOsToolHandler;
-    /**
-     * Wrap a tool handler to require a valid W3C Delegation Credential.
-     *
-     * Caller must pass the VC as `_kyaos_delegation` in the tool args.
-     * - If absent: returns a `needs_authorization` response with the consentUrl.
-     * - If present but invalid: returns a structured error with reason.
-     * - If valid with correct scope: strips `_kyaos_delegation` and calls the handler.
-     */
-    wrapWithDelegation(toolName: string, config: {
-        scopeId: string;
-        consentUrl: string;
-        /**
-         * Optional presentation hook for the `needs_authorization` challenge.
-         * Given the structured challenge, return the tool-response content to emit
-         * (e.g. a markdown "Authorize" link for LLM / chat-style MCP clients that
-         * won't parse raw JSON). The signed challenge proof binds a `responseHash`
-         * over WHATEVER this returns, so the `authorizationUrl` stays tamper-evident
-         * regardless of presentation. Defaults to the structured challenge as JSON.
-         */
-        formatChallenge?: (challenge: NeedsAuthorizationError) => Array<{
-            type: "text";
-            text: string;
-        }>;
-    }, handler: KyaOsToolHandler): KyaOsToolHandler;
-    /**
-     * Wrap a tool handler with a per-action policy / step-up gate.
-     *
-     * Compose after `wrapWithDelegation`. Classifies the action's risk and asks a
-     * pluggable PolicyEngine: allow → run handler; deny → signed denial proof;
-     * step_up → `needs_approval` until N-of-M signed approval grants (bound to the
-     * request hash) are supplied.
-     */
-    withPolicyGate?(toolName: string, handler: KyaOsToolHandler, opts?: PolicyGateOptions): KyaOsToolHandler;
-}
-export interface PolicyGateOptions {
-    /** Policy decision engine. Defaults to a fail-closed DefaultPolicyEngine. */
-    engine?: PolicyEngine;
-    /** Risk classifier. Defaults to the built-in RiskClassifier. */
-    classifier?: RiskClassifier;
-    /** Derive the resource namespace from the tool args (defaults to the tool name). */
-    resolveNamespace?: (args: Record<string, unknown>) => string;
-    /** Tool-arg key carrying approval grants on resume. Default "_kyaos_approvals". */
-    approvalsArgKey?: string;
-    /** Verifier for approval-grant signatures (identity-layer). Default: reject all. */
-    isValidApprovalSignature?: (grant: ApprovalGrant) => Promise<boolean>;
-    /**
-     * Whether a prior step already authorized this action's scope/identity.
-     *
-     * Defaults to FALSE (fail-closed): used standalone, withPolicyGate enforces no
-     * scope or identity, so it must NOT be trusted to allow on its own. When you
-     * compose it AFTER wrapWithDelegation (the expected usage), pass
-     * `scopeMatched: true` to signal that the delegated scope was already verified.
-     * Note: principal facts are projected from the (unverified) `_kyaos_delegation`
-     * arg on a best-effort basis and must not be treated as authenticated unless
-     * wrapWithDelegation ran first.
-     */
-    scopeMatched?: boolean;
-}
+import { type CryptoProvider } from "../providers/base.js";
+import { type KyaOsConfig, type KyaOsMiddleware } from "./with-kya-os.types.js";
+export * from "./with-kya-os.types.js";
 /**
  * Create KYA-OS middleware for a standard MCP SDK Server.
  *

package/dist/middleware/with-kya-os.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"with-kya-os.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAwB,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,UAAU,EAAgC,MAAM,6BAA6B,CAAC;AACvF,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EAMf,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAEL,KAAK,WAAW,EAEhB,KAAK,kBAAkB,EACxB,MAAM,8BAA8B,CAAC;AAatC,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAGL,KAAK,oBAAoB,EAEzB,KAAK,uBAAuB,EAC7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMxD,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,kDAAmD,CAAC;AAG/E,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,sBAAsB,CAAC,EAAE,CACvB,cAAc,EAAE,oBAAoB,KACjC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACrC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;;;;;;;;;;OAeG;IACH,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,sCAAsC;IACtC,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC;;;;;;;;;;;;;;;OAeG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,wCAAwC;IACxC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB,CAC/B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE3D,CACE,IAAI,EAAE,CAAC,EACP,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC;QACT,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAC;QACvE,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,iBAAiB,CACf,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GACvC,IAAI,CAAC;CACT;AAED,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,QAAQ,EAAE,mBAAmB,CAAC;IAE9B,gEAAgE;IAChE,cAAc,EAAE,cAAc,CAAC;IAE/B,8DAA8D;IAC9D,cAAc,EAAE,cAAc,CAAC;IAE/B;;;OAGG;IACH,SAAS,EAAE,mBAAmB,CAAC;IAE/B;;;;OAIG;IACH,aAAa,EAAE,mBAAmB,CAAC;IAEnC;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAClD,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IAEH;;;;OAIG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QACtD,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvE,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,gBAAgB,CAAC;IAEpB;;;;;;;OAOG;IACH,kBAAkB,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB;;;;;;;WAOG;QACH,eAAe,CAAC,EAAE,CAChB,SAAS,EAAE,uBAAuB,KAC/B,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC5C,EACD,OAAO,EAAE,gBAAgB,GACxB,gBAAgB,CAAC;IAEpB;;;;;;;OAOG;IAGH,cAAc,CAAC,CACb,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,gBAAgB,EACzB,IAAI,CAAC,EAAE,iBAAiB,GACvB,gBAAgB,CAAC;CACrB;AAwBD,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,gEAAgE;IAChE,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC;IAC7D,mFAAmF;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAmCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,EACnB,cAAc,EAAE,cAAc,GAC7B,eAAe,CAknCjB"}
+{"version":3,"file":"with-kya-os.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAa3D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAUhC,cAAc,wBAAwB,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,EACnB,cAAc,EAAE,cAAc,GAC7B,eAAe,CA2GjB"}

package/dist/middleware/with-kya-os.delegation-gate.d.ts

@@ -0,0 +1,19 @@
+/**
+ * KYA-OS Middleware — the delegation gate (`wrapWithDelegation`).
+ *
+ * Requires a valid W3C Delegation Credential (or a durable grant / no-paste
+ * retry), enforces holder-of-key binding (spec §11.8) and scope, then strips the
+ * `_kyaos*` control namespace and runs the handler. Extracted from
+ * `./with-kya-os.ts`; verification plumbing lives in `./with-kya-os.delegation-verify.ts`.
+ */
+import type { KyaOsDelegationGate } from "./with-kya-os.types.js";
+import type { MiddlewareDeps, AttachOutcomeProof } from "./with-kya-os.deps.js";
+import type { GrantResolution } from "./with-kya-os.grants.js";
+/** Collaborators the delegation gate borrows from its sibling sub-factories. */
+export interface DelegationGateWiring {
+    attachOutcomeProof: AttachOutcomeProof;
+    resolveExistingGrant: GrantResolution["resolveExistingGrant"];
+    bindGrantOnSuccess: GrantResolution["bindGrantOnSuccess"];
+}
+export declare function createDelegationGate(deps: MiddlewareDeps, wiring: DelegationGateWiring): Pick<KyaOsDelegationGate, "wrapWithDelegation">;
+//# sourceMappingURL=with-kya-os.delegation-gate.d.ts.map

package/dist/middleware/with-kya-os.delegation-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.delegation-gate.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.delegation-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgBH,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAO/D,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,eAAe,CAAC,sBAAsB,CAAC,CAAC;IAC9D,kBAAkB,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAC;CAC3D;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAuPjD"}

package/dist/middleware/with-kya-os.delegation-gate.js

@@ -0,0 +1,175 @@
+/**
+ * KYA-OS Middleware — the delegation gate (`wrapWithDelegation`).
+ *
+ * Requires a valid W3C Delegation Credential (or a durable grant / no-paste
+ * retry), enforces holder-of-key binding (spec §11.8) and scope, then strips the
+ * `_kyaos*` control namespace and runs the handler. Extracted from
+ * `./with-kya-os.ts`; verification plumbing lives in `./with-kya-os.delegation-verify.ts`.
+ */
+import { isHolderBindingApplicable, isKyaOsControlArg, assertHolderBinding, toHolderBindingRequest, } from "../delegation/holder-binding.js";
+import { scopeSatisfies } from "../delegation/scope-matcher.js";
+import { parseVCJWT } from "../delegation/utils.js";
+import { logger } from "../logging/index.js";
+import { KYA_OS_ERROR_CODES } from "../errors.js";
+import { sanitizeForMessage } from "./with-kya-os.helpers.js";
+import { createDelegationVerification, } from "./with-kya-os.delegation-verify.js";
+export function createDelegationGate(deps, wiring) {
+    const { identity, holderBindingMode, holderBindingVerifier } = deps;
+    const { attachOutcomeProof, resolveExistingGrant, bindGrantOnSuccess } = wiring;
+    const { validateDelegationChain, buildDelegationErrorResponse, buildNeedsAuthorizationChallenge, } = createDelegationVerification(deps);
+    function wrapWithDelegation(toolName, config, handler) {
+        return async (args, sessionId) => {
+            const delegationArg = args["_kyaos_delegation"];
+            if (delegationArg === undefined || delegationArg === null) {
+                // No delegation pasted — a durable grant may already authorize this call
+                // (the no-paste retry), even on a fresh instance with empty memory.
+                // Holder-of-key first (agent-anchored, proof-gated), then the session
+                // bearer capability. On a hit, skip the challenge and run the handler
+                // with exactly the call shape a verified delegation would have produced.
+                const existingGrant = await resolveExistingGrant(toolName, args, sessionId, config.scopeId);
+                if (existingGrant) {
+                    const grantArgs = {};
+                    for (const [k, v] of Object.entries(args)) {
+                        if (!isKyaOsControlArg(k))
+                            grantArgs[k] = v;
+                    }
+                    logger.debug(`[kya-os] Grant resolved for "${toolName}" (scope "${config.scopeId}") — no re-paste required`);
+                    return handler(grantArgs, sessionId, { scopeId: config.scopeId });
+                }
+                // No delegation provided — sign & return the needs_authorization
+                // challenge. The proof binds a responseHash over the EMITTED challenge
+                // content (incl. the authorizationUrl), so a verifier that recomputes it
+                // over the content it received detects a tampered/MITM-swapped consent
+                // URL. Best-effort: attachOutcomeProof no-ops if no session resolves.
+                const { challengeContent, message } = await buildNeedsAuthorizationChallenge(toolName, config);
+                return attachOutcomeProof({ content: challengeContent }, toolName, args, sessionId, message, "needs_authorization", undefined, challengeContent);
+            }
+            // Accept delegation as either a JSON object (embedded proof) or a
+            // VC-JWT string (compact JWT). The Cloudflare consent service issues
+            // VC-JWTs; examples use embedded proofs. Support both transparently.
+            let vc;
+            let isVCJWT = false;
+            if (typeof delegationArg === "string") {
+                const parsed = parseVCJWT(delegationArg);
+                if (!parsed || !parsed.payload.vc) {
+                    return attachOutcomeProof(buildDelegationErrorResponse(KYA_OS_ERROR_CODES.delegation_invalid, "Invalid VC-JWT format"), toolName, args, sessionId, "Invalid VC-JWT format");
+                }
+                vc = parsed.payload.vc;
+                // VC-JWTs don't have an embedded proof — the JWT signature is the
+                // proof. Add a marker so basic validation (which checks for proof
+                // presence) passes. The actual signature is in the JWT envelope.
+                if (!vc.proof) {
+                    vc = { ...vc, proof: { type: 'JwtProof2020', jwt: delegationArg } };
+                }
+                isVCJWT = true;
+            }
+            else {
+                vc = delegationArg;
+            }
+            // For VC-JWTs the embedded-signature check is skipped (the JWT envelope
+            // signature is the proof); schema/expiry/status/scope checks still apply.
+            // validateDelegationChain performs the shape check and returns
+            // { valid, reason } for malformed input, never throwing on normal or
+            // structurally-malformed credentials. This try/catch is therefore a PURE
+            // BACKSTOP — it fires only on a truly unexpected throw (e.g. a hostile
+            // getter/Proxy accessor or a provider fault): it logs the detail
+            // server-side and returns a GENERIC reason, so no internal/implementation
+            // detail (stack, raw error text) leaks to the client or the signed proof.
+            const verificationResult = await (async () => {
+                try {
+                    return await validateDelegationChain(vc, { skipSignature: isVCJWT });
+                }
+                catch (error) {
+                    logger.error("[kya-os] Unexpected error verifying delegation", {
+                        tool: toolName,
+                        error: error instanceof Error ? error.message : String(error),
+                        stack: error instanceof Error ? error.stack : undefined,
+                    });
+                    return { valid: false, reason: "Delegation credential could not be verified" };
+                }
+            })();
+            if (!verificationResult.valid) {
+                const reason = verificationResult.reason ?? "Unknown delegation validation error";
+                logger.warn(`[kya-os] Delegation verification failed for "${toolName}": ${sanitizeForMessage(reason)}`);
+                return attachOutcomeProof(buildDelegationErrorResponse(KYA_OS_ERROR_CODES.delegation_invalid, reason), toolName, args, sessionId, reason);
+            }
+            // Holder binding (spec §11.8): the delegation is valid, but a valid
+            // *credential* is a bearer token until we also prove the caller holds the
+            // delegation SUBJECT's key. Opt-in via `delegation.holderBinding`. did:key
+            // subjects are bound here; did:web is deferred to cnf binding (phase 2) and
+            // logged, never rejected. Runs after identity is established, before scope.
+            if (holderBindingMode !== "off" && holderBindingVerifier) {
+                const subjectDid = vc.credentialSubject?.id;
+                if (subjectDid && isHolderBindingApplicable(subjectDid)) {
+                    const proofArg = args["_kyaos_proof"];
+                    if (proofArg === undefined) {
+                        const reason = "Holder-of-key proof (_kyaos_proof) is required for this delegation subject";
+                        logger.warn(`[kya-os] Holder binding: "${toolName}" called without _kyaos_proof`);
+                        if (holderBindingMode === "enforce") {
+                            return attachOutcomeProof(buildDelegationErrorResponse(KYA_OS_ERROR_CODES.holder_binding_failed, reason), toolName, args, sessionId, reason);
+                        }
+                    }
+                    else {
+                        let parsedProof = proofArg;
+                        if (typeof proofArg === "string") {
+                            try {
+                                parsedProof = JSON.parse(proofArg);
+                            }
+                            catch {
+                                parsedProof = {};
+                            }
+                        }
+                        const binding = await assertHolderBinding({
+                            proof: parsedProof,
+                            subjectDid,
+                            request: toHolderBindingRequest(toolName, args),
+                            expectedAudience: identity.did,
+                            proofVerifier: holderBindingVerifier,
+                        });
+                        if (binding.status !== "bound") {
+                            const reason = binding.reason ??
+                                "Holder-of-key proof did not bind the delegation subject";
+                            logger.warn(`[kya-os] Holder binding ${binding.status} for "${toolName}": ${sanitizeForMessage(reason)}`);
+                            if (holderBindingMode === "enforce") {
+                                return attachOutcomeProof(buildDelegationErrorResponse(KYA_OS_ERROR_CODES.holder_binding_failed, reason), toolName, args, sessionId, reason);
+                            }
+                        }
+                    }
+                }
+                else if (subjectDid) {
+                    // Non-did:key subject — phase 1 cannot pin its key; defer to cnf
+                    // binding (phase 2) rather than reject legitimate traffic.
+                    logger.warn(`[kya-os] Holder binding: subject "${subjectDid}" is not did:key; deferring to cnf binding (phase 2)`);
+                }
+            }
+            // Safe to call directly: the structural guard + validateDelegationChain
+            // above guarantee a well-formed credential here, and scopeSatisfies is
+            // bounded (ReDoS-guarded) and returns rather than throws.
+            const scopeResult = scopeSatisfies(config.scopeId, vc);
+            if (scopeResult.usedNonExactMatcher) {
+                logger.warn(`[kya-os] Scope "${config.scopeId}" for "${toolName}" granted via a non-exact ` +
+                    `(prefix/regex) matcher. Verify this is intended — non-exact matchers widen authority.`);
+            }
+            if (!scopeResult.satisfied) {
+                const reason = `Required scope "${config.scopeId}" not in delegation scopes`;
+                logger.warn(`[kya-os] Delegation missing required scope "${config.scopeId}" for "${toolName}"`);
+                return attachOutcomeProof(buildDelegationErrorResponse(KYA_OS_ERROR_CODES.insufficient_scope, reason), toolName, args, sessionId, reason);
+            }
+            // Strip the reserved _kyaos* control namespace before passing to the
+            // handler — same predicate the bound request hash uses, so the handler
+            // receives exactly the call the subject signed (no smuggled control arg).
+            const cleanArgs = {};
+            for (const [k, v] of Object.entries(args)) {
+                if (!isKyaOsControlArg(k))
+                    cleanArgs[k] = v;
+            }
+            // Mint a durable grant from this verified delegation so the next call —
+            // on any instance — resolves via resolveExistingGrant with no re-paste.
+            await bindGrantOnSuccess(vc, delegationArg, isVCJWT, sessionId, config.scopeId);
+            logger.debug(`[kya-os] Delegation verified for "${toolName}", scope "${config.scopeId}"`);
+            return handler(cleanArgs, sessionId, { scopeId: config.scopeId });
+        };
+    }
+    return { wrapWithDelegation };
+}
+//# sourceMappingURL=with-kya-os.delegation-gate.js.map

package/dist/middleware/with-kya-os.delegation-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.delegation-gate.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os.delegation-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAKpD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAOlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EACL,4BAA4B,GAE7B,MAAM,oCAAoC,CAAC;AAS5C,MAAM,UAAU,oBAAoB,CAClC,IAAoB,EACpB,MAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;IACpE,MAAM,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,GACpE,MAAM,CAAC;IACT,MAAM,EACJ,uBAAuB,EACvB,4BAA4B,EAC5B,gCAAgC,GACjC,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAEvC,SAAS,kBAAkB,CACzB,QAAgB,EAChB,MAA4B,EAC5B,OAAyB;QAEzB,OAAO,KAAK,EAAE,IAA6B,EAAE,SAAkB,EAAE,EAAE;YACjE,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAEhD,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC1D,yEAAyE;gBACzE,oEAAoE;gBACpE,sEAAsE;gBACtE,sEAAsE;gBACtE,yEAAyE;gBACzE,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAC9C,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,MAAM,CAAC,OAAO,CACf,CAAC;gBACF,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,SAAS,GAA4B,EAAE,CAAC;oBAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1C,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;4BAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC9C,CAAC;oBACD,MAAM,CAAC,KAAK,CACV,gCAAgC,QAAQ,aAAa,MAAM,CAAC,OAAO,2BAA2B,CAC/F,CAAC;oBACF,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpE,CAAC;gBAED,iEAAiE;gBACjE,uEAAuE;gBACvE,yEAAyE;gBACzE,uEAAuE;gBACvE,sEAAsE;gBACtE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,GACjC,MAAM,gCAAgC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC3D,OAAO,kBAAkB,CACvB,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAC7B,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,OAAO,EACP,qBAAqB,EACrB,SAAS,EACT,gBAAgB,CACjB,CAAC;YACJ,CAAC;YAED,kEAAkE;YAClE,qEAAqE;YACrE,qEAAqE;YACrE,IAAI,EAAwB,CAAC;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAClC,OAAO,kBAAkB,CACvB,4BAA4B,CAC1B,kBAAkB,CAAC,kBAAkB,EACrC,uBAAuB,CACxB,EACD,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,uBAAuB,CACxB,CAAC;gBACJ,CAAC;gBACD,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAA0B,CAAC;gBAC/C,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;oBACd,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC;gBACtE,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,EAAE,GAAG,aAAqC,CAAC;YAC7C,CAAC;YAED,wEAAwE;YACxE,0EAA0E;YAC1E,+DAA+D;YAC/D,qEAAqE;YACrE,yEAAyE;YACzE,uEAAuE;YACvE,iEAAiE;YACjE,0EAA0E;YAC1E,0EAA0E;YAC1E,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,IAGpC,EAAE;gBACH,IAAI,CAAC;oBACH,OAAO,MAAM,uBAAuB,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;gBACvE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;wBAC7D,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;qBACxD,CAAC,CAAC;oBACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;gBACjF,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,IAAI,qCAAqC,CAAC;gBAClF,MAAM,CAAC,IAAI,CACT,gDAAgD,QAAQ,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAC3F,CAAC;gBACF,OAAO,kBAAkB,CACvB,4BAA4B,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAC3E,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,MAAM,CACP,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,0EAA0E;YAC1E,2EAA2E;YAC3E,4EAA4E;YAC5E,4EAA4E;YAC5E,IAAI,iBAAiB,KAAK,KAAK,IAAI,qBAAqB,EAAE,CAAC;gBACzD,MAAM,UAAU,GAAG,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBAC5C,IAAI,UAAU,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;oBACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAC3B,MAAM,MAAM,GACV,4EAA4E,CAAC;wBAC/E,MAAM,CAAC,IAAI,CACT,6BAA6B,QAAQ,+BAA+B,CACrE,CAAC;wBACF,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;4BACpC,OAAO,kBAAkB,CACvB,4BAA4B,CAC1B,kBAAkB,CAAC,qBAAqB,EACxC,MAAM,CACP,EACD,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,MAAM,CACP,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,IAAI,WAAW,GAAY,QAAQ,CAAC;wBACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;4BACjC,IAAI,CAAC;gCACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;4BACrC,CAAC;4BAAC,MAAM,CAAC;gCACP,WAAW,GAAG,EAAE,CAAC;4BACnB,CAAC;wBACH,CAAC;wBACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;4BACxC,KAAK,EAAE,WAA4B;4BACnC,UAAU;4BACV,OAAO,EAAE,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC;4BAC/C,gBAAgB,EAAE,QAAQ,CAAC,GAAG;4BAC9B,aAAa,EAAE,qBAAqB;yBACrC,CAAC,CAAC;wBACH,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;4BAC/B,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;gCACd,yDAAyD,CAAC;4BAC5D,MAAM,CAAC,IAAI,CACT,2BAA2B,OAAO,CAAC,MAAM,SAAS,QAAQ,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAC7F,CAAC;4BACF,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;gCACpC,OAAO,kBAAkB,CACvB,4BAA4B,CAC1B,kBAAkB,CAAC,qBAAqB,EACxC,MAAM,CACP,EACD,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,MAAM,CACP,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,IAAI,UAAU,EAAE,CAAC;oBACtB,iEAAiE;oBACjE,2DAA2D;oBAC3D,MAAM,CAAC,IAAI,CACT,qCAAqC,UAAU,sDAAsD,CACtG,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,0DAA0D;YAC1D,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACvD,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CACT,mBAAmB,MAAM,CAAC,OAAO,UAAU,QAAQ,4BAA4B;oBAC7E,uFAAuF,CAC1F,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,mBAAmB,MAAM,CAAC,OAAO,4BAA4B,CAAC;gBAC7E,MAAM,CAAC,IAAI,CACT,+CAA+C,MAAM,CAAC,OAAO,UAAU,QAAQ,GAAG,CACnF,CAAC;gBACF,OAAO,kBAAkB,CACvB,4BAA4B,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAC3E,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,MAAM,CACP,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,uEAAuE;YACvE,0EAA0E;YAC1E,MAAM,SAAS,GAA4B,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC;YAED,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhF,MAAM,CAAC,KAAK,CACV,qCAAqC,QAAQ,aAAa,MAAM,CAAC,OAAO,GAAG,CAC5E,CAAC;YACF,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAChC,CAAC"}

package/dist/middleware/with-kya-os.delegation-verify.d.ts

@@ -0,0 +1,51 @@
+/**
+ * KYA-OS Middleware — delegation verification plumbing.
+ *
+ * Builds the DID resolver, the embedded-proof signature verifier, the
+ * `DelegationCredentialVerifier`, and the framework-agnostic chain-validation
+ * adapter (chain-enforcement.ts) once per middleware instance. Extracted from
+ * `wrapWithDelegation` so the gate module holds only the request flow.
+ */
+import { type DelegationCredential, type NeedsAuthorizationError } from "../types/protocol.js";
+import type { KyaOsToolHandler } from "./with-kya-os.types.js";
+import type { MiddlewareDeps } from "./with-kya-os.deps.js";
+/** Per-tool delegation-gate config shared by the gate + its challenge builder. */
+export interface DelegationGateConfig {
+    scopeId: string;
+    consentUrl: string;
+    formatChallenge?: (challenge: NeedsAuthorizationError) => Array<{
+        type: "text";
+        text: string;
+    }>;
+}
+export interface DelegationVerification {
+    /**
+     * Thin adapter over the framework-agnostic core (chain-enforcement.ts): binds
+     * the host's injected verifier + server DID + resolver + the optional
+     * graph-backed RevocationChecker. Returns `{ valid, reason }`, never throws on
+     * normal or structurally-malformed credentials.
+     */
+    validateDelegationChain(leafCredential: DelegationCredential, options?: {
+        skipSignature?: boolean;
+    }): Promise<{
+        valid: boolean;
+        reason?: string;
+    }>;
+    /** A structured `{ error, reason }` tool response with a sanitized reason. */
+    buildDelegationErrorResponse(error: string, reason: string): Awaited<ReturnType<KyaOsToolHandler>>;
+    /**
+     * Build the signed-later `needs_authorization` challenge for a call that
+     * arrived without a delegation or resolvable grant: a fresh resume token, a
+     * 5-minute expiry, and the emitted content (respecting `config.formatChallenge`,
+     * which falls back to the default JSON challenge if it throws).
+     */
+    buildNeedsAuthorizationChallenge(toolName: string, config: DelegationGateConfig): Promise<{
+        challengeContent: Array<{
+            type: "text";
+            text: string;
+        }>;
+        message: string;
+    }>;
+}
+export declare function createDelegationVerification(deps: MiddlewareDeps): DelegationVerification;
+//# sourceMappingURL=with-kya-os.delegation-verify.d.ts.map

package/dist/middleware/with-kya-os.delegation-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.delegation-verify.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.delegation-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiBH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,CAChB,SAAS,EAAE,uBAAuB,KAC/B,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,uBAAuB,CACrB,cAAc,EAAE,oBAAoB,EACpC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACpC,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,8EAA8E;IAC9E,4BAA4B,CAC1B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACzC;;;;;OAKG;IACH,gCAAgC,CAC9B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC;QACT,gBAAgB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACxD,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,cAAc,GACnB,sBAAsB,CAuLxB"}