@1mcp/agent 0.35.0-beta.3 → 0.35.0-beta.4

package/build/transport/http/streamableSessionLifecycle.js

@@ -4,6 +4,7 @@ import { AUTH_CONFIG } from '../../constants.js';
 import { ServerStatus } from '../../core/types/index.js';
 import logger from '../../logger/logger.js';
 import { RestorableStreamableHTTPServerTransport } from '../../transport/http/restorableStreamableTransport.js';
+import { authorizeRequestTemplateContext } from '../../transport/http/utils/templateContextAuthority.js';
 import { logError } from '../../transport/http/utils/unifiedLogger.js';
 import { withCanonicalSessionId } from '../../utils/context/sessionIdentity.js';
 export var StreamableSessionStatus;
@@ -87,8 +88,8 @@ export class StreamableSessionLifecycle {
                     reason: StreamableSessionMissingReason.InitializeRequired,
                 };
             }
-            const { config, context } = input.createSessionData();
-            return this.createSession(config, context);
+            const { config, context, contextProof } = input.createSessionData();
+            return this.createSession(config, context, undefined, StreamableSessionStatus.Created, contextProof);
         }
         const existing = await this.resolveExistingSession(input.sessionId);
         if (existing.status !== StreamableSessionStatus.Missing) {
@@ -108,8 +109,8 @@ export class StreamableSessionLifecycle {
                 reason: StreamableSessionMissingReason.InvalidSession,
             };
         }
-        const { config, context } = input.createSessionData();
-        return this.createSession(config, context, input.sessionId, StreamableSessionStatus.InitializeRecovered);
+        const { config, context, contextProof } = input.createSessionData();
+        return this.createSession(config, context, input.sessionId, StreamableSessionStatus.InitializeRecovered, contextProof);
     }
     async resolveExistingSession(sessionId) {
         if (!isValidSessionId(sessionId)) {
@@ -177,8 +178,23 @@ export class StreamableSessionLifecycle {
             logger.info(`Restoring streamable session: ${sessionId}`);
             const transport = this.createRestorableTransportImpl(sessionId);
             const contextData = buildContextData(config, sessionId);
+            const authorization = contextData
+                ? authorizeRequestTemplateContext({
+                    context: contextData,
+                    proof: config.contextProof,
+                    transportSessionId: sessionId,
+                    source: 'persisted',
+                })
+                : undefined;
+            if (authorization && authorization.status !== 'trusted') {
+                return {
+                    transport: null,
+                    errorType: StreamableSessionRestoreErrorType.ContextInvalid,
+                    error: 'Persisted template context is not trusted. Please initialize a new session.',
+                };
+            }
             try {
-                await this.serverManager.connectTransport(transport, sessionId, config, contextData);
+                await this.serverManager.connectTransport(transport, sessionId, config, authorization?.status === 'trusted' ? authorization.context : undefined);
             }
             catch (connectError) {
                 const errorMessage = connectError instanceof Error ? connectError.message : String(connectError);
@@ -214,7 +230,7 @@ export class StreamableSessionLifecycle {
             return { transport: null, error: errorMessage, errorType: StreamableSessionRestoreErrorType.TransportFailed };
         }
     }
-    async createSession(config, context, providedSessionId, status = StreamableSessionStatus.Created) {
+    async createSession(config, context, providedSessionId, status = StreamableSessionStatus.Created, contextProof) {
         const sessionId = providedSessionId || AUTH_CONFIG.SERVER.STREAMABLE_SESSION.ID_PREFIX + randomUUID();
         let transport;
         try {
@@ -235,6 +251,7 @@ export class StreamableSessionLifecycle {
         const configWithContext = {
             ...config,
             context: canonicalContext,
+            contextProof,
         };
         try {
             await this.serverManager.connectTransport(transport, sessionId, configWithContext, validContext);

package/build/transport/http/streamableSessionLifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"streamableSessionLifecycle.js","sourceRoot":"","sources":["../../../src/transport/http/streamableSessionLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAGnG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAA2B,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAC3C,OAAO,EAAE,uCAAuC,EAAE,MAAM,sDAAsD,CAAC;AAE/G,OAAO,EAAE,QAAQ,EAAE,MAAM,4CAA4C,CAAC;AAEtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAI/E,MAAM,CAAN,IAAY,uBAMX;AAND,WAAY,uBAAuB;IACjC,8CAAmB,CAAA;IACnB,uEAA4C,CAAA;IAC5C,4CAAiB,CAAA;IACjB,gDAAqB,CAAA;IACrB,8CAAmB,CAAA;AACrB,CAAC,EANW,uBAAuB,KAAvB,uBAAuB,QAMlC;AAED,MAAM,CAAN,IAAY,8BAMX;AAND,WAAY,8BAA8B;IACxC,oEAAkC,CAAA;IAClC,oEAAkC,CAAA;IAClC,wDAAsB,CAAA;IACtB,kEAAgC,CAAA;IAChC,4EAA0C,CAAA;AAC5C,CAAC,EANW,8BAA8B,KAA9B,8BAA8B,QAMzC;AAED,MAAM,CAAN,IAAY,iCAKX;AALD,WAAY,iCAAiC;IAC3C,2DAAsB,CAAA;IACtB,yEAAoC,CAAA;IACpC,2EAAsC,CAAA;IACtC,uEAAkC,CAAA;AACpC,CAAC,EALW,iCAAiC,KAAjC,iCAAiC,QAK5C;AAwDD,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB;IAC/C,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC5G,MAAM,oBAAoB,GAAG,IAAI,MAAM,CACrC,IAAI,YAAY,sEAAsE,EACtF,GAAG,CACJ,CAAC;IACF,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,4BAA4B,CAAC,SAAkB;IACtD,OAAO,CACL,SAAS,YAAY,6BAA6B,IAAI,SAAS,YAAY,uCAAuC,CACnH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA+B,EAAE,SAAiB;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,OAA2C,CAAC;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;QACrC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA0B;IAM3B;IACA;IACA;IAPF,mBAAmB,CAA6C;IAChE,6BAA6B,CAAiE;IAC9F,yBAAyB,CAA2D;IAE5F,YACU,aAA4B,EAC5B,iBAA8C,EAC9C,iBAA4C,EACpD,UAA6C,EAAE;QAHvC,kBAAa,GAAb,aAAa,CAAe;QAC5B,sBAAiB,GAAjB,iBAAiB,CAA6B;QAC9C,sBAAiB,GAAjB,iBAAiB,CAA2B;QAGpD,IAAI,CAAC,mBAAmB;YACtB,OAAO,CAAC,eAAe;gBACvB,CAAC,CAAC,SAAiB,EAAE,EAAE,CACrB,IAAI,6BAA6B,CAAC;oBAChC,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;iBACpC,CAAC,CAAC,CAAC;QACR,IAAI,CAAC,6BAA6B;YAChC,OAAO,CAAC,yBAAyB;gBACjC,CAAC,CAAC,SAAiB,EAAE,EAAE,CACrB,IAAI,uCAAuC,CAAC;oBAC1C,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;iBACpC,CAAC,CAAC,CAAC;QACR,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,qBAAqB,IAAI,4BAA4B,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAA8B;QACrD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,OAAO;oBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;oBACvC,SAAS,EAAE,EAAE;oBACb,MAAM,EAAE,8BAA8B,CAAC,kBAAkB;iBAC1D,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,8BAA8B,CAAC,kBAAkB;aAC1D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,8BAA8B,CAAC,cAAc;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IAC3G,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC1E,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS;gBACT,MAAM,EAAE,8BAA8B,CAAC,cAAc;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;YAC7F,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS;gBACT,MAAM,EAAE,8BAA8B,CAAC,cAAc;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC;QACrG,CAAC;QAED,OAAO;YACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;YACvC,SAAS;YACT,MAAM,EACJ,aAAa,CAAC,SAAS,KAAK,iCAAiC,CAAC,QAAQ;gBACpE,CAAC,CAAC,8BAA8B,CAAC,QAAQ;gBACzC,CAAC,CAAC,8BAA8B,CAAC,aAAa;YAClD,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,gBAAgB,EAAE,aAAa,CAAC,SAAS;SAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAC;gBAC7D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,iCAAiC,CAAC,QAAQ,EAAE,CAAC;YACpF,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,WAAW,SAAS,4DAA4D,CAAC,CAAC;gBAC9F,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,iCAAiC,CAAC,eAAe;oBAC5D,KAAK,EAAE,8EAA8E;iBACtF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC;gBAChE,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,iCAAiC,CAAC,eAAe;oBAC5D,KAAK,EAAE,gCAAgC;iBACxC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAExD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACjG,MAAM,CAAC,KAAK,CAAC,+BAA+B,SAAS,GAAG,EAAE,YAAY,CAAC,CAAC;gBACxE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,iCAAiC,CAAC,gBAAgB,EAAE,CAAC;YACjH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,QAAQ,CAAC,4DAA4D,EAAE;oBACrE,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,4BAA4B;oBAClC,SAAS;oBACT,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE;iBAC3D,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC9D,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,iCAAiC,CAAC,eAAe;oBAC5D,KAAK,EAAE,uEAAuE;iBAC/E,CAAC;YACJ,CAAC;YAED,SAAS,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAE/C,MAAM,CAAC,IAAI,CAAC,6CAA6C,SAAS,eAAe,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5G,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,wCAAwC,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,iCAAiC,CAAC,eAAe,EAAE,CAAC;QAChH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAA+B,EAC/B,OAA8B,EAC9B,iBAA0B,EAC1B,SAAkD,uBAAuB,CAAC,OAAO;QAEjF,MAAM,SAAS,GAAG,iBAAiB,IAAI,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QAEtG,IAAI,SAA8B,CAAC;QACnC,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,0CAA0C,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,6DAA6D,YAAY,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,YAAY,GAChB,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,WAAW;YAC/D,CAAC,CAAC,sBAAsB,CAAC,OAAsB,EAAE,SAAS,CAAC;YAC3D,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,gBAAgB,GAAG,YAAY,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAE3F,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,OAAO,EAAE,IAAI,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CACT,6BAA6B,gBAAgB,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC,CAAC,SAAS,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtJ,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAiE;YACtF,GAAG,MAAM;YACT,OAAO,EAAE,gBAAgB;SAC1B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,+BAA+B,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,+CAA+C,YAAY,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,gBAAoC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC5D,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,6BAA6B,SAAS,mBAAmB,gBAAgB,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAElD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACvE,CAAC;IAED,uBAAuB,CAAC,SAAiB,EAAE,kBAA0C;QACnF,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,SAAiB;QAC9C,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,yBAAyB,EAAE;gBAClC,MAAM,EAAE,wBAAwB;gBAChC,IAAI,EAAE,4BAA4B;gBAClC,SAAS;gBACT,KAAK,EAAE,iBAAiB;gBACxB,KAAK;gBACL,OAAO,EAAE,EAAE,MAAM,EAAE,wDAAwD,EAAE;aAC9E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAEO,uBAAuB,CAAC,SAAiB;QAC/C,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,uEAAuE,SAAS,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,SAA8B,EAAE,SAAiB;QAC9E,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YACvB,KAAK,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,SAAS,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,+CAA+C,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC;gBACnC,MAAM,CAAC,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,SAAkD,EAAE,SAAiB;QAC/F,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,SAAoC,CAAC;YACvD,IAAI,SAAS,CAAC,qBAAqB,EAAE,CAAC;gBACpC,IACE,SAAS,CAAC,qBAAqB,CAAC,YAAY,KAAK,SAAS;oBAC1D,OAAO,SAAS,CAAC,qBAAqB,CAAC,YAAY,KAAK,SAAS,EACjE,CAAC;oBACD,QAAQ,CAAC,qDAAqD,EAAE;wBAC9D,MAAM,EAAE,qBAAqB;wBAC7B,IAAI,EAAE,4BAA4B;wBAClC,SAAS;wBACT,KAAK,EAAE,yBAAyB;wBAChC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC,YAAY,EAAE;qBACjG,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IACE,SAAS,CAAC,qBAAqB,CAAC,SAAS,KAAK,SAAS;oBACvD,OAAO,SAAS,CAAC,qBAAqB,CAAC,SAAS,KAAK,QAAQ,EAC7D,CAAC;oBACD,QAAQ,CAAC,iDAAiD,EAAE;wBAC1D,MAAM,EAAE,qBAAqB;wBAC7B,IAAI,EAAE,4BAA4B;wBAClC,SAAS;wBACT,KAAK,EAAE,yBAAyB;wBAChC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC,SAAS,EAAE;qBAC3F,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,SAAS,CAAC,qBAAqB,CAAC,YAAY,GAAG,IAAI,CAAC;gBACpD,SAAS,CAAC,qBAAqB,CAAC,SAAS,GAAG,SAAS,CAAC;gBACtD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,QAAQ,CAAC,kEAAkE,EAAE;gBAC3E,MAAM,EAAE,qBAAqB;gBAC7B,IAAI,EAAE,4BAA4B;gBAClC,SAAS;gBACT,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,wCAAwC,EAAE;aAC9D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,iCAAiC,EAAE;gBAC1C,MAAM,EAAE,qBAAqB;gBAC7B,IAAI,EAAE,4BAA4B;gBAClC,SAAS;gBACT,KAAK,EAAE,uBAAuB;gBAC9B,KAAK;aACN,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"streamableSessionLifecycle.js","sourceRoot":"","sources":["../../../src/transport/http/streamableSessionLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAGnG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,EAA2B,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAC3C,OAAO,EAAE,uCAAuC,EAAE,MAAM,sDAAsD,CAAC;AAE/G,OAAO,EAAE,+BAA+B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,QAAQ,EAAE,MAAM,4CAA4C,CAAC;AAEtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAI/E,MAAM,CAAN,IAAY,uBAMX;AAND,WAAY,uBAAuB;IACjC,8CAAmB,CAAA;IACnB,uEAA4C,CAAA;IAC5C,4CAAiB,CAAA;IACjB,gDAAqB,CAAA;IACrB,8CAAmB,CAAA;AACrB,CAAC,EANW,uBAAuB,KAAvB,uBAAuB,QAMlC;AAED,MAAM,CAAN,IAAY,8BAMX;AAND,WAAY,8BAA8B;IACxC,oEAAkC,CAAA;IAClC,oEAAkC,CAAA;IAClC,wDAAsB,CAAA;IACtB,kEAAgC,CAAA;IAChC,4EAA0C,CAAA;AAC5C,CAAC,EANW,8BAA8B,KAA9B,8BAA8B,QAMzC;AAED,MAAM,CAAN,IAAY,iCAKX;AALD,WAAY,iCAAiC;IAC3C,2DAAsB,CAAA;IACtB,yEAAoC,CAAA;IACpC,2EAAsC,CAAA;IACtC,uEAAkC,CAAA;AACpC,CAAC,EALW,iCAAiC,KAAjC,iCAAiC,QAK5C;AAyDD,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB;IAC/C,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC5G,MAAM,oBAAoB,GAAG,IAAI,MAAM,CACrC,IAAI,YAAY,sEAAsE,EACtF,GAAG,CACJ,CAAC;IACF,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,4BAA4B,CAAC,SAAkB;IACtD,OAAO,CACL,SAAS,YAAY,6BAA6B,IAAI,SAAS,YAAY,uCAAuC,CACnH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA+B,EAAE,SAAiB;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,OAA2C,CAAC;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;QACrC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA0B;IAM3B;IACA;IACA;IAPF,mBAAmB,CAA6C;IAChE,6BAA6B,CAAiE;IAC9F,yBAAyB,CAA2D;IAE5F,YACU,aAA4B,EAC5B,iBAA8C,EAC9C,iBAA4C,EACpD,UAA6C,EAAE;QAHvC,kBAAa,GAAb,aAAa,CAAe;QAC5B,sBAAiB,GAAjB,iBAAiB,CAA6B;QAC9C,sBAAiB,GAAjB,iBAAiB,CAA2B;QAGpD,IAAI,CAAC,mBAAmB;YACtB,OAAO,CAAC,eAAe;gBACvB,CAAC,CAAC,SAAiB,EAAE,EAAE,CACrB,IAAI,6BAA6B,CAAC;oBAChC,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;iBACpC,CAAC,CAAC,CAAC;QACR,IAAI,CAAC,6BAA6B;YAChC,OAAO,CAAC,yBAAyB;gBACjC,CAAC,CAAC,SAAiB,EAAE,EAAE,CACrB,IAAI,uCAAuC,CAAC;oBAC1C,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;iBACpC,CAAC,CAAC,CAAC;QACR,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,qBAAqB,IAAI,4BAA4B,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAA8B;QACrD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,OAAO;oBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;oBACvC,SAAS,EAAE,EAAE;oBACb,MAAM,EAAE,8BAA8B,CAAC,kBAAkB;iBAC1D,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,8BAA8B,CAAC,kBAAkB;aAC1D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,8BAA8B,CAAC,cAAc;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC,aAAa,CACvB,MAAM,EACN,OAAO,EACP,KAAK,CAAC,SAAS,EACf,uBAAuB,CAAC,mBAAmB,EAC3C,YAAY,CACb,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC1E,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS;gBACT,MAAM,EAAE,8BAA8B,CAAC,cAAc;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;YAC7F,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;gBACvC,SAAS;gBACT,MAAM,EAAE,8BAA8B,CAAC,cAAc;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC;QACrG,CAAC;QAED,OAAO;YACL,MAAM,EAAE,uBAAuB,CAAC,OAAO;YACvC,SAAS;YACT,MAAM,EACJ,aAAa,CAAC,SAAS,KAAK,iCAAiC,CAAC,QAAQ;gBACpE,CAAC,CAAC,8BAA8B,CAAC,QAAQ;gBACzC,CAAC,CAAC,8BAA8B,CAAC,aAAa;YAClD,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,gBAAgB,EAAE,aAAa,CAAC,SAAS;SAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAC;gBAC7D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,iCAAiC,CAAC,QAAQ,EAAE,CAAC;YACpF,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,WAAW,SAAS,4DAA4D,CAAC,CAAC;gBAC9F,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,iCAAiC,CAAC,eAAe;oBAC5D,KAAK,EAAE,8EAA8E;iBACtF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC;gBAChE,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,iCAAiC,CAAC,eAAe;oBAC5D,KAAK,EAAE,gCAAgC;iBACxC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxD,MAAM,aAAa,GAAG,WAAW;gBAC/B,CAAC,CAAC,+BAA+B,CAAC;oBAC9B,OAAO,EAAE,WAAW;oBACpB,KAAK,EAAE,MAAM,CAAC,YAAY;oBAC1B,kBAAkB,EAAE,SAAS;oBAC7B,MAAM,EAAE,WAAW;iBACpB,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxD,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,iCAAiC,CAAC,cAAc;oBAC3D,KAAK,EAAE,6EAA6E;iBACrF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CACvC,SAAS,EACT,SAAS,EACT,MAAM,EACN,aAAa,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACxE,CAAC;YACJ,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACjG,MAAM,CAAC,KAAK,CAAC,+BAA+B,SAAS,GAAG,EAAE,YAAY,CAAC,CAAC;gBACxE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,iCAAiC,CAAC,gBAAgB,EAAE,CAAC;YACjH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,QAAQ,CAAC,4DAA4D,EAAE;oBACrE,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,4BAA4B;oBAClC,SAAS;oBACT,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE;iBAC3D,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC9D,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,iCAAiC,CAAC,eAAe;oBAC5D,KAAK,EAAE,uEAAuE;iBAC/E,CAAC;YACJ,CAAC;YAED,SAAS,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAE/C,MAAM,CAAC,IAAI,CAAC,6CAA6C,SAAS,eAAe,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5G,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,wCAAwC,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,iCAAiC,CAAC,eAAe,EAAE,CAAC;QAChH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAA+B,EAC/B,OAA8B,EAC9B,iBAA0B,EAC1B,SAAkD,uBAAuB,CAAC,OAAO,EACjF,YAAmC;QAEnC,MAAM,SAAS,GAAG,iBAAiB,IAAI,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QAEtG,IAAI,SAA8B,CAAC;QACnC,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,0CAA0C,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,6DAA6D,YAAY,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,YAAY,GAChB,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,WAAW;YAC/D,CAAC,CAAC,sBAAsB,CAAC,OAAsB,EAAE,SAAS,CAAC;YAC3D,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,gBAAgB,GAAG,YAAY,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAE3F,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,OAAO,EAAE,IAAI,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CACT,6BAA6B,gBAAgB,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC,CAAC,SAAS,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtJ,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAiE;YACtF,GAAG,MAAM;YACT,OAAO,EAAE,gBAAgB;YACzB,YAAY;SACb,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,+BAA+B,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,+CAA+C,YAAY,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,gBAAoC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC5D,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,6BAA6B,SAAS,mBAAmB,gBAAgB,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAElD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACvE,CAAC;IAED,uBAAuB,CAAC,SAAiB,EAAE,kBAA0C;QACnF,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,SAAiB;QAC9C,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,yBAAyB,EAAE;gBAClC,MAAM,EAAE,wBAAwB;gBAChC,IAAI,EAAE,4BAA4B;gBAClC,SAAS;gBACT,KAAK,EAAE,iBAAiB;gBACxB,KAAK;gBACL,OAAO,EAAE,EAAE,MAAM,EAAE,wDAAwD,EAAE;aAC9E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAEO,uBAAuB,CAAC,SAAiB;QAC/C,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,uEAAuE,SAAS,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,SAA8B,EAAE,SAAiB;QAC9E,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YACvB,KAAK,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,SAAS,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,+CAA+C,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC;gBACnC,MAAM,CAAC,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,SAAkD,EAAE,SAAiB;QAC/F,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,SAAoC,CAAC;YACvD,IAAI,SAAS,CAAC,qBAAqB,EAAE,CAAC;gBACpC,IACE,SAAS,CAAC,qBAAqB,CAAC,YAAY,KAAK,SAAS;oBAC1D,OAAO,SAAS,CAAC,qBAAqB,CAAC,YAAY,KAAK,SAAS,EACjE,CAAC;oBACD,QAAQ,CAAC,qDAAqD,EAAE;wBAC9D,MAAM,EAAE,qBAAqB;wBAC7B,IAAI,EAAE,4BAA4B;wBAClC,SAAS;wBACT,KAAK,EAAE,yBAAyB;wBAChC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC,YAAY,EAAE;qBACjG,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IACE,SAAS,CAAC,qBAAqB,CAAC,SAAS,KAAK,SAAS;oBACvD,OAAO,SAAS,CAAC,qBAAqB,CAAC,SAAS,KAAK,QAAQ,EAC7D,CAAC;oBACD,QAAQ,CAAC,iDAAiD,EAAE;wBAC1D,MAAM,EAAE,qBAAqB;wBAC7B,IAAI,EAAE,4BAA4B;wBAClC,SAAS;wBACT,KAAK,EAAE,yBAAyB;wBAChC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC,SAAS,EAAE;qBAC3F,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,SAAS,CAAC,qBAAqB,CAAC,YAAY,GAAG,IAAI,CAAC;gBACpD,SAAS,CAAC,qBAAqB,CAAC,SAAS,GAAG,SAAS,CAAC;gBACtD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,QAAQ,CAAC,kEAAkE,EAAE;gBAC3E,MAAM,EAAE,qBAAqB;gBAC7B,IAAI,EAAE,4BAA4B;gBAClC,SAAS;gBACT,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,wCAAwC,EAAE;aAC9D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,iCAAiC,EAAE;gBAC1C,MAAM,EAAE,qBAAqB;gBAC7B,IAAI,EAAE,4BAA4B;gBAClC,SAAS;gBACT,KAAK,EAAE,uBAAuB;gBAC9B,KAAK;aACN,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/build/transport/http/utils/contextExtractor.d.ts

@@ -1,27 +1,25 @@
-import type { ClientInfo, ContextData, ContextNamespace, EnvironmentContext, UserContext } from '../../../types/context.js';
+import type { TemplateContextProof } from '../../../core/context/templateContextTrust.js';
+import type { ContextData } from '../../../types/context.js';
 import type { Request } from 'express';
 export { deriveContextSessionId } from '../../../utils/context/sessionIdentity.js';
 export declare const CONTEXT_HEADERS: {
     readonly SESSION_ID: "mcp-session-id";
 };
+export interface ExtractedTemplateContextRequest {
+    context: ContextData;
+    proof?: TemplateContextProof;
+    source: 'meta' | 'query';
+}
+/**
+ * Type guard to check if a value is a valid ContextData
+ */
+export declare function isContextData(value: unknown): value is ContextData;
 /**
  * Extract context data from _meta field in request body (from STDIO proxy)
  */
-export declare function extractContextFromMeta(req: Request): {
-    project?: ContextNamespace;
-    user?: UserContext;
-    environment?: EnvironmentContext;
-    timestamp?: string;
-    version?: string;
-    sessionId?: string;
-    transport?: {
-        type: string;
-        connectionId?: string;
-        connectionTimestamp?: string;
-        client?: ClientInfo;
-    };
-} | null;
-export declare function encodeContextValue(context: ContextData): string;
+export declare function extractContextFromMeta(req: Request): ContextData | null;
+export declare function encodeContextValue(value: ContextData | TemplateContextProof): string;
 export declare function extractContextFromQuery(req: Request): ContextData | null;
 export declare function extractRequestContext(req: Request): ContextData | null;
+export declare function extractTemplateContextRequest(req: Request): ExtractedTemplateContextRequest | null;
 //# sourceMappingURL=contextExtractor.d.ts.map

package/build/transport/http/utils/contextExtractor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contextExtractor.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/utils/contextExtractor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAExH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,eAAO,MAAM,eAAe;;CAElB,CAAC;AAiCX;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG;IACpD,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,MAAM,CAAC,EAAE,UAAU,CAAC;KACrB,CAAC;CACH,GAAG,IAAI,CA0EP;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAE/D;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAyBxE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAEtE"}
+{"version":3,"file":"contextExtractor.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/utils/contextExtractor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,eAAO,MAAM,eAAe;;CAElB,CAAC;AAEX,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAiFD;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAoCvE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,oBAAoB,GAAG,MAAM,CAEpF;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CA0BxE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAEtE;AAED,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,GAAG,+BAA+B,GAAG,IAAI,CAoBlG"}

package/build/transport/http/utils/contextExtractor.js

@@ -1,23 +1,87 @@
 import logger from '../../../logger/logger.js';
+import { z } from 'zod';
 export { deriveContextSessionId } from '../../../utils/context/sessionIdentity.js';
 // Header constants for context transmission
 export const CONTEXT_HEADERS = {
     SESSION_ID: 'mcp-session-id', // Use standard streamable HTTP header
 };
+const gitInfoSchema = z
+    .object({
+    branch: z.string().optional(),
+    commit: z.string().optional(),
+    repository: z.string().optional(),
+    isRepo: z.boolean().optional(),
+})
+    .strict();
+const contextNamespaceSchema = z
+    .object({
+    path: z.string().optional(),
+    cwd: z.string().optional(),
+    name: z.string().optional(),
+    git: gitInfoSchema.optional(),
+    environment: z.string().optional(),
+    custom: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict();
+const userContextSchema = z
+    .object({
+    name: z.string().optional(),
+    email: z.string().optional(),
+    home: z.string().optional(),
+    username: z.string().optional(),
+    uid: z.string().optional(),
+    gid: z.string().optional(),
+    shell: z.string().optional(),
+})
+    .strict();
+const environmentContextSchema = z
+    .object({
+    variables: z.record(z.string(), z.string()).optional(),
+    prefixes: z.array(z.string()).optional(),
+})
+    .strict();
+const clientInfoSchema = z
+    .object({
+    name: z.string(),
+    version: z.string(),
+    title: z.string().optional(),
+})
+    .strict();
+const contextDataSchema = z
+    .object({
+    project: contextNamespaceSchema,
+    user: userContextSchema,
+    environment: environmentContextSchema,
+    timestamp: z.string().optional(),
+    sessionId: z.string().optional(),
+    version: z.string().optional(),
+    transport: z
+        .object({
+        type: z.string(),
+        url: z.string().optional(),
+        connectionId: z.string().optional(),
+        connectionTimestamp: z.string().optional(),
+        client: clientInfoSchema.optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+const templateContextProofSchema = z
+    .object({
+    version: z.literal(1),
+    runtimeScopeId: z.string().min(1),
+    sessionId: z.string().min(1),
+    contextHash: z.string().min(1),
+    issuedAt: z.string().datetime(),
+    signature: z.string().min(1),
+})
+    .strict();
 /**
  * Type guard to check if a value is a valid ContextData
  */
-function isContextData(value) {
-    if (typeof value !== 'object' || value === null) {
-        return false;
-    }
-    const candidate = value;
-    return (typeof candidate.project === 'object' &&
-        candidate.project !== null &&
-        typeof candidate.user === 'object' &&
-        candidate.user !== null &&
-        typeof candidate.environment === 'object' &&
-        candidate.environment !== null);
+export function isContextData(value) {
+    return contextDataSchema.safeParse(value).success;
 }
 /**
  * Extract context data from _meta field in request body (from STDIO proxy)
@@ -33,35 +97,20 @@ export function extractContextFromMeta(req) {
             return null;
         }
         // Validate that the context has the correct structure
-        if (!isContextData(contextData)) {
+        const parsed = contextDataSchema.safeParse(contextData);
+        if (!parsed.success) {
             logger.warn('Invalid context structure in _meta field, ignoring context');
             return null;
         }
-        logger.info(`📊 Extracted context from _meta field: ${contextData.project.name} (${contextData.sessionId})`);
-        const result = {
-            project: contextData.project,
-            user: contextData.user,
-            environment: contextData.environment,
-            timestamp: contextData.timestamp,
-            version: contextData.version,
-            sessionId: contextData.sessionId,
-        };
-        // Include transport info if present
-        if ('transport' in contextData &&
-            contextData.transport &&
-            typeof contextData.transport === 'object' &&
-            'type' in contextData.transport) {
-            result.transport = contextData.transport;
-        }
-        return result;
+        return parsed.data;
     }
     catch (error) {
         logger.error('Failed to extract context from _meta field:', error instanceof Error ? error : new Error(String(error)));
         return null;
     }
 }
-export function encodeContextValue(context) {
-    return Buffer.from(JSON.stringify(context), 'utf8').toString('base64url');
+export function encodeContextValue(value) {
+    return Buffer.from(JSON.stringify(value), 'utf8').toString('base64url');
 }
 export function extractContextFromQuery(req) {
     try {
@@ -72,11 +121,12 @@ export function extractContextFromQuery(req) {
         }
         const decoded = Buffer.from(encoded, 'base64url').toString('utf8');
         const parsed = JSON.parse(decoded);
-        if (!isContextData(parsed)) {
+        const context = contextDataSchema.safeParse(parsed);
+        if (!context.success) {
             logger.warn('Invalid context structure in request query, ignoring context');
             return null;
         }
-        return parsed;
+        return context.data;
     }
     catch (error) {
         logger.error('Failed to extract context from request query:', error instanceof Error ? error : new Error(String(error)));
@@ -86,4 +136,45 @@ export function extractContextFromQuery(req) {
 export function extractRequestContext(req) {
     return extractContextFromMeta(req) ?? extractContextFromQuery(req);
 }
+export function extractTemplateContextRequest(req) {
+    const metaContext = extractContextFromMeta(req);
+    if (metaContext) {
+        return {
+            context: metaContext,
+            proof: extractProofFromMeta(req) ?? undefined,
+            source: 'meta',
+        };
+    }
+    const queryContext = extractContextFromQuery(req);
+    if (!queryContext) {
+        return null;
+    }
+    return {
+        context: queryContext,
+        proof: extractProofFromQuery(req) ?? undefined,
+        source: 'query',
+    };
+}
+function extractProofFromMeta(req) {
+    const body = req.body;
+    const value = body?.params?._meta?.contextProof ?? body?._meta?.contextProof;
+    return isTemplateContextProof(value) ? value : null;
+}
+function extractProofFromQuery(req) {
+    try {
+        const queryValue = req.query?.contextProof;
+        const encoded = Array.isArray(queryValue) ? queryValue[0] : queryValue;
+        if (!encoded || typeof encoded !== 'string') {
+            return null;
+        }
+        const parsed = JSON.parse(Buffer.from(encoded, 'base64url').toString('utf8'));
+        return isTemplateContextProof(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function isTemplateContextProof(value) {
+    return templateContextProofSchema.safeParse(value).success;
+}
 //# sourceMappingURL=contextExtractor.js.map

package/build/transport/http/utils/contextExtractor.js.map

@@ -1 +1 @@
-{"version":3,"file":"contextExtractor.js","sourceRoot":"","sources":["../../../../src/transport/http/utils/contextExtractor.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAK3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,gBAAgB,EAAE,sCAAsC;CAC5D,CAAC;AAEX;;GAEG;AACH,SAAS,aAAa,CAAC,KAAc;IAQnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,KAIjB,CAAC;IAEF,OAAO,CACL,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;QACrC,SAAS,CAAC,OAAO,KAAK,IAAI;QAC1B,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAClC,SAAS,CAAC,IAAI,KAAK,IAAI;QACvB,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ;QACzC,SAAS,CAAC,WAAW,KAAK,IAAI,CAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IAcjD,IAAI,CAAC;QACH,wDAAwD;QACxD,8CAA8C;QAC9C,mCAAmC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAShB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;QACzE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,0CAA0C,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;QAE7G,MAAM,MAAM,GAaR;YACF,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;SACjC,CAAC;QAEF,oCAAoC;QACpC,IACE,WAAW,IAAI,WAAW;YAC1B,WAAW,CAAC,SAAS;YACrB,OAAO,WAAW,CAAC,SAAS,KAAK,QAAQ;YACzC,MAAM,IAAI,WAAW,CAAC,SAAS,EAC/B,CAAC;YACD,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,SAK9B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,6CAA6C,EAC7C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAoB;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAEvE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAE9C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAqB,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,+CAA+C,EAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,OAAQ,sBAAsB,CAAC,GAAG,CAAwB,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;AAC7F,CAAC"}
+{"version":3,"file":"contextExtractor.js","sourceRoot":"","sources":["../../../../src/transport/http/utils/contextExtractor.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAI3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,gBAAgB,EAAE,sCAAsC;CAC5D,CAAC;AAQX,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,OAAO,EAAE,sBAAsB;IAC/B,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,wBAAwB;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1C,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACpC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAmC,CAAC;AAE7C,MAAM,0BAA0B,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC;KACD,MAAM,EAA4C,CAAC;AAEtD;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,IAAI,CAAC;QACH,wDAAwD;QACxD,8CAA8C;QAC9C,mCAAmC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAShB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;QACzE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sDAAsD;QACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,6CAA6C,EAC7C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyC;IAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAEvE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAE9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,+CAA+C,EAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,OAAQ,sBAAsB,CAAC,GAAG,CAAwB,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,GAAY;IACxD,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAuB,CAAC;IACtE,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC,IAAI,SAAS;YAC7C,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,qBAAqB,CAAC,GAAG,CAAC,IAAI,SAAS;QAC9C,MAAM,EAAE,OAAO;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAY;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,IAGhB,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,IAAI,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC;IAC7E,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACvE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QACzF,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC"}

package/build/transport/http/utils/templateContextAuthority.d.ts

@@ -0,0 +1,13 @@
+import { type TemplateContextAuthorization, type TemplateContextProof } from '../../../core/context/templateContextTrust.js';
+import type { ContextData } from '../../../types/context.js';
+export interface AuthorizeRequestTemplateContextInput {
+    context: ContextData;
+    proof?: TemplateContextProof;
+    transportSessionId?: string;
+    source: 'meta' | 'query' | 'persisted';
+}
+export declare function authorizeRequestTemplateContext(input: AuthorizeRequestTemplateContextInput): TemplateContextAuthorization;
+export declare function redactContextForAudit(context: ContextData): Record<string, unknown>;
+export declare function redactTemplateContextBodyForLogging(body: unknown): unknown;
+export declare function redactTemplateContextQueryForLogging(query: unknown): unknown;
+//# sourceMappingURL=templateContextAuthority.d.ts.map

package/build/transport/http/utils/templateContextAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateContextAuthority.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/utils/templateContextAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,4BAA4B,EAEjC,KAAK,oBAAoB,EAC1B,MAAM,2CAA2C,CAAC;AAKnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,WAAW,oCAAoC;IACnD,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;CACxC;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,oCAAoC,GAC1C,4BAA4B,CA4C9B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBnF;AAED,wBAAgB,mCAAmC,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAoB1E;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAY5E"}

package/build/transport/http/utils/templateContextAuthority.js

@@ -0,0 +1,121 @@
+import { authorizeTemplateContext, TemplateContextCapabilityStore, } from '../../../core/context/templateContextTrust.js';
+import { RuntimeIdentityService } from '../../../core/runtime/runtimeIdentityService.js';
+import { AgentConfigManager } from '../../../core/server/agentConfig.js';
+import { debugIf, infoIf, warnIf } from '../../../logger/logger.js';
+import { isContextData } from '../../../transport/http/utils/contextExtractor.js';
+export function authorizeRequestTemplateContext(input) {
+    const config = AgentConfigManager.getInstance();
+    const mode = config.get('templateContext')?.trust ?? 'verified';
+    const storagePath = config.get('runtimeScopeStoragePath');
+    const sessionTtlMinutes = config.get('auth')?.sessionTtlMinutes ?? 1440;
+    const capability = mode === 'verified' && storagePath
+        ? new TemplateContextCapabilityStore({
+            storageDir: storagePath,
+            runtimeScopeId: new RuntimeIdentityService({ storageDir: storagePath }).getRuntimeScopeId(),
+        }).getOrCreate()
+        : undefined;
+    const result = authorizeTemplateContext({
+        mode,
+        context: input.context,
+        proof: input.proof,
+        capability,
+        transportSessionId: input.transportSessionId,
+        maxAgeMs: sessionTtlMinutes * 60 * 1000,
+    });
+    const createAudit = () => ({
+        source: input.source,
+        trustMode: mode,
+        verification: result.status,
+        reason: 'reason' in result ? result.reason : undefined,
+        provenance: 'provenance' in result ? result.provenance : undefined,
+        runtimeScopeId: result.runtimeScopeId,
+        sessionId: input.transportSessionId ?? input.context.sessionId,
+        contextHash: result.contextHash,
+        projectName: input.context.project.name,
+        projectPath: input.context.project.path,
+    });
+    const auditLog = result.status === 'trusted' ? infoIf : warnIf;
+    auditLog(() => ({ message: 'Template context audit', meta: createAudit() }));
+    debugIf(() => ({
+        message: 'Template context audit detail',
+        meta: {
+            ...createAudit(),
+            context: redactContextForAudit(input.context),
+        },
+    }));
+    return result;
+}
+export function redactContextForAudit(context) {
+    return {
+        ...context,
+        project: {
+            ...context.project,
+            custom: redactRecord(context.project.custom),
+        },
+        user: {
+            ...context.user,
+            email: context.user.email ? '[REDACTED]' : undefined,
+            home: context.user.home ? '[REDACTED]' : undefined,
+            shell: context.user.shell ? '[REDACTED]' : undefined,
+        },
+        environment: {
+            ...context.environment,
+            variables: redactRecord(context.environment.variables),
+        },
+    };
+}
+export function redactTemplateContextBodyForLogging(body) {
+    if (!body || typeof body !== 'object') {
+        return body;
+    }
+    const record = body;
+    const redacted = { ...record };
+    if (record._meta && typeof record._meta === 'object') {
+        redacted._meta = redactMetaForLogging(record._meta);
+    }
+    if (record.params && typeof record.params === 'object') {
+        const params = record.params;
+        redacted.params = {
+            ...params,
+            ...(params._meta && typeof params._meta === 'object'
+                ? { _meta: redactMetaForLogging(params._meta) }
+                : {}),
+        };
+    }
+    return redacted;
+}
+export function redactTemplateContextQueryForLogging(query) {
+    if (!query || typeof query !== 'object') {
+        return query;
+    }
+    const redacted = { ...query };
+    if ('context' in redacted) {
+        redacted.context = '[DECODED_IN_TEMPLATE_CONTEXT_AUDIT]';
+    }
+    if ('contextProof' in redacted) {
+        redacted.contextProof = '[REDACTED]';
+    }
+    return redacted;
+}
+function redactMetaForLogging(meta) {
+    return {
+        ...meta,
+        ...(meta.context && typeof meta.context === 'object'
+            ? { context: redactContextForGeneralLogging(meta.context) }
+            : {}),
+        ...(meta.contextProof ? { contextProof: { present: true, signature: '[REDACTED]' } } : {}),
+    };
+}
+function redactContextForGeneralLogging(context) {
+    if (isContextData(context)) {
+        return redactContextForAudit(context);
+    }
+    return {
+        invalid: true,
+        keys: Object.keys(context),
+    };
+}
+function redactRecord(value) {
+    return value ? Object.fromEntries(Object.keys(value).map((key) => [key, '[REDACTED]'])) : undefined;
+}
+//# sourceMappingURL=templateContextAuthority.js.map

package/build/transport/http/utils/templateContextAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateContextAuthority.js","sourceRoot":"","sources":["../../../../src/transport/http/utils/templateContextAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EAExB,8BAA8B,GAE/B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAU9E,MAAM,UAAU,+BAA+B,CAC7C,KAA2C;IAE3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,IAAI,UAAU,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,iBAAiB,IAAI,IAAI,CAAC;IACxE,MAAM,UAAU,GACd,IAAI,KAAK,UAAU,IAAI,WAAW;QAChC,CAAC,CAAC,IAAI,8BAA8B,CAAC;YACjC,UAAU,EAAE,WAAW;YACvB,cAAc,EAAE,IAAI,sBAAsB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,iBAAiB,EAAE;SAC5F,CAAC,CAAC,WAAW,EAAE;QAClB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GAAG,wBAAwB,CAAC;QACtC,IAAI;QACJ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU;QACV,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,QAAQ,EAAE,iBAAiB,GAAG,EAAE,GAAG,IAAI;KACxC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACtD,UAAU,EAAE,YAAY,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAClE,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS;QAC9D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;QACvC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;KACxC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACb,OAAO,EAAE,+BAA+B;QACxC,IAAI,EAAE;YACJ,GAAG,WAAW,EAAE;YAChB,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC;SAC9C;KACF,CAAC,CAAC,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAoB;IACxD,OAAO;QACL,GAAG,OAAO;QACV,OAAO,EAAE;YACP,GAAG,OAAO,CAAC,OAAO;YAClB,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SAC7C;QACD,IAAI,EAAE;YACJ,GAAG,OAAO,CAAC,IAAI;YACf,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACpD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YAClD,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SACrD;QACD,WAAW,EAAE;YACX,GAAG,OAAO,CAAC,WAAW;YACtB,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;SACvD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,IAAa;IAC/D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,QAAQ,CAAC,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiC,CAAC;QACxD,QAAQ,CAAC,MAAM,GAAG;YAChB,GAAG,MAAM;YACT,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;gBAClD,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE;gBAC1E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,GAAI,KAAiC,EAAE,CAAC;IAC3D,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC1B,QAAQ,CAAC,OAAO,GAAG,qCAAqC,CAAC;IAC3D,CAAC;IACD,IAAI,cAAc,IAAI,QAAQ,EAAE,CAAC;QAC/B,QAAQ,CAAC,YAAY,GAAG,YAAY,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA6B;IACzD,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAClD,CAAC,CAAC,EAAE,OAAO,EAAE,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,OAAe;IACrD,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAA0C;IAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC"}

package/build/transport/stdioProxyTransport.d.ts

@@ -1,3 +1,4 @@
+import type { TemplateContextProof } from '../core/context/templateContextTrust.js';
 import type { ContextData } from '../types/context.js';
 /**
  * STDIO Proxy Transport Options
@@ -10,6 +11,8 @@ export interface StdioProxyTransportOptions {
     tags?: string[];
     timeout?: number;
     context?: ContextData;
+    contextProof?: TemplateContextProof;
+    createContextProof?: (context: ContextData) => Promise<TemplateContextProof | undefined>;
 }
 /**
  * STDIO Proxy Transport

package/build/transport/stdioProxyTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdioProxyTransport.d.ts","sourceRoot":"","sources":["../../src/transport/stdioProxyTransport.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAc,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGrE;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AASD;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IASlB,OAAO,CAAC,OAAO;IAR3B,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,aAAa,CAAgC;IACrD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,SAAS,CAAM;gBAEH,OAAO,EAAE,0BAA0B;IAgDvD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB5B;;;OAGG;IACH,OAAO,CAAC,iCAAiC;IAuBzC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAkD9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,wBAAwB;IAuBhC;;OAEG;IACH,OAAO,CAAC,SAAS;IAOjB;;OAEG;IACH,OAAO,CAAC,cAAc;IAiCtB;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAqB7B"}
+{"version":3,"file":"stdioProxyTransport.d.ts","sourceRoot":"","sources":["../../src/transport/stdioProxyTransport.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF,OAAO,KAAK,EAAc,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGrE;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CAC1F;AASD;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IASlB,OAAO,CAAC,OAAO;IAR3B,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,aAAa,CAAgC;IACrD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,SAAS,CAAM;gBAEH,OAAO,EAAE,0BAA0B;IAgDvD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB5B;;;OAGG;IACH,OAAO,CAAC,iCAAiC;IAuBzC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAkD9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,wBAAwB;IAwBhC;;OAEG;IACH,OAAO,CAAC,SAAS;IAOjB;;OAEG;YACW,cAAc;IAqC5B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAqB7B"}

package/build/transport/stdioProxyTransport.js

@@ -143,7 +143,7 @@ export class StdioProxyTransport {
                     }
                 }
                 // Add context metadata to message _meta field
-                const enhancedMessage = this.addContextMeta(message);
+                const enhancedMessage = await this.addContextMeta(message);
                 // Forward to HTTP server
                 await this.httpTransport.send(enhancedMessage);
             }
@@ -205,6 +205,7 @@ export class StdioProxyTransport {
             const updatedInit = {
                 ...init,
                 headers,
+                redirect: 'error',
             };
             // Call global fetch with updated headers
             return fetch(input, updatedInit);
@@ -219,7 +220,7 @@ export class StdioProxyTransport {
     /**
      * Add context metadata to message using _meta field
      */
-    addContextMeta(message) {
+    async addContextMeta(message) {
         // Create context with client info if available
         const contextWithClient = {
             ...this.context,
@@ -231,6 +232,9 @@ export class StdioProxyTransport {
                 },
             }),
         };
+        const contextProof = this.options.createContextProof
+            ? await this.options.createContextProof(contextWithClient)
+            : this.options.contextProof;
         // Only add _meta to messages that are requests (have params)
         if (this.isRequest(message) && message.params !== undefined) {
             const params = message.params;
@@ -242,6 +246,7 @@ export class StdioProxyTransport {
                     _meta: {
                         ...(params._meta || {}), // Preserve existing _meta
                         context: contextWithClient, // Add our context data
+                        ...(contextProof ? { contextProof } : {}),
                     },
                 },
             };