@kya-os/mcp-i-cloudflare 1.4.1-canary.1 → 1.4.1-canary.11

package/dist/services/proof-batch-queue.js

@@ -0,0 +1,209 @@
+/**
+ * Proof Batch Queue (Cloudflare Workers Implementation)
+ *
+ * Platform-agnostic proof batching for Cloudflare Workers.
+ * Copied from @kya-os/mcp-i to avoid pulling in @swc/core dependency.
+ *
+ * Collects proofs in memory and submits them in batches to AgentShield.
+ * This prevents blocking tool execution while ensuring proofs are eventually submitted.
+ *
+ * Performance:
+ * - Batch size: 10 proofs (configurable)
+ * - Flush interval: 5 seconds (configurable)
+ * - Fire-and-forget submission (doesn't block tool execution)
+ *
+ * Retry Strategy:
+ * - Exponential backoff: 1s, 2s, 4s, 8s, 16s
+ * - Max retries: 5
+ * - Failed proofs logged and dropped after max retries
+ */
+/**
+ * AgentShield proof submission destination
+ *
+ * Submits proofs to AgentShield's /api/v1/bouncer/proofs endpoint
+ * with proper authentication and session grouping.
+ */
+export class AgentShieldProofDestination {
+    name = 'AgentShield';
+    apiUrl;
+    apiKey;
+    constructor(apiUrl, apiKey) {
+        this.apiUrl = apiUrl.replace(/\/$/, '');
+        this.apiKey = apiKey;
+    }
+    async submit(proofs) {
+        if (proofs.length === 0) {
+            return;
+        }
+        // Extract session_id from first proof for AgentShield session grouping
+        // AgentShield uses this for analytics and detection monitoring
+        const sessionId = proofs[0]?.meta?.sessionId || 'unknown';
+        // AgentShield API format requires delegation_id and session_id wrapper
+        const requestBody = {
+            delegation_id: null, // null for proofs without delegation context
+            session_id: sessionId, // AgentShield session grouping (same as meta.sessionId)
+            proofs: proofs
+        };
+        const response = await fetch(`${this.apiUrl}/api/v1/bouncer/proofs`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${this.apiKey}`, // Bearer token format
+            },
+            body: JSON.stringify(requestBody),
+        });
+        if (!response.ok) {
+            // Include response body in error for debugging
+            const errorBody = await response.text().catch(() => 'Unable to read error body');
+            throw new Error(`AgentShield proof submission failed: ${response.status} ${response.statusText}\n${errorBody}`);
+        }
+    }
+}
+/**
+ * Proof Batch Queue
+ *
+ * Collects proofs and submits them in batches to multiple destinations.
+ *
+ * Note: In Cloudflare Workers, timers don't persist across requests,
+ * so automatic flush timers are disabled. Use manual flush() calls via cron jobs.
+ */
+export class ProofBatchQueue {
+    queue = [];
+    pendingBatches = [];
+    config;
+    closed = false;
+    // Stats
+    stats = {
+        queued: 0,
+        submitted: 0,
+        failed: 0,
+        batchesSubmitted: 0,
+    };
+    constructor(config) {
+        this.config = {
+            destinations: config.destinations,
+            maxBatchSize: config.maxBatchSize || 10,
+            flushIntervalMs: config.flushIntervalMs || 5000,
+            maxRetries: config.maxRetries || 5,
+            debug: config.debug || false,
+        };
+        // Note: Timers are disabled in Cloudflare Workers
+        // Flush must be called manually via cron jobs
+    }
+    /**
+     * Add proof to queue
+     */
+    enqueue(proof) {
+        if (this.closed) {
+            console.warn('[ProofBatchQueue] Queue is closed, dropping proof');
+            return;
+        }
+        this.queue.push(proof);
+        this.stats.queued++;
+        if (this.config.debug) {
+            console.log(`[ProofBatchQueue] Enqueued proof (queue size: ${this.queue.length})`);
+        }
+        // Flush immediately if batch size reached (Cloudflare Workers compatible)
+        if (this.queue.length >= this.config.maxBatchSize) {
+            this.flush();
+        }
+    }
+    /**
+     * Flush queue immediately (submit all queued proofs)
+     */
+    async flush() {
+        if (this.queue.length === 0) {
+            return;
+        }
+        const proofs = this.queue.splice(0, this.config.maxBatchSize);
+        if (this.config.debug) {
+            console.log(`[ProofBatchQueue] Flushing ${proofs.length} proofs to ${this.config.destinations.length} destinations`);
+        }
+        // Submit to all destinations
+        for (const destination of this.config.destinations) {
+            const batch = {
+                proofs: [...proofs], // Copy proofs for each destination
+                destination,
+                retryCount: 0,
+            };
+            this.submitBatch(batch); // Fire-and-forget
+        }
+    }
+    /**
+     * Submit batch to destination (with retries)
+     */
+    async submitBatch(batch) {
+        try {
+            await batch.destination.submit(batch.proofs);
+            this.stats.submitted += batch.proofs.length;
+            this.stats.batchesSubmitted++;
+            if (this.config.debug) {
+                console.log(`[ProofBatchQueue] Successfully submitted ${batch.proofs.length} proofs to ${batch.destination.name}`);
+            }
+        }
+        catch (error) {
+            console.error(`[ProofBatchQueue] Failed to submit to ${batch.destination.name}:`, error);
+            // Retry with exponential backoff
+            if (batch.retryCount < this.config.maxRetries) {
+                batch.retryCount++;
+                const backoffMs = Math.min(1000 * Math.pow(2, batch.retryCount - 1), 16000);
+                batch.nextRetryAt = Date.now() + backoffMs;
+                this.pendingBatches.push(batch);
+                if (this.config.debug) {
+                    console.log(`[ProofBatchQueue] Scheduling retry ${batch.retryCount}/${this.config.maxRetries} in ${backoffMs}ms`);
+                }
+            }
+            else {
+                // Max retries exceeded, drop batch
+                this.stats.failed += batch.proofs.length;
+                console.error(`[ProofBatchQueue] Max retries exceeded for ${batch.destination.name}, dropping ${batch.proofs.length} proofs`);
+            }
+        }
+    }
+    /**
+     * Retry pending batches that are ready
+     * Called by cron job or manually
+     */
+    async retryPending() {
+        const now = Date.now();
+        const retryBatches = this.pendingBatches.filter((batch) => batch.nextRetryAt && batch.nextRetryAt <= now);
+        if (retryBatches.length > 0) {
+            // Remove from pending
+            this.pendingBatches = this.pendingBatches.filter((batch) => !retryBatches.includes(batch));
+            // Retry each batch
+            for (const batch of retryBatches) {
+                this.submitBatch(batch); // Fire-and-forget
+            }
+        }
+    }
+    /**
+     * Close queue and flush remaining proofs
+     */
+    async close() {
+        if (this.closed) {
+            return;
+        }
+        this.closed = true;
+        // Flush remaining proofs
+        if (this.queue.length > 0) {
+            await this.flush();
+        }
+        // Wait for pending batches (with timeout)
+        const timeout = 5000; // 5 seconds
+        const startTime = Date.now();
+        while (this.pendingBatches.length > 0 && Date.now() - startTime < timeout) {
+            await this.retryPending();
+            await new Promise((resolve) => setTimeout(resolve, 100));
+        }
+        if (this.pendingBatches.length > 0) {
+            console.warn(`[ProofBatchQueue] Closing with ${this.pendingBatches.length} pending batches (timed out)`);
+        }
+    }
+    /**
+     * Get queue statistics
+     */
+    getStats() {
+        return { ...this.stats };
+    }
+}
+//# sourceMappingURL=proof-batch-queue.js.map

package/dist/services/proof-batch-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-batch-queue.js","sourceRoot":"","sources":["../../src/services/proof-batch-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAeH;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IACtC,IAAI,GAAG,aAAa,CAAC;IACb,MAAM,CAAS;IACf,MAAM,CAAS;IAEvB,YAAY,MAAc,EAAE,MAAc;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,SAAS,CAAC;QAE1D,uEAAuE;QACvE,MAAM,WAAW,GAAG;YAClB,aAAa,EAAE,IAAI,EAAG,6CAA6C;YACnE,UAAU,EAAE,SAAS,EAAE,wDAAwD;YAC/E,MAAM,EAAE,MAAM;SACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,wBAAwB,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAG,sBAAsB;aAClE;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,+CAA+C;YAC/C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC;YACjF,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAyBD;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAClB,KAAK,GAAoB,EAAE,CAAC;IAC5B,cAAc,GAAiB,EAAE,CAAC;IAClC,MAAM,CAAkC;IACxC,MAAM,GAAG,KAAK,CAAC;IAEvB,QAAQ;IACA,KAAK,GAAG;QACd,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,CAAC;QACT,gBAAgB,EAAE,CAAC;KACpB,CAAC;IAEF,YAAY,MAA6B;QACvC,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;YAC/C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;SAC7B,CAAC;QAEF,kDAAkD;QAClD,8CAA8C;IAChD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAAoB;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAEpB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,iDAAiD,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACrF,CAAC;QAED,0EAA0E;QAC1E,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE9D,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,MAAM,cAAc,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,eAAe,CAAC,CAAC;QACvH,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,KAAK,GAAe;gBACxB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,mCAAmC;gBACxD,WAAW;gBACX,UAAU,EAAE,CAAC;aACd,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB;QAC7C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,KAAiB;QACzC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAE7C,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAE9B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CACT,4CAA4C,KAAK,CAAC,MAAM,CAAC,MAAM,cAAc,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CACtG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,yCAAyC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,EAClE,KAAK,CACN,CAAC;YAEF,iCAAiC;YACjC,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC9C,KAAK,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC5E,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAE3C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAEhC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,GAAG,CACT,sCAAsC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,OAAO,SAAS,IAAI,CACrG,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,mCAAmC;gBACnC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACzC,OAAO,CAAC,KAAK,CACX,8CAA8C,KAAK,CAAC,WAAW,CAAC,IAAI,cAAc,KAAK,CAAC,MAAM,CAAC,MAAM,SAAS,CAC/G,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,IAAI,GAAG,CACzD,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,sBAAsB;YACtB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CACzC,CAAC;YAEF,mBAAmB;YACnB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAEnB,yBAAyB;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,YAAY;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YAC1E,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CACV,kCAAkC,IAAI,CAAC,cAAc,CAAC,MAAM,8BAA8B,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/services/proof.service.d.ts

@@ -3,6 +3,8 @@
  *
  * Handles proof submission to AgentShield API with optional context
  * for dashboard integration.
+ *
+ * Supports both direct submission and batch queue submission.
  */
 import type { DetachedProof } from '@kya-os/contracts/proof';
 import type { CloudflareRuntimeConfig } from '../config';
@@ -19,14 +21,49 @@ export interface ProofSubmissionContext {
 export declare class ProofService {
     private config;
     private runtime?;
+    private batchQueue?;
+    private firstProofSubmitted;
     constructor(config: CloudflareRuntimeConfig, runtime?: CloudflareRuntime);
     /**
      * Submit proof to AgentShield API
-     * Uses the proof.jws directly (full JWS format from CloudflareRuntime)
+     * Uses batch queue if available, otherwise falls back to direct submission.
      *
      * Also submits optional context for AgentShield dashboard integration.
      * Context provides plaintext tool/args data while proof provides cryptographic verification.
+     *
+     * IMPORTANT: First proof is submitted immediately (not batched) to ensure
+     * dashboard setup detection works correctly.
      */
     submitProof(proof: DetachedProof, context: ProofSubmissionContext): Promise<void>;
+    /**
+     * Direct proof submission (fallback when batch queue not available)
+     */
+    private submitProofDirect;
+    /**
+     * Flush pending proofs in batch queue
+     *
+     * Called by scheduled cron job (configured in wrangler.toml).
+     *
+     * Cron Configuration:
+     * Add this to your wrangler.toml to enable automatic proof flushing:
+     *
+     * [triggers.crons]
+     * cron = "every 5 minutes"  # Flush proof batches every 5 minutes
+     *
+     * The cron job will call the scheduled handler exported from your Worker,
+     * which routes to MCPICloudflareServer.handleScheduled(), which then calls
+     * this flush() method.
+     *
+     * Why cron instead of timers?
+     * - Cloudflare Workers are stateless and don't persist timers across requests
+     * - Cron jobs provide reliable cross-request batching
+     * - Proofs are still batched within requests (auto-flush when batch size reached)
+     *
+     * Flush frequency:
+     * - Default: Every minute (adjustable in wrangler.toml)
+     * - Proofs are also flushed immediately when batch size is reached
+     * - Failed proofs are retried with exponential backoff
+     */
+    flush(): Promise<void>;
 }
 //# sourceMappingURL=proof.service.d.ts.map

package/dist/services/proof.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAGrE,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAAC,CAAoB;gBAExB,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAKxE;;;;;;OAMG;IACG,WAAW,CACf,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC;CA6FjB"}
+{"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAIrE,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC,OAAO,CAAC,mBAAmB,CAAS;gBAExB,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAkFxE;;;;;;;;;OASG;IACG,WAAW,CACf,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC;IA0ChB;;OAEG;YACW,iBAAiB;IAmI/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ7B"}

package/dist/services/proof.service.js

@@ -3,26 +3,141 @@
  *
  * Handles proof submission to AgentShield API with optional context
  * for dashboard integration.
+ *
+ * Supports both direct submission and batch queue submission.
  */
+import { ProofBatchQueue, AgentShieldProofDestination } from './proof-batch-queue';
 export class ProofService {
     config;
     runtime;
+    batchQueue;
+    firstProofSubmitted = false; // Track if first proof has been submitted
     constructor(config, runtime) {
         this.config = config;
         this.runtime = runtime;
+        // Log service creation for debugging
+        const proofingConfig = this.config.proofing;
+        const hasApiKey = proofingConfig?.batchQueue?.destinations?.some((dest) => dest.type === 'agentshield' && dest.apiKey);
+        console.log('[ProofService] Initialized:', {
+            proofingEnabled: proofingConfig?.enabled || false,
+            hasApiKey: !!hasApiKey,
+            hasDestinations: !!(proofingConfig?.batchQueue?.destinations?.length),
+            destinationCount: proofingConfig?.batchQueue?.destinations?.length || 0,
+            apiKeyPresent: !!proofingConfig?.batchQueue?.destinations?.[0]?.apiKey,
+            apiUrl: proofingConfig?.batchQueue?.destinations?.[0]?.apiUrl || 'not-set',
+        });
+        // Warn if proofing is enabled but no API key is configured
+        if (proofingConfig?.enabled && !hasApiKey) {
+            console.warn('[ProofService] ⚠️  Proofing is enabled but AGENTSHIELD_API_KEY is not set!');
+            console.warn('[ProofService] To enable proof submission:');
+            console.warn('[ProofService]   1. Set AGENTSHIELD_API_KEY in .dev.vars (for local dev)');
+            console.warn('[ProofService]   2. Run: wrangler secret put AGENTSHIELD_API_KEY (for production)');
+        }
+        // Initialize batch queue if configured
+        // Note: In Cloudflare Workers, timers don't persist across requests,
+        // so we rely on manual flush() calls via cron jobs instead of automatic timers
+        if (proofingConfig?.enabled && proofingConfig.batchQueue?.destinations?.length) {
+            try {
+                const destinations = [];
+                for (const destConfig of proofingConfig.batchQueue.destinations) {
+                    if (destConfig.type === 'agentshield') {
+                        // Only create destination if API key is present and not empty
+                        if (destConfig.apiKey?.length && destConfig.apiUrl?.length) {
+                            destinations.push(new AgentShieldProofDestination(destConfig.apiUrl, destConfig.apiKey));
+                            console.log('[ProofService] Added AgentShield destination:', {
+                                apiUrl: destConfig.apiUrl,
+                                hasApiKey: !!destConfig.apiKey,
+                            });
+                        }
+                        else {
+                            console.warn('[ProofService] Skipping AgentShield destination - missing API key or URL:', {
+                                hasApiKey: !!destConfig.apiKey,
+                                hasApiUrl: !!destConfig.apiUrl,
+                            });
+                        }
+                    }
+                }
+                if (destinations.length > 0) {
+                    // Create batch queue without timers (Cloudflare Workers compatible)
+                    // Timers won't work in Workers, so we rely on manual flush() via cron
+                    this.batchQueue = new ProofBatchQueue({
+                        destinations,
+                        maxBatchSize: proofingConfig.batchQueue.maxBatchSize || 10,
+                        flushIntervalMs: proofingConfig.batchQueue.flushIntervalMs || 5000,
+                        maxRetries: proofingConfig.batchQueue.maxRetries || 3,
+                        debug: proofingConfig.batchQueue.debug || false,
+                    });
+                    console.log('[ProofService] Batch queue initialized (Cloudflare Workers mode - manual flush via cron):', {
+                        maxBatchSize: proofingConfig.batchQueue.maxBatchSize || 10,
+                        flushIntervalMs: proofingConfig.batchQueue.flushIntervalMs || 5000,
+                        destinations: destinations.length,
+                    });
+                }
+                else {
+                    console.warn('[ProofService] No valid destinations configured - batch queue not initialized');
+                    // Warn in production if no API key configured
+                    if (this.config.environment === 'production') {
+                        console.warn('[ProofService] No AGENTSHIELD_API_KEY configured - proofs will not be submitted');
+                    }
+                }
+            }
+            catch (error) {
+                console.error('[ProofService] Failed to initialize batch queue:', error);
+            }
+        }
     }
     /**
      * Submit proof to AgentShield API
-     * Uses the proof.jws directly (full JWS format from CloudflareRuntime)
+     * Uses batch queue if available, otherwise falls back to direct submission.
      *
      * Also submits optional context for AgentShield dashboard integration.
      * Context provides plaintext tool/args data while proof provides cryptographic verification.
+     *
+     * IMPORTANT: First proof is submitted immediately (not batched) to ensure
+     * dashboard setup detection works correctly.
      */
     async submitProof(proof, context) {
         if (!proof.jws || !proof.meta) {
             console.warn('[ProofService] Proof missing jws or meta, skipping submission');
             return;
         }
+        // Submit first proof immediately for dashboard setup detection
+        // This ensures the dashboard can detect the server and tools immediately
+        if (!this.firstProofSubmitted && this.batchQueue) {
+            console.log('[ProofService] Submitting first proof immediately for dashboard setup detection');
+            this.firstProofSubmitted = true;
+            // Submit first proof directly, then use batching for subsequent proofs
+            await this.submitProofDirect(proof, context);
+            return;
+        }
+        // Use batch queue if available (recommended for batching)
+        // Note: In Cloudflare Workers, the queue batches within request context
+        // but relies on cron jobs for cross-request flushing
+        if (this.batchQueue) {
+            try {
+                console.log('[ProofService] Enqueuing proof to batch queue:', {
+                    did: proof.meta.did,
+                    sessionId: proof.meta.sessionId,
+                    toolName: context.toolName,
+                    scopeId: proof.meta.scopeId,
+                    mcpServerUrl: context.mcpServerUrl || 'not-set',
+                });
+                // Enqueue proof - batch queue will auto-flush when batch size is reached
+                this.batchQueue.enqueue(proof);
+                return;
+            }
+            catch (error) {
+                console.error('[ProofService] Failed to enqueue proof, falling back to direct submission:', error);
+                // Fall through to direct submission
+            }
+        }
+        // Fallback to direct submission if batch queue not available
+        await this.submitProofDirect(proof, context);
+    }
+    /**
+     * Direct proof submission (fallback when batch queue not available)
+     */
+    async submitProofDirect(proof, context) {
         // Get AgentShield config from proofing config
         const proofingConfig = this.config.proofing;
         if (!proofingConfig?.enabled || !proofingConfig.batchQueue?.destinations) {
@@ -32,11 +147,22 @@ export class ProofService {
         // Find AgentShield destination
         const agentShieldDest = proofingConfig.batchQueue.destinations.find((dest) => dest.type === 'agentshield' && dest.apiKey);
         if (!agentShieldDest || !agentShieldDest.apiKey || !agentShieldDest.apiUrl) {
-            console.log('[ProofService] No AgentShield destination configured');
+            console.log('[ProofService] No AgentShield destination configured:', {
+                hasDestinations: !!(proofingConfig.batchQueue.destinations?.length),
+                foundDest: !!agentShieldDest,
+                hasApiKey: !!agentShieldDest?.apiKey,
+                hasApiUrl: !!agentShieldDest?.apiUrl,
+            });
             return;
         }
         const apiUrl = agentShieldDest.apiUrl;
         const apiKey = agentShieldDest.apiKey;
+        // Log API key presence (not value) for debugging
+        console.log('[ProofService] Direct submission config:', {
+            apiUrl,
+            hasApiKey: !!apiKey,
+            apiKeyLength: apiKey?.length || 0,
+        });
         // Get tool call context from runtime (if available)
         const toolCallContext = this.runtime?.getLastToolCallContext();
         // Proof already has correct format from CloudflareRuntime
@@ -67,28 +193,95 @@ export class ProofService {
             jwsFormat: proof.jws.split('.').length === 3 ? 'valid (3 parts)' : 'invalid',
             contextTool: requestBody.context.toolCalls[0]?.tool,
             contextScopeId: requestBody.context.toolCalls[0]?.scopeId,
-            mcpServerUrl: requestBody.context.mcpServerUrl || 'not-set'
+            mcpServerUrl: requestBody.context.mcpServerUrl || 'not-set',
+            requestBodySize: JSON.stringify(requestBody).length,
         });
-        const response = await fetch(`${apiUrl}/api/v1/bouncer/proofs`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${apiKey}`
-            },
-            body: JSON.stringify(requestBody)
-        });
-        if (!response.ok) {
-            const errorText = await response.text();
-            console.error('[ProofService] Submission failed:', response.status, errorText);
-            throw new Error(`AgentShield error: ${response.status}`);
+        try {
+            const response = await fetch(`${apiUrl}/api/v1/bouncer/proofs`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${apiKey}`
+                },
+                body: JSON.stringify(requestBody)
+            });
+            const responseText = await response.text();
+            if (!response.ok) {
+                console.error('[ProofService] Submission failed:', {
+                    status: response.status,
+                    statusText: response.statusText,
+                    response: responseText.substring(0, 500), // Limit response size in logs
+                });
+                throw new Error(`AgentShield error: ${response.status}`);
+            }
+            let responseData;
+            try {
+                responseData = JSON.parse(responseText);
+            }
+            catch (parseError) {
+                console.error('[ProofService] Failed to parse response:', {
+                    responseText: responseText.substring(0, 500),
+                    error: parseError,
+                });
+                throw new Error('Invalid JSON response from AgentShield');
+            }
+            console.log('[ProofService] Response:', {
+                success: responseData.success,
+                received: responseData.received,
+                processed: responseData.processed,
+                accepted: responseData.accepted,
+                rejected: responseData.rejected,
+                errors: responseData.errors?.length || 0,
+            });
+            if (responseData.accepted) {
+                console.log('[ProofService] ✅ Proofs accepted:', responseData.accepted);
+            }
+            if (responseData.rejected) {
+                console.log('[ProofService] ❌ Proofs rejected:', responseData.rejected);
+            }
+            if (responseData.errors && responseData.errors.length > 0) {
+                console.error('[ProofService] Proof errors:', responseData.errors);
+            }
         }
-        const responseData = await response.json();
-        console.log('[ProofService] Response:', responseData);
-        if (responseData.accepted) {
-            console.log('[ProofService] ✅ Proofs accepted:', responseData.accepted);
+        catch (error) {
+            console.error('[ProofService] Submission error:', {
+                error: error instanceof Error ? error.message : String(error),
+                stack: error instanceof Error ? error.stack : undefined,
+            });
+            throw error;
         }
-        if (responseData.rejected) {
-            console.log('[ProofService] ❌ Proofs rejected:', responseData.rejected);
+    }
+    /**
+     * Flush pending proofs in batch queue
+     *
+     * Called by scheduled cron job (configured in wrangler.toml).
+     *
+     * Cron Configuration:
+     * Add this to your wrangler.toml to enable automatic proof flushing:
+     *
+     * [triggers.crons]
+     * cron = "every 5 minutes"  # Flush proof batches every 5 minutes
+     *
+     * The cron job will call the scheduled handler exported from your Worker,
+     * which routes to MCPICloudflareServer.handleScheduled(), which then calls
+     * this flush() method.
+     *
+     * Why cron instead of timers?
+     * - Cloudflare Workers are stateless and don't persist timers across requests
+     * - Cron jobs provide reliable cross-request batching
+     * - Proofs are still batched within requests (auto-flush when batch size reached)
+     *
+     * Flush frequency:
+     * - Default: Every minute (adjustable in wrangler.toml)
+     * - Proofs are also flushed immediately when batch size is reached
+     * - Failed proofs are retried with exponential backoff
+     */
+    async flush() {
+        if (this.batchQueue) {
+            console.log('[ProofService] Flushing batch queue...');
+            await this.batchQueue.flush();
+            // Also retry any pending batches
+            await this.batchQueue.retryPending();
         }
     }
 }

package/dist/services/proof.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAEpC,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,8CAA8C;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5C,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,eAAe,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CACjE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CACrD,CAAC;QAEF,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QACtC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QAEtC,oDAAoD;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAE/D,0DAA0D;QAC1D,4EAA4E;QAC5E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,CAAC;oBACP,GAAG,EAAE,KAAK,CAAC,GAAG,EAAG,6BAA6B;oBAC9C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAE,kCAAkC;iBACrD,CAAC;YACF,6CAA6C;YAC7C,OAAO,EAAE;gBACP,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;wBAChD,iDAAiD;wBACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qBAC7D,CAAC;gBACF,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;YAC3D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAC5E,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;SAC5D,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,MAAM,EAAE;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAOvC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,YAAY,CAAC,CAAC;QAEtD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAyB,MAAM,qBAAqB,CAAC;AAU1G,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAC5B,UAAU,CAAmB;IAC7B,mBAAmB,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAE/E,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,qCAAqC;QACrC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5C,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAC9D,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CACrD,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE;YACzC,eAAe,EAAE,cAAc,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC;YACrE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;YACvE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YACtE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS;SAC3E,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YACzF,OAAO,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QACpG,CAAC;QAED,uCAAuC;QACvC,qEAAqE;QACrE,+EAA+E;QAC/E,IAAI,cAAc,EAAE,OAAO,IAAI,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;YAC/E,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB,EAAE,CAAC;gBAE5C,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAChE,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBACtC,8DAA8D;wBAC9D,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;4BAC3D,YAAY,CAAC,IAAI,CACf,IAAI,2BAA2B,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CACtE,CAAC;4BACF,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;gCAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;gCACzB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;wBACL,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,IAAI,CAAC,2EAA2E,EAAE;gCACxF,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;gCAC9B,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,oEAAoE;oBACpE,sEAAsE;oBACtE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC;wBACpC,YAAY;wBACZ,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;wBACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;qBAChD,CAAC,CAAC;oBACH,OAAO,CAAC,GAAG,CAAC,2FAA2F,EAAE;wBACvG,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,YAAY,EAAE,YAAY,CAAC,MAAM;qBAClC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;oBAC9F,8CAA8C;oBAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;wBAC7C,OAAO,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;oBAClG,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;YAC/F,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,uEAAuE;YACvE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE;oBAC5D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;iBAChD,CAAC,CAAC;gBAEH,yEAAyE;gBACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,4EAA4E,EAAE,KAAK,CAAC,CAAC;gBACnG,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,KAAoB,EACpB,OAA+B;QAE/B,8CAA8C;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5C,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,eAAe,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CACjE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CACrD,CAAC;QAEF,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,uDAAuD,EAAE;gBACnE,eAAe,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC;gBACnE,SAAS,EAAE,CAAC,CAAC,eAAe;gBAC5B,SAAS,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM;gBACpC,SAAS,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM;aACrC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QACtC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QAEtC,iDAAiD;QACjD,OAAO,CAAC,GAAG,CAAC,0CAA0C,EAAE;YACtD,MAAM;YACN,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAE/D,0DAA0D;QAC1D,4EAA4E;QAC5E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,CAAC;oBACP,GAAG,EAAE,KAAK,CAAC,GAAG,EAAG,6BAA6B;oBAC9C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAE,kCAAkC;iBACrD,CAAC;YACF,6CAA6C;YAC7C,OAAO,EAAE;gBACP,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;wBAChD,iDAAiD;wBACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qBAC7D,CAAC;gBACF,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;YAC3D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAC5E,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,EAAE;iBACpC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,8BAA8B;iBACzE,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACxD,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE;gBACtC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;aACzC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9B,iCAAiC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/services/transport.service.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Transport Detection Service
+ *
+ * Detects the transport type (HTTP, SSE, STDIO) and determines the appropriate
+ * consent strategy (server-hosted vs dashboard-hosted).
+ *
+ * Related Spec: MCP-I Phase 0 Implementation Plan, Task B.2
+ */
+export type TransportType = 'http' | 'sse' | 'stdio';
+export type ConsentStrategy = 'server-hosted' | 'dashboard-hosted';
+/**
+ * Transport Service
+ *
+ * Provides utilities for detecting transport type and determining consent strategy
+ */
+export declare class TransportService {
+    /**
+     * Detect the current transport type
+     *
+     * Detection logic:
+     * - Cloudflare Workers: Always HTTP capable (Request/Response available)
+     * - STDIO transport: process.stdin/stdout available (no HTTP server)
+     * - Default: HTTP (most common)
+     *
+     * @returns Detected transport type
+     */
+    static detectTransport(): TransportType;
+    /**
+     * Get consent strategy based on transport type
+     *
+     * Strategy selection:
+     * - STDIO: dashboard-hosted (can't serve HTTP pages)
+     * - HTTP/SSE: server-hosted (can serve consent pages)
+     *
+     * @param transport - Optional transport type (auto-detected if not provided)
+     * @returns Consent strategy
+     */
+    static getConsentStrategy(transport?: TransportType): ConsentStrategy;
+    /**
+     * Check if server-hosted consent is available
+     *
+     * @param transport - Optional transport type (auto-detected if not provided)
+     * @returns true if server-hosted consent is available
+     */
+    static canServeConsentPage(transport?: TransportType): boolean;
+}
+//# sourceMappingURL=transport.service.d.ts.map

package/dist/services/transport.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.service.d.ts","sourceRoot":"","sources":["../../src/services/transport.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AACrD,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,kBAAkB,CAAC;AAEnE;;;;GAIG;AACH,qBAAa,gBAAgB;IAC3B;;;;;;;;;OASG;IACH,MAAM,CAAC,eAAe,IAAI,aAAa;IA2BvC;;;;;;;;;OASG;IACH,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,aAAa,GAAG,eAAe;IAYrE;;;;;OAKG;IACH,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,aAAa,GAAG,OAAO;CAG/D"}