@kya-os/mcp-i-cloudflare 1.5.10-canary.9 → 1.6.0

package/dist/services/proof.service.js

@@ -6,7 +6,7 @@
  *
  * Supports both direct submission and batch queue submission.
  */
-import { ProofBatchQueue, AgentShieldProofDestination } from './proof-batch-queue';
+import { ProofBatchQueue, AgentShieldProofDestination, } from "./proof-batch-queue";
 export class ProofService {
     config;
     runtime;
@@ -18,40 +18,41 @@ export class ProofService {
         // Log service creation for debugging
         // Use type assertion to access proofing config (extends MCPIConfig which has proofing)
         const proofingConfig = this.config.proofing;
-        const hasApiKey = proofingConfig?.batchQueue?.destinations?.some((dest) => dest.type === 'agentshield' && dest.apiKey);
-        console.log('[ProofService] Initialized:', {
+        const hasApiKey = proofingConfig?.batchQueue?.destinations?.some((dest) => dest.type === "agentshield" && dest.apiKey);
+        console.log("[ProofService] Initialized:", {
             proofingEnabled: proofingConfig?.enabled || false,
             hasApiKey: !!hasApiKey,
-            hasDestinations: !!(proofingConfig?.batchQueue?.destinations?.length),
+            hasDestinations: !!proofingConfig?.batchQueue?.destinations?.length,
             destinationCount: proofingConfig?.batchQueue?.destinations?.length || 0,
             apiKeyPresent: !!proofingConfig?.batchQueue?.destinations?.[0]?.apiKey,
-            apiUrl: proofingConfig?.batchQueue?.destinations?.[0]?.apiUrl || 'not-set',
+            apiUrl: proofingConfig?.batchQueue?.destinations?.[0]?.apiUrl || "not-set",
         });
         // Warn if proofing is enabled but no API key is configured
         if (proofingConfig?.enabled && !hasApiKey) {
-            console.warn('[ProofService] ⚠️  Proofing is enabled but AGENTSHIELD_API_KEY is not set!');
-            console.warn('[ProofService] To enable proof submission:');
-            console.warn('[ProofService]   1. Set AGENTSHIELD_API_KEY in .dev.vars (for local dev)');
-            console.warn('[ProofService]   2. Run: wrangler secret put AGENTSHIELD_API_KEY (for production)');
+            console.warn("[ProofService] ⚠️  Proofing is enabled but AGENTSHIELD_API_KEY is not set!");
+            console.warn("[ProofService] To enable proof submission:");
+            console.warn("[ProofService]   1. Set AGENTSHIELD_API_KEY in .dev.vars (for local dev)");
+            console.warn("[ProofService]   2. Run: wrangler secret put AGENTSHIELD_API_KEY (for production)");
         }
         // Initialize batch queue if configured
         // Note: In Cloudflare Workers, timers don't persist across requests,
         // so we rely on manual flush() calls via cron jobs instead of automatic timers
-        if (proofingConfig?.enabled && proofingConfig.batchQueue?.destinations?.length) {
+        if (proofingConfig?.enabled &&
+            proofingConfig.batchQueue?.destinations?.length) {
             try {
                 const destinations = [];
                 for (const destConfig of proofingConfig.batchQueue.destinations) {
-                    if (destConfig.type === 'agentshield') {
+                    if (destConfig.type === "agentshield") {
                         // Only create destination if API key is present and not empty
                         if (destConfig.apiKey?.length && destConfig.apiUrl?.length) {
                             destinations.push(new AgentShieldProofDestination(destConfig.apiUrl, destConfig.apiKey));
-                            console.log('[ProofService] Added AgentShield destination:', {
+                            console.log("[ProofService] Added AgentShield destination:", {
                                 apiUrl: destConfig.apiUrl,
                                 hasApiKey: !!destConfig.apiKey,
                             });
                         }
                         else {
-                            console.warn('[ProofService] Skipping AgentShield destination - missing API key or URL:', {
+                            console.warn("[ProofService] Skipping AgentShield destination - missing API key or URL:", {
                                 hasApiKey: !!destConfig.apiKey,
                                 hasApiUrl: !!destConfig.apiUrl,
                             });
@@ -68,24 +69,26 @@ export class ProofService {
                         maxRetries: proofingConfig.batchQueue.maxRetries || 3,
                         debug: proofingConfig.batchQueue.debug || false,
                     });
-                    console.log('[ProofService] Batch queue initialized (Cloudflare Workers mode - manual flush via cron):', {
+                    console.log("[ProofService] Batch queue initialized (Cloudflare Workers mode - manual flush via cron):", {
                         maxBatchSize: proofingConfig.batchQueue.maxBatchSize || 10,
                         flushIntervalMs: proofingConfig.batchQueue.flushIntervalMs || 5000,
                         destinations: destinations.length,
                     });
                 }
                 else {
-                    console.warn('[ProofService] No valid destinations configured - batch queue not initialized');
+                    console.warn("[ProofService] No valid destinations configured - batch queue not initialized");
                     // Warn in production if no API key configured
                     // Access environment via vars or use type assertion
-                    const environment = this.config.environment || this.config.vars?.ENVIRONMENT || 'development';
-                    if (environment === 'production') {
-                        console.warn('[ProofService] No AGENTSHIELD_API_KEY configured - proofs will not be submitted');
+                    const environment = this.config.environment ||
+                        this.config.vars?.ENVIRONMENT ||
+                        "development";
+                    if (environment === "production") {
+                        console.warn("[ProofService] No AGENTSHIELD_API_KEY configured - proofs will not be submitted");
                     }
                 }
             }
             catch (error) {
-                console.error('[ProofService] Failed to initialize batch queue:', error);
+                console.error("[ProofService] Failed to initialize batch queue:", error);
             }
         }
     }
@@ -101,13 +104,13 @@ export class ProofService {
      */
     async submitProof(proof, context) {
         if (!proof.jws || !proof.meta) {
-            console.warn('[ProofService] Proof missing jws or meta, skipping submission');
+            console.warn("[ProofService] Proof missing jws or meta, skipping submission");
             return;
         }
         // Submit first proof immediately for dashboard setup detection
         // This ensures the dashboard can detect the server and tools immediately
         if (!this.firstProofSubmitted && this.batchQueue) {
-            console.log('[ProofService] Submitting first proof immediately for dashboard setup detection');
+            console.log("[ProofService] Submitting first proof immediately for dashboard setup detection");
             this.firstProofSubmitted = true;
             // Submit first proof directly, then use batching for subsequent proofs
             await this.submitProofDirect(proof, context);
@@ -118,19 +121,19 @@ export class ProofService {
         // but relies on cron jobs for cross-request flushing
         if (this.batchQueue) {
             try {
-                console.log('[ProofService] Enqueuing proof to batch queue:', {
+                console.log("[ProofService] Enqueuing proof to batch queue:", {
                     did: proof.meta.did,
                     sessionId: proof.meta.sessionId,
                     toolName: context.toolName,
                     scopeId: proof.meta.scopeId,
-                    mcpServerUrl: context.mcpServerUrl || 'not-set',
+                    mcpServerUrl: context.mcpServerUrl || "not-set",
                 });
                 // Enqueue proof - batch queue will auto-flush when batch size is reached
                 this.batchQueue.enqueue(proof);
                 return;
             }
             catch (error) {
-                console.error('[ProofService] Failed to enqueue proof, falling back to direct submission:', error);
+                console.error("[ProofService] Failed to enqueue proof, falling back to direct submission:", error);
                 // Fall through to direct submission
             }
         }
@@ -141,18 +144,27 @@ export class ProofService {
      * Direct proof submission (fallback when batch queue not available)
      */
     async submitProofDirect(proof, context) {
+        // Validate mutual exclusivity
+        if (context.consentEvent && context.toolName) {
+            throw new Error("Cannot submit both tool call and consent event in same context");
+        }
+        if (!context.consentEvent && !context.toolName) {
+            throw new Error("Must provide either toolName or consentEvent");
+        }
         // Get AgentShield config from proofing config
         // Use type assertion to access proofing config (extends MCPIConfig which has proofing)
         const proofingConfig = this.config.proofing;
         if (!proofingConfig?.enabled || !proofingConfig.batchQueue?.destinations) {
-            console.log('[ProofService] Proof submission disabled or no destinations configured');
+            console.log("[ProofService] Proof submission disabled or no destinations configured");
             return;
         }
         // Find AgentShield destination
-        const agentShieldDest = proofingConfig.batchQueue.destinations.find((dest) => dest.type === 'agentshield' && dest.apiKey);
-        if (!agentShieldDest || !agentShieldDest.apiKey || !agentShieldDest.apiUrl) {
-            console.log('[ProofService] No AgentShield destination configured:', {
-                hasDestinations: !!(proofingConfig.batchQueue.destinations?.length),
+        const agentShieldDest = proofingConfig.batchQueue.destinations.find((dest) => dest.type === "agentshield" && dest.apiKey);
+        if (!agentShieldDest ||
+            !agentShieldDest.apiKey ||
+            !agentShieldDest.apiUrl) {
+            console.log("[ProofService] No AgentShield destination configured:", {
+                hasDestinations: !!proofingConfig.batchQueue.destinations?.length,
                 foundDest: !!agentShieldDest,
                 hasApiKey: !!agentShieldDest?.apiKey,
                 hasApiUrl: !!agentShieldDest?.apiUrl,
@@ -161,7 +173,8 @@ export class ProofService {
         }
         // Use AccessControlApiService if available from runtime
         if (this.runtime && this.runtime.accessControlService) {
-            const accessControlService = this.runtime.accessControlService;
+            const accessControlService = this.runtime
+                .accessControlService;
             try {
                 // Get tool call context from runtime (if available)
                 const toolCallContext = this.runtime?.getLastToolCallContext();
@@ -171,26 +184,58 @@ export class ProofService {
                     delegation_id: null,
                     proofs: [proof],
                     context: {
-                        toolCalls: toolCallContext ? [toolCallContext] : [{
-                                tool: context.toolName,
-                                args: context.args,
-                                result: context.result,
-                                scopeId: proof.meta.scopeId || `${context.toolName}:execute`
-                            }],
-                        mcpServerUrl: context.mcpServerUrl
-                    }
+                        // Only include tool calls for actual tool executions
+                        toolCalls: context.toolName && !context.consentEvent
+                            ? toolCallContext
+                                ? [toolCallContext]
+                                : [
+                                    {
+                                        tool: context.toolName,
+                                        args: context.args || {},
+                                        result: context.result,
+                                        scopeId: proof.meta.scopeId || `${context.toolName}:execute`,
+                                    },
+                                ]
+                            : [],
+                        // Include consent events when present
+                        consentEvents: context.consentEvent ? [context.consentEvent] : [],
+                        mcpServerUrl: context.mcpServerUrl,
+                    },
                 };
-                console.log('[ProofService] Submitting proof via AccessControlApiService:', {
+                console.log("[ProofService] Submitting proof via AccessControlApiService:", {
                     did: proof.meta.did,
                     sessionId: proof.meta.sessionId,
-                    jwsFormat: proof.jws.split('.').length === 3 ? 'valid (3 parts)' : 'invalid',
+                    jwsFormat: proof.jws.split(".").length === 3 ? "valid (3 parts)" : "invalid",
                     contextTool: request.context.toolCalls[0]?.tool,
                 });
-                const response = await accessControlService.submitProofs(request);
+                let response;
+                try {
+                    response = await accessControlService.submitProofs(request);
+                }
+                catch (error) {
+                    // CRITICAL: Log full error details before re-throwing
+                    // Stringify nested objects so they appear in logs
+                    const errorDetails = error?.details || {};
+                    const zodErrorsStr = errorDetails.zodErrors
+                        ? JSON.stringify(errorDetails.zodErrors, null, 2)
+                        : undefined;
+                    const responseDataStr = errorDetails.responseData
+                        ? JSON.stringify(errorDetails.responseData, null, 2)
+                        : undefined;
+                    console.error("[ProofService] ❌ PROOF SUBMISSION ERROR:", {
+                        errorMessage: error?.message,
+                        errorCode: error?.code,
+                        zodErrors: zodErrorsStr,
+                        responseData: responseDataStr,
+                        errorStack: error?.stack,
+                        request: JSON.stringify(request, null, 2),
+                    });
+                    throw error;
+                }
                 // Type assertion needed due to TypeScript type resolution issues with outdated node_modules types
                 // The actual runtime type has accepted/rejected/outcomes, but node_modules has old types
                 const typedResponse = response;
-                console.log('[ProofService] Response:', {
+                console.log("[ProofService] ✅ Response:", {
                     success: typedResponse.success,
                     accepted: typedResponse.accepted,
                     rejected: typedResponse.rejected,
@@ -198,18 +243,18 @@ export class ProofService {
                     errors: typedResponse.errors?.length || 0,
                 });
                 if (typedResponse.accepted > 0) {
-                    console.log('[ProofService] ✅ Proofs accepted:', typedResponse.accepted);
+                    console.log("[ProofService] ✅ Proofs accepted:", typedResponse.accepted);
                 }
                 if (typedResponse.rejected > 0) {
-                    console.log('[ProofService] ❌ Proofs rejected:', typedResponse.rejected);
+                    console.log("[ProofService] ❌ Proofs rejected:", typedResponse.rejected);
                 }
                 if (typedResponse.errors && typedResponse.errors.length > 0) {
-                    console.error('[ProofService] Proof errors:', typedResponse.errors);
+                    console.error("[ProofService] Proof errors:", typedResponse.errors);
                 }
                 return;
             }
             catch (error) {
-                console.error('[ProofService] Submission error via AccessControlApiService:', {
+                console.error("[ProofService] Submission error via AccessControlApiService:", {
                     error: error instanceof Error ? error.message : String(error),
                     stack: error instanceof Error ? error.stack : undefined,
                 });
@@ -219,7 +264,7 @@ export class ProofService {
         // Fallback to direct fetch if AccessControlApiService not available
         const apiUrl = agentShieldDest.apiUrl;
         const apiKey = agentShieldDest.apiKey;
-        console.log('[ProofService] Direct submission config (fallback):', {
+        console.log("[ProofService] Direct submission config (fallback):", {
             apiUrl,
             hasApiKey: !!apiKey,
             apiKeyLength: apiKey?.length || 0,
@@ -231,44 +276,55 @@ export class ProofService {
         const requestBody = {
             session_id: context.session.id,
             delegation_id: null,
-            proofs: [{
+            proofs: [
+                {
                     jws: proof.jws, // Already in full JWS format
-                    meta: proof.meta // Already has all required fields
-                }],
+                    meta: proof.meta, // Already has all required fields
+                },
+            ],
             // Optional context for dashboard integration
             context: {
-                toolCalls: toolCallContext ? [toolCallContext] : [{
-                        // Fallback if context not available from runtime
-                        tool: context.toolName,
-                        args: context.args,
-                        result: context.result,
-                        scopeId: proof.meta.scopeId || `${context.toolName}:execute`
-                    }],
+                // Only include tool calls for actual tool executions
+                toolCalls: context.toolName && !context.consentEvent
+                    ? toolCallContext
+                        ? [toolCallContext]
+                        : [
+                            {
+                                // Fallback if context not available from runtime
+                                tool: context.toolName,
+                                args: context.args || {},
+                                result: context.result,
+                                scopeId: proof.meta.scopeId || `${context.toolName}:execute`,
+                            },
+                        ]
+                    : [],
+                // Include consent events when present
+                consentEvents: context.consentEvent ? [context.consentEvent] : [],
                 // MCP server URL for tool discovery (optional, only needed once)
-                mcpServerUrl: context.mcpServerUrl
-            }
+                mcpServerUrl: context.mcpServerUrl,
+            },
         };
-        console.log('[ProofService] Submitting proof with context:', {
+        console.log("[ProofService] Submitting proof with context:", {
             did: proof.meta.did,
             sessionId: proof.meta.sessionId,
-            jwsFormat: proof.jws.split('.').length === 3 ? 'valid (3 parts)' : 'invalid',
+            jwsFormat: proof.jws.split(".").length === 3 ? "valid (3 parts)" : "invalid",
             contextTool: requestBody.context.toolCalls[0]?.tool,
             contextScopeId: requestBody.context.toolCalls[0]?.scopeId,
-            mcpServerUrl: requestBody.context.mcpServerUrl || 'not-set',
+            mcpServerUrl: requestBody.context.mcpServerUrl || "not-set",
             requestBodySize: JSON.stringify(requestBody).length,
         });
         try {
             const response = await fetch(`${apiUrl}/api/v1/bouncer/proofs`, {
-                method: 'POST',
+                method: "POST",
                 headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${apiKey}`
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${apiKey}`,
                 },
-                body: JSON.stringify(requestBody)
+                body: JSON.stringify(requestBody),
             });
             const responseText = await response.text();
             if (!response.ok) {
-                console.error('[ProofService] Submission failed:', {
+                console.error("[ProofService] Submission failed:", {
                     status: response.status,
                     statusText: response.statusText,
                     response: responseText.substring(0, 500), // Limit response size in logs
@@ -280,13 +336,13 @@ export class ProofService {
                 responseData = JSON.parse(responseText);
             }
             catch (parseError) {
-                console.error('[ProofService] Failed to parse response:', {
+                console.error("[ProofService] Failed to parse response:", {
                     responseText: responseText.substring(0, 500),
                     error: parseError,
                 });
-                throw new Error('Invalid JSON response from AgentShield');
+                throw new Error("Invalid JSON response from AgentShield");
             }
-            console.log('[ProofService] Response:', {
+            console.log("[ProofService] Response:", {
                 success: responseData.success,
                 received: responseData.received,
                 processed: responseData.processed,
@@ -295,17 +351,17 @@ export class ProofService {
                 errors: responseData.errors?.length || 0,
             });
             if (responseData.accepted) {
-                console.log('[ProofService] ✅ Proofs accepted:', responseData.accepted);
+                console.log("[ProofService] ✅ Proofs accepted:", responseData.accepted);
             }
             if (responseData.rejected) {
-                console.log('[ProofService] ❌ Proofs rejected:', responseData.rejected);
+                console.log("[ProofService] ❌ Proofs rejected:", responseData.rejected);
             }
             if (responseData.errors && responseData.errors.length > 0) {
-                console.error('[ProofService] Proof errors:', responseData.errors);
+                console.error("[ProofService] Proof errors:", responseData.errors);
             }
         }
         catch (error) {
-            console.error('[ProofService] Submission error:', {
+            console.error("[ProofService] Submission error:", {
                 error: error instanceof Error ? error.message : String(error),
                 stack: error instanceof Error ? error.stack : undefined,
             });
@@ -339,7 +395,7 @@ export class ProofService {
      */
     async flush() {
         if (this.batchQueue) {
-            console.log('[ProofService] Flushing batch queue...');
+            console.log("[ProofService] Flushing batch queue...");
             await this.batchQueue.flush();
             // Also retry any pending batches
             await this.batchQueue.retryPending();

package/dist/services/proof.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAyB,MAAM,qBAAqB,CAAC;AAU1G,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAC5B,UAAU,CAAmB;IAC7B,mBAAmB,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAE/E,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,qCAAqC;QACrC,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAC9D,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CAC1D,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE;YACzC,eAAe,EAAE,cAAc,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC;YACrE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;YACvE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YACtE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS;SAC3E,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YACzF,OAAO,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QACpG,CAAC;QAED,uCAAuC;QACvC,qEAAqE;QACrE,+EAA+E;QAC/E,IAAI,cAAc,EAAE,OAAO,IAAI,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;YAC/E,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB,EAAE,CAAC;gBAE5C,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAChE,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBACtC,8DAA8D;wBAC9D,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;4BAC3D,YAAY,CAAC,IAAI,CACf,IAAI,2BAA2B,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CACtE,CAAC;4BACF,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;gCAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;gCACzB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;wBACL,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,IAAI,CAAC,2EAA2E,EAAE;gCACxF,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;gCAC9B,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,oEAAoE;oBACpE,sEAAsE;oBACtE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC;wBACpC,YAAY;wBACZ,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;wBACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;qBAChD,CAAC,CAAC;oBACH,OAAO,CAAC,GAAG,CAAC,2FAA2F,EAAE;wBACvG,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,YAAY,EAAE,YAAY,CAAC,MAAM;qBAClC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;oBAC9F,8CAA8C;oBAC9C,oDAAoD;oBACpD,MAAM,WAAW,GAAI,IAAI,CAAC,MAAc,CAAC,WAAW,IAAK,IAAI,CAAC,MAAc,CAAC,IAAI,EAAE,WAAW,IAAI,aAAa,CAAC;oBAChH,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;oBAClG,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;YAC/F,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,uEAAuE;YACvE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE;oBAC5D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;iBAChD,CAAC,CAAC;gBAEH,yEAAyE;gBACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,4EAA4E,EAAE,KAAK,CAAC,CAAC;gBACnG,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,KAAoB,EACpB,OAA+B;QAE/B,8CAA8C;QAC9C,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,eAAe,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CACjE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CAC1D,CAAC;QAEF,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,uDAAuD,EAAE;gBACnE,eAAe,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC;gBACnE,SAAS,EAAE,CAAC,CAAC,eAAe;gBAC5B,SAAS,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM;gBACpC,SAAS,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM;aACrC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,OAAO,IAAK,IAAI,CAAC,OAAe,CAAC,oBAAoB,EAAE,CAAC;YAC/D,MAAM,oBAAoB,GAAI,IAAI,CAAC,OAAe,CAAC,oBAA4E,CAAC;YAEhI,IAAI,CAAC;gBACH,oDAAoD;gBACpD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;gBAE/D,0DAA0D;gBAC1D,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC9B,aAAa,EAAE,IAAqB;oBACpC,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,OAAO,EAAE;wBACP,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;gCAChD,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gCAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;6BAC7D,CAAC;wBACF,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC;iBACF,CAAC;gBAEF,OAAO,CAAC,GAAG,CAAC,8DAA8D,EAAE;oBAC1E,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;oBAC5E,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;iBAChD,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAElE,kGAAkG;gBAClG,yFAAyF;gBACzF,MAAM,aAAa,GAAG,QAMrB,CAAC;gBAEF,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE;oBACtC,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;iBAC1C,CAAC,CAAC;gBAEH,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtE,CAAC;gBAED,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,8DAA8D,EAAE;oBAC5E,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QACtC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QAEtC,OAAO,CAAC,GAAG,CAAC,qDAAqD,EAAE;YACjE,MAAM;YACN,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAE/D,0DAA0D;QAC1D,4EAA4E;QAC5E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,CAAC;oBACP,GAAG,EAAE,KAAK,CAAC,GAAG,EAAG,6BAA6B;oBAC9C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAE,kCAAkC;iBACrD,CAAC;YACF,6CAA6C;YAC7C,OAAO,EAAE;gBACP,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;wBAChD,iDAAiD;wBACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qBAC7D,CAAC;gBACF,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;YAC3D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAC5E,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,EAAE;iBACpC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,8BAA8B;iBACzE,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACxD,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE;gBACtC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;aACzC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9B,iCAAiC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EACL,eAAe,EACf,2BAA2B,GAE5B,MAAM,qBAAqB,CAAC;AAe7B,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAC5B,UAAU,CAAmB;IAC7B,mBAAmB,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAE/E,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,qCAAqC;QACrC,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAC9D,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CAC1D,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE;YACzC,eAAe,EAAE,cAAc,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;YACnE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;YACvE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YACtE,MAAM,EACJ,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS;SACrE,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CACV,4EAA4E,CAC7E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CACV,0EAA0E,CAC3E,CAAC;YACF,OAAO,CAAC,IAAI,CACV,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,qEAAqE;QACrE,+EAA+E;QAC/E,IACE,cAAc,EAAE,OAAO;YACvB,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAC/C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB,EAAE,CAAC;gBAE5C,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAChE,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBACtC,8DAA8D;wBAC9D,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;4BAC3D,YAAY,CAAC,IAAI,CACf,IAAI,2BAA2B,CAC7B,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAClB,CACF,CAAC;4BACF,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;gCAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;gCACzB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;wBACL,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,IAAI,CACV,2EAA2E,EAC3E;gCACE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;gCAC9B,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,oEAAoE;oBACpE,sEAAsE;oBACtE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC;wBACpC,YAAY;wBACZ,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;wBACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;qBAChD,CAAC,CAAC;oBACH,OAAO,CAAC,GAAG,CACT,2FAA2F,EAC3F;wBACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EACb,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBACnD,YAAY,EAAE,YAAY,CAAC,MAAM;qBAClC,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,+EAA+E,CAChF,CAAC;oBACF,8CAA8C;oBAC9C,oDAAoD;oBACpD,MAAM,WAAW,GACd,IAAI,CAAC,MAAc,CAAC,WAAW;wBAC/B,IAAI,CAAC,MAAc,CAAC,IAAI,EAAE,WAAW;wBACtC,aAAa,CAAC;oBAChB,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,iFAAiF,CAClF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,kDAAkD,EAClD,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CACV,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CACT,iFAAiF,CAClF,CAAC;YACF,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,uEAAuE;YACvE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE;oBAC5D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;iBAChD,CAAC,CAAC;gBAEH,yEAAyE;gBACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,4EAA4E,EAC5E,KAAK,CACN,CAAC;gBACF,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,KAAoB,EACpB,OAA+B;QAE/B,8BAA8B;QAC9B,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,8CAA8C;QAC9C,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CACT,wEAAwE,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,eAAe,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CACjE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CAC1D,CAAC;QAEF,IACE,CAAC,eAAe;YAChB,CAAC,eAAe,CAAC,MAAM;YACvB,CAAC,eAAe,CAAC,MAAM,EACvB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,uDAAuD,EAAE;gBACnE,eAAe,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM;gBACjE,SAAS,EAAE,CAAC,CAAC,eAAe;gBAC5B,SAAS,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM;gBACpC,SAAS,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM;aACrC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,OAAO,IAAK,IAAI,CAAC,OAAe,CAAC,oBAAoB,EAAE,CAAC;YAC/D,MAAM,oBAAoB,GAAI,IAAI,CAAC,OAAe;iBAC/C,oBAA4E,CAAC;YAEhF,IAAI,CAAC;gBACH,oDAAoD;gBACpD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;gBAE/D,0DAA0D;gBAC1D,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC9B,aAAa,EAAE,IAAqB;oBACpC,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,OAAO,EAAE;wBACP,qDAAqD;wBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;4BACvC,CAAC,CAAC,eAAe;gCACf,CAAC,CAAC,CAAC,eAAe,CAAC;gCACnB,CAAC,CAAC;oCACE;wCACE,IAAI,EAAE,OAAO,CAAC,QAAS;wCACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qCACtD;iCACF;4BACL,CAAC,CAAC,EAAE;wBACR,sCAAsC;wBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;wBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC;iBACF,CAAC;gBAEF,OAAO,CAAC,GAAG,CACT,8DAA8D,EAC9D;oBACE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;oBACnE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;iBAChD,CACF,CAAC;gBAEF,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,sDAAsD;oBACtD,kDAAkD;oBAClD,MAAM,YAAY,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;oBAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS;wBACzC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjD,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY;wBAC/C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;wBACpD,CAAC,CAAC,SAAS,CAAC;oBAEd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;wBACxD,YAAY,EAAE,KAAK,EAAE,OAAO;wBAC5B,SAAS,EAAE,KAAK,EAAE,IAAI;wBACtB,SAAS,EAAE,YAAY;wBACvB,YAAY,EAAE,eAAe;wBAC7B,UAAU,EAAE,KAAK,EAAE,KAAK;wBACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC1C,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,kGAAkG;gBAClG,yFAAyF;gBACzF,MAAM,aAAa,GAAG,QASrB,CAAC;gBAEF,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE;oBACxC,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;iBAC1C,CAAC,CAAC;gBAEH,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CACT,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CACT,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtE,CAAC;gBAED,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD,CACF,CAAC;gBACF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QACtC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QAEtC,OAAO,CAAC,GAAG,CAAC,qDAAqD,EAAE;YACjE,MAAM;YACN,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAE/D,0DAA0D;QAC1D,4EAA4E;QAC5E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE;gBACN;oBACE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,6BAA6B;oBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,kCAAkC;iBACrD;aACF;YACD,6CAA6C;YAC7C,OAAO,EAAE;gBACP,qDAAqD;gBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;oBACvC,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,CAAC,eAAe,CAAC;wBACnB,CAAC,CAAC;4BACE;gCACE,iDAAiD;gCACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;6BACtD;yBACF;oBACL,CAAC,CAAC,EAAE;gBACR,sCAAsC;gBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjE,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;YAC3D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACnE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,8BAA8B;iBACzE,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACxD,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE;gBACtC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;aACzC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CACT,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CACT,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9B,iCAAiC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/services/tool-context-builder.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Tool Context Builder
+ *
+ * Builds ToolExecutionContext for tool handlers by resolving IDP tokens
+ * based on tool protection configuration and user identity.
+ *
+ * @package @kya-os/mcp-i-cloudflare
+ */
+import type { ToolExecutionContext } from "../types/tool-context.js";
+import type { IdpTokenResolver } from "@kya-os/mcp-i-core";
+import type { ToolProtection } from "@kya-os/mcp-i-core/types/tool-protection";
+import type { OAuthConfigService } from "@kya-os/mcp-i-core";
+export interface ToolContextBuilderConfig {
+    /** IDP token resolver for resolving tokens from User DID */
+    tokenResolver: IdpTokenResolver;
+    /** OAuth config service for fetching provider configurations */
+    configService: OAuthConfigService;
+    /** Project ID for fetching OAuth config */
+    projectId: string;
+    /** Optional logger callback for diagnostics */
+    logger?: (message: string, data?: unknown) => void;
+}
+/**
+ * Builder for tool execution context
+ *
+ * Resolves IDP tokens and builds context for tool handlers.
+ * Phase 1: Uses configured provider as temporary fallback.
+ * Phase 2+: Requires explicit oauthProvider on tool protection.
+ */
+export declare class ToolContextBuilder {
+    private config;
+    constructor(config: ToolContextBuilderConfig);
+    /**
+     * Build tool execution context
+     *
+     * @param toolName - Name of the tool being executed
+     * @param userDid - User DID (optional, required for OAuth)
+     * @param sessionId - Session ID (optional)
+     * @param delegationToken - Delegation token (optional)
+     * @param toolProtection - Tool protection configuration (optional)
+     * @returns Tool execution context or undefined if not needed
+     */
+    buildContext(toolName: string, userDid: string | undefined, sessionId: string | undefined, delegationToken: string | undefined, toolProtection: ToolProtection | null): Promise<ToolExecutionContext | undefined>;
+    /**
+     * Resolve OAuth provider for a tool
+     *
+     * Phase 1: Uses configured provider from OAuth config as temporary fallback
+     * Phase 2+: Requires explicit oauthProvider on tool protection
+     *
+     * @param toolProtection - Tool protection configuration
+     * @returns Provider name or null if not found
+     */
+    private resolveProvider;
+}
+//# sourceMappingURL=tool-context-builder.d.ts.map

package/dist/services/tool-context-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-context-builder.d.ts","sourceRoot":"","sources":["../../src/services/tool-context-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAE/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,WAAW,wBAAwB;IACvC,4DAA4D;IAC5D,aAAa,EAAE,gBAAgB,CAAC;IAEhC,gEAAgE;IAChE,aAAa,EAAE,kBAAkB,CAAC;IAElC,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAElB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;CACpD;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAEZ;gBAEU,MAAM,EAAE,wBAAwB;IAS5C;;;;;;;;;OASG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,cAAc,EAAE,cAAc,GAAG,IAAI,GACpC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAyD5C;;;;;;;;OAQG;YACW,eAAe;CAyC9B"}

package/dist/services/tool-context-builder.js

@@ -0,0 +1,124 @@
+/**
+ * Tool Context Builder
+ *
+ * Builds ToolExecutionContext for tool handlers by resolving IDP tokens
+ * based on tool protection configuration and user identity.
+ *
+ * @package @kya-os/mcp-i-cloudflare
+ */
+/**
+ * Builder for tool execution context
+ *
+ * Resolves IDP tokens and builds context for tool handlers.
+ * Phase 1: Uses configured provider as temporary fallback.
+ * Phase 2+: Requires explicit oauthProvider on tool protection.
+ */
+export class ToolContextBuilder {
+    config;
+    constructor(config) {
+        this.config = {
+            tokenResolver: config.tokenResolver,
+            configService: config.configService,
+            projectId: config.projectId,
+            logger: config.logger || (() => { }),
+        };
+    }
+    /**
+     * Build tool execution context
+     *
+     * @param toolName - Name of the tool being executed
+     * @param userDid - User DID (optional, required for OAuth)
+     * @param sessionId - Session ID (optional)
+     * @param delegationToken - Delegation token (optional)
+     * @param toolProtection - Tool protection configuration (optional)
+     * @returns Tool execution context or undefined if not needed
+     */
+    async buildContext(toolName, userDid, sessionId, delegationToken, toolProtection) {
+        // Only build context if tool requires OAuth
+        if (!toolProtection?.requiredScopes?.length || !userDid) {
+            return undefined;
+        }
+        // Phase 1: Resolve provider from configured providers
+        // Phase 1 uses configured provider as temporary fallback
+        // Phase 2+ requires explicit oauthProvider on tool protection
+        const provider = await this.resolveProvider(toolProtection);
+        if (!provider) {
+            this.config.logger("[ToolContextBuilder] Provider not resolved", {
+                toolName,
+                userDid: userDid.substring(0, 20) + "...",
+            });
+            return undefined;
+        }
+        // Resolve IDP token
+        const idpToken = await this.config.tokenResolver.resolveTokenFromDid(userDid, provider, toolProtection.requiredScopes);
+        if (!idpToken) {
+            // Token not available - will trigger OAuth flow
+            this.config.logger("[ToolContextBuilder] Token not available", {
+                toolName,
+                userDid: userDid.substring(0, 20) + "...",
+                provider,
+                scopes: toolProtection.requiredScopes,
+            });
+            return undefined;
+        }
+        // Build context with token
+        const context = {
+            idpToken,
+            provider,
+            scopes: toolProtection.requiredScopes,
+            userDid,
+            sessionId,
+            delegationToken,
+        };
+        this.config.logger("[ToolContextBuilder] Context built successfully", {
+            toolName,
+            userDid: userDid.substring(0, 20) + "...",
+            provider,
+            hasToken: !!idpToken,
+        });
+        return context;
+    }
+    /**
+     * Resolve OAuth provider for a tool
+     *
+     * Phase 1: Uses configured provider from OAuth config as temporary fallback
+     * Phase 2+: Requires explicit oauthProvider on tool protection
+     *
+     * @param toolProtection - Tool protection configuration
+     * @returns Provider name or null if not found
+     */
+    async resolveProvider(toolProtection) {
+        // Phase 2+: Check for explicit oauthProvider (not yet implemented)
+        // if (toolProtection.oauthProvider) {
+        //   return toolProtection.oauthProvider;
+        // }
+        // Phase 1: Use configured provider from OAuth config as temporary fallback
+        // Get first configured provider (Phase 1 assumes single provider per project)
+        try {
+            const oauthConfig = await this.config.configService.getOAuthConfig(this.config.projectId);
+            const providers = Object.keys(oauthConfig.providers);
+            if (providers.length === 0) {
+                this.config.logger("[ToolContextBuilder] No providers configured", {
+                    projectId: this.config.projectId,
+                });
+                return null;
+            }
+            // Phase 1: Use first configured provider as fallback
+            // Phase 2+: This fallback will be removed, tools must specify oauthProvider
+            const provider = providers[0];
+            this.config.logger("[ToolContextBuilder] Provider resolved (Phase 1 fallback)", {
+                provider,
+                availableProviders: providers,
+            });
+            return provider;
+        }
+        catch (error) {
+            this.config.logger("[ToolContextBuilder] Failed to fetch OAuth config", {
+                error: error instanceof Error ? error.message : String(error),
+                projectId: this.config.projectId,
+            });
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=tool-context-builder.js.map