@kya-os/mcp-i-cloudflare 1.6.18 → 1.6.19-canary.clientinfo.20251126124133

package/dist/utils/initialize-context.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Initialize Context Manager
+ *
+ * Manages MCP initialize context storage and retrieval for cross-request state.
+ * This allows us to preserve client info between initialize and handshake calls.
+ */
+import type { MCPClientCapabilities } from "@kya-os/contracts/handshake";
+import type { MCPClientInfo as SessionClientInfo } from "../types/client";
+/**
+ * Context stored from initialize request
+ */
+export interface InitializeContext {
+    timestamp: number;
+    protocolVersion?: string;
+    capabilities?: MCPClientCapabilities;
+    clientInfo?: Partial<SessionClientInfo>;
+}
+/**
+ * Request metadata for fingerprinting
+ */
+export interface RequestMeta {
+    fingerprint?: string;
+    userAgent?: string;
+    ip?: string;
+    cfRay?: string;
+    request?: Request;
+}
+/**
+ * Manages initialize contexts for session continuity
+ */
+export declare class InitializeContextManager {
+    private contexts;
+    constructor();
+    /**
+     * Store initialize context for later use in handshake
+     *
+     * @param meta Request metadata for fingerprinting
+     * @param params Initialize request parameters
+     */
+    store(meta: RequestMeta | undefined, params: unknown): void;
+    /**
+     * Consume initialize context (removes it after retrieval)
+     *
+     * @param meta Request metadata for fingerprinting
+     * @returns Initialize context if found and valid, undefined otherwise
+     */
+    consume(meta: RequestMeta | undefined): InitializeContext | undefined;
+    /**
+     * Prune expired contexts
+     */
+    private prune;
+    /**
+     * Normalize client info from various formats
+     *
+     * @param value Client info from request
+     * @returns Normalized client info or undefined
+     */
+    private normalizeClientInfo;
+    /**
+     * Clone capabilities object (deep copy)
+     *
+     * @param capabilities Capabilities to clone
+     * @returns Cloned capabilities or undefined
+     */
+    private cloneCapabilities;
+    /**
+     * Type guard for record objects
+     *
+     * @param value Value to check
+     * @returns true if value is a record object
+     */
+    private isRecord;
+    /**
+     * Get current size of context cache (for monitoring)
+     *
+     * @returns Number of stored contexts
+     */
+    size(): number;
+    /**
+     * Clear all contexts (for testing)
+     */
+    clear(): void;
+}
+/**
+ * Build request metadata from HTTP request
+ *
+ * @param request HTTP request
+ * @returns Request metadata with fingerprint
+ */
+export declare function buildRequestMeta(request: Request): RequestMeta;
+//# sourceMappingURL=initialize-context.d.ts.map

package/dist/utils/initialize-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize-context.d.ts","sourceRoot":"","sources":["../../src/utils/initialize-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,UAAU,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAKD;;GAEG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAiC;;IAMjD;;;;;OAKG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAqB3D;;;;;OAKG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS;IAoBrE;;OAEG;IACH,OAAO,CAAC,KAAK;IASb;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IA2C3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;OAIG;IACH,IAAI,IAAI,MAAM;IAId;;OAEG;IACH,KAAK,IAAI,IAAI;CAGd;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAsB9D"}

package/dist/utils/initialize-context.js

@@ -0,0 +1,169 @@
+/**
+ * Initialize Context Manager
+ *
+ * Manages MCP initialize context storage and retrieval for cross-request state.
+ * This allows us to preserve client info between initialize and handshake calls.
+ */
+// TTL for initialize contexts (60 seconds)
+const INITIALIZE_CONTEXT_TTL_MS = 60_000;
+/**
+ * Manages initialize contexts for session continuity
+ */
+export class InitializeContextManager {
+    contexts;
+    constructor() {
+        this.contexts = new Map();
+    }
+    /**
+     * Store initialize context for later use in handshake
+     *
+     * @param meta Request metadata for fingerprinting
+     * @param params Initialize request parameters
+     */
+    store(meta, params) {
+        if (!meta?.fingerprint || !this.isRecord(params)) {
+            return;
+        }
+        const protocolVersion = params.protocolVersion;
+        const capabilities = params.capabilities;
+        const clientInfo = this.normalizeClientInfo(params.clientInfo);
+        const context = {
+            timestamp: Date.now(),
+            protocolVersion: typeof protocolVersion === "string" ? protocolVersion : undefined,
+            capabilities: this.cloneCapabilities(capabilities),
+            clientInfo,
+        };
+        this.contexts.set(meta.fingerprint, context);
+        this.prune();
+    }
+    /**
+     * Consume initialize context (removes it after retrieval)
+     *
+     * @param meta Request metadata for fingerprinting
+     * @returns Initialize context if found and valid, undefined otherwise
+     */
+    consume(meta) {
+        if (!meta?.fingerprint) {
+            return undefined;
+        }
+        const context = this.contexts.get(meta.fingerprint);
+        if (!context) {
+            return undefined;
+        }
+        if (Date.now() - context.timestamp > INITIALIZE_CONTEXT_TTL_MS) {
+            this.contexts.delete(meta.fingerprint);
+            return undefined;
+        }
+        // Remove after consumption to prevent cross-session leakage
+        this.contexts.delete(meta.fingerprint);
+        return context;
+    }
+    /**
+     * Prune expired contexts
+     */
+    prune() {
+        const now = Date.now();
+        for (const [key, context] of this.contexts.entries()) {
+            if (now - context.timestamp > INITIALIZE_CONTEXT_TTL_MS) {
+                this.contexts.delete(key);
+            }
+        }
+    }
+    /**
+     * Normalize client info from various formats
+     *
+     * @param value Client info from request
+     * @returns Normalized client info or undefined
+     */
+    normalizeClientInfo(value) {
+        if (!this.isRecord(value)) {
+            return undefined;
+        }
+        const normalized = {};
+        const record = value;
+        const name = record.name;
+        if (typeof name === "string" && name.trim().length > 0) {
+            normalized.name = name.trim();
+        }
+        const title = record.title;
+        if (typeof title === "string" && title.trim().length > 0) {
+            normalized.title = title.trim();
+        }
+        const version = record.version;
+        if (typeof version === "string" && version.trim().length > 0) {
+            normalized.version = version.trim();
+        }
+        const platform = record.platform;
+        if (typeof platform === "string" && platform.trim().length > 0) {
+            normalized.platform = platform.trim();
+        }
+        const vendor = record.vendor;
+        if (typeof vendor === "string" && vendor.trim().length > 0) {
+            normalized.vendor = vendor.trim();
+        }
+        const persistentId = record.persistentId;
+        if (typeof persistentId === "string" && persistentId.trim().length > 0) {
+            normalized.persistentId = persistentId.trim();
+        }
+        return Object.keys(normalized).length > 0 ? normalized : undefined;
+    }
+    /**
+     * Clone capabilities object (deep copy)
+     *
+     * @param capabilities Capabilities to clone
+     * @returns Cloned capabilities or undefined
+     */
+    cloneCapabilities(capabilities) {
+        if (!this.isRecord(capabilities)) {
+            return undefined;
+        }
+        return JSON.parse(JSON.stringify(capabilities));
+    }
+    /**
+     * Type guard for record objects
+     *
+     * @param value Value to check
+     * @returns true if value is a record object
+     */
+    isRecord(value) {
+        return typeof value === "object" && value !== null && !Array.isArray(value);
+    }
+    /**
+     * Get current size of context cache (for monitoring)
+     *
+     * @returns Number of stored contexts
+     */
+    size() {
+        return this.contexts.size;
+    }
+    /**
+     * Clear all contexts (for testing)
+     */
+    clear() {
+        this.contexts.clear();
+    }
+}
+/**
+ * Build request metadata from HTTP request
+ *
+ * @param request HTTP request
+ * @returns Request metadata with fingerprint
+ */
+export function buildRequestMeta(request) {
+    const ip = request.headers.get("cf-connecting-ip") ??
+        request.headers.get("x-forwarded-for") ??
+        undefined;
+    const userAgent = request.headers.get("user-agent") ?? undefined;
+    const cfRay = request.headers.get("cf-ray") ?? undefined;
+    const origin = request.headers.get("origin") ?? undefined;
+    const secChUa = request.headers.get("sec-ch-ua") ?? undefined;
+    const fingerprintParts = [ip, userAgent, cfRay, origin, secChUa].filter((value) => typeof value === "string" && value.length > 0);
+    return {
+        fingerprint: fingerprintParts.length > 0 ? fingerprintParts.join("|") : undefined,
+        ip,
+        userAgent,
+        cfRay,
+        request, // Include request for cookie access
+    };
+}
+//# sourceMappingURL=initialize-context.js.map

package/dist/utils/initialize-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize-context.js","sourceRoot":"","sources":["../../src/utils/initialize-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA0BH,2CAA2C;AAC3C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAC3B,QAAQ,CAAiC;IAEjD;QACE,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAA6B,EAAE,MAAe;QAClD,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAsB;YACjC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,eAAe,EACb,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YACnE,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC;YAClD,UAAU;SACX,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,IAA6B;QACnC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,yBAAyB,EAAE,CAAC;YAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,4DAA4D;QAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,yBAAyB,EAAE,CAAC;gBACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CACzB,KAAc;QAEd,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAA+B,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAEhD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvE,UAAU,CAAC,YAAY,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,YAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAA0B,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CAAC,KAAc;QAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,EAAE,GACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtC,SAAS,CAAC;IACZ,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;IAE9D,MAAM,gBAAgB,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CACrE,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAC1E,CAAC;IAEF,OAAO;QACL,WAAW,EACT,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QACtE,EAAE;QACF,SAAS;QACT,KAAK;QACL,OAAO,EAAE,oCAAoC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/utils/known-clients.d.ts

@@ -2,17 +2,19 @@
  * Known MCP Clients Registry
  *
  * Maps known MCP client names to their official Know That AI (KTA) DIDs.
- * When a known client connects, we use its pre-registered DID instead of generating one.
+ * All known clients get a did:web DID, with ktaRegistered indicating actual KTA registration.
  */
 export interface KnownClientConfig {
     /** Possible client name variations (case-insensitive matching) */
     names: string[];
-    /** Know That AI registered DID for this client (null if not yet registered) */
-    ktaDid: string | null;
+    /** Know That AI DID for this client (did:web format) */
+    ktaDid: string;
+    /** Whether this client is actually registered on knowthat.ai */
+    ktaRegistered: boolean;
     /** Display name for logging */
     displayName: string;
-    /** Optional vendor/organization */
-    vendor?: string;
+    /** Vendor/organization */
+    vendor: string;
 }
 /**
  * Registry of known MCP clients
@@ -20,6 +22,8 @@ export interface KnownClientConfig {
  * Each entry maps a canonical client ID to its configuration.
  * The `names` array contains possible variations of the client name
  * that might appear in the MCP initialize message's clientInfo.name field.
+ *
+ * All known clients get a did:web DID. ktaRegistered indicates if actually on KTA.
  */
 export declare const KNOWN_MCP_CLIENTS: Record<string, KnownClientConfig>;
 /**
@@ -36,9 +40,13 @@ export declare function findKnownClient(clientName: string | undefined): (KnownC
  */
 export declare function isKnownClient(clientName: string | undefined): boolean;
 /**
- * Get the DID for a known client, if registered
+ * Get the DID for a known client
  */
 export declare function getKnownClientDid(clientName: string | undefined): string | null;
+/**
+ * Check if a known client is registered on KTA
+ */
+export declare function isKnownClientRegistered(clientName: string | undefined): boolean;
 /**
  * Get all known client IDs
  */

package/dist/utils/known-clients.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"known-clients.d.ts","sourceRoot":"","sources":["../../src/utils/known-clients.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAsF/D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,CAAC,iBAAiB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,CAclD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAErE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,IAAI,CAGf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C"}
+{"version":3,"file":"known-clients.d.ts","sourceRoot":"","sources":["../../src/utils/known-clients.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,aAAa,EAAE,OAAO,CAAC;IACvB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CA8F/D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,CAAC,iBAAiB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,CAclD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAErE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,IAAI,CAGf;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C"}

package/dist/utils/known-clients.js

@@ -2,7 +2,7 @@
  * Known MCP Clients Registry
  *
  * Maps known MCP client names to their official Know That AI (KTA) DIDs.
- * When a known client connects, we use its pre-registered DID instead of generating one.
+ * All known clients get a did:web DID, with ktaRegistered indicating actual KTA registration.
  */
 /**
  * Registry of known MCP clients
@@ -10,6 +10,8 @@
  * Each entry maps a canonical client ID to its configuration.
  * The `names` array contains possible variations of the client name
  * that might appear in the MCP initialize message's clientInfo.name field.
+ *
+ * All known clients get a did:web DID. ktaRegistered indicates if actually on KTA.
  */
 export const KNOWN_MCP_CLIENTS = {
     // ============================================================
@@ -27,7 +29,8 @@ export const KNOWN_MCP_CLIENTS = {
             "Claude Code", // CLI/code client
             "claude-code",
         ],
-        ktaDid: "did:web:knowthat.ai:agents:claude", // https://knowthat.ai/agents/claude
+        ktaDid: "did:web:knowthat.ai:agents:claude",
+        ktaRegistered: true, // https://knowthat.ai/agents/claude
         displayName: "Claude",
         vendor: "Anthropic",
     },
@@ -40,7 +43,8 @@ export const KNOWN_MCP_CLIENTS = {
             "OpenAI ChatGPT",
             "OpenAI",
         ],
-        ktaDid: "did:web:knowthat.ai:agents:chatgpt", // https://knowthat.ai/agents/chatgpt
+        ktaDid: "did:web:knowthat.ai:agents:chatgpt",
+        ktaRegistered: true, // https://knowthat.ai/agents/chatgpt
         displayName: "ChatGPT",
         vendor: "OpenAI",
     },
@@ -52,12 +56,13 @@ export const KNOWN_MCP_CLIENTS = {
             "perplexity-ai",
             "Perplexity App",
         ],
-        ktaDid: "did:web:knowthat.ai:agents:perplexity", // https://knowthat.ai/agents/perplexity
+        ktaDid: "did:web:knowthat.ai:agents:perplexity",
+        ktaRegistered: true, // https://knowthat.ai/agents/perplexity
         displayName: "Perplexity",
         vendor: "Perplexity AI",
     },
     // ============================================================
-    // UNREGISTERED CLIENTS (no KTA DID yet - will get ephemeral DID)
+    // KNOWN BUT UNREGISTERED CLIENTS (have did:web but not yet on KTA)
     // ============================================================
     "mcp-inspector": {
         names: [
@@ -68,31 +73,36 @@ export const KNOWN_MCP_CLIENTS = {
             "Inspector",
             "inspector-client", // Name sent by inspector CLI
         ],
-        ktaDid: null, // Not yet registered on knowthat.ai
+        ktaDid: "did:web:knowthat.ai:agents:mcp-inspector",
+        ktaRegistered: false, // Pending registration on knowthat.ai
         displayName: "MCP Inspector",
         vendor: "Anthropic",
     },
     "cursor": {
         names: ["Cursor", "cursor", "cursor-ai", "Cursor AI", "Cursor IDE"],
-        ktaDid: null, // Not yet registered on knowthat.ai
+        ktaDid: "did:web:knowthat.ai:agents:cursor",
+        ktaRegistered: false, // Pending registration on knowthat.ai
         displayName: "Cursor",
         vendor: "Cursor Inc",
     },
     "windsurf": {
         names: ["Windsurf", "windsurf", "Codeium Windsurf"],
-        ktaDid: null, // Not yet registered on knowthat.ai
+        ktaDid: "did:web:knowthat.ai:agents:windsurf",
+        ktaRegistered: false, // Pending registration on knowthat.ai
         displayName: "Windsurf",
         vendor: "Codeium",
     },
     "cline": {
         names: ["Cline", "cline", "VS Code Cline", "vscode-cline"],
-        ktaDid: null, // Not yet registered on knowthat.ai
+        ktaDid: "did:web:knowthat.ai:agents:cline",
+        ktaRegistered: false, // Pending registration on knowthat.ai
         displayName: "Cline",
         vendor: "Cline",
     },
     "zed": {
         names: ["Zed", "zed", "Zed Editor", "zed-editor"],
-        ktaDid: null, // Not yet registered on knowthat.ai
+        ktaDid: "did:web:knowthat.ai:agents:zed",
+        ktaRegistered: false, // Pending registration on knowthat.ai
         displayName: "Zed",
         vendor: "Zed Industries",
     },
@@ -123,12 +133,19 @@ export function isKnownClient(clientName) {
     return findKnownClient(clientName) !== undefined;
 }
 /**
- * Get the DID for a known client, if registered
+ * Get the DID for a known client
  */
 export function getKnownClientDid(clientName) {
     const known = findKnownClient(clientName);
     return known?.ktaDid ?? null;
 }
+/**
+ * Check if a known client is registered on KTA
+ */
+export function isKnownClientRegistered(clientName) {
+    const known = findKnownClient(clientName);
+    return known?.ktaRegistered ?? false;
+}
 /**
  * Get all known client IDs
  */

package/dist/utils/known-clients.js.map

@@ -1 +1 @@
-{"version":3,"file":"known-clients.js","sourceRoot":"","sources":["../../src/utils/known-clients.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsC;IAClE,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,QAAQ,EAAE;QACR,KAAK,EAAE;YACL,gBAAgB;YAChB,gBAAgB;YAChB,QAAQ;YACR,QAAQ;YACR,kBAAkB;YAClB,oBAAoB,EAAE,yBAAyB;YAC/C,UAAU;YACV,aAAa,EAAE,kBAAkB;YACjC,aAAa;SACd;QACD,MAAM,EAAE,mCAAmC,EAAE,oCAAoC;QACjF,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,WAAW;KACpB;IACD,SAAS,EAAE;QACT,KAAK,EAAE;YACL,SAAS;YACT,SAAS;YACT,aAAa;YACb,aAAa;YACb,gBAAgB;YAChB,QAAQ;SACT;QACD,MAAM,EAAE,oCAAoC,EAAE,qCAAqC;QACnF,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,QAAQ;KACjB;IACD,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,YAAY;YACZ,YAAY;YACZ,eAAe;YACf,eAAe;YACf,gBAAgB;SACjB;QACD,MAAM,EAAE,uCAAuC,EAAE,wCAAwC;QACzF,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,eAAe;KACxB;IAED,+DAA+D;IAC/D,iEAAiE;IACjE,+DAA+D;IAC/D,eAAe,EAAE;QACf,KAAK,EAAE;YACL,eAAe;YACf,eAAe;YACf,0BAA0B;YAC1B,iCAAiC;YACjC,WAAW;YACX,kBAAkB,EAAE,6BAA6B;SAClD;QACD,MAAM,EAAE,IAAI,EAAE,oCAAoC;QAClD,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,WAAW;KACpB;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC;QACnE,MAAM,EAAE,IAAI,EAAE,oCAAoC;QAClD,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,YAAY;KACrB;IACD,UAAU,EAAE;QACV,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,CAAC;QACnD,MAAM,EAAE,IAAI,EAAE,oCAAoC;QAClD,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,SAAS;KAClB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,CAAC;QAC1D,MAAM,EAAE,IAAI,EAAE,oCAAoC;QAClD,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,OAAO;KAChB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC;QACjD,MAAM,EAAE,IAAI,EAAE,oCAAoC;QAClD,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,gBAAgB;KACzB;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA8B;IAE9B,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEvD,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE,CAAC;gBAC1C,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,UAA8B;IAC1D,OAAO,eAAe,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA8B;IAE9B,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"known-clients.js","sourceRoot":"","sources":["../../src/utils/known-clients.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsC;IAClE,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,QAAQ,EAAE;QACR,KAAK,EAAE;YACL,gBAAgB;YAChB,gBAAgB;YAChB,QAAQ;YACR,QAAQ;YACR,kBAAkB;YAClB,oBAAoB,EAAE,yBAAyB;YAC/C,UAAU;YACV,aAAa,EAAE,kBAAkB;YACjC,aAAa;SACd;QACD,MAAM,EAAE,mCAAmC;QAC3C,aAAa,EAAE,IAAI,EAAE,oCAAoC;QACzD,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,WAAW;KACpB;IACD,SAAS,EAAE;QACT,KAAK,EAAE;YACL,SAAS;YACT,SAAS;YACT,aAAa;YACb,aAAa;YACb,gBAAgB;YAChB,QAAQ;SACT;QACD,MAAM,EAAE,oCAAoC;QAC5C,aAAa,EAAE,IAAI,EAAE,qCAAqC;QAC1D,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,QAAQ;KACjB;IACD,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,YAAY;YACZ,YAAY;YACZ,eAAe;YACf,eAAe;YACf,gBAAgB;SACjB;QACD,MAAM,EAAE,uCAAuC;QAC/C,aAAa,EAAE,IAAI,EAAE,wCAAwC;QAC7D,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,eAAe;KACxB;IAED,+DAA+D;IAC/D,mEAAmE;IACnE,+DAA+D;IAC/D,eAAe,EAAE;QACf,KAAK,EAAE;YACL,eAAe;YACf,eAAe;YACf,0BAA0B;YAC1B,iCAAiC;YACjC,WAAW;YACX,kBAAkB,EAAE,6BAA6B;SAClD;QACD,MAAM,EAAE,0CAA0C;QAClD,aAAa,EAAE,KAAK,EAAE,sCAAsC;QAC5D,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,WAAW;KACpB;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC;QACnE,MAAM,EAAE,mCAAmC;QAC3C,aAAa,EAAE,KAAK,EAAE,sCAAsC;QAC5D,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,YAAY;KACrB;IACD,UAAU,EAAE;QACV,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,CAAC;QACnD,MAAM,EAAE,qCAAqC;QAC7C,aAAa,EAAE,KAAK,EAAE,sCAAsC;QAC5D,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,SAAS;KAClB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,CAAC;QAC1D,MAAM,EAAE,kCAAkC;QAC1C,aAAa,EAAE,KAAK,EAAE,sCAAsC;QAC5D,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,OAAO;KAChB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC;QACjD,MAAM,EAAE,gCAAgC;QACxC,aAAa,EAAE,KAAK,EAAE,sCAAsC;QAC5D,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,gBAAgB;KACzB;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA8B;IAE9B,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEvD,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE,CAAC;gBAC1C,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,UAA8B;IAC1D,OAAO,eAAe,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA8B;IAE9B,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAA8B;IAE9B,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,aAAa,IAAI,KAAK,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AACxC,CAAC"}

package/dist/utils/oauth-identity.d.ts

@@ -0,0 +1,58 @@
+/**
+ * OAuth Identity Utilities
+ *
+ * Handles OAuth identity extraction and validation from HTTP requests.
+ * This module consolidates OAuth-related logic that was previously in the adapter.
+ */
+import type { OAuthIdentity } from "@kya-os/contracts/consent";
+/**
+ * OAuth identity validation result
+ */
+export interface OAuthValidationResult {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Extract OAuth identity from request cookies
+ *
+ * @param request - HTTP Request object
+ * @returns OAuthIdentity or null if not found/invalid
+ */
+export declare function extractOAuthIdentityFromRequest(request: Request): OAuthIdentity | null;
+/**
+ * Validate OAuth identity format and content
+ *
+ * Ensures:
+ * - Provider is non-empty string (1-50 chars)
+ * - Subject is non-empty string (1-255 chars)
+ * - Provider matches expected format (alphanumeric, hyphens, underscores)
+ * - Subject matches expected format (non-empty, reasonable length)
+ *
+ * @param identity - Parsed OAuth identity object
+ * @returns Validation result
+ */
+export declare function validateOAuthIdentity(identity: unknown): OAuthValidationResult;
+/**
+ * Lookup User DID from OAuth identity mapping
+ *
+ * @param oauthIdentity OAuth identity to lookup
+ * @param delegationStorage KV namespace for storage
+ * @returns User DID or null if not found
+ */
+export declare function lookupUserDidFromOAuth(oauthIdentity: OAuthIdentity, delegationStorage: any): Promise<string | null>;
+/**
+ * Create a redacted OAuth identity for storage (PII protection)
+ *
+ * @param oauthIdentity Original OAuth identity
+ * @returns Redacted identity safe for storage
+ */
+export declare function redactOAuthIdentityForStorage(oauthIdentity: OAuthIdentity | null): any;
+/**
+ * Test if an OAuth cookie value is valid
+ * Helper function for testing and debugging
+ *
+ * @param cookieValue Encoded cookie value
+ * @returns true if valid OAuth identity, false otherwise
+ */
+export declare function isValidOAuthCookie(cookieValue: string): boolean;
+//# sourceMappingURL=oauth-identity.d.ts.map

package/dist/utils/oauth-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-identity.d.ts","sourceRoot":"","sources":["../../src/utils/oauth-identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAoCtF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,qBAAqB,CAkH9E;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,GAAG,GACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+BxB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,GAAG,GAAG,CAUtF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAQ/D"}