@kya-os/mcp-i-cloudflare 1.6.23 → 1.6.25

package/dist/__tests__/e2e/test-config.d.ts

@@ -0,0 +1,37 @@
+/**
+ * E2E Test Configuration
+ *
+ * This file contains configuration for end-to-end tests that use real AgentShield API.
+ * Set these environment variables before running E2E tests:
+ *
+ * ```bash
+ * export E2E_AGENTSHIELD_API_KEY="sk_test_..."
+ * export E2E_AGENTSHIELD_PROJECT_ID="test-project-id"
+ * export E2E_AGENTSHIELD_API_URL="https://kya.vouched.id"  # Optional, defaults to production
+ * ```
+ *
+ * Or create a `.env.e2e` file in the package root:
+ * ```
+ * E2E_AGENTSHIELD_API_KEY=sk_test_...
+ * E2E_AGENTSHIELD_PROJECT_ID=test-project-id
+ * ```
+ */
+export interface E2ETestConfig {
+    apiKey: string;
+    projectId: string;
+    apiUrl: string;
+    enabled: boolean;
+}
+/**
+ * Load E2E test configuration from environment variables
+ */
+export declare function loadE2EConfig(): E2ETestConfig | null;
+/**
+ * Check if E2E tests should run
+ */
+export declare function shouldRunE2ETests(): boolean;
+/**
+ * Get E2E test configuration or throw if not configured
+ */
+export declare function getE2EConfig(): E2ETestConfig;
+//# sourceMappingURL=test-config.d.ts.map

package/dist/__tests__/e2e/test-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-config.d.ts","sourceRoot":"","sources":["../../../src/__tests__/e2e/test-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAWH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,aAAa,GAAG,IAAI,CAyBpD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAG3C;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,aAAa,CAU5C"}

package/dist/__tests__/e2e/test-config.js

@@ -0,0 +1,62 @@
+/**
+ * E2E Test Configuration
+ *
+ * This file contains configuration for end-to-end tests that use real AgentShield API.
+ * Set these environment variables before running E2E tests:
+ *
+ * ```bash
+ * export E2E_AGENTSHIELD_API_KEY="sk_test_..."
+ * export E2E_AGENTSHIELD_PROJECT_ID="test-project-id"
+ * export E2E_AGENTSHIELD_API_URL="https://kya.vouched.id"  # Optional, defaults to production
+ * ```
+ *
+ * Or create a `.env.e2e` file in the package root:
+ * ```
+ * E2E_AGENTSHIELD_API_KEY=sk_test_...
+ * E2E_AGENTSHIELD_PROJECT_ID=test-project-id
+ * ```
+ */
+/**
+ * Load E2E test configuration from environment variables
+ */
+export function loadE2EConfig() {
+    // Access environment variables - works in Node.js (vitest) environment
+    const apiKey = typeof process !== "undefined" && process.env
+        ? process.env.E2E_AGENTSHIELD_API_KEY
+        : undefined;
+    const projectId = typeof process !== "undefined" && process.env
+        ? process.env.E2E_AGENTSHIELD_PROJECT_ID
+        : undefined;
+    const apiUrl = typeof process !== "undefined" && process.env
+        ? process.env.E2E_AGENTSHIELD_API_URL || "https://kya.vouched.id"
+        : "https://kya.vouched.id";
+    if (!apiKey || !projectId) {
+        return null;
+    }
+    return {
+        apiKey,
+        projectId,
+        apiUrl,
+        enabled: true,
+    };
+}
+/**
+ * Check if E2E tests should run
+ */
+export function shouldRunE2ETests() {
+    const config = loadE2EConfig();
+    return config !== null && config.enabled;
+}
+/**
+ * Get E2E test configuration or throw if not configured
+ */
+export function getE2EConfig() {
+    const config = loadE2EConfig();
+    if (!config) {
+        throw new Error("E2E tests require E2E_AGENTSHIELD_API_KEY and E2E_AGENTSHIELD_PROJECT_ID environment variables.\n" +
+            "Set them in your environment or create a .env.e2e file.\n" +
+            "See packages/mcp-i-cloudflare/src/__tests__/e2e/test-config.ts for details.");
+    }
+    return config;
+}
+//# sourceMappingURL=test-config.js.map

package/dist/__tests__/e2e/test-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-config.js","sourceRoot":"","sources":["../../../src/__tests__/e2e/test-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAkBH;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,uEAAuE;IACvE,MAAM,MAAM,GACV,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG;QAC3C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACrC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG;QAC3C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B;QACxC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GACV,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG;QAC3C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,wBAAwB;QACjE,CAAC,CAAC,wBAAwB,CAAC;IAE/B,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,MAAM;QACN,SAAS;QACT,MAAM;QACN,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,mGAAmG;YACjG,2DAA2D;YAC3D,6EAA6E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/client-info.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Client Info Utilities
+ *
+ * Handles MCP client information extraction, normalization, and handshake payload preparation.
+ * This consolidates logic for working with client metadata across initialize and handshake.
+ */
+import type { HandshakeRequest, MCPClientCapabilities } from "@kya-os/contracts/handshake";
+import type { MCPClientInfo as SessionClientInfo } from "../types/client";
+/**
+ * Initialize context with client information
+ */
+export interface InitializeContext {
+    timestamp: number;
+    protocolVersion?: string;
+    capabilities?: MCPClientCapabilities;
+    clientInfo?: Partial<SessionClientInfo>;
+}
+/**
+ * Normalize client info from various formats
+ *
+ * @param value Client info from request (could be from initialize or handshake)
+ * @returns Normalized client info or undefined if invalid
+ */
+export declare function normalizeClientInfo(value: unknown): Partial<SessionClientInfo> | undefined;
+/**
+ * Extract MCP client information from handshake request and initialize context
+ *
+ * @param request Handshake request
+ * @param initializeContext Optional context from previous initialize call
+ * @returns Extracted and normalized client info or undefined
+ */
+export declare function extractMCPClient(request: HandshakeRequest, initializeContext?: InitializeContext): SessionClientInfo | undefined;
+/**
+ * Prepare handshake payload with client information from initialize context
+ *
+ * @param params Original handshake request parameters
+ * @param initializeContext Optional context from previous initialize call
+ * @returns Enhanced handshake request with client info
+ */
+export declare function prepareHandshakePayload(params: HandshakeRequest, initializeContext?: InitializeContext): HandshakeRequest;
+/**
+ * Clone capabilities object (deep copy)
+ *
+ * @param capabilities Capabilities to clone
+ * @returns Cloned capabilities or undefined
+ */
+export declare function cloneCapabilities(capabilities: unknown): MCPClientCapabilities | undefined;
+/**
+ * Type guard for record objects
+ *
+ * @param value Value to check
+ * @returns true if value is a record object
+ */
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Extract client ID from client info if available
+ *
+ * @param clientInfo Client info object
+ * @returns Client ID or undefined
+ */
+export declare function extractClientId(clientInfo: unknown): string | undefined;
+/**
+ * Merge client info from multiple sources
+ *
+ * @param sources Array of potential client info sources (later sources override earlier)
+ * @returns Merged client info
+ */
+export declare function mergeClientInfo(...sources: (Partial<SessionClientInfo> | undefined)[]): Partial<SessionClientInfo>;
+//# sourceMappingURL=client-info.d.ts.map

package/dist/utils/client-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-info.d.ts","sourceRoot":"","sources":["../../src/utils/client-info.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,UAAU,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAuCxC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,EACzB,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,iBAAiB,GAAG,SAAS,CAkD/B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,gBAAgB,EACxB,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,gBAAgB,CA8BlB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,OAAO,GACpB,qBAAqB,GAAG,SAAS,CAMnC;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAWvE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,EAAE,GACrD,OAAO,CAAC,iBAAiB,CAAC,CAU5B"}

package/dist/utils/client-info.js

@@ -0,0 +1,178 @@
+/**
+ * Client Info Utilities
+ *
+ * Handles MCP client information extraction, normalization, and handshake payload preparation.
+ * This consolidates logic for working with client metadata across initialize and handshake.
+ */
+/**
+ * Normalize client info from various formats
+ *
+ * @param value Client info from request (could be from initialize or handshake)
+ * @returns Normalized client info or undefined if invalid
+ */
+export function normalizeClientInfo(value) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const normalized = {};
+    const record = value;
+    const name = record.name;
+    if (typeof name === "string" && name.trim().length > 0) {
+        normalized.name = name.trim();
+    }
+    const title = record.title;
+    if (typeof title === "string" && title.trim().length > 0) {
+        normalized.title = title.trim();
+    }
+    const version = record.version;
+    if (typeof version === "string" && version.trim().length > 0) {
+        normalized.version = version.trim();
+    }
+    const platform = record.platform;
+    if (typeof platform === "string" && platform.trim().length > 0) {
+        normalized.platform = platform.trim();
+    }
+    const vendor = record.vendor;
+    if (typeof vendor === "string" && vendor.trim().length > 0) {
+        normalized.vendor = vendor.trim();
+    }
+    const persistentId = record.persistentId;
+    if (typeof persistentId === "string" && persistentId.trim().length > 0) {
+        normalized.persistentId = persistentId.trim();
+    }
+    return Object.keys(normalized).length > 0 ? normalized : undefined;
+}
+/**
+ * Extract MCP client information from handshake request and initialize context
+ *
+ * @param request Handshake request
+ * @param initializeContext Optional context from previous initialize call
+ * @returns Extracted and normalized client info or undefined
+ */
+export function extractMCPClient(request, initializeContext) {
+    const fromHandshake = normalizeClientInfo(request.clientInfo);
+    const merged = {
+        ...(initializeContext?.clientInfo ?? {}),
+        ...(fromHandshake ?? {}),
+    };
+    const handshakeClientId = isRecord(request.clientInfo) &&
+        typeof request.clientInfo.clientId === "string" &&
+        request.clientInfo.clientId.trim().length > 0
+        ? request.clientInfo.clientId.trim()
+        : undefined;
+    const hasClientMetadata = Object.keys(merged).length > 0 ||
+        handshakeClientId ||
+        typeof request.clientProtocolVersion === "string" ||
+        isRecord(request.clientCapabilities);
+    if (!hasClientMetadata) {
+        return undefined;
+    }
+    const nameValue = merged.name;
+    const name = typeof nameValue === "string" && nameValue.trim().length > 0
+        ? nameValue.trim()
+        : "unknown";
+    const clientId = handshakeClientId || crypto.randomUUID();
+    const capabilities = isRecord(request.clientCapabilities)
+        ? request.clientCapabilities
+        : initializeContext?.capabilities;
+    return {
+        name,
+        title: merged.title,
+        version: merged.version,
+        platform: merged.platform,
+        vendor: merged.vendor,
+        persistentId: merged.persistentId,
+        protocolVersion: request.clientProtocolVersion ??
+            initializeContext?.protocolVersion ??
+            merged.protocolVersion,
+        capabilities,
+        clientId,
+    };
+}
+/**
+ * Prepare handshake payload with client information from initialize context
+ *
+ * @param params Original handshake request parameters
+ * @param initializeContext Optional context from previous initialize call
+ * @returns Enhanced handshake request with client info
+ */
+export function prepareHandshakePayload(params, initializeContext) {
+    const payload = {
+        ...params,
+    };
+    if (!payload.clientProtocolVersion && initializeContext?.protocolVersion) {
+        payload.clientProtocolVersion = initializeContext.protocolVersion;
+    }
+    if (!payload.clientCapabilities && initializeContext?.capabilities) {
+        payload.clientCapabilities = initializeContext.capabilities;
+    }
+    if (!payload.clientInfo && initializeContext?.clientInfo?.name) {
+        const source = initializeContext.clientInfo;
+        const name = source.name;
+        if (!name) {
+            return payload;
+        }
+        payload.clientInfo = {
+            name,
+            ...(source.title ? { title: source.title } : {}),
+            ...(source.version ? { version: source.version } : {}),
+            ...(source.platform ? { platform: source.platform } : {}),
+            ...(source.vendor ? { vendor: source.vendor } : {}),
+            ...(source.persistentId ? { persistentId: source.persistentId } : {}),
+        };
+    }
+    return payload;
+}
+/**
+ * Clone capabilities object (deep copy)
+ *
+ * @param capabilities Capabilities to clone
+ * @returns Cloned capabilities or undefined
+ */
+export function cloneCapabilities(capabilities) {
+    if (!isRecord(capabilities)) {
+        return undefined;
+    }
+    return JSON.parse(JSON.stringify(capabilities));
+}
+/**
+ * Type guard for record objects
+ *
+ * @param value Value to check
+ * @returns true if value is a record object
+ */
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Extract client ID from client info if available
+ *
+ * @param clientInfo Client info object
+ * @returns Client ID or undefined
+ */
+export function extractClientId(clientInfo) {
+    if (!isRecord(clientInfo)) {
+        return undefined;
+    }
+    const clientId = clientInfo.clientId;
+    if (typeof clientId === "string" && clientId.trim().length > 0) {
+        return clientId.trim();
+    }
+    return undefined;
+}
+/**
+ * Merge client info from multiple sources
+ *
+ * @param sources Array of potential client info sources (later sources override earlier)
+ * @returns Merged client info
+ */
+export function mergeClientInfo(...sources) {
+    const merged = {};
+    for (const source of sources) {
+        if (source) {
+            Object.assign(merged, source);
+        }
+    }
+    return merged;
+}
+//# sourceMappingURL=client-info.js.map

package/dist/utils/client-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-info.js","sourceRoot":"","sources":["../../src/utils/client-info.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAA+B,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAEhD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,UAAU,CAAC,YAAY,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAyB,EACzB,iBAAqC;IAErC,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,MAAM,GAA+B;QACzC,GAAG,CAAC,iBAAiB,EAAE,UAAU,IAAI,EAAE,CAAC;QACxC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;KACzB,CAAC;IAEF,MAAM,iBAAiB,GACrB,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QAC5B,OAAQ,OAAO,CAAC,UAAkB,CAAC,QAAQ,KAAK,QAAQ;QACvD,OAAO,CAAC,UAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACpD,CAAC,CAAE,OAAO,CAAC,UAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,iBAAiB,GACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QAC9B,iBAAiB;QACjB,OAAO,OAAO,CAAC,qBAAqB,KAAK,QAAQ;QACjD,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEvC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GACR,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;QAClB,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,QAAQ,GAAG,iBAAiB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;IAE1D,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACvD,CAAC,CAAE,OAAO,CAAC,kBAA4C;QACvD,CAAC,CAAC,iBAAiB,EAAE,YAAY,CAAC;IAEpC,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EACb,OAAO,CAAC,qBAAqB;YAC7B,iBAAiB,EAAE,eAAe;YAClC,MAAM,CAAC,eAAe;QACxB,YAAY;QACZ,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAwB,EACxB,iBAAqC;IAErC,MAAM,OAAO,GAAqB;QAChC,GAAG,MAAM;KACV,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,iBAAiB,EAAE,eAAe,EAAE,CAAC;QACzE,OAAO,CAAC,qBAAqB,GAAG,iBAAiB,CAAC,eAAe,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,iBAAiB,EAAE,YAAY,EAAE,CAAC;QACnE,OAAO,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,YAAY,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,UAAU,GAAG;YACnB,IAAI;YACJ,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAqB;IAErB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAA0B,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,UAAmB;IACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAI,UAAkB,CAAC,QAAQ,CAAC;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAG,OAAmD;IAEtD,MAAM,MAAM,GAA+B,EAAE,CAAC;IAE9C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/error-formatter.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Error Formatter Utility
+ *
+ * Provides consistent JSON-RPC error response formatting for all error types.
+ * Handles special cases like DelegationRequiredError and OAuthRequiredError.
+ */
+/**
+ * JSON-RPC error response structure
+ */
+export interface JsonRpcErrorResponse {
+    jsonrpc: string;
+    id: unknown;
+    error: {
+        code: number;
+        message: string;
+        data?: any;
+    };
+}
+/**
+ * Error codes for different error types
+ */
+export declare const ERROR_CODES: {
+    readonly PARSE_ERROR: -32700;
+    readonly INVALID_REQUEST: -32600;
+    readonly METHOD_NOT_FOUND: -32601;
+    readonly INVALID_PARAMS: -32602;
+    readonly INTERNAL_ERROR: -32603;
+    readonly DELEGATION_REQUIRED: -32001;
+    readonly OAUTH_REQUIRED: -32002;
+    readonly AUTHORIZATION_REQUIRED: -32003;
+    readonly SESSION_EXPIRED: -32004;
+};
+/**
+ * Format a generic error into JSON-RPC response
+ *
+ * @param error The error to format
+ * @param id Request ID from JSON-RPC request
+ * @returns Formatted JSON-RPC error response
+ */
+export declare function formatJsonRpcError(error: unknown, id: unknown): JsonRpcErrorResponse;
+/**
+ * Format DelegationRequiredError into JSON-RPC response
+ *
+ * @param error Delegation required error
+ * @param id Request ID
+ * @returns Formatted error response with consent URL
+ */
+export declare function formatDelegationError(error: any, id: unknown): JsonRpcErrorResponse;
+/**
+ * Format OAuthRequiredError into JSON-RPC response
+ *
+ * @param error OAuth required error
+ * @param id Request ID
+ * @returns Formatted error response with OAuth URL
+ */
+export declare function formatOAuthError(error: any, id: unknown): JsonRpcErrorResponse;
+/**
+ * Check if error is a DelegationRequiredError
+ *
+ * @param error Error to check
+ * @returns true if it's a delegation required error
+ */
+export declare function isDelegationRequiredError(error: unknown): boolean;
+/**
+ * Check if error is an OAuthRequiredError
+ *
+ * @param error Error to check
+ * @returns true if it's an OAuth required error
+ */
+export declare function isOAuthRequiredError(error: unknown): boolean;
+/**
+ * Format method not found error
+ *
+ * @param method The method that was not found
+ * @param id Request ID
+ * @returns Formatted error response
+ */
+export declare function formatMethodNotFoundError(method: string, id: unknown): JsonRpcErrorResponse;
+/**
+ * Format tool not found error
+ *
+ * @param toolName The tool that was not found
+ * @param id Request ID
+ * @returns Formatted error response
+ */
+export declare function formatToolNotFoundError(toolName: string, id: unknown): JsonRpcErrorResponse;
+/**
+ * Format session expired error
+ *
+ * @param sessionId The expired session ID
+ * @param id Request ID
+ * @returns Formatted error response
+ */
+export declare function formatSessionExpiredError(sessionId: string, id: unknown): JsonRpcErrorResponse;
+/**
+ * Create a success response wrapper
+ *
+ * @param result The result to wrap
+ * @param id Request ID
+ * @returns JSON-RPC success response
+ */
+export declare function formatSuccessResponse(result: any, id: unknown): any;
+//# sourceMappingURL=error-formatter.d.ts.map

package/dist/utils/error-formatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-formatter.d.ts","sourceRoot":"","sources":["../../src/utils/error-formatter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,CAAC;KACZ,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;CAad,CAAC;AAEX;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,oBAAoB,CAoDpF;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,GAAG,oBAAoB,CA4BnF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,GAAG,oBAAoB,CA8B9E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAWjE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW5D;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,oBAAoB,CAS3F;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,oBAAoB,CAS3F;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,oBAAoB,CAY9F;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,GAAG,GAAG,CAMnE"}

package/dist/utils/error-formatter.js

@@ -0,0 +1,245 @@
+/**
+ * Error Formatter Utility
+ *
+ * Provides consistent JSON-RPC error response formatting for all error types.
+ * Handles special cases like DelegationRequiredError and OAuthRequiredError.
+ */
+/**
+ * Error codes for different error types
+ */
+export const ERROR_CODES = {
+    // Standard JSON-RPC error codes
+    PARSE_ERROR: -32700,
+    INVALID_REQUEST: -32600,
+    METHOD_NOT_FOUND: -32601,
+    INVALID_PARAMS: -32602,
+    INTERNAL_ERROR: -32603,
+    // Custom error codes for MCP-I
+    DELEGATION_REQUIRED: -32001,
+    OAUTH_REQUIRED: -32002,
+    AUTHORIZATION_REQUIRED: -32003,
+    SESSION_EXPIRED: -32004,
+};
+/**
+ * Format a generic error into JSON-RPC response
+ *
+ * @param error The error to format
+ * @param id Request ID from JSON-RPC request
+ * @returns Formatted JSON-RPC error response
+ */
+export function formatJsonRpcError(error, id) {
+    // Check if this is a special error type
+    if (isDelegationRequiredError(error)) {
+        return formatDelegationError(error, id);
+    }
+    if (isOAuthRequiredError(error)) {
+        return formatOAuthError(error, id);
+    }
+    // Generic error handling
+    let errorMessage = "Internal error";
+    let errorCode = ERROR_CODES.INTERNAL_ERROR;
+    let errorData = undefined;
+    if (error) {
+        // Check if it's an Error object with a message
+        if (typeof error === "object" && error instanceof Error && error.message) {
+            errorMessage = error.message;
+        }
+        // Check for custom error properties
+        else if (typeof error === "object" && "message" in error) {
+            errorMessage = String(error.message);
+        }
+        // For non-Error objects (strings, etc.), try to convert to string
+        else if (typeof error === "string") {
+            errorMessage = error;
+        }
+        // Extract additional error data if available
+        if (typeof error === "object" && "data" in error) {
+            errorData = error.data;
+        }
+        // Check for custom error code
+        if (typeof error === "object" && "code" in error) {
+            const customCode = error.code;
+            if (typeof customCode === "number") {
+                errorCode = customCode;
+            }
+        }
+    }
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: errorCode,
+            message: errorMessage,
+            ...(errorData !== undefined && { data: errorData }),
+        },
+    };
+}
+/**
+ * Format DelegationRequiredError into JSON-RPC response
+ *
+ * @param error Delegation required error
+ * @param id Request ID
+ * @returns Formatted error response with consent URL
+ */
+export function formatDelegationError(error, id) {
+    const toolName = error.toolName || "unknown";
+    const requiredScopes = error.requiredScopes || [];
+    const consentUrl = error.consentUrl;
+    const resumeToken = error.resumeToken;
+    // Format message with consent URL in MCP format
+    let message = error.message || `Delegation required for tool "${toolName}"`;
+    if (consentUrl) {
+        message = `${message}. <authorization_url>${consentUrl}</authorization_url>`;
+    }
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: ERROR_CODES.DELEGATION_REQUIRED,
+            message,
+            data: {
+                toolName,
+                requiredScopes,
+                consentUrl,
+                resumeToken,
+                // MCP-I specific: provide authorization URL for client to display
+                authorizationUrl: consentUrl,
+            },
+        },
+    };
+}
+/**
+ * Format OAuthRequiredError into JSON-RPC response
+ *
+ * @param error OAuth required error
+ * @param id Request ID
+ * @returns Formatted error response with OAuth URL
+ */
+export function formatOAuthError(error, id) {
+    const toolName = error.toolName || "unknown";
+    const requiredScopes = error.requiredScopes || [];
+    const provider = error.provider;
+    const oauthUrl = error.oauthUrl;
+    const resumeToken = error.resumeToken;
+    // Format message with OAuth URL in MCP format
+    let message = error.message || `OAuth required for tool "${toolName}"`;
+    if (oauthUrl) {
+        message = `${message}. <authorization_url>${oauthUrl}</authorization_url>`;
+    }
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: ERROR_CODES.OAUTH_REQUIRED,
+            message,
+            data: {
+                toolName,
+                requiredScopes,
+                provider,
+                oauthUrl,
+                resumeToken,
+                // MCP-I specific: provide authorization URL for client to display
+                authorizationUrl: oauthUrl,
+            },
+        },
+    };
+}
+/**
+ * Check if error is a DelegationRequiredError
+ *
+ * @param error Error to check
+ * @returns true if it's a delegation required error
+ */
+export function isDelegationRequiredError(error) {
+    if (!error || typeof error !== "object") {
+        return false;
+    }
+    const err = error;
+    return (err.name === "DelegationRequiredError" ||
+        err.constructor?.name === "DelegationRequiredError" ||
+        (err.code === ERROR_CODES.DELEGATION_REQUIRED && err.consentUrl));
+}
+/**
+ * Check if error is an OAuthRequiredError
+ *
+ * @param error Error to check
+ * @returns true if it's an OAuth required error
+ */
+export function isOAuthRequiredError(error) {
+    if (!error || typeof error !== "object") {
+        return false;
+    }
+    const err = error;
+    return (err.name === "OAuthRequiredError" ||
+        err.constructor?.name === "OAuthRequiredError" ||
+        (err.code === ERROR_CODES.OAUTH_REQUIRED && err.oauthUrl));
+}
+/**
+ * Format method not found error
+ *
+ * @param method The method that was not found
+ * @param id Request ID
+ * @returns Formatted error response
+ */
+export function formatMethodNotFoundError(method, id) {
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: ERROR_CODES.METHOD_NOT_FOUND,
+            message: `Unknown method: ${method}`,
+        },
+    };
+}
+/**
+ * Format tool not found error
+ *
+ * @param toolName The tool that was not found
+ * @param id Request ID
+ * @returns Formatted error response
+ */
+export function formatToolNotFoundError(toolName, id) {
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: ERROR_CODES.INVALID_PARAMS,
+            message: `Tool not found: ${toolName}`,
+        },
+    };
+}
+/**
+ * Format session expired error
+ *
+ * @param sessionId The expired session ID
+ * @param id Request ID
+ * @returns Formatted error response
+ */
+export function formatSessionExpiredError(sessionId, id) {
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: ERROR_CODES.SESSION_EXPIRED,
+            message: "Session has expired",
+            data: {
+                sessionId,
+            },
+        },
+    };
+}
+/**
+ * Create a success response wrapper
+ *
+ * @param result The result to wrap
+ * @param id Request ID
+ * @returns JSON-RPC success response
+ */
+export function formatSuccessResponse(result, id) {
+    return {
+        jsonrpc: "2.0",
+        id,
+        result,
+    };
+}
+//# sourceMappingURL=error-formatter.js.map

package/dist/utils/error-formatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-formatter.js","sourceRoot":"","sources":["../../src/utils/error-formatter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gCAAgC;IAChC,WAAW,EAAE,CAAC,KAAK;IACnB,eAAe,EAAE,CAAC,KAAK;IACvB,gBAAgB,EAAE,CAAC,KAAK;IACxB,cAAc,EAAE,CAAC,KAAK;IACtB,cAAc,EAAE,CAAC,KAAK;IAEtB,+BAA+B;IAC/B,mBAAmB,EAAE,CAAC,KAAK;IAC3B,cAAc,EAAE,CAAC,KAAK;IACtB,sBAAsB,EAAE,CAAC,KAAK;IAC9B,eAAe,EAAE,CAAC,KAAK;CACf,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,EAAW;IAC5D,wCAAwC;IACxC,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,qBAAqB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,yBAAyB;IACzB,IAAI,YAAY,GAAG,gBAAgB,CAAC;IACpC,IAAI,SAAS,GAAW,WAAW,CAAC,cAAc,CAAC;IACnD,IAAI,SAAS,GAAQ,SAAS,CAAC;IAE/B,IAAI,KAAK,EAAE,CAAC;QACV,+CAA+C;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACzE,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;QAC/B,CAAC;QACD,oCAAoC;aAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACzD,YAAY,GAAG,MAAM,CAAE,KAAa,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,kEAAkE;aAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;QAED,6CAA6C;QAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACjD,SAAS,GAAI,KAAa,CAAC,IAAI,CAAC;QAClC,CAAC;QAED,8BAA8B;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACjD,MAAM,UAAU,GAAI,KAAa,CAAC,IAAI,CAAC;YACvC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,SAAS,GAAG,UAAU,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,YAAY;YACrB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAU,EAAE,EAAW;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC7C,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAEtC,gDAAgD;IAChD,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,iCAAiC,QAAQ,GAAG,CAAC;IAC5E,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,GAAG,GAAG,OAAO,wBAAwB,UAAU,sBAAsB,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,WAAW,CAAC,mBAAmB;YACrC,OAAO;YACP,IAAI,EAAE;gBACJ,QAAQ;gBACR,cAAc;gBACd,UAAU;gBACV,WAAW;gBACX,kEAAkE;gBAClE,gBAAgB,EAAE,UAAU;aAC7B;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAU,EAAE,EAAW;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC7C,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAEtC,8CAA8C;IAC9C,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,4BAA4B,QAAQ,GAAG,CAAC;IACvE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,GAAG,GAAG,OAAO,wBAAwB,QAAQ,sBAAsB,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,WAAW,CAAC,cAAc;YAChC,OAAO;YACP,IAAI,EAAE;gBACJ,QAAQ;gBACR,cAAc;gBACd,QAAQ;gBACR,QAAQ;gBACR,WAAW;gBACX,kEAAkE;gBAClE,gBAAgB,EAAE,QAAQ;aAC3B;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,KAAY,CAAC;IACzB,OAAO,CACL,GAAG,CAAC,IAAI,KAAK,yBAAyB;QACtC,GAAG,CAAC,WAAW,EAAE,IAAI,KAAK,yBAAyB;QACnD,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,mBAAmB,IAAI,GAAG,CAAC,UAAU,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,KAAY,CAAC;IACzB,OAAO,CACL,GAAG,CAAC,IAAI,KAAK,oBAAoB;QACjC,GAAG,CAAC,WAAW,EAAE,IAAI,KAAK,oBAAoB;QAC9C,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,EAAW;IACnE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,WAAW,CAAC,gBAAgB;YAClC,OAAO,EAAE,mBAAmB,MAAM,EAAE;SACrC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,EAAW;IACnE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,WAAW,CAAC,cAAc;YAChC,OAAO,EAAE,mBAAmB,QAAQ,EAAE;SACvC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,EAAW;IACtE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,WAAW,CAAC,eAAe;YACjC,OAAO,EAAE,qBAAqB;YAC9B,IAAI,EAAE;gBACJ,SAAS;aACV;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAW,EAAE,EAAW;IAC5D,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/utils/initialize-context.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Initialize Context Manager
+ *
+ * Manages MCP initialize context storage and retrieval for cross-request state.
+ * This allows us to preserve client info between initialize and handshake calls.
+ */
+import type { MCPClientCapabilities } from "@kya-os/contracts/handshake";
+import type { MCPClientInfo as SessionClientInfo } from "../types/client";
+/**
+ * Context stored from initialize request
+ */
+export interface InitializeContext {
+    timestamp: number;
+    protocolVersion?: string;
+    capabilities?: MCPClientCapabilities;
+    clientInfo?: Partial<SessionClientInfo>;
+}
+/**
+ * Request metadata for fingerprinting
+ */
+export interface RequestMeta {
+    fingerprint?: string;
+    userAgent?: string;
+    ip?: string;
+    cfRay?: string;
+    request?: Request;
+}
+/**
+ * Manages initialize contexts for session continuity
+ */
+export declare class InitializeContextManager {
+    private contexts;
+    constructor();
+    /**
+     * Store initialize context for later use in handshake
+     *
+     * @param meta Request metadata for fingerprinting
+     * @param params Initialize request parameters
+     */
+    store(meta: RequestMeta | undefined, params: unknown): void;
+    /**
+     * Consume initialize context (removes it after retrieval)
+     *
+     * @param meta Request metadata for fingerprinting
+     * @returns Initialize context if found and valid, undefined otherwise
+     */
+    consume(meta: RequestMeta | undefined): InitializeContext | undefined;
+    /**
+     * Prune expired contexts
+     */
+    private prune;
+    /**
+     * Normalize client info from various formats
+     *
+     * @param value Client info from request
+     * @returns Normalized client info or undefined
+     */
+    private normalizeClientInfo;
+    /**
+     * Clone capabilities object (deep copy)
+     *
+     * @param capabilities Capabilities to clone
+     * @returns Cloned capabilities or undefined
+     */
+    private cloneCapabilities;
+    /**
+     * Type guard for record objects
+     *
+     * @param value Value to check
+     * @returns true if value is a record object
+     */
+    private isRecord;
+    /**
+     * Get current size of context cache (for monitoring)
+     *
+     * @returns Number of stored contexts
+     */
+    size(): number;
+    /**
+     * Clear all contexts (for testing)
+     */
+    clear(): void;
+}
+/**
+ * Build request metadata from HTTP request
+ *
+ * @param request HTTP request
+ * @returns Request metadata with fingerprint
+ */
+export declare function buildRequestMeta(request: Request): RequestMeta;
+//# sourceMappingURL=initialize-context.d.ts.map

package/dist/utils/initialize-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize-context.d.ts","sourceRoot":"","sources":["../../src/utils/initialize-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,UAAU,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAKD;;GAEG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAiC;;IAMjD;;;;;OAKG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAqB3D;;;;;OAKG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS;IAoBrE;;OAEG;IACH,OAAO,CAAC,KAAK;IASb;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IA2C3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;OAIG;IACH,IAAI,IAAI,MAAM;IAId;;OAEG;IACH,KAAK,IAAI,IAAI;CAGd;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAsB9D"}

package/dist/utils/initialize-context.js

@@ -0,0 +1,169 @@
+/**
+ * Initialize Context Manager
+ *
+ * Manages MCP initialize context storage and retrieval for cross-request state.
+ * This allows us to preserve client info between initialize and handshake calls.
+ */
+// TTL for initialize contexts (60 seconds)
+const INITIALIZE_CONTEXT_TTL_MS = 60_000;
+/**
+ * Manages initialize contexts for session continuity
+ */
+export class InitializeContextManager {
+    contexts;
+    constructor() {
+        this.contexts = new Map();
+    }
+    /**
+     * Store initialize context for later use in handshake
+     *
+     * @param meta Request metadata for fingerprinting
+     * @param params Initialize request parameters
+     */
+    store(meta, params) {
+        if (!meta?.fingerprint || !this.isRecord(params)) {
+            return;
+        }
+        const protocolVersion = params.protocolVersion;
+        const capabilities = params.capabilities;
+        const clientInfo = this.normalizeClientInfo(params.clientInfo);
+        const context = {
+            timestamp: Date.now(),
+            protocolVersion: typeof protocolVersion === "string" ? protocolVersion : undefined,
+            capabilities: this.cloneCapabilities(capabilities),
+            clientInfo,
+        };
+        this.contexts.set(meta.fingerprint, context);
+        this.prune();
+    }
+    /**
+     * Consume initialize context (removes it after retrieval)
+     *
+     * @param meta Request metadata for fingerprinting
+     * @returns Initialize context if found and valid, undefined otherwise
+     */
+    consume(meta) {
+        if (!meta?.fingerprint) {
+            return undefined;
+        }
+        const context = this.contexts.get(meta.fingerprint);
+        if (!context) {
+            return undefined;
+        }
+        if (Date.now() - context.timestamp > INITIALIZE_CONTEXT_TTL_MS) {
+            this.contexts.delete(meta.fingerprint);
+            return undefined;
+        }
+        // Remove after consumption to prevent cross-session leakage
+        this.contexts.delete(meta.fingerprint);
+        return context;
+    }
+    /**
+     * Prune expired contexts
+     */
+    prune() {
+        const now = Date.now();
+        for (const [key, context] of this.contexts.entries()) {
+            if (now - context.timestamp > INITIALIZE_CONTEXT_TTL_MS) {
+                this.contexts.delete(key);
+            }
+        }
+    }
+    /**
+     * Normalize client info from various formats
+     *
+     * @param value Client info from request
+     * @returns Normalized client info or undefined
+     */
+    normalizeClientInfo(value) {
+        if (!this.isRecord(value)) {
+            return undefined;
+        }
+        const normalized = {};
+        const record = value;
+        const name = record.name;
+        if (typeof name === "string" && name.trim().length > 0) {
+            normalized.name = name.trim();
+        }
+        const title = record.title;
+        if (typeof title === "string" && title.trim().length > 0) {
+            normalized.title = title.trim();
+        }
+        const version = record.version;
+        if (typeof version === "string" && version.trim().length > 0) {
+            normalized.version = version.trim();
+        }
+        const platform = record.platform;
+        if (typeof platform === "string" && platform.trim().length > 0) {
+            normalized.platform = platform.trim();
+        }
+        const vendor = record.vendor;
+        if (typeof vendor === "string" && vendor.trim().length > 0) {
+            normalized.vendor = vendor.trim();
+        }
+        const persistentId = record.persistentId;
+        if (typeof persistentId === "string" && persistentId.trim().length > 0) {
+            normalized.persistentId = persistentId.trim();
+        }
+        return Object.keys(normalized).length > 0 ? normalized : undefined;
+    }
+    /**
+     * Clone capabilities object (deep copy)
+     *
+     * @param capabilities Capabilities to clone
+     * @returns Cloned capabilities or undefined
+     */
+    cloneCapabilities(capabilities) {
+        if (!this.isRecord(capabilities)) {
+            return undefined;
+        }
+        return JSON.parse(JSON.stringify(capabilities));
+    }
+    /**
+     * Type guard for record objects
+     *
+     * @param value Value to check
+     * @returns true if value is a record object
+     */
+    isRecord(value) {
+        return typeof value === "object" && value !== null && !Array.isArray(value);
+    }
+    /**
+     * Get current size of context cache (for monitoring)
+     *
+     * @returns Number of stored contexts
+     */
+    size() {
+        return this.contexts.size;
+    }
+    /**
+     * Clear all contexts (for testing)
+     */
+    clear() {
+        this.contexts.clear();
+    }
+}
+/**
+ * Build request metadata from HTTP request
+ *
+ * @param request HTTP request
+ * @returns Request metadata with fingerprint
+ */
+export function buildRequestMeta(request) {
+    const ip = request.headers.get("cf-connecting-ip") ??
+        request.headers.get("x-forwarded-for") ??
+        undefined;
+    const userAgent = request.headers.get("user-agent") ?? undefined;
+    const cfRay = request.headers.get("cf-ray") ?? undefined;
+    const origin = request.headers.get("origin") ?? undefined;
+    const secChUa = request.headers.get("sec-ch-ua") ?? undefined;
+    const fingerprintParts = [ip, userAgent, cfRay, origin, secChUa].filter((value) => typeof value === "string" && value.length > 0);
+    return {
+        fingerprint: fingerprintParts.length > 0 ? fingerprintParts.join("|") : undefined,
+        ip,
+        userAgent,
+        cfRay,
+        request, // Include request for cookie access
+    };
+}
+//# sourceMappingURL=initialize-context.js.map

package/dist/utils/initialize-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize-context.js","sourceRoot":"","sources":["../../src/utils/initialize-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA0BH,2CAA2C;AAC3C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAC3B,QAAQ,CAAiC;IAEjD;QACE,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAA6B,EAAE,MAAe;QAClD,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAsB;YACjC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,eAAe,EACb,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YACnE,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC;YAClD,UAAU;SACX,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,IAA6B;QACnC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,yBAAyB,EAAE,CAAC;YAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,4DAA4D;QAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,yBAAyB,EAAE,CAAC;gBACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CACzB,KAAc;QAEd,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAA+B,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAEhD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvE,UAAU,CAAC,YAAY,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,YAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAA0B,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CAAC,KAAc;QAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,EAAE,GACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtC,SAAS,CAAC;IACZ,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;IAE9D,MAAM,gBAAgB,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CACrE,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAC1E,CAAC;IAEF,OAAO;QACL,WAAW,EACT,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QACtE,EAAE;QACF,SAAS;QACT,KAAK;QACL,OAAO,EAAE,oCAAoC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/utils/oauth-identity.d.ts

@@ -0,0 +1,58 @@
+/**
+ * OAuth Identity Utilities
+ *
+ * Handles OAuth identity extraction and validation from HTTP requests.
+ * This module consolidates OAuth-related logic that was previously in the adapter.
+ */
+import type { OAuthIdentity } from "@kya-os/contracts/consent";
+/**
+ * OAuth identity validation result
+ */
+export interface OAuthValidationResult {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Extract OAuth identity from request cookies
+ *
+ * @param request - HTTP Request object
+ * @returns OAuthIdentity or null if not found/invalid
+ */
+export declare function extractOAuthIdentityFromRequest(request: Request): OAuthIdentity | null;
+/**
+ * Validate OAuth identity format and content
+ *
+ * Ensures:
+ * - Provider is non-empty string (1-50 chars)
+ * - Subject is non-empty string (1-255 chars)
+ * - Provider matches expected format (alphanumeric, hyphens, underscores)
+ * - Subject matches expected format (non-empty, reasonable length)
+ *
+ * @param identity - Parsed OAuth identity object
+ * @returns Validation result
+ */
+export declare function validateOAuthIdentity(identity: unknown): OAuthValidationResult;
+/**
+ * Lookup User DID from OAuth identity mapping
+ *
+ * @param oauthIdentity OAuth identity to lookup
+ * @param delegationStorage KV namespace for storage
+ * @returns User DID or null if not found
+ */
+export declare function lookupUserDidFromOAuth(oauthIdentity: OAuthIdentity, delegationStorage: any): Promise<string | null>;
+/**
+ * Create a redacted OAuth identity for storage (PII protection)
+ *
+ * @param oauthIdentity Original OAuth identity
+ * @returns Redacted identity safe for storage
+ */
+export declare function redactOAuthIdentityForStorage(oauthIdentity: OAuthIdentity | null): any;
+/**
+ * Test if an OAuth cookie value is valid
+ * Helper function for testing and debugging
+ *
+ * @param cookieValue Encoded cookie value
+ * @returns true if valid OAuth identity, false otherwise
+ */
+export declare function isValidOAuthCookie(cookieValue: string): boolean;
+//# sourceMappingURL=oauth-identity.d.ts.map

package/dist/utils/oauth-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-identity.d.ts","sourceRoot":"","sources":["../../src/utils/oauth-identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAoCtF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,qBAAqB,CAkH9E;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,GAAG,GACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+BxB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,GAAG,GAAG,CAUtF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAQ/D"}

package/dist/utils/oauth-identity.js

@@ -0,0 +1,215 @@
+/**
+ * OAuth Identity Utilities
+ *
+ * Handles OAuth identity extraction and validation from HTTP requests.
+ * This module consolidates OAuth-related logic that was previously in the adapter.
+ */
+/**
+ * Extract OAuth identity from request cookies
+ *
+ * @param request - HTTP Request object
+ * @returns OAuthIdentity or null if not found/invalid
+ */
+export function extractOAuthIdentityFromRequest(request) {
+    try {
+        const cookieHeader = request.headers.get("Cookie");
+        if (!cookieHeader)
+            return null;
+        const cookies = cookieHeader.split("; ").map((c) => c.trim());
+        const oauthCookie = cookies.find((c) => c.startsWith("oauth_identity="));
+        if (!oauthCookie)
+            return null;
+        // Extract cookie value properly handling cases where value contains '='
+        // Find the first '=' which separates key from value, then take everything after it
+        const equalsIndex = oauthCookie.indexOf("=");
+        if (equalsIndex === -1)
+            return null;
+        const cookieValue = oauthCookie.substring(equalsIndex + 1);
+        const parsed = JSON.parse(decodeURIComponent(cookieValue));
+        // ✅ SECURITY: Validate OAuth identity format and content
+        const validationResult = validateOAuthIdentity(parsed);
+        if (!validationResult.valid) {
+            console.warn("[OAuth] ⚠️ OAuth identity validation failed:", validationResult.reason, { parsed });
+            return null;
+        }
+        return parsed;
+    }
+    catch (error) {
+        console.warn("[OAuth] Failed to extract OAuth identity from cookies:", error);
+    }
+    return null;
+}
+/**
+ * Validate OAuth identity format and content
+ *
+ * Ensures:
+ * - Provider is non-empty string (1-50 chars)
+ * - Subject is non-empty string (1-255 chars)
+ * - Provider matches expected format (alphanumeric, hyphens, underscores)
+ * - Subject matches expected format (non-empty, reasonable length)
+ *
+ * @param identity - Parsed OAuth identity object
+ * @returns Validation result
+ */
+export function validateOAuthIdentity(identity) {
+    // Check if identity is an object
+    if (!identity || typeof identity !== "object") {
+        return { valid: false, reason: "OAuth identity must be an object" };
+    }
+    const oauth = identity;
+    // Validate provider
+    if (!oauth.provider || typeof oauth.provider !== "string") {
+        return {
+            valid: false,
+            reason: "OAuth provider is required and must be a string",
+        };
+    }
+    const provider = oauth.provider.trim();
+    if (provider.length === 0) {
+        return { valid: false, reason: "OAuth provider cannot be empty" };
+    }
+    if (provider.length > 50) {
+        return {
+            valid: false,
+            reason: "OAuth provider must be 50 characters or less",
+        };
+    }
+    // Provider format: alphanumeric, hyphens, underscores, dots (e.g., "google", "microsoft", "github", "custom-provider")
+    const providerPattern = /^[a-zA-Z0-9._-]+$/;
+    if (!providerPattern.test(provider)) {
+        return {
+            valid: false,
+            reason: `OAuth provider must match pattern [a-zA-Z0-9._-]: "${provider}"`,
+        };
+    }
+    // Validate subject
+    if (!oauth.subject || typeof oauth.subject !== "string") {
+        return {
+            valid: false,
+            reason: "OAuth subject is required and must be a string",
+        };
+    }
+    const subject = oauth.subject.trim();
+    if (subject.length === 0) {
+        return { valid: false, reason: "OAuth subject cannot be empty" };
+    }
+    if (subject.length > 255) {
+        return {
+            valid: false,
+            reason: "OAuth subject must be 255 characters or less",
+        };
+    }
+    // Subject format: non-empty, reasonable characters (allows most Unicode, but prevents control chars)
+    // OAuth subjects can be numeric IDs, email-like strings, or other identifiers
+    const subjectPattern = /^[\S]+$/; // At least one non-whitespace character
+    if (!subjectPattern.test(subject)) {
+        return {
+            valid: false,
+            reason: `OAuth subject contains invalid characters: "${subject.substring(0, 20)}..."`,
+        };
+    }
+    // Validate optional email if present
+    if (oauth.email !== undefined) {
+        if (typeof oauth.email !== "string") {
+            return {
+                valid: false,
+                reason: "OAuth email must be a string if provided",
+            };
+        }
+        const email = oauth.email.trim();
+        if (email.length > 0) {
+            // Basic email format validation
+            const emailPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+            if (!emailPattern.test(email)) {
+                return {
+                    valid: false,
+                    reason: `OAuth email format invalid: "${email}"`,
+                };
+            }
+            if (email.length > 255) {
+                return {
+                    valid: false,
+                    reason: "OAuth email must be 255 characters or less",
+                };
+            }
+        }
+    }
+    // Validate optional name if present
+    if (oauth.name !== undefined) {
+        if (typeof oauth.name !== "string") {
+            return {
+                valid: false,
+                reason: "OAuth name must be a string if provided",
+            };
+        }
+        if (oauth.name.length > 255) {
+            return {
+                valid: false,
+                reason: "OAuth name must be 255 characters or less",
+            };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Lookup User DID from OAuth identity mapping
+ *
+ * @param oauthIdentity OAuth identity to lookup
+ * @param delegationStorage KV namespace for storage
+ * @returns User DID or null if not found
+ */
+export async function lookupUserDidFromOAuth(oauthIdentity, delegationStorage) {
+    if (!delegationStorage || !oauthIdentity?.provider || !oauthIdentity?.subject) {
+        return null;
+    }
+    try {
+        const { STORAGE_KEYS } = await import("../constants/storage-keys");
+        const oauthKey = STORAGE_KEYS.oauthIdentity(oauthIdentity.provider, oauthIdentity.subject);
+        const userDid = await delegationStorage.get(oauthKey, "text");
+        if (userDid) {
+            console.log("[OAuth] ✅ Retrieved persistent userDid from OAuth mapping:", {
+                provider: oauthIdentity.provider,
+                userDid: userDid.slice(0, 20) + "...",
+            });
+        }
+        return userDid;
+    }
+    catch (error) {
+        console.warn("[OAuth] Failed to lookup userDid from OAuth mapping:", error);
+        return null;
+    }
+}
+/**
+ * Create a redacted OAuth identity for storage (PII protection)
+ *
+ * @param oauthIdentity Original OAuth identity
+ * @returns Redacted identity safe for storage
+ */
+export function redactOAuthIdentityForStorage(oauthIdentity) {
+    if (!oauthIdentity) {
+        return undefined;
+    }
+    return {
+        provider: oauthIdentity.provider,
+        subjectHash: oauthIdentity.subject.substring(0, 8), // Redact full subject
+        // Don't store email, name, or full subject for PII protection
+    };
+}
+/**
+ * Test if an OAuth cookie value is valid
+ * Helper function for testing and debugging
+ *
+ * @param cookieValue Encoded cookie value
+ * @returns true if valid OAuth identity, false otherwise
+ */
+export function isValidOAuthCookie(cookieValue) {
+    try {
+        const parsed = JSON.parse(decodeURIComponent(cookieValue));
+        const result = validateOAuthIdentity(parsed);
+        return result.valid;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=oauth-identity.js.map

package/dist/utils/oauth-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-identity.js","sourceRoot":"","sources":["../../src/utils/oauth-identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE9B,wEAAwE;QACxE,mFAAmF;QACnF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,WAAW,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QAE3D,yDAAyD;QACzD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,8CAA8C,EAC9C,gBAAgB,CAAC,MAAM,EACvB,EAAE,MAAM,EAAE,CACX,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAuB,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,wDAAwD,EACxD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiB;IACrD,iCAAiC;IACjC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAG,QAAmC,CAAC;IAElD,oBAAoB;IACpB,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,iDAAiD;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IAED,uHAAuH;IACvH,MAAM,eAAe,GAAG,mBAAmB,CAAC;IAC5C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,sDAAsD,QAAQ,GAAG;SAC1E,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,gDAAgD;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IAED,qGAAqG;IACrG,8EAA8E;IAC9E,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,wCAAwC;IAC1E,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+CAA+C,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;SACtF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,0CAA0C;aACnD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,gCAAgC;YAChC,MAAM,YAAY,GAAG,4BAA4B,CAAC;YAClD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,gCAAgC,KAAK,GAAG;iBACjD,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACvB,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,4CAA4C;iBACrD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,yCAAyC;aAClD,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC5B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,2CAA2C;aACpD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAA4B,EAC5B,iBAAsB;IAEtB,IAAI,CAAC,iBAAiB,IAAI,CAAC,aAAa,EAAE,QAAQ,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,CACzC,aAAa,CAAC,QAAQ,EACtB,aAAa,CAAC,OAAO,CACtB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE9D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CACT,4DAA4D,EAC5D;gBACE,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;aACtC,CACF,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,sDAAsD,EACtD,KAAK,CACN,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,aAAmC;IAC/E,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,sBAAsB;QAC1E,8DAA8D;KAC/D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-cloudflare",
-  "version": "1.6.23",
+  "version": "1.6.25",
   "description": "Cloudflare Workers adapter for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -17,8 +17,8 @@
     "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
   },
   "dependencies": {
-    "@kya-os/contracts": "^1.6.3",
-    "@kya-os/mcp-i-core": "^1.3.8",
+    "@kya-os/contracts": "^1.6.4",
+    "@kya-os/mcp-i-core": "^1.3.10",
     "@modelcontextprotocol/sdk": "^1.19.1",
     "agents": "^0.2.21",
     "base-x": "^5.0.0",