@kya-os/mcp-i-cloudflare 1.9.6 → 1.10.0

package/dist/delegation-http/anchor-do.js

@@ -0,0 +1,253 @@
+/**
+ * draft-kya-http-02 delegation layer — pickup-anchor durable object.
+ *
+ * Implements the §13 anchor state machine: create → PENDING (or PINNED for a
+ * challenge-time signed caller) → first poll pins the holder → human approves
+ * (PINNED→APPROVED, credential parked) → the pinned holder polls 200-ready,
+ * repeatably, until the anchor TTL elapses.
+ *
+ * Design:
+ *  - ALL transition logic lives in the pure, synchronous reducers
+ *    `reduceCreate` / `reducePoll` / `reduceApprove` (injectable `now`). They never
+ *    touch storage and never await — which is what lets the Cloudflare DO input gate
+ *    serialize the first-poll race (the dispatcher does `get → reduce → put` with no
+ *    intervening non-storage await, so the read-modify-write is atomic per the gate).
+ *  - `handlePickupInternal` is the only async surface: it reads the record from
+ *    `ctx.storage`, runs the reducer, then persists or deletes.
+ *
+ * Non-negotiables:
+ *  - never store/log a raw token — only its `sha256Hex` digest (see `./hash`);
+ *  - no `alarm()` override: the `agents` SDK base class assigns `this.alarm` as an
+ *    own-property arrow (its SQL scheduler), which shadows any subclass method and
+ *    exposes no `super.alarm` to delegate to — so anchor lifetime is instead bounded
+ *    by idempotent creation (one anchor per deterministic sid) plus the ≤600s TTL;
+ *  - lazy expiry with delete-on-expired-read (a 410 outcome deletes the key);
+ *  - every response carries `Cache-Control: no-store`;
+ *  - 429 is status + `Retry-After` only — never a body.
+ *
+ * @module @kya-os/mcp-i-cloudflare/delegation-http/anchor-do
+ */
+import { sha256Hex } from "./hash";
+import { KYAOS_ERRORS, INTERNAL_PICKUP_CREATE, INTERNAL_PICKUP_POLL, INTERNAL_PICKUP_APPROVE, INTERNAL_PICKUP_INFO, } from "./constants";
+import { STORAGE_KEYS } from "../constants/storage-keys";
+const pendingBody = () => ({ status: "pending" });
+const pinnedErr = () => ({ error: KYAOS_ERRORS.pickupPinned });
+const invalidSessionErr = () => ({ error: KYAOS_ERRORS.invalidSession });
+const pickupExpiredErr = () => ({ error: KYAOS_ERRORS.pickupExpired });
+/**
+ * Pure reducer for `create`. Writes a fresh anchor record (PENDING, or PINNED when a
+ * challenge-time keyid pin is supplied). Idempotent by construction: a `pickup:<sid>`
+ * instance is created once, by the challenge emitter, before the 401 leaves.
+ */
+export function reduceCreate(rec, input, now) {
+    const i = input;
+    // Creation-bounding (W1): create is idempotent. A still-live anchor for this sid
+    // is reused as-is, so repeated challenges for the same (session, scopes) — which
+    // derive the same deterministic sid (see challenge-middleware.ts) — never orphan a
+    // fresh durable object or reset an in-flight pin/approval.
+    if (rec && now <= rec.expiresAt) {
+        return { response: { status: 201, body: { success: true } } };
+    }
+    const record = {
+        sid: i.sid,
+        status: i.pin ? "pinned" : "pending",
+        requiredScopes: i.requiredScopes,
+        minAssurance: i.minAssurance,
+        pollIntervalS: i.pollIntervalS,
+        createdAt: now,
+        expiresAt: now + i.anchorTtlS * 1000,
+        pin: i.pin
+            ? {
+                type: i.pin.type,
+                valueSha256: i.pin.valueSha256,
+                pinnedAt: now,
+                source: "challenge",
+            }
+            : undefined,
+    };
+    return { record, response: { status: 201, body: { success: true } } };
+}
+/**
+ * Pure reducer for `poll`. The §13 wire state machine:
+ *  - no record → 404 invalid-session;
+ *  - `now > expiresAt` → 410 pickup-expired (the dispatcher deletes the key);
+ *  - no pin yet → this poll pins `sha256Hex(holder.value)` (PENDING→PINNED);
+ *  - pin mismatch (any state, incl. after approval) → 403 pickup-pinned;
+ *  - pinned holder, awaiting consent, polling faster than `pollIntervalS` → 429;
+ *  - pinned holder, credential parked → 200 ready (repeatable, no consume-on-read);
+ *  - otherwise → 202 pending.
+ */
+export function reducePoll(rec, holder, now) {
+    if (!rec) {
+        return { response: { status: 404, body: invalidSessionErr() } };
+    }
+    if (now > rec.expiresAt) {
+        // delete-on-expired-read: a 410 outcome tells the dispatcher to drop the key.
+        return { response: { status: 410, body: pickupExpiredErr() } };
+    }
+    const holderSha = sha256Hex(holder.value);
+    let working = rec;
+    let pinnedJustNow = false;
+    if (rec.pin) {
+        // W2: require a matching holder TYPE as well as digest, so a token whose value
+        // equals a pinned keyid string (or vice-versa) can never satisfy the pin.
+        if (rec.pin.type !== holder.type || rec.pin.valueSha256 !== holderSha) {
+            return { response: { status: 403, body: pinnedErr() } };
+        }
+    }
+    else {
+        // First poll on an unpinned anchor pins the holder. The DO input gate makes this
+        // read-modify-write the compare-and-set: a racing second holder sees this pin.
+        working = {
+            ...rec,
+            status: rec.status === "pending" ? "pinned" : rec.status,
+            pin: {
+                type: holder.type,
+                valueSha256: holderSha,
+                pinnedAt: now,
+                source: "first-poll",
+            },
+        };
+        pinnedJustNow = true;
+    }
+    // The holder is now the pinned holder. Deliver the parked credential if approved.
+    if (working.status === "approved" && working.delegation) {
+        const body = {
+            status: "ready",
+            token_type: "Bearer",
+            delegation: working.delegation.vcJwt,
+            expires_in: working.delegation.expiresInS,
+        };
+        return pinnedJustNow
+            ? { record: working, response: { status: 200, body } }
+            : { response: { status: 200, body } };
+    }
+    // Awaiting consent. Throttle repeat polls by the pinned holder (never the pinning
+    // poll itself, and never the repeatable ready path above).
+    if (!pinnedJustNow &&
+        working.lastPollAt !== undefined &&
+        now - working.lastPollAt < working.pollIntervalS * 1000) {
+        return { response: { status: 429, retryAfterS: working.pollIntervalS } };
+    }
+    return {
+        record: { ...working, lastPollAt: now },
+        response: { status: 202, body: pendingBody() },
+    };
+}
+/**
+ * Pure reducer for `approve`. Parks the minted credential on a live anchor
+ * (PENDING or PINNED → APPROVED). Consent on an EXPIRED anchor MUST fail (410); an
+ * unknown anchor is 404 invalid-session.
+ */
+export function reduceApprove(rec, input, now) {
+    const i = input;
+    if (!rec) {
+        return { response: { status: 404, body: invalidSessionErr() } };
+    }
+    if (now > rec.expiresAt) {
+        return { response: { status: 410, body: pickupExpiredErr() } };
+    }
+    // Idempotent approve: once a credential is parked, a duplicate approval (a
+    // double-submit, two consent tabs) must NOT replace it. Each approve mints a fresh
+    // VC-JWT, so a blind upsert would swap a live delegation the pinned holder may
+    // already be picking up. Return the existing success without re-parking.
+    if (rec.status === "approved" && rec.delegation) {
+        return { response: { status: 200, body: { success: true } } };
+    }
+    const record = {
+        ...rec,
+        status: "approved",
+        delegation: { vcJwt: i.vcJwt, expiresInS: i.expiresInS, approvedAt: now },
+    };
+    return { record, response: { status: 200, body: { success: true } } };
+}
+/** Reducer outcome → wire `Response`, applying the frozen header rules. */
+function wireResponse(r) {
+    const headers = { "Cache-Control": "no-store" };
+    if (r.status === 429) {
+        // 429 is status + Retry-After only — never a body (the §9 registry has no
+        // over-rate string to put there).
+        if (r.retryAfterS !== undefined)
+            headers["Retry-After"] = String(r.retryAfterS);
+        return new Response(null, { status: 429, headers });
+    }
+    headers["Content-Type"] = "application/json";
+    return new Response(r.body === undefined ? "" : JSON.stringify(r.body), {
+        status: r.status,
+        headers,
+    });
+}
+/**
+ * Dispatch `/_internal/pickup/*` requests against the anchor's durable-object
+ * storage. One `ctx.storage.get` up front, the matching pure reducer, then a single
+ * `put` (or `delete` on an expired 410 read) — no non-storage await between read and
+ * write, so the DO input gate makes the first-poll pin a compare-and-set.
+ *
+ * `now` is injectable for tests; production callers omit it and it resolves to the
+ * wall clock.
+ */
+export async function handlePickupInternal(ctx, request, now) {
+    const t = now ?? Date.now();
+    const path = new URL(request.url).pathname;
+    let body;
+    try {
+        body = (await request.json());
+    }
+    catch {
+        body = {};
+    }
+    const key = STORAGE_KEYS.pickupAnchor(String(body.sid));
+    const rec = (await ctx.storage.get(key));
+    if (path === INTERNAL_PICKUP_CREATE) {
+        const { record, response } = reduceCreate(rec, body, t);
+        if (record)
+            await ctx.storage.put(key, record);
+        return wireResponse(response);
+    }
+    if (path === INTERNAL_PICKUP_POLL) {
+        const h = body.holder;
+        if (!h ||
+            typeof h.value !== "string" ||
+            (h.type !== "token" && h.type !== "keyid")) {
+            return wireResponse({
+                status: 400,
+                body: { error: "kyaos/invalid-request", message: "missing or malformed holder" },
+            });
+        }
+        const { record, response } = reducePoll(rec, h, t);
+        if (response.status === 410)
+            await ctx.storage.delete(key);
+        else if (record)
+            await ctx.storage.put(key, record);
+        return wireResponse(response);
+    }
+    if (path === INTERNAL_PICKUP_APPROVE) {
+        const { record, response } = reduceApprove(rec, body, t);
+        if (response.status === 410)
+            await ctx.storage.delete(key);
+        else if (record)
+            await ctx.storage.put(key, record);
+        return wireResponse(response);
+    }
+    if (path === INTERNAL_PICKUP_INFO) {
+        if (!rec) {
+            return wireResponse({ status: 404, body: invalidSessionErr() });
+        }
+        if (t > rec.expiresAt) {
+            await ctx.storage.delete(key);
+            return wireResponse({ status: 410, body: pickupExpiredErr() });
+        }
+        // NEVER expose the pin or the parked delegation here.
+        return wireResponse({
+            status: 200,
+            body: {
+                status: rec.status,
+                requiredScopes: rec.requiredScopes,
+                minAssurance: rec.minAssurance,
+                expiresAt: rec.expiresAt,
+            },
+        });
+    }
+    return wireResponse({ status: 404, body: invalidSessionErr() });
+}
+//# sourceMappingURL=anchor-do.js.map

package/dist/delegation-http/anchor-do.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-do.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-do.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAqBzD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;AAC/D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;AACzE,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAoB,CAAC;IAC/B,iFAAiF;IACjF,iFAAiF;IACjF,mFAAmF;IACnF,2DAA2D;IAC3D,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI;QACpC,GAAG,EAAE,CAAC,CAAC,GAAG;YACR,CAAC,CAAC;gBACE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;gBAC9B,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,WAAW;aACpB;YACH,CAAC,CAAC,SAAS;KACd,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,GAAmC,EACnC,MAAoB,EACpB,GAAW;IASX,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACxB,8EAA8E;QAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,+EAA+E;QAC/E,0EAA0E;QAC1E,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iFAAiF;QACjF,+EAA+E;QAC/E,OAAO,GAAG;YACR,GAAG,GAAG;YACN,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;YACxD,GAAG,EAAE;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,YAAY;aACrB;SACF,CAAC;QACF,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,kFAAkF;IAClF,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU;SAC1C,CAAC;QACF,OAAO,aAAa;YAClB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtD,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,kFAAkF;IAClF,2DAA2D;IAC3D,IACE,CAAC,aAAa;QACd,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,EACvD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;QACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAmC,EACnC,KAAc,EACd,GAAW;IAKX,MAAM,CAAC,GAAG,KAAqB,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,2EAA2E;IAC3E,mFAAmF;IACnF,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,GAAG,GAAG;QACN,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE;KAC1E,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,CAIrB;IACC,MAAM,OAAO,GAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACrB,0EAA0E;QAC1E,kCAAkC;QAClC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;YAC7B,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC7C,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QACtE,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAuB,EACvB,OAAgB,EAChB,GAAY;IAEZ,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAE3C,IAAI,IAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAmC,CAAC;IAE3E,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,IACE,CAAC,CAAC;YACF,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAC1C,CAAC;YACD,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,6BAA6B,EAAE;aACjF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtD,IAAI,MAAM;YAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,sDAAsD;QACtD,OAAO,YAAY,CAAC;YAClB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/delegation-http/anchor-routing.d.ts

@@ -0,0 +1,20 @@
+/**
+ * draft-kya-http-02 delegation layer — pickup-anchor durable-object routing.
+ *
+ * Anchor state lives in the existing `MCP_OBJECT` durable object (no new DO class,
+ * no wrangler migration). Each anchor gets its OWN instance, named `pickup:<sid>`,
+ * so the §13 first-poll race is serialized by the DO input gate and never collides
+ * with the MCP session namespace (which uses `DO_ROUTING_STRATEGY`).
+ *
+ * @module @kya-os/mcp-i-cloudflare/delegation-http/anchor-routing
+ */
+import type { DurableObjectStub } from "@cloudflare/workers-types";
+import type { CloudflareEnv } from "../types";
+/** Durable-object instance name for an anchor: one instance per sid. */
+export declare function anchorInstanceId(sid: string): string;
+/**
+ * Resolve the durable-object stub for an anchor's dedicated instance. Throws when
+ * `MCP_OBJECT` is not bound (the anchor layer cannot function without it).
+ */
+export declare function getAnchorStub(env: CloudflareEnv, sid: string): DurableObjectStub;
+//# sourceMappingURL=anchor-routing.d.ts.map

package/dist/delegation-http/anchor-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-routing.d.ts","sourceRoot":"","sources":["../../src/delegation-http/anchor-routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,GACV,iBAAiB,CASnB"}

package/dist/delegation-http/anchor-routing.js

@@ -0,0 +1,27 @@
+/**
+ * draft-kya-http-02 delegation layer — pickup-anchor durable-object routing.
+ *
+ * Anchor state lives in the existing `MCP_OBJECT` durable object (no new DO class,
+ * no wrangler migration). Each anchor gets its OWN instance, named `pickup:<sid>`,
+ * so the §13 first-poll race is serialized by the DO input gate and never collides
+ * with the MCP session namespace (which uses `DO_ROUTING_STRATEGY`).
+ *
+ * @module @kya-os/mcp-i-cloudflare/delegation-http/anchor-routing
+ */
+/** Durable-object instance name for an anchor: one instance per sid. */
+export function anchorInstanceId(sid) {
+    return `pickup:${sid}`;
+}
+/**
+ * Resolve the durable-object stub for an anchor's dedicated instance. Throws when
+ * `MCP_OBJECT` is not bound (the anchor layer cannot function without it).
+ */
+export function getAnchorStub(env, sid) {
+    const namespace = env.MCP_OBJECT;
+    if (!namespace) {
+        throw new Error("[kya-http] MCP_OBJECT durable object namespace is not bound; cannot route pickup anchor");
+    }
+    const id = namespace.idFromName(anchorInstanceId(sid));
+    return namespace.get(id);
+}
+//# sourceMappingURL=anchor-routing.js.map

package/dist/delegation-http/anchor-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-routing.js","sourceRoot":"","sources":["../../src/delegation-http/anchor-routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAkB,EAClB,GAAW;IAEX,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;IACjC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/delegation-http/bearer-retry.d.ts

@@ -0,0 +1,54 @@
+/**
+ * draft-kya-http-02 delegation layer — Bearer retry verification.
+ *
+ * After a §8.1 challenge, a kya-capable caller retries the MCP request carrying the
+ * minted delegation as a Bearer credential. This module turns that retry into the
+ * adapter's existing `params.delegationToken` priority seam (adapter.ts:~458 — tested
+ * by `adapter-delegation-priority.test.ts`), WITHOUT editing the adapter:
+ *
+ *  - `extractDelegationVcJwt` accepts `Authorization: Bearer <jwt>` ONLY when the
+ *    decoded JWT payload carries a `vc` claim. An opaque OAuth bearer (no `vc`) is
+ *    left untouched (returns null) so existing OAuth clients pass through. When
+ *    `Authorization` is occupied by such a non-VC bearer, the `KYA-Delegation` header
+ *    is used as the fallback carrier.
+ *  - `applyBearerDelegation` verifies the VC-JWT fail-fast via `DelegationService`
+ *    and, on success, clones the request with `params.delegationToken = vcJwt`. An
+ *    invalid chain → 403 `kyaos/chain-broken`; an expired credential → 401
+ *    `kyaos/expired`. Both error responses carry `Cache-Control: no-store`.
+ *
+ * @module @kya-os/mcp-i-cloudflare/delegation-http/bearer-retry
+ */
+import type { CloudflareEnv } from "../types";
+import type { HttpChallengeConfig } from "../config";
+/**
+ * Extract a delegation VC-JWT from the request, or `null` when there is none to act
+ * on. Resolution order, mirroring the wire contract:
+ *
+ *  1. `Authorization: Bearer <jwt>` whose payload carries a `vc` claim.
+ *  2. Otherwise (no Authorization, OR an opaque OAuth bearer without `vc`), the
+ *     `KYA-Delegation` fallback header — used ONLY when it too is a `vc`-bearing JWT.
+ *
+ * An opaque OAuth bearer with no `vc` and no fallback header yields `null`, so the
+ * request passes through to the adapter untouched.
+ */
+export declare function extractDelegationVcJwt(request: Request): string | null;
+/**
+ * Apply a presented delegation to the outgoing MCP request before it reaches the
+ * adapter.
+ *
+ *  - No delegation VC-JWT present → pass the request through unchanged.
+ *  - Expired VC-JWT → `{ errorResponse }` 401 `kyaos/expired` (`no-store`).
+ *  - Invalid / unverifiable VC-JWT → `{ errorResponse }` 403 `kyaos/chain-broken`
+ *    (`no-store`).
+ *  - Valid VC-JWT → `{ request }` whose JSON-RPC body now carries
+ *    `params.delegationToken = vcJwt` (the adapter's existing priority seam).
+ *  - Valid VC-JWT but a non-JSON-RPC body the token cannot be injected into →
+ *    `{ errorResponse }` 400 `invalid_request` (`no-store`); we never silently drop
+ *    an accepted credential.
+ */
+export declare function applyBearerDelegation(request: Request, env: CloudflareEnv, _cfg: Required<HttpChallengeConfig>): Promise<{
+    request: Request;
+} | {
+    errorResponse: Response;
+}>;
+//# sourceMappingURL=bearer-retry.d.ts.map

package/dist/delegation-http/bearer-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer-retry.d.ts","sourceRoot":"","sources":["../../src/delegation-http/bearer-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AA4DrD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAgBtE;AA+CD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAClC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,aAAa,EAAE,QAAQ,CAAA;CAAE,CAAC,CAqC7D"}

package/dist/delegation-http/bearer-retry.js

@@ -0,0 +1,195 @@
+/**
+ * draft-kya-http-02 delegation layer — Bearer retry verification.
+ *
+ * After a §8.1 challenge, a kya-capable caller retries the MCP request carrying the
+ * minted delegation as a Bearer credential. This module turns that retry into the
+ * adapter's existing `params.delegationToken` priority seam (adapter.ts:~458 — tested
+ * by `adapter-delegation-priority.test.ts`), WITHOUT editing the adapter:
+ *
+ *  - `extractDelegationVcJwt` accepts `Authorization: Bearer <jwt>` ONLY when the
+ *    decoded JWT payload carries a `vc` claim. An opaque OAuth bearer (no `vc`) is
+ *    left untouched (returns null) so existing OAuth clients pass through. When
+ *    `Authorization` is occupied by such a non-VC bearer, the `KYA-Delegation` header
+ *    is used as the fallback carrier.
+ *  - `applyBearerDelegation` verifies the VC-JWT fail-fast via `DelegationService`
+ *    and, on success, clones the request with `params.delegationToken = vcJwt`. An
+ *    invalid chain → 403 `kyaos/chain-broken`; an expired credential → 401
+ *    `kyaos/expired`. Both error responses carry `Cache-Control: no-store`.
+ *
+ * @module @kya-os/mcp-i-cloudflare/delegation-http/bearer-retry
+ */
+import { DelegationService } from "../services/delegation.service";
+import { FALLBACK_DELEGATION_HEADER, KYAOS_ERRORS } from "./constants";
+/**
+ * Decode a JWT payload (the second `.`-delimited segment) as JSON, or `null` when the
+ * value is not a well-formed three-segment JWT with a base64url-decodable JSON body.
+ * Never throws.
+ */
+function decodeJwtPayload(jwt) {
+    if (!jwt || typeof jwt !== "string")
+        return null;
+    const parts = jwt.split(".");
+    if (parts.length !== 3)
+        return null;
+    try {
+        // Re-add the base64url padding `atob` needs (the `=` is stripped on the wire);
+        // a strict atob rejects an unpadded segment whose length isn't a multiple of 4.
+        const b64 = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+        const json = atob(b64 + "=".repeat((4 - (b64.length % 4)) % 4));
+        const payload = JSON.parse(json);
+        return payload && typeof payload === "object"
+            ? payload
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Whether the JWT payload carries a `vc` claim — the marker that distinguishes a
+ * delegation VC-JWT from an opaque OAuth bearer.
+ */
+function hasVcClaim(jwt) {
+    const payload = decodeJwtPayload(jwt);
+    return payload !== null && "vc" in payload;
+}
+/**
+ * Whether the JWT is expired by its `exp` claim (seconds since epoch). A token with
+ * no numeric `exp`, or one that cannot be decoded, is treated as NOT expired here —
+ * the cryptographic verification path owns the invalid-vs-expired distinction for
+ * those cases (and reports them as 403 chain-broken).
+ */
+function isVcJwtExpired(jwt) {
+    const payload = decodeJwtPayload(jwt);
+    if (!payload)
+        return false;
+    const exp = payload.exp;
+    if (typeof exp !== "number" || !Number.isFinite(exp))
+        return false;
+    return exp < Math.floor(Date.now() / 1000);
+}
+/**
+ * Read the bearer token from an `Authorization: Bearer <token>` header, or `null`.
+ */
+function readBearerToken(request) {
+    const auth = request.headers.get("Authorization");
+    if (!auth)
+        return null;
+    const match = /^Bearer\s+(.+)$/i.exec(auth.trim());
+    return match ? match[1].trim() : null;
+}
+/**
+ * Extract a delegation VC-JWT from the request, or `null` when there is none to act
+ * on. Resolution order, mirroring the wire contract:
+ *
+ *  1. `Authorization: Bearer <jwt>` whose payload carries a `vc` claim.
+ *  2. Otherwise (no Authorization, OR an opaque OAuth bearer without `vc`), the
+ *     `KYA-Delegation` fallback header — used ONLY when it too is a `vc`-bearing JWT.
+ *
+ * An opaque OAuth bearer with no `vc` and no fallback header yields `null`, so the
+ * request passes through to the adapter untouched.
+ */
+export function extractDelegationVcJwt(request) {
+    const bearer = readBearerToken(request);
+    if (bearer && hasVcClaim(bearer)) {
+        return bearer;
+    }
+    // Authorization is absent or occupied by a non-VC bearer — try the fallback header.
+    const fallback = request.headers.get(FALLBACK_DELEGATION_HEADER);
+    if (fallback) {
+        const token = fallback.trim();
+        if (token && hasVcClaim(token)) {
+            return token;
+        }
+    }
+    return null;
+}
+/**
+ * Build a `kyaos/*` JSON error response with the mandated `Cache-Control: no-store`.
+ */
+function kyaosError(error, status) {
+    return new Response(JSON.stringify({ error }), {
+        status,
+        headers: {
+            "Content-Type": "application/json",
+            "Cache-Control": "no-store",
+        },
+    });
+}
+/**
+ * Clone `request` rewriting the JSON-RPC body so `params.delegationToken = vcJwt`.
+ * Returns `null` when the body is not JSON-RPC-shaped JSON (so the caller can pass the
+ * request through untouched rather than corrupt a non-JSON-RPC request).
+ */
+async function rewriteDelegationToken(request, vcJwt) {
+    let body;
+    try {
+        body = await request.clone().json();
+    }
+    catch {
+        return null;
+    }
+    if (!body || typeof body !== "object")
+        return null;
+    const rpc = body;
+    const params = rpc.params && typeof rpc.params === "object"
+        ? { ...rpc.params }
+        : {};
+    params.delegationToken = vcJwt;
+    const nextBody = { ...rpc, params };
+    return new Request(request.url, {
+        method: request.method,
+        headers: request.headers,
+        body: JSON.stringify(nextBody),
+    });
+}
+/**
+ * Apply a presented delegation to the outgoing MCP request before it reaches the
+ * adapter.
+ *
+ *  - No delegation VC-JWT present → pass the request through unchanged.
+ *  - Expired VC-JWT → `{ errorResponse }` 401 `kyaos/expired` (`no-store`).
+ *  - Invalid / unverifiable VC-JWT → `{ errorResponse }` 403 `kyaos/chain-broken`
+ *    (`no-store`).
+ *  - Valid VC-JWT → `{ request }` whose JSON-RPC body now carries
+ *    `params.delegationToken = vcJwt` (the adapter's existing priority seam).
+ *  - Valid VC-JWT but a non-JSON-RPC body the token cannot be injected into →
+ *    `{ errorResponse }` 400 `invalid_request` (`no-store`); we never silently drop
+ *    an accepted credential.
+ */
+export async function applyBearerDelegation(request, env, _cfg) {
+    const vcJwt = extractDelegationVcJwt(request);
+    if (!vcJwt) {
+        return { request };
+    }
+    // Fail-fast expiry check before verification so we can emit the precise 401.
+    if (isVcJwtExpired(vcJwt)) {
+        return { errorResponse: kyaosError(KYAOS_ERRORS.expired, 401) };
+    }
+    const isValid = await new DelegationService(env).verifyDelegation(vcJwt);
+    if (!isValid) {
+        // verifyDelegation also rejects expired tokens; re-check so an expiry that the
+        // pre-check missed (e.g. exp encoded unusually) still maps to 401 not 403.
+        if (isVcJwtExpired(vcJwt)) {
+            return { errorResponse: kyaosError(KYAOS_ERRORS.expired, 401) };
+        }
+        return { errorResponse: kyaosError(KYAOS_ERRORS.chainBroken, 403) };
+    }
+    const rewritten = await rewriteDelegationToken(request, vcJwt);
+    if (!rewritten) {
+        // The delegation verified, but the request body is not a JSON-RPC object we can
+        // augment with params.delegationToken. Fail explicitly with 400: silently
+        // forwarding the original request would drop the ACCEPTED credential, and the
+        // adapter would then treat the call as unauthorized — masking the acceptance.
+        // (A real /mcp POST always carries a JSON-RPC object, so this is a
+        // malformed-request guard, not a normal path.)
+        //
+        // `invalid_request`/400 is deliberately OUT-OF-BAND from the §9 `kyaos/*` registry:
+        // this is a transport-level malformed-body error, not a delegation-chain verdict.
+        // Reusing a `kyaos/*` 401/403 here would mislead the caller into a retry/challenge
+        // loop, and the registry (vendored error-codes.json) has no malformed-body code.
+        return { errorResponse: kyaosError("invalid_request", 400) };
+    }
+    return { request: rewritten };
+}
+//# sourceMappingURL=bearer-retry.js.map

package/dist/delegation-http/bearer-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer-retry.js","sourceRoot":"","sources":["../../src/delegation-http/bearer-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,+EAA+E;QAC/E,gFAAgF;QAChF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAC3C,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,OAAO,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oFAAoF;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACjE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC7C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACnC,OAAgB,EAChB,KAAa;IAEb,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC1C,CAAC,CAAC,EAAE,GAAI,GAAG,CAAC,MAAkC,EAAE;QAChD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC;IAEpC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,GAAkB,EAClB,IAAmC;IAEnC,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,6EAA6E;IAC7E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,+EAA+E;QAC/E,2EAA2E;QAC3E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,gFAAgF;QAChF,0EAA0E;QAC1E,8EAA8E;QAC9E,8EAA8E;QAC9E,mEAAmE;QACnE,+CAA+C;QAC/C,EAAE;QACF,oFAAoF;QACpF,kFAAkF;QAClF,mFAAmF;QACnF,iFAAiF;QACjF,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/dist/delegation-http/challenge-middleware.d.ts

@@ -0,0 +1,28 @@
+/**
+ * draft-kya-http-02 delegation layer — §8.1 challenge emitter middleware.
+ *
+ * Triggers on JSON-RPC responses whose `result._meta.errorType ===
+ * "authorization_required"` (the existing `DelegationRequiredError` → `result._meta`
+ * mapping in `adapter.ts`), mints a sid, creates the pickup anchor (which MUST exist
+ * before the 401 leaves), signs the `challenge_proof`, and emits the §8.1 401 in
+ * `negotiated`/`always` mode. Returns `null` to pass the original response through.
+ *
+ * @module @kya-os/mcp-i-cloudflare/delegation-http/challenge-middleware
+ */
+import type { CloudflareEnv } from "../types";
+import type { HttpChallengeConfig } from "../config";
+import type { CloudflareProofGenerator } from "../proof-generator";
+import type { getAnchorStub } from "./anchor-routing";
+/**
+ * Emit a §8.1 delegation challenge in place of an `authorization_required` MCP
+ * response, or return `null` to pass the original response through untouched.
+ *
+ * `negotiated` (default): when the caller is NOT kya-capable, the ORIGINAL MCP error
+ * response is returned (so existing MCP/OAuth clients still see the unmodified error),
+ * never a 401. `always`: every `authorization_required` becomes a 401.
+ */
+export declare function maybeEmitDelegationChallenge(request: Request, response: Response, env: CloudflareEnv, cfg: Required<HttpChallengeConfig>, deps: {
+    getAnchorStub: typeof getAnchorStub;
+    proofGenerator: () => Promise<CloudflareProofGenerator>;
+}): Promise<Response | null>;
+//# sourceMappingURL=challenge-middleware.d.ts.map

package/dist/delegation-http/challenge-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-middleware.d.ts","sourceRoot":"","sources":["../../src/delegation-http/challenge-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA+GtD;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAClC,IAAI,EAAE;IACJ,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,cAAc,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzD,GACA,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAwG1B"}