@kya-os/mcp-i-cloudflare 1.9.7 → 1.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/adapter.d.ts.map +1 -1
- package/dist/adapter.js +47 -16
- package/dist/adapter.js.map +1 -1
- package/dist/agent.d.ts.map +1 -1
- package/dist/agent.js +181 -50
- package/dist/agent.js.map +1 -1
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +86 -3
- package/dist/app.js.map +1 -1
- package/dist/config.d.ts +54 -0
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +58 -0
- package/dist/config.js.map +1 -1
- package/dist/constants/storage-keys.d.ts +6 -0
- package/dist/constants/storage-keys.d.ts.map +1 -1
- package/dist/constants/storage-keys.js +6 -0
- package/dist/constants/storage-keys.js.map +1 -1
- package/dist/delegation-http/anchor-do.d.ts +84 -0
- package/dist/delegation-http/anchor-do.d.ts.map +1 -0
- package/dist/delegation-http/anchor-do.js +253 -0
- package/dist/delegation-http/anchor-do.js.map +1 -0
- package/dist/delegation-http/anchor-routing.d.ts +20 -0
- package/dist/delegation-http/anchor-routing.d.ts.map +1 -0
- package/dist/delegation-http/anchor-routing.js +27 -0
- package/dist/delegation-http/anchor-routing.js.map +1 -0
- package/dist/delegation-http/bearer-retry.d.ts +54 -0
- package/dist/delegation-http/bearer-retry.d.ts.map +1 -0
- package/dist/delegation-http/bearer-retry.js +195 -0
- package/dist/delegation-http/bearer-retry.js.map +1 -0
- package/dist/delegation-http/challenge-middleware.d.ts +28 -0
- package/dist/delegation-http/challenge-middleware.d.ts.map +1 -0
- package/dist/delegation-http/challenge-middleware.js +190 -0
- package/dist/delegation-http/challenge-middleware.js.map +1 -0
- package/dist/delegation-http/challenge.d.ts +86 -0
- package/dist/delegation-http/challenge.d.ts.map +1 -0
- package/dist/delegation-http/challenge.js +173 -0
- package/dist/delegation-http/challenge.js.map +1 -0
- package/dist/delegation-http/consent-anchor-bridge.d.ts +35 -0
- package/dist/delegation-http/consent-anchor-bridge.d.ts.map +1 -0
- package/dist/delegation-http/consent-anchor-bridge.js +355 -0
- package/dist/delegation-http/consent-anchor-bridge.js.map +1 -0
- package/dist/delegation-http/constants.d.ts +51 -0
- package/dist/delegation-http/constants.d.ts.map +1 -0
- package/dist/delegation-http/constants.js +60 -0
- package/dist/delegation-http/constants.js.map +1 -0
- package/dist/delegation-http/hash.d.ts +21 -0
- package/dist/delegation-http/hash.d.ts.map +1 -0
- package/dist/delegation-http/hash.js +92 -0
- package/dist/delegation-http/hash.js.map +1 -0
- package/dist/delegation-http/pickup-routes.d.ts +42 -0
- package/dist/delegation-http/pickup-routes.d.ts.map +1 -0
- package/dist/delegation-http/pickup-routes.js +79 -0
- package/dist/delegation-http/pickup-routes.js.map +1 -0
- package/dist/delegation-http/register.d.ts +19 -0
- package/dist/delegation-http/register.d.ts.map +1 -0
- package/dist/delegation-http/register.js +72 -0
- package/dist/delegation-http/register.js.map +1 -0
- package/dist/delegation-http/sid.d.ts +20 -0
- package/dist/delegation-http/sid.d.ts.map +1 -0
- package/dist/delegation-http/sid.js +32 -0
- package/dist/delegation-http/sid.js.map +1 -0
- package/dist/delegation-http/types.d.ts +64 -0
- package/dist/delegation-http/types.d.ts.map +1 -0
- package/dist/delegation-http/types.js +11 -0
- package/dist/delegation-http/types.js.map +1 -0
- package/dist/helpers/env-mapper.d.ts.map +1 -1
- package/dist/helpers/env-mapper.js +24 -0
- package/dist/helpers/env-mapper.js.map +1 -1
- package/dist/index.d.ts +5 -2
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +10 -2
- package/dist/index.js.map +1 -1
- package/dist/providers/crypto.d.ts +1 -1
- package/dist/providers/crypto.d.ts.map +1 -1
- package/dist/providers/crypto.js +1 -1
- package/dist/providers/crypto.js.map +1 -1
- package/dist/providers/kv-identity.d.ts +2 -2
- package/dist/providers/kv-identity.d.ts.map +1 -1
- package/dist/providers/kv-identity.js +1 -1
- package/dist/providers/kv-identity.js.map +1 -1
- package/dist/providers/storage.d.ts +1 -1
- package/dist/providers/storage.d.ts.map +1 -1
- package/dist/providers/storage.js +1 -1
- package/dist/providers/storage.js.map +1 -1
- package/dist/runtime/audit-logger.d.ts +1 -1
- package/dist/runtime/audit-logger.d.ts.map +1 -1
- package/dist/runtime/oauth-handler.d.ts.map +1 -1
- package/dist/runtime/oauth-handler.js +31 -3
- package/dist/runtime/oauth-handler.js.map +1 -1
- package/dist/runtime/oidc/authorize-url.d.ts +19 -0
- package/dist/runtime/oidc/authorize-url.d.ts.map +1 -0
- package/dist/runtime/oidc/authorize-url.js +94 -0
- package/dist/runtime/oidc/authorize-url.js.map +1 -0
- package/dist/runtime/oidc/token-exchange.d.ts +62 -0
- package/dist/runtime/oidc/token-exchange.d.ts.map +1 -0
- package/dist/runtime/oidc/token-exchange.js +75 -0
- package/dist/runtime/oidc/token-exchange.js.map +1 -0
- package/dist/runtime.d.ts +1 -1
- package/dist/runtime.d.ts.map +1 -1
- package/dist/services/consent-audit.service.d.ts +1 -1
- package/dist/services/consent-audit.service.d.ts.map +1 -1
- package/dist/services/consent-audit.service.js.map +1 -1
- package/dist/services/consent.service.d.ts +2 -2
- package/dist/services/consent.service.d.ts.map +1 -1
- package/dist/services/consent.service.js +39 -50
- package/dist/services/consent.service.js.map +1 -1
- package/dist/services/delegation.service.d.ts +9 -0
- package/dist/services/delegation.service.d.ts.map +1 -1
- package/dist/services/delegation.service.js +21 -7
- package/dist/services/delegation.service.js.map +1 -1
- package/dist/services/oauth-security.service.d.ts.map +1 -1
- package/dist/services/oauth-security.service.js +6 -10
- package/dist/services/oauth-security.service.js.map +1 -1
- package/dist/services/provider-loader.service.js +1 -1
- package/dist/services/provider-loader.service.js.map +1 -1
- package/dist/types.d.ts +5 -1
- package/dist/types.d.ts.map +1 -1
- package/dist/utils/known-clients.d.ts.map +1 -1
- package/dist/utils/known-clients.js +19 -10
- package/dist/utils/known-clients.js.map +1 -1
- package/package.json +3 -1
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — worker-served pickup endpoint (§8.2).
|
|
3
|
+
*
|
|
4
|
+
* `GET /api/delegation/pickup/:sid` is the agent's polling surface. The worker is a
|
|
5
|
+
* thin seam: it validates the sid, extracts the holder credential, then proxies to
|
|
6
|
+
* the anchor's dedicated `pickup:<sid>` durable object and returns the DO response
|
|
7
|
+
* VERBATIM (the DO owns the §13 state machine and the wire body/headers).
|
|
8
|
+
*
|
|
9
|
+
* Holder extraction:
|
|
10
|
+
* - `X-KYA-Pickup-Token: <token>` → `{ type: "token" }` (the conformance target);
|
|
11
|
+
* - a `Signature-Input` carrying a `kya` label → `{ type: "keyid" }`, ONLY when
|
|
12
|
+
* `allowUnverifiedKeyidHolders` is set (W2): a keyid is a public string, so until
|
|
13
|
+
* inbound RFC 9421 verification lands it must not act as a bearer secret. Off by
|
|
14
|
+
* default — a Signature-Input-only poll is then treated as a no-identity poll.
|
|
15
|
+
*
|
|
16
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/pickup-routes
|
|
17
|
+
*/
|
|
18
|
+
import type { CloudflareEnv } from "../types";
|
|
19
|
+
import type { HttpChallengeConfig } from "../config";
|
|
20
|
+
import type { PickupHolder } from "./types";
|
|
21
|
+
/** Minimal view of the Hono context this handler needs (avoids an `any` dependency). */
|
|
22
|
+
interface PickupRequestContext {
|
|
23
|
+
req: {
|
|
24
|
+
param(name: string): string | undefined;
|
|
25
|
+
header(name: string): string | undefined;
|
|
26
|
+
url: string;
|
|
27
|
+
};
|
|
28
|
+
}
|
|
29
|
+
/**
|
|
30
|
+
* Resolve the poll holder from request headers. Token path first (the conformance
|
|
31
|
+
* target); otherwise a `kya`-labelled `Signature-Input` yields the signer's keyid.
|
|
32
|
+
* Returns `null` when no pickup credential is present.
|
|
33
|
+
*/
|
|
34
|
+
export declare function extractPickupHolder(getHeader: (name: string) => string | undefined | null, allowKeyidHolders: boolean): PickupHolder | null;
|
|
35
|
+
/**
|
|
36
|
+
* Handle a worker-served pickup poll. Validates the sid, extracts the holder, proxies
|
|
37
|
+
* to the anchor DO, and returns its response unchanged. The flag gate and `next()`
|
|
38
|
+
* fall-through live in `register.ts`; by the time this runs the layer is ON.
|
|
39
|
+
*/
|
|
40
|
+
export declare function handlePickupGet(c: PickupRequestContext, env: CloudflareEnv, cfg: Required<HttpChallengeConfig>): Promise<Response>;
|
|
41
|
+
export {};
|
|
42
|
+
//# sourceMappingURL=pickup-routes.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pickup-routes.d.ts","sourceRoot":"","sources":["../../src/delegation-http/pickup-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAS5C,wFAAwF;AACxF,UAAU,oBAAoB;IAC5B,GAAG,EAAE;QACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACxC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,IAAI,EACtD,iBAAiB,EAAE,OAAO,GACzB,YAAY,GAAG,IAAI,CAerB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,CAAC,EAAE,oBAAoB,EACvB,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GACjC,OAAO,CAAC,QAAQ,CAAC,CAyBnB"}
|
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — worker-served pickup endpoint (§8.2).
|
|
3
|
+
*
|
|
4
|
+
* `GET /api/delegation/pickup/:sid` is the agent's polling surface. The worker is a
|
|
5
|
+
* thin seam: it validates the sid, extracts the holder credential, then proxies to
|
|
6
|
+
* the anchor's dedicated `pickup:<sid>` durable object and returns the DO response
|
|
7
|
+
* VERBATIM (the DO owns the §13 state machine and the wire body/headers).
|
|
8
|
+
*
|
|
9
|
+
* Holder extraction:
|
|
10
|
+
* - `X-KYA-Pickup-Token: <token>` → `{ type: "token" }` (the conformance target);
|
|
11
|
+
* - a `Signature-Input` carrying a `kya` label → `{ type: "keyid" }`, ONLY when
|
|
12
|
+
* `allowUnverifiedKeyidHolders` is set (W2): a keyid is a public string, so until
|
|
13
|
+
* inbound RFC 9421 verification lands it must not act as a bearer secret. Off by
|
|
14
|
+
* default — a Signature-Input-only poll is then treated as a no-identity poll.
|
|
15
|
+
*
|
|
16
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/pickup-routes
|
|
17
|
+
*/
|
|
18
|
+
import { getAnchorStub } from "./anchor-routing";
|
|
19
|
+
import { isAnchorSid } from "./sid";
|
|
20
|
+
import { PICKUP_TOKEN_HEADER, INTERNAL_PICKUP_POLL, KYAOS_ERRORS, } from "./constants";
|
|
21
|
+
/** A 404 invalid-session response (no-store JSON), used for malformed/credential-less polls. */
|
|
22
|
+
function invalidSession() {
|
|
23
|
+
return new Response(JSON.stringify({ error: KYAOS_ERRORS.invalidSession }), {
|
|
24
|
+
status: 404,
|
|
25
|
+
headers: {
|
|
26
|
+
"Content-Type": "application/json",
|
|
27
|
+
"Cache-Control": "no-store",
|
|
28
|
+
},
|
|
29
|
+
});
|
|
30
|
+
}
|
|
31
|
+
/**
|
|
32
|
+
* Resolve the poll holder from request headers. Token path first (the conformance
|
|
33
|
+
* target); otherwise a `kya`-labelled `Signature-Input` yields the signer's keyid.
|
|
34
|
+
* Returns `null` when no pickup credential is present.
|
|
35
|
+
*/
|
|
36
|
+
export function extractPickupHolder(getHeader, allowKeyidHolders) {
|
|
37
|
+
const token = getHeader(PICKUP_TOKEN_HEADER);
|
|
38
|
+
if (token)
|
|
39
|
+
return { type: "token", value: token };
|
|
40
|
+
// W2: a keyid is a PUBLIC string. Until inbound RFC 9421 verification lands, an
|
|
41
|
+
// unverified keyid must not act as a bearer secret — so unless explicitly allowed,
|
|
42
|
+
// a Signature-Input-only poll is treated as a no-identity poll (token path stands).
|
|
43
|
+
if (!allowKeyidHolders)
|
|
44
|
+
return null;
|
|
45
|
+
const sigInput = getHeader("Signature-Input");
|
|
46
|
+
if (sigInput && /(?:^|[,\s])kya\s*=/.test(sigInput)) {
|
|
47
|
+
const keyid = /keyid="([^"]+)"/.exec(sigInput);
|
|
48
|
+
if (keyid)
|
|
49
|
+
return { type: "keyid", value: keyid[1] };
|
|
50
|
+
}
|
|
51
|
+
return null;
|
|
52
|
+
}
|
|
53
|
+
/**
|
|
54
|
+
* Handle a worker-served pickup poll. Validates the sid, extracts the holder, proxies
|
|
55
|
+
* to the anchor DO, and returns its response unchanged. The flag gate and `next()`
|
|
56
|
+
* fall-through live in `register.ts`; by the time this runs the layer is ON.
|
|
57
|
+
*/
|
|
58
|
+
export async function handlePickupGet(c, env, cfg) {
|
|
59
|
+
const sid = c.req.param("sid");
|
|
60
|
+
if (!isAnchorSid(sid)) {
|
|
61
|
+
// Malformed sid — never routes to a durable object.
|
|
62
|
+
return invalidSession();
|
|
63
|
+
}
|
|
64
|
+
const holder = extractPickupHolder((name) => c.req.header(name), cfg.allowUnverifiedKeyidHolders);
|
|
65
|
+
if (!holder) {
|
|
66
|
+
// A poll with no pickup credential cannot bind to the anchor session.
|
|
67
|
+
return invalidSession();
|
|
68
|
+
}
|
|
69
|
+
const internalUrl = new URL(INTERNAL_PICKUP_POLL, c.req.url).toString();
|
|
70
|
+
const doResponse = await getAnchorStub(env, sid).fetch(internalUrl, {
|
|
71
|
+
method: "POST",
|
|
72
|
+
headers: { "Content-Type": "application/json" },
|
|
73
|
+
body: JSON.stringify({ sid, holder }),
|
|
74
|
+
});
|
|
75
|
+
// Return the DO response VERBATIM. The cast bridges the @cloudflare/workers-types
|
|
76
|
+
// Response and the lib Response — identical at runtime; the duality is a TS artifact.
|
|
77
|
+
return doResponse;
|
|
78
|
+
}
|
|
79
|
+
//# sourceMappingURL=pickup-routes.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pickup-routes.js","sourceRoot":"","sources":["../../src/delegation-http/pickup-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,GACb,MAAM,aAAa,CAAC;AAWrB,gGAAgG;AAChG,SAAS,cAAc;IACrB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,EAAE;QAC1E,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAsD,EACtD,iBAA0B;IAE1B,MAAM,KAAK,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAElD,gFAAgF;IAChF,mFAAmF;IACnF,oFAAoF;IACpF,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,QAAQ,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,CAAuB,EACvB,GAAkB,EAClB,GAAkC;IAElC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,oDAAoD;QACpD,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAChC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAC5B,GAAG,CAAC,2BAA2B,CAChC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,sEAAsE;QACtE,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;KACtC,CAAC,CAAC;IACH,kFAAkF;IAClF,sFAAsF;IACtF,OAAO,UAAiC,CAAC;AAC3C,CAAC"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — route registration.
|
|
3
|
+
*
|
|
4
|
+
* Mounts the kya-http routes on the Hono app. Registered BEFORE the legacy
|
|
5
|
+
* `/consent` routes in `app.ts` so the anchor-sid interception wins route order;
|
|
6
|
+
* every handler resolves the flag config per request and falls through with
|
|
7
|
+
* `next()` when the layer is OFF, so a flag-off deployment behaves identically to
|
|
8
|
+
* the pre-kya-http app on `/consent` and `/mcp`.
|
|
9
|
+
*
|
|
10
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/register
|
|
11
|
+
*/
|
|
12
|
+
import type { Hono } from "hono";
|
|
13
|
+
import type { CreateMCPIAppOptions } from "../app";
|
|
14
|
+
/**
|
|
15
|
+
* Register the kya-http delegation routes (worker-served pickup, anchor consent
|
|
16
|
+
* interception). Call this BEFORE the legacy `/consent` registrations.
|
|
17
|
+
*/
|
|
18
|
+
export declare function registerDelegationHttpRoutes(app: Hono, options: CreateMCPIAppOptions): void;
|
|
19
|
+
//# sourceMappingURL=register.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/delegation-http/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAQ,MAAM,MAAM,CAAC;AAMvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAmCnD;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,IAAI,EACT,OAAO,EAAE,oBAAoB,GAC5B,IAAI,CAiCN"}
|
|
@@ -0,0 +1,72 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — route registration.
|
|
3
|
+
*
|
|
4
|
+
* Mounts the kya-http routes on the Hono app. Registered BEFORE the legacy
|
|
5
|
+
* `/consent` routes in `app.ts` so the anchor-sid interception wins route order;
|
|
6
|
+
* every handler resolves the flag config per request and falls through with
|
|
7
|
+
* `next()` when the layer is OFF, so a flag-off deployment behaves identically to
|
|
8
|
+
* the pre-kya-http app on `/consent` and `/mcp`.
|
|
9
|
+
*
|
|
10
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/register
|
|
11
|
+
*/
|
|
12
|
+
import { mapPrefixedEnv } from "../helpers/env-mapper";
|
|
13
|
+
import { resolveHttpChallengeConfig } from "../config";
|
|
14
|
+
import { PICKUP_ROUTE, CONSENT_ROUTE } from "./constants";
|
|
15
|
+
import { isAnchorSid } from "./sid";
|
|
16
|
+
import { handlePickupGet } from "./pickup-routes";
|
|
17
|
+
import { handleAnchorConsentGet, handleAnchorConsentApprove, } from "./consent-anchor-bridge";
|
|
18
|
+
/**
|
|
19
|
+
* Resolve the request's mapped env and the (flag-gated) http-challenge config.
|
|
20
|
+
* Never throws — a config failure resolves to `cfg: null` (layer OFF) so the legacy
|
|
21
|
+
* flow is untouched.
|
|
22
|
+
*/
|
|
23
|
+
function resolveRequest(
|
|
24
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
25
|
+
c, options) {
|
|
26
|
+
try {
|
|
27
|
+
const env = options.envPrefix
|
|
28
|
+
? mapPrefixedEnv(c.env, options.envPrefix)
|
|
29
|
+
: c.env;
|
|
30
|
+
const cfg = resolveHttpChallengeConfig(options.getRuntimeConfig(env), env);
|
|
31
|
+
return { env, cfg };
|
|
32
|
+
}
|
|
33
|
+
catch {
|
|
34
|
+
// Config resolution failed — treat the layer as OFF and fall through to legacy.
|
|
35
|
+
return { env: c.env, cfg: null };
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
/**
|
|
39
|
+
* Register the kya-http delegation routes (worker-served pickup, anchor consent
|
|
40
|
+
* interception). Call this BEFORE the legacy `/consent` registrations.
|
|
41
|
+
*/
|
|
42
|
+
export function registerDelegationHttpRoutes(app, options) {
|
|
43
|
+
// §8.2 worker-served pickup. New path — when OFF, `next()` yields the app's 404.
|
|
44
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
45
|
+
app.get(PICKUP_ROUTE, async (c, next) => {
|
|
46
|
+
const { env, cfg } = resolveRequest(c, options);
|
|
47
|
+
if (!cfg)
|
|
48
|
+
return next();
|
|
49
|
+
return handlePickupGet(c, env, cfg);
|
|
50
|
+
});
|
|
51
|
+
// Anchor consent surface. Only intercepts `?sid=kya-…`; everything else (and any
|
|
52
|
+
// flag-off request) falls through to the legacy consent service.
|
|
53
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
54
|
+
app.all(CONSENT_ROUTE, async (c, next) => {
|
|
55
|
+
const { env, cfg } = resolveRequest(c, options);
|
|
56
|
+
const sid = c.req.query("sid");
|
|
57
|
+
if (!cfg || !isAnchorSid(sid))
|
|
58
|
+
return next();
|
|
59
|
+
return handleAnchorConsentGet(c, sid, env, cfg);
|
|
60
|
+
});
|
|
61
|
+
// Anchor approval POST. The consent surface posts to `/consent/approve?sid=kya-…`
|
|
62
|
+
// (sid in the query, so interception never consumes the request body).
|
|
63
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
64
|
+
app.post(`${CONSENT_ROUTE}/approve`, async (c, next) => {
|
|
65
|
+
const { env, cfg } = resolveRequest(c, options);
|
|
66
|
+
const sid = c.req.query("sid");
|
|
67
|
+
if (!cfg || !isAnchorSid(sid))
|
|
68
|
+
return next();
|
|
69
|
+
return handleAnchorConsentApprove(c, sid, env, cfg);
|
|
70
|
+
});
|
|
71
|
+
}
|
|
72
|
+
//# sourceMappingURL=register.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/delegation-http/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAMvD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AAEjC;;;;GAIG;AACH,SAAS,cAAc;AACrB,8DAA8D;AAC9D,CAAM,EACN,OAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS;YAC3B,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAA4B,EAAE,OAAO,CAAC,SAAS,CAAC;YACnE,CAAC,CAAE,CAAC,CAAC,GAAqB,CAAC;QAC7B,MAAM,GAAG,GAAG,0BAA0B,CACpC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAyC,CAC1C,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAoB,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAS,EACT,OAA6B;IAE7B,iFAAiF;IACjF,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QACxB,OAAO,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,iEAAiE;IACjE,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC7C,OAAO,sBAAsB,CAAC,CAA2B,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,kFAAkF;IAClF,uEAAuE;IACvE,8DAA8D;IAC9D,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,UAAU,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC7C,OAAO,0BAA0B,CAC/B,CAA2B,EAC3B,GAAG,EACH,GAAG,EACH,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — anchor session id (sid).
|
|
3
|
+
*
|
|
4
|
+
* The `kya-…` wire format is unrelated to the C4 `kyaos_` session prefix flip — it
|
|
5
|
+
* is the opaque correlation id shared across the challenge, the consent surface,
|
|
6
|
+
* the pickup endpoint, and the durable-object instance name.
|
|
7
|
+
*
|
|
8
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/sid
|
|
9
|
+
*/
|
|
10
|
+
/**
|
|
11
|
+
* Generate a fresh anchor sid: `"kya-"` + 32 lowercase hex characters (16 random
|
|
12
|
+
* bytes from `crypto.getRandomValues`).
|
|
13
|
+
*/
|
|
14
|
+
export declare function generateSid(): string;
|
|
15
|
+
/**
|
|
16
|
+
* Type guard for anchor sids. Accepts the generated 32-hex form and the 16–64 hex
|
|
17
|
+
* range used by the golden fixtures.
|
|
18
|
+
*/
|
|
19
|
+
export declare function isAnchorSid(s: string | null | undefined): s is string;
|
|
20
|
+
//# sourceMappingURL=sid.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sid.d.ts","sourceRoot":"","sources":["../../src/delegation-http/sid.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH;;;GAGG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAQpC;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,IAAI,MAAM,CAErE"}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — anchor session id (sid).
|
|
3
|
+
*
|
|
4
|
+
* The `kya-…` wire format is unrelated to the C4 `kyaos_` session prefix flip — it
|
|
5
|
+
* is the opaque correlation id shared across the challenge, the consent surface,
|
|
6
|
+
* the pickup endpoint, and the durable-object instance name.
|
|
7
|
+
*
|
|
8
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/sid
|
|
9
|
+
*/
|
|
10
|
+
/** Matches generated sids (`kya-` + 32 hex) and the shorter fixture sids (16 hex). */
|
|
11
|
+
const ANCHOR_SID_RE = /^kya-[0-9a-f]{16,64}$/;
|
|
12
|
+
/**
|
|
13
|
+
* Generate a fresh anchor sid: `"kya-"` + 32 lowercase hex characters (16 random
|
|
14
|
+
* bytes from `crypto.getRandomValues`).
|
|
15
|
+
*/
|
|
16
|
+
export function generateSid() {
|
|
17
|
+
const bytes = new Uint8Array(16);
|
|
18
|
+
crypto.getRandomValues(bytes);
|
|
19
|
+
let hex = "";
|
|
20
|
+
for (const b of bytes) {
|
|
21
|
+
hex += b.toString(16).padStart(2, "0");
|
|
22
|
+
}
|
|
23
|
+
return `kya-${hex}`;
|
|
24
|
+
}
|
|
25
|
+
/**
|
|
26
|
+
* Type guard for anchor sids. Accepts the generated 32-hex form and the 16–64 hex
|
|
27
|
+
* range used by the golden fixtures.
|
|
28
|
+
*/
|
|
29
|
+
export function isAnchorSid(s) {
|
|
30
|
+
return typeof s === "string" && ANCHOR_SID_RE.test(s);
|
|
31
|
+
}
|
|
32
|
+
//# sourceMappingURL=sid.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sid.js","sourceRoot":"","sources":["../../src/delegation-http/sid.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,sFAAsF;AACtF,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,OAAO,GAAG,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAA4B;IACtD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}
|
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — frozen types.
|
|
3
|
+
*
|
|
4
|
+
* These mirror the §13 anchor state machine and the §8.1 challenge verdict input.
|
|
5
|
+
* `expired` is never a stored status: it is computed lazily from `expiresAt` on
|
|
6
|
+
* every read (delete-on-expired-read).
|
|
7
|
+
*
|
|
8
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/types
|
|
9
|
+
*/
|
|
10
|
+
/**
|
|
11
|
+
* Persisted anchor status. `"expired"` is intentionally absent — expiry is derived
|
|
12
|
+
* from `expiresAt` vs the current clock, never written to storage.
|
|
13
|
+
*/
|
|
14
|
+
export type AnchorStatus = "pending" | "pinned" | "approved";
|
|
15
|
+
/**
|
|
16
|
+
* The holder binding for an anchor. Only the SHA-256 hex of the secret is ever
|
|
17
|
+
* stored or logged — never the raw token/keyid.
|
|
18
|
+
*/
|
|
19
|
+
export interface AnchorPin {
|
|
20
|
+
type: "token" | "keyid";
|
|
21
|
+
valueSha256: string;
|
|
22
|
+
pinnedAt: number;
|
|
23
|
+
source: "challenge" | "first-poll";
|
|
24
|
+
}
|
|
25
|
+
/**
|
|
26
|
+
* The full anchor record persisted in `ctx.storage`. All timestamps are epoch ms.
|
|
27
|
+
*/
|
|
28
|
+
export interface PickupAnchorRecord {
|
|
29
|
+
sid: string;
|
|
30
|
+
status: AnchorStatus;
|
|
31
|
+
requiredScopes: string[];
|
|
32
|
+
minAssurance?: string;
|
|
33
|
+
pollIntervalS: number;
|
|
34
|
+
createdAt: number;
|
|
35
|
+
expiresAt: number;
|
|
36
|
+
pin?: AnchorPin;
|
|
37
|
+
delegation?: {
|
|
38
|
+
vcJwt: string;
|
|
39
|
+
expiresInS: number;
|
|
40
|
+
approvedAt: number;
|
|
41
|
+
};
|
|
42
|
+
lastPollAt?: number;
|
|
43
|
+
}
|
|
44
|
+
/**
|
|
45
|
+
* Inputs for building a §8.1 delegation challenge. Camel-case mirror of the golden
|
|
46
|
+
* fixture's `verdict_input` (minus the `decision` discriminator).
|
|
47
|
+
*/
|
|
48
|
+
export interface ChallengeVerdictInput {
|
|
49
|
+
requiredScopes: string[];
|
|
50
|
+
minAssurance?: string;
|
|
51
|
+
authorizationHost: string;
|
|
52
|
+
realm: string;
|
|
53
|
+
sid: string;
|
|
54
|
+
pollIntervalS: number;
|
|
55
|
+
}
|
|
56
|
+
/**
|
|
57
|
+
* A pickup poll holder, as presented on the wire. The raw `value` is hashed inside
|
|
58
|
+
* the durable object before it is compared against (or written to) the anchor pin.
|
|
59
|
+
*/
|
|
60
|
+
export interface PickupHolder {
|
|
61
|
+
type: "token" | "keyid";
|
|
62
|
+
value: string;
|
|
63
|
+
}
|
|
64
|
+
//# sourceMappingURL=types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/delegation-http/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,GAAG,YAAY,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* draft-kya-http-02 delegation layer — frozen types.
|
|
3
|
+
*
|
|
4
|
+
* These mirror the §13 anchor state machine and the §8.1 challenge verdict input.
|
|
5
|
+
* `expired` is never a stored status: it is computed lazily from `expiresAt` on
|
|
6
|
+
* every read (delete-on-expired-read).
|
|
7
|
+
*
|
|
8
|
+
* @module @kya-os/mcp-i-cloudflare/delegation-http/types
|
|
9
|
+
*/
|
|
10
|
+
export {};
|
|
11
|
+
//# sourceMappingURL=types.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/delegation-http/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"env-mapper.d.ts","sourceRoot":"","sources":["../../src/helpers/env-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EACV,WAAW,EAGZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAatD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,EAAG,SAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,SAAS,CAkCzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAiC5D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,qBAAqB,EAC1B,MAAM,EAAE,MAAM,GACb,aAAa,
|
|
1
|
+
{"version":3,"file":"env-mapper.d.ts","sourceRoot":"","sources":["../../src/helpers/env-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EACV,WAAW,EAGZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAatD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,EAAG,SAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,SAAS,CAkCzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAiC5D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,qBAAqB,EAC1B,MAAM,EAAE,MAAM,GACb,aAAa,CAiGf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CA4Ff"}
|
|
@@ -186,6 +186,20 @@ export function mapPrefixedEnv(env, prefix) {
|
|
|
186
186
|
ENVIRONMENT: typeof env.ENVIRONMENT === "string" ? env.ENVIRONMENT : undefined,
|
|
187
187
|
ADMIN_API_KEY: typeof env.ADMIN_API_KEY === "string" ? env.ADMIN_API_KEY : undefined,
|
|
188
188
|
_durableObjectState: env._durableObjectState,
|
|
189
|
+
// Scalar config flags are set unprefixed (like the secrets above), so copy
|
|
190
|
+
// them across verbatim — otherwise a prefixed deployment silently loses the
|
|
191
|
+
// documented MCPI_HTTP_CHALLENGE / MCPI_TEST_CONSENT / MCPI_INLINE_CONSENT
|
|
192
|
+
// overrides. These are read off this mapped env downstream (resolveHttpChallengeConfig,
|
|
193
|
+
// agent.ts inline-consent; the consent-anchor-bridge reader lands on integration).
|
|
194
|
+
MCPI_HTTP_CHALLENGE: typeof env.MCPI_HTTP_CHALLENGE === "string"
|
|
195
|
+
? env.MCPI_HTTP_CHALLENGE
|
|
196
|
+
: undefined,
|
|
197
|
+
MCPI_TEST_CONSENT: typeof env.MCPI_TEST_CONSENT === "string"
|
|
198
|
+
? env.MCPI_TEST_CONSENT
|
|
199
|
+
: undefined,
|
|
200
|
+
MCPI_INLINE_CONSENT: typeof env.MCPI_INLINE_CONSENT === "string"
|
|
201
|
+
? env.MCPI_INLINE_CONSENT
|
|
202
|
+
: undefined,
|
|
189
203
|
// MCP_OBJECT: Durable Object namespace for MCP agent
|
|
190
204
|
// Try prefixed first, then fall back to unprefixed (most deployments use unprefixed)
|
|
191
205
|
MCP_OBJECT: (env[`${prefixWithUnderscore}_MCP_OBJECT`] ||
|
|
@@ -275,6 +289,16 @@ export function normalizeCloudflareEnv(env, prefix) {
|
|
|
275
289
|
ENVIRONMENT: typeof env.ENVIRONMENT === "string" ? env.ENVIRONMENT : undefined,
|
|
276
290
|
ADMIN_API_KEY: typeof env.ADMIN_API_KEY === "string" ? env.ADMIN_API_KEY : undefined,
|
|
277
291
|
_durableObjectState: env._durableObjectState,
|
|
292
|
+
// Scalar config flags (see mapPrefixedEnv) — preserved on the no-prefix path too.
|
|
293
|
+
MCPI_HTTP_CHALLENGE: typeof env.MCPI_HTTP_CHALLENGE === "string"
|
|
294
|
+
? env.MCPI_HTTP_CHALLENGE
|
|
295
|
+
: undefined,
|
|
296
|
+
MCPI_TEST_CONSENT: typeof env.MCPI_TEST_CONSENT === "string"
|
|
297
|
+
? env.MCPI_TEST_CONSENT
|
|
298
|
+
: undefined,
|
|
299
|
+
MCPI_INLINE_CONSENT: typeof env.MCPI_INLINE_CONSENT === "string"
|
|
300
|
+
? env.MCPI_INLINE_CONSENT
|
|
301
|
+
: undefined,
|
|
278
302
|
MCP_OBJECT: env.MCP_OBJECT,
|
|
279
303
|
DO_ROUTING_STRATEGY: typeof env.DO_ROUTING_STRATEGY === "string"
|
|
280
304
|
? env.DO_ROUTING_STRATEGY
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"env-mapper.js","sourceRoot":"","sources":["../../src/helpers/env-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACvB,aAAa;IACb,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;CACZ,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,GAA4B,EAC5B,MAAe;IAEf,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEtD,uCAAuC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;YAChD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;QACtB,MAAM,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEzD,MAAM,EAAE,GACN,GAAG,CAAC,GAAG,cAAc,IAAI,uBAAuB,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,iBAAiB,IAAI,uBAAuB,EAAE,CAAC,CAAC;QACzD,IAAI,EAAE;YAAE,OAAO,EAAiB,CAAC;IACnC,CAAC;IAED,0BAA0B;IAC1B,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,uBAAuB,CAAgB,CAAC;IACrD,CAAC;IAED,mDAAmD;IACnD,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,CAAC,QAAQ,CAAC,IAAI,uBAAuB,EAAE,CAAC;YAC3C,GAAG,KAAK,uBAAuB,EAC/B,CAAC;YACD,OAAO,GAAG,CAAC,GAAG,CAAgB,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,GAAQ;IACtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mDAAmD;IACnD,KAAK,MAAM,WAAW,IAAI,gBAAgB,EAAE,CAAC;QAC3C,4EAA4E;QAC5E,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC/D,wDAAwD;gBACxD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,gEAAgE;oBAChE,oEAAoE;oBACpE,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,cAAc,CAC5B,GAA0B,EAC1B,MAAc;IAEd,mDAAmD;IACnD,+CAA+C;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,oBAAoB,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QACtD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IACtB,MAAM,uBAAuB,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE/D,uDAAuD;IACvD,MAAM,KAAK,GAAG,CAAC,WAAmB,EAA2B,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,GAAG,oBAAoB,IAAI,WAAW,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,uBAAuB,IAAI,WAAW,EAAE,CAAC,CAErC,CAAC;IAChB,CAAC,CAAC;IAEF,uEAAuE;IACvE,MAAM,SAAS,GAAG,eAAe,
|
|
1
|
+
{"version":3,"file":"env-mapper.js","sourceRoot":"","sources":["../../src/helpers/env-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACvB,aAAa;IACb,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;CACZ,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,GAA4B,EAC5B,MAAe;IAEf,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEtD,uCAAuC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;YAChD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;QACtB,MAAM,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEzD,MAAM,EAAE,GACN,GAAG,CAAC,GAAG,cAAc,IAAI,uBAAuB,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,iBAAiB,IAAI,uBAAuB,EAAE,CAAC,CAAC;QACzD,IAAI,EAAE;YAAE,OAAO,EAAiB,CAAC;IACnC,CAAC;IAED,0BAA0B;IAC1B,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,uBAAuB,CAAgB,CAAC;IACrD,CAAC;IAED,mDAAmD;IACnD,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,CAAC,QAAQ,CAAC,IAAI,uBAAuB,EAAE,CAAC;YAC3C,GAAG,KAAK,uBAAuB,EAC/B,CAAC;YACD,OAAO,GAAG,CAAC,GAAG,CAAgB,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,GAAQ;IACtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mDAAmD;IACnD,KAAK,MAAM,WAAW,IAAI,gBAAgB,EAAE,CAAC;QAC3C,4EAA4E;QAC5E,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC/D,wDAAwD;gBACxD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,gEAAgE;oBAChE,oEAAoE;oBACpE,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,cAAc,CAC5B,GAA0B,EAC1B,MAAc;IAEd,mDAAmD;IACnD,+CAA+C;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,oBAAoB,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QACtD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IACtB,MAAM,uBAAuB,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE/D,uDAAuD;IACvD,MAAM,KAAK,GAAG,CAAC,WAAmB,EAA2B,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,GAAG,oBAAoB,IAAI,WAAW,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,uBAAuB,IAAI,WAAW,EAAE,CAAC,CAErC,CAAC;IAChB,CAAC,CAAC;IAEF,uEAAuE;IACvE,MAAM,SAAS,GAAG,eAAe,CAAC,GAA8B,EAAE,MAAM,CAAC,CAAC;IAE1E,OAAO;QACL,WAAW,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS,CAAgB;QAC/D,aAAa,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,SAAS;QAClD,gBAAgB,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,SAAS;QACxD,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,SAAS;QAC5D,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,SAAS;QAC5D,wBAAwB,EACtB,OAAO,GAAG,CAAC,wBAAwB,KAAK,QAAQ;YAC9C,CAAC,CAAC,GAAG,CAAC,wBAAwB;YAC9B,CAAC,CAAC,SAAS;QACf,uBAAuB,EACrB,OAAO,GAAG,CAAC,uBAAuB,KAAK,QAAQ;YAC7C,CAAC,CAAC,GAAG,CAAC,uBAAuB;YAC7B,CAAC,CAAC,SAAS;QACf,sBAAsB,EACpB,OAAO,GAAG,CAAC,sBAAsB,KAAK,QAAQ;YAC5C,CAAC,CAAC,GAAG,CAAC,sBAAsB;YAC5B,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,sBAAsB,EACpB,OAAO,GAAG,CAAC,sBAAsB,KAAK,QAAQ;YAC5C,CAAC,CAAC,GAAG,CAAC,sBAAsB;YAC5B,CAAC,CAAC,SAAS;QACf,uBAAuB,EACrB,OAAO,GAAG,CAAC,uBAAuB,KAAK,QAAQ;YAC7C,CAAC,CAAC,GAAG,CAAC,uBAAuB;YAC7B,CAAC,CAAC,SAAS;QACf,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACrE,cAAc,EACZ,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACzE,eAAe,EACb,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC3E,WAAW,EACT,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnE,WAAW,EACT,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnE,aAAa,EACX,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACvE,mBAAmB,EAAE,GAAG,CAAC,mBAEZ;QACb,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,wFAAwF;QACxF,mFAAmF;QACnF,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,iBAAiB,EACf,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;YACvC,CAAC,CAAC,GAAG,CAAC,iBAAiB;YACvB,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,qDAAqD;QACrD,qFAAqF;QACrF,UAAU,EAAE,CAAC,GAAG,CAAC,GAAG,oBAAoB,aAAa,CAAC;YACpD,GAAG,CAAC,GAAG,uBAAuB,aAAa,CAAC;YAC5C,GAAG,CAAC,UAAU,CAAuC;QACvD,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,cAAc,EACZ,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAQ,EACR,MAAe;IAEf,sCAAsC;IACtC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,cAAc,CAAC,GAA4B,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,qBAAqB;IACrB,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAC,GAA4B,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IAED,uDAAuD;IACvD,yCAAyC;IACzC,gFAAgF;IAChF,MAAM,SAAS,GAAG,eAAe,CAAC,GAA8B,CAAC,CAAC;IAElE,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAgB;QAC1D,aAAa,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAA4B;QAC1E,gBAAgB,EAAE,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAEvC;QACb,kBAAkB,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS,CAE3C;QACb,kBAAkB,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS,CAE3C;QACb,wBAAwB,EACtB,OAAO,GAAG,CAAC,wBAAwB,KAAK,QAAQ;YAC9C,CAAC,CAAC,GAAG,CAAC,wBAAwB;YAC9B,CAAC,CAAC,SAAS;QACf,uBAAuB,EACrB,OAAO,GAAG,CAAC,uBAAuB,KAAK,QAAQ;YAC7C,CAAC,CAAC,GAAG,CAAC,uBAAuB;YAC7B,CAAC,CAAC,SAAS;QACf,sBAAsB,EACpB,OAAO,GAAG,CAAC,sBAAsB,KAAK,QAAQ;YAC5C,CAAC,CAAC,GAAG,CAAC,sBAAsB;YAC5B,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,sBAAsB,EACpB,OAAO,GAAG,CAAC,sBAAsB,KAAK,QAAQ;YAC5C,CAAC,CAAC,GAAG,CAAC,sBAAsB;YAC5B,CAAC,CAAC,SAAS;QACf,uBAAuB,EACrB,OAAO,GAAG,CAAC,uBAAuB,KAAK,QAAQ;YAC7C,CAAC,CAAC,GAAG,CAAC,uBAAuB;YAC7B,CAAC,CAAC,SAAS;QACf,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACrE,cAAc,EACZ,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACzE,eAAe,EACb,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC3E,WAAW,EACT,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnE,WAAW,EACT,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnE,aAAa,EACX,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACvE,mBAAmB,EAAE,GAAG,CAAC,mBAEZ;QACb,kFAAkF;QAClF,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,iBAAiB,EACf,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;YACvC,CAAC,CAAC,GAAG,CAAC,iBAAiB;YACvB,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,UAAU,EAAE,GAAG,CAAC,UAAgD;QAChE,mBAAmB,EACjB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS;QACf,cAAc,EACZ,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AACJ,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -14,7 +14,7 @@ import type { CloudflareRuntimeConfig } from "./config";
|
|
|
14
14
|
export { WebCryptoProvider, KVStorageProvider, KVNonceCacheProvider, WorkersClockProvider, WorkersFetchProvider, WorkersIdentityProvider, KVIdentityProvider, };
|
|
15
15
|
export { KVProofArchive, type DetachedProof, type ProofRecord, type ProofQuery, type ProofStats, } from "./storage/kv-proof-archive";
|
|
16
16
|
export { ConsentService } from "./services/consent.service";
|
|
17
|
-
export { DelegationService, type VCJWTVerificationResult } from "./services/delegation.service";
|
|
17
|
+
export { DelegationService, type VCJWTVerificationResult, } from "./services/delegation.service";
|
|
18
18
|
export { ProofService } from "./services/proof.service";
|
|
19
19
|
export { RateLimitService } from "./services/rate-limit.service";
|
|
20
20
|
export { OAuthSecurityService } from "./services/oauth-security.service";
|
|
@@ -26,13 +26,16 @@ export { KVToolProtectionCache, type KVNamespace, } from "./cache/kv-tool-protec
|
|
|
26
26
|
export { KVOAuthConfigCache } from "./cache/kv-oauth-config-cache";
|
|
27
27
|
export type { KVOAuthConfigCacheConfig } from "./cache/kv-oauth-config-cache";
|
|
28
28
|
export { createOAuthCallbackHandler, extractDelegationToken, type HonoContext, type OAuthCallbackConfig, type OAuthSuccessData, type OAuthErrorData, type OAuthState, type TokenExchangeResponse, } from "./runtime/oauth-handler";
|
|
29
|
-
export type { AgentIdentity } from "@kya-os/mcp
|
|
29
|
+
export type { AgentIdentity } from "@kya-os/mcp";
|
|
30
30
|
export type { ToolExecutionContext } from "@kya-os/contracts/config";
|
|
31
31
|
export { MCPICloudflareServer, type MCPICloudflareServerOptions, } from "./server";
|
|
32
32
|
export { AdminService } from "./services/admin.service";
|
|
33
33
|
export { MCPICloudflareAgent, type PrefixedCloudflareEnv } from "./agent";
|
|
34
34
|
export { createMCPIApp, type CreateMCPIAppOptions } from "./app";
|
|
35
35
|
export { mapPrefixedEnv, normalizeCloudflareEnv, detectEnvPrefix, detectUnifiedKV, UNIFIED_KV_BINDING_NAME, } from "./helpers/env-mapper";
|
|
36
|
+
export { generateSid } from "./delegation-http/sid";
|
|
37
|
+
export { buildChallengeResponse } from "./delegation-http/challenge";
|
|
38
|
+
export { PICKUP_ROUTE, CONSENT_ROUTE, PICKUP_TOKEN_HEADER, FALLBACK_DELEGATION_HEADER, CHALLENGE_PARAM_ORDER, KYAOS_ERRORS, INTERNAL_PICKUP_CREATE, INTERNAL_PICKUP_POLL, INTERNAL_PICKUP_APPROVE, INTERNAL_PICKUP_INFO, } from "./delegation-http/constants";
|
|
36
39
|
export * from "./constants";
|
|
37
40
|
export { defineConfig } from "./config";
|
|
38
41
|
export type { CloudflareRuntimeConfig, CloudflareBuildConfig, CloudflareConfig, } from "./config";
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,EAIL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAGxD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,GACnB,CAAC;AAGF,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,GAChB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,KAAK,uBAAuB,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,4BAA4B,EAC5B,kBAAkB,EAClB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,wBAAwB,EACxB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAGpE,OAAO,EACL,qBAAqB,EACrB,KAAK,WAAW,GACjB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,YAAY,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAG9E,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,qBAAqB,GAC3B,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjD,YAAY,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAGrC,cAAc,aAAa,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,YAAY,EACV,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAGlB,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,aAAa,CAAC;IACnB,WAAW,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC;IAC3C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;KACxC,CAAC;IACF,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAE9C,aAAa,CAAC,EAAE,uBAAuB,CAAC;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,GAC3B,iBAAiB,CAgGnB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB;mBAIrC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;EAsFnD;AAGD,OAAO,EACL,2BAA2B,EAC3B,KAAK,2BAA2B,EAChC,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,cAAc,UAAU,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -12,7 +12,8 @@ import { isOAuthServicesAvailable } from "./utils/oauth-service-registry";
|
|
|
12
12
|
// This ensures the oauth-service-registry module is executed and services are
|
|
13
13
|
// registered on globalThis BEFORE any other code that might need them
|
|
14
14
|
const _indexOAuthRegistryLoaded = isOAuthServicesAvailable();
|
|
15
|
-
import {
|
|
15
|
+
import { logger } from "@kya-os/mcp";
|
|
16
|
+
import { WELL_KNOWN_CORS_HEADERS, AccessControlApiService, ProofVerifier, } from "@kya-os/mcp-i-core"; // product layer + trap symbols — stays (C2/C3)
|
|
16
17
|
import { WebCryptoProvider } from "./providers/crypto";
|
|
17
18
|
import { KVStorageProvider, KVNonceCacheProvider, WorkersClockProvider, WorkersFetchProvider, WorkersIdentityProvider, } from "./providers/storage";
|
|
18
19
|
import { KVIdentityProvider } from "./providers/kv-identity";
|
|
@@ -23,7 +24,7 @@ export { WebCryptoProvider, KVStorageProvider, KVNonceCacheProvider, WorkersCloc
|
|
|
23
24
|
export { KVProofArchive, } from "./storage/kv-proof-archive";
|
|
24
25
|
// Re-export services
|
|
25
26
|
export { ConsentService } from "./services/consent.service";
|
|
26
|
-
export { DelegationService } from "./services/delegation.service";
|
|
27
|
+
export { DelegationService, } from "./services/delegation.service";
|
|
27
28
|
export { ProofService } from "./services/proof.service";
|
|
28
29
|
export { RateLimitService } from "./services/rate-limit.service";
|
|
29
30
|
export { OAuthSecurityService } from "./services/oauth-security.service";
|
|
@@ -46,6 +47,13 @@ export { AdminService } from "./services/admin.service";
|
|
|
46
47
|
export { MCPICloudflareAgent } from "./agent";
|
|
47
48
|
export { createMCPIApp } from "./app";
|
|
48
49
|
export { mapPrefixedEnv, normalizeCloudflareEnv, detectEnvPrefix, detectUnifiedKV, UNIFIED_KV_BINDING_NAME, } from "./helpers/env-mapper";
|
|
50
|
+
// Re-export the draft-kya-http-02 delegation layer public surface (h2.5 contract).
|
|
51
|
+
// HttpChallengeConfig + resolveHttpChallengeConfig come through `export * from "./config"`.
|
|
52
|
+
// Builders, middleware, route wiring, anchor routing, and types beyond this list are
|
|
53
|
+
// imported by internal callers from their modules directly.
|
|
54
|
+
export { generateSid } from "./delegation-http/sid";
|
|
55
|
+
export { buildChallengeResponse } from "./delegation-http/challenge";
|
|
56
|
+
export { PICKUP_ROUTE, CONSENT_ROUTE, PICKUP_TOKEN_HEADER, FALLBACK_DELEGATION_HEADER, CHALLENGE_PARAM_ORDER, KYAOS_ERRORS, INTERNAL_PICKUP_CREATE, INTERNAL_PICKUP_POLL, INTERNAL_PICKUP_APPROVE, INTERNAL_PICKUP_INFO, } from "./delegation-http/constants";
|
|
49
57
|
// Re-export constants
|
|
50
58
|
export * from "./constants";
|
|
51
59
|
// Re-export config utilities
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,kFAAkF;AAClF,iGAAiG;AACjG,iGAAiG;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,iEAAiE;AACjE,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAE7D,OAAO,EAGL,uBAAuB,EAEvB,uBAAuB,EACvB,aAAa,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,kFAAkF;AAClF,iGAAiG;AACjG,iGAAiG;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,iEAAiE;AACjE,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAGL,uBAAuB,EAEvB,uBAAuB,EACvB,aAAa,GACd,MAAM,oBAAoB,CAAC,CAAC,+CAA+C;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,sBAAsB;AACtB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,GACnB,CAAC;AAEF,4BAA4B;AAC5B,OAAO,EACL,cAAc,GAKf,MAAM,4BAA4B,CAAC;AAEpC,qBAAqB;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,oCAAoC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,4BAA4B,EAC5B,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC;AAE7B,6BAA6B;AAC7B,OAAO,EACL,wBAAwB,GAMzB,MAAM,mBAAmB,CAAC;AAE3B,6DAA6D;AAC7D,OAAO,EAAE,iBAAiB,EAAwB,MAAM,WAAW,CAAC;AAEpE,kCAAkC;AAClC,OAAO,EACL,qBAAqB,GAEtB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,oCAAoC;AACpC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GAOvB,MAAM,yBAAyB,CAAC;AASjC,8CAA8C;AAC9C,OAAO,EACL,oBAAoB,GAErB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,6CAA6C;AAC7C,OAAO,EAAE,mBAAmB,EAA8B,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,aAAa,EAA6B,MAAM,OAAO,CAAC;AACjE,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAE9B,mFAAmF;AACnF,4FAA4F;AAC5F,qFAAqF;AACrF,4DAA4D;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,sBAAsB;AACtB,cAAc,aAAa,CAAC;AAE5B,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAwBxC;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA4B;IAE5B,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,iBAAiB,CAC3C,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAQ,CAC/D,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CACjD,MAAM,CAAC,GAAG,CAAC,WAAkB,CAC9B,CAAC;IAEF,uDAAuD;IACvD,MAAM,oBAAoB,GAAG,IAAI,uBAAuB,CACtD,MAAM,CAAC,GAAG,EACV,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,mBAA0B,CAAC,yCAAyC;KAChF,CAAC;IAEF,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB;QAClD,CAAC,CAAC,IAAI,kBAAkB,CACpB,MAAM,CAAC,GAAG,CAAC,gBAAuB,EAClC,oBAAoB,EACpB,cAAc,CACf;QACH,CAAC,CAAC,oBAAoB,CAAC;IAEzB,4BAA4B;IAC5B,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;QACtC,cAAc;QACd,aAAa;QACb,kBAAkB;QAClB,aAAa;QACb,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,GAAG;KACzD,CAAC,CAAC;IAEH,8DAA8D;IAC9D,IAAI,oBAAyD,CAAC;IAC9D,IAAI,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACnC,oBAAoB,GAAG,IAAI,uBAAuB,CAAC;YACjD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,IAAI,wBAAwB;YACnE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB;YACtC,aAAa,EAAE,aAAa;YAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;gBACpB,gEAAgE;gBAChE,MAAM,OAAO,GACX,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACnC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAE3C,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC/C,CAAC;qBAAM,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;oBAChD,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAA0B;QAC3C,cAAc;QACd,aAAa;QACb,aAAa;QACb,eAAe;QACf,kBAAkB;QAClB,gBAAgB;QAChB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,YAAY;QAC/C,OAAO,EAAE;YACP,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,GAAG;YACxD,UAAU,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;SAC3C;QACD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa;KACnD,CAAC;IAEF,0DAA0D;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;IAE5C,uEAAuE;IACvE,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,CAAC;IAE9C,MAAM,OAAO,GAAG,IAAI,iBAAiB,CACnC,aAAa,EACb,SAAS,EACT,gBAAgB,CACjB,CAAC;IAEF,+BAA+B;IAC/B,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAExC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhD,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB;YAC1B,sCAAsC;YACtC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7B,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEjC,8BAA8B;YAC9B,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAE3C,IAAI,MAAM,EAAE,CAAC;oBACX,gEAAgE;oBAChE,IAAI,QAAQ,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;wBAClE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;4BAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,OAAO,EAAE;gCACP,GAAG,MAAM,CAAC,OAAO;gCACjB,GAAG,uBAAuB;6BAC3B;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,uDAAuD;oBACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;wBAC1C,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;4BAClC,GAAG,uBAAuB;yBAC3B;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAQ,CAAC;oBAE3C,mBAAmB;oBACnB,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC1D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;4BAC1C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;yBAChD,CAAC,CAAC;oBACL,CAAC;oBAED,oBAAoB;oBACpB,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;wBACjC,2CAA2C;wBAC3C,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;4BACb,MAAM,EAAE,mBAAmB;yBAC5B,CAAC,EACF;4BACE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;yBAChD,CACF,CAAC;oBACJ,CAAC;oBAED,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,gBAAgB;qBACxB,CAAC,EACF;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,gBAAgB;qBACzC,CAAC,EACF;wBACE,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,OAAO,EACL,2BAA2B,GAG5B,MAAM,WAAW,CAAC;AAEnB,2CAA2C;AAC3C,cAAc,UAAU,CAAC"}
|
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
*
|
|
4
4
|
* Implements CryptoProvider using the Web Crypto API available in Workers.
|
|
5
5
|
*/
|
|
6
|
-
import { CryptoProvider } from '@kya-os/mcp
|
|
6
|
+
import { CryptoProvider } from '@kya-os/mcp';
|
|
7
7
|
export declare class WebCryptoProvider extends CryptoProvider {
|
|
8
8
|
/**
|
|
9
9
|
* Sign data using Ed25519
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/providers/crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/providers/crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,qBAAa,iBAAkB,SAAQ,cAAc;IACnD;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAkC3E;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,EACrB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,OAAO,CAAC;IA6BnB;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAwB3E;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAY7C;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAQtD,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,mBAAmB;IAM3B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,aAAa;CAOtB"}
|
package/dist/providers/crypto.js
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
*
|
|
4
4
|
* Implements CryptoProvider using the Web Crypto API available in Workers.
|
|
5
5
|
*/
|
|
6
|
-
import { CryptoProvider } from '@kya-os/mcp
|
|
6
|
+
import { CryptoProvider } from '@kya-os/mcp';
|
|
7
7
|
export class WebCryptoProvider extends CryptoProvider {
|
|
8
8
|
/**
|
|
9
9
|
* Sign data using Ed25519
|