@kya-os/mcp-i-core 1.1.13-canary.1 → 1.1.14-canary.1

package/dist/utils/storage-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-keys.d.ts","sourceRoot":"","sources":["../../src/utils/storage-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAKR;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IAEf,8CAA8C;IAC9C,UAAU,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEtD,iCAAiC;IACjC,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,eAAe,EACxB,OAAO,GAAE;IACP,yEAAyE;IACzE,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,6FAA6F;IAC7F,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9E,GACL,OAAO,CAAC,eAAe,CAAC,CAsH1B;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;IACvB,8CAA8C;;IAG9C,oDAAoD;;IAGpD,yDAAyD;;IAGzD,6CAA6C;;IAG7C,uDAAuD;;IAGvD,iDAAiD;;IAGjD,6CAA6C;;CAErC,CAAC"}

package/dist/utils/storage-keys.js

@@ -0,0 +1,217 @@
+"use strict";
+/**
+ * Storage Key Migration Utilities
+ *
+ * Provides utilities for migrating from old storage key formats to new composite formats.
+ * This supports Phase 3 Task 2 (StorageService) and Phase 4 (User DID identity linking).
+ *
+ * @package @kya-os/mcp-i-core
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STORAGE_KEYS = void 0;
+exports.legacyDelegationKey = legacyDelegationKey;
+exports.compositeDelegationKey = compositeDelegationKey;
+exports.sessionKey = sessionKey;
+exports.userDidKey = userDidKey;
+exports.oauthIdentityKey = oauthIdentityKey;
+exports.verificationCacheKey = verificationCacheKey;
+exports.nonceKey = nonceKey;
+exports.migrateDelegationKeys = migrateDelegationKeys;
+/**
+ * Legacy storage key format (agent-only, causes multi-tenant conflicts)
+ * Format: `agent:${agentDid}:delegation`
+ */
+function legacyDelegationKey(agentDid) {
+    return `agent:${agentDid}:delegation`;
+}
+/**
+ * New composite storage key format (user+agent scoped, prevents conflicts)
+ * Format: `delegation:user:${userDid}:agent:${agentDid}:project:${projectId}`
+ *
+ * Note: projectId is optional for backward compatibility
+ */
+function compositeDelegationKey(userDid, agentDid, projectId) {
+    if (projectId) {
+        return `delegation:user:${userDid}:agent:${agentDid}:project:${projectId}`;
+    }
+    return `delegation:user:${userDid}:agent:${agentDid}`;
+}
+/**
+ * Session cache key format
+ * Format: `session:${sessionId}`
+ */
+function sessionKey(sessionId) {
+    return `session:${sessionId}`;
+}
+/**
+ * User DID storage key format
+ * Format: `userDid:oauth:${provider}:${subject}`
+ */
+function userDidKey(provider, subject) {
+    return `userDid:oauth:${provider}:${subject}`;
+}
+/**
+ * OAuth identity mapping key format
+ * Format: `oauth:${provider}:${subject}`
+ */
+function oauthIdentityKey(provider, subject) {
+    return `oauth:${provider}:${subject}`;
+}
+/**
+ * Verification cache key format
+ * Format: `verified:${tokenHash}`
+ */
+function verificationCacheKey(tokenHash) {
+    return `verified:${tokenHash}`;
+}
+/**
+ * Nonce tracking key format
+ * Format: `nonce:${nonce}`
+ */
+function nonceKey(nonce) {
+    return `nonce:${nonce}`;
+}
+/**
+ * Migrate delegation keys from legacy format to composite format
+ *
+ * This function:
+ * 1. Finds all legacy keys (`agent:${did}:delegation`)
+ * 2. Attempts to extract userDid from session data or OAuth mappings
+ * 3. Creates new composite keys (`delegation:user:${userDid}:agent:${agentDid}`)
+ * 4. Copies values to new keys
+ * 5. Optionally deletes old keys (dry-run mode available)
+ *
+ * @param storage - Storage provider instance
+ * @param options - Migration options
+ * @returns Migration result with statistics
+ */
+async function migrateDelegationKeys(storage, options = {}) {
+    const result = {
+        migrated: 0,
+        failed: 0,
+        migrations: [],
+        errors: [],
+    };
+    try {
+        // Find all legacy delegation keys
+        const legacyKeys = await storage.list('agent:');
+        const delegationKeys = legacyKeys.filter((key) => key.match(/^agent:[^:]+:delegation$/));
+        console.log(`Found ${delegationKeys.length} legacy delegation keys to migrate`);
+        for (const oldKey of delegationKeys) {
+            try {
+                // Extract agentDid from key: `agent:${agentDid}:delegation`
+                const match = oldKey.match(/^agent:([^:]+):delegation$/);
+                if (!match) {
+                    result.errors.push({
+                        key: oldKey,
+                        error: 'Invalid legacy key format',
+                    });
+                    result.failed++;
+                    continue;
+                }
+                const agentDid = match[1];
+                // Get the value from old key
+                const value = await storage.get(oldKey);
+                if (!value) {
+                    // Key exists but has no value - skip
+                    continue;
+                }
+                // Try to resolve userDid
+                let userDid = null;
+                let sessionId = undefined;
+                // First, attempt to extract from session data to get both userDid and sessionId
+                const sessionKeys = await storage.list('session:');
+                for (const sessionKey of sessionKeys) {
+                    const sessionData = await storage.get(sessionKey);
+                    if (sessionData) {
+                        try {
+                            const parsed = JSON.parse(sessionData);
+                            if (parsed.userDid && parsed.agentDid === agentDid) {
+                                userDid = parsed.userDid;
+                                // Extract sessionId from key: `session:${sessionId}`
+                                const sessionMatch = sessionKey.match(/^session:(.+)$/);
+                                if (sessionMatch) {
+                                    sessionId = sessionMatch[1];
+                                }
+                                break;
+                            }
+                        }
+                        catch {
+                            // Not JSON, skip
+                        }
+                    }
+                }
+                // If custom resolver provided, use it (with sessionId context if available)
+                if (options.resolveUserDid) {
+                    const resolvedUserDid = await options.resolveUserDid(agentDid, sessionId);
+                    // Use resolved userDid if available, otherwise fall back to extracted one
+                    if (resolvedUserDid) {
+                        userDid = resolvedUserDid;
+                    }
+                }
+                if (!userDid) {
+                    // Cannot migrate without userDid - skip for now
+                    result.errors.push({
+                        key: oldKey,
+                        error: 'Cannot resolve userDid - skipping migration',
+                    });
+                    result.failed++;
+                    continue;
+                }
+                // Create new composite key
+                const newKey = compositeDelegationKey(userDid, agentDid);
+                if (options.dryRun) {
+                    // Just record what would be migrated
+                    result.migrations.push({ oldKey, newKey });
+                    result.migrated++;
+                }
+                else {
+                    // Copy value to new key
+                    await storage.set(newKey, value);
+                    result.migrations.push({ oldKey, newKey });
+                    result.migrated++;
+                    // Optionally delete old key
+                    if (options.deleteOldKeys) {
+                        await storage.delete(oldKey);
+                    }
+                }
+            }
+            catch (error) {
+                result.errors.push({
+                    key: oldKey,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                result.failed++;
+            }
+        }
+    }
+    catch (error) {
+        result.errors.push({
+            key: 'migration',
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+    return result;
+}
+/**
+ * Storage key constants for consistent namespace management
+ *
+ * These match the Phase 4 storage key architecture.
+ */
+exports.STORAGE_KEYS = {
+    /** User DID storage (persistent - 90 days) */
+    userDid: userDidKey,
+    /** OAuth identity mapping (persistent - 90 days) */
+    oauthIdentity: oauthIdentityKey,
+    /** User+Agent delegation tokens (persistent - 7 days) */
+    delegation: compositeDelegationKey,
+    /** Session cache (temporary - 30 minutes) */
+    session: sessionKey,
+    /** Legacy delegation format (deprecated - 24 hours) */
+    legacyDelegation: legacyDelegationKey,
+    /** Verification cache (temporary - 5 minutes) */
+    verificationCache: verificationCacheKey,
+    /** Nonce tracking (temporary - 5 minutes) */
+    nonce: nonceKey,
+};
+//# sourceMappingURL=storage-keys.js.map

package/dist/utils/storage-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-keys.js","sourceRoot":"","sources":["../../src/utils/storage-keys.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAMH,kDAEC;AAQD,wDASC;AAMD,gCAEC;AAMD,gCAEC;AAMD,4CAEC;AAMD,oDAEC;AAMD,4BAEC;AA6CD,sDAkIC;AA9OD;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,OAAO,SAAS,QAAQ,aAAa,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CACpC,OAAe,EACf,QAAgB,EAChB,SAAkB;IAElB,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,mBAAmB,OAAO,UAAU,QAAQ,YAAY,SAAS,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,mBAAmB,OAAO,UAAU,QAAQ,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,SAAiB;IAC1C,OAAO,WAAW,SAAS,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,QAAgB,EAAE,OAAe;IAC1D,OAAO,iBAAiB,QAAQ,IAAI,OAAO,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,OAAe;IAChE,OAAO,SAAS,QAAQ,IAAI,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,SAAiB;IACpD,OAAO,YAAY,SAAS,EAAE,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAgB,QAAQ,CAAC,KAAa;IACpC,OAAO,SAAS,KAAK,EAAE,CAAC;AAC1B,CAAC;AA+BD;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,qBAAqB,CACzC,OAAwB,EACxB,UASI,EAAE;IAEN,MAAM,MAAM,GAAoB;QAC9B,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,CAAC;QACT,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,IAAI,CAAC;QACH,kCAAkC;QAClC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/C,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CACtC,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,SAAS,cAAc,CAAC,MAAM,oCAAoC,CAAC,CAAC;QAEhF,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,4DAA4D;gBAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACzD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;wBACjB,GAAG,EAAE,MAAM;wBACX,KAAK,EAAE,2BAA2B;qBACnC,CAAC,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAE1B,6BAA6B;gBAC7B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,qCAAqC;oBACrC,SAAS;gBACX,CAAC;gBAED,yBAAyB;gBACzB,IAAI,OAAO,GAAkB,IAAI,CAAC;gBAClC,IAAI,SAAS,GAAuB,SAAS,CAAC;gBAE9C,gFAAgF;gBAChF,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACnD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;oBACrC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClD,IAAI,WAAW,EAAE,CAAC;wBAChB,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;4BACvC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gCACnD,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;gCACzB,qDAAqD;gCACrD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gCACxD,IAAI,YAAY,EAAE,CAAC;oCACjB,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gCAC9B,CAAC;gCACD,MAAM;4BACR,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,iBAAiB;wBACnB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,4EAA4E;gBAC5E,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;oBAC3B,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAC1E,0EAA0E;oBAC1E,IAAI,eAAe,EAAE,CAAC;wBACpB,OAAO,GAAG,eAAe,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,gDAAgD;oBAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;wBACjB,GAAG,EAAE,MAAM;wBACX,KAAK,EAAE,6CAA6C;qBACrD,CAAC,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBAED,2BAA2B;gBAC3B,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAEzD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,qCAAqC;oBACrC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC3C,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,wBAAwB;oBACxB,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;oBACjC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC3C,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAElB,4BAA4B;oBAC5B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;wBAC1B,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oBACjB,GAAG,EAAE,MAAM;oBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACjB,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACU,QAAA,YAAY,GAAG;IAC1B,8CAA8C;IAC9C,OAAO,EAAE,UAAU;IAEnB,oDAAoD;IACpD,aAAa,EAAE,gBAAgB;IAE/B,yDAAyD;IACzD,UAAU,EAAE,sBAAsB;IAElC,6CAA6C;IAC7C,OAAO,EAAE,UAAU;IAEnB,uDAAuD;IACvD,gBAAgB,EAAE,mBAAmB;IAErC,iDAAiD;IACjD,iBAAiB,EAAE,oBAAoB;IAEvC,6CAA6C;IAC7C,KAAK,EAAE,QAAQ;CACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-core",
-  "version": "1.1.13-canary.1",
+  "version": "1.1.14-canary.1",
   "description": "Core provider-based architecture for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -43,7 +43,8 @@
   ],
   "dependencies": {
     "@kya-os/contracts": "1.5.2-canary.0",
-    "@modelcontextprotocol/sdk": "^1.11.4"
+    "@modelcontextprotocol/sdk": "^1.11.4",
+    "json-canonicalize": "^2.0.0"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",