@kya-os/mcp-i-core 1.3.7 → 1.3.9-canary.clientinfo.20251126121212

package/src/services/session-registration.service.ts

@@ -109,9 +109,55 @@ export class SessionRegistrationService {
         sessionId,
         agentDid: request.agent_did,
         clientName: request.client_info.name,
+        clientVersion: request.client_info.version,
+        hasClientIdentity: !!request.client_identity,
         url,
       });
 
+      // ✅ EMPIRICAL PROOF: Prepare request headers
+      // Try Authorization: Bearer first (same as proofs endpoint)
+      // If that fails, AgentShield may need X-AgentShield-Key instead
+      const requestHeaders = {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${this.config.apiKey}`, // Use same auth as proofs endpoint
+      };
+
+      // ✅ EMPIRICAL PROOF: Log exact request details (sanitized for security)
+      const sanitizedHeaders = {
+        ...requestHeaders,
+        Authorization: `Bearer ${this.config.apiKey.slice(0, 8)}...${this.config.apiKey.slice(-4)}`, // Show first 8 and last 4 chars
+      };
+
+      const sanitizedBody = {
+        session_id: request.session_id,
+        agent_did: request.agent_did,
+        project_id: request.project_id,
+        created_at: request.created_at,
+        client_info: request.client_info,
+        client_identity: request.client_identity,
+        server_did: request.server_did,
+        ttl_minutes: request.ttl_minutes,
+      };
+
+      this.config.logger(
+        "[SessionRegistration] 🔍 EMPIRICAL DEBUG - Request details",
+        {
+          url,
+          method: "POST",
+          headers: sanitizedHeaders,
+          headerKeys: Object.keys(requestHeaders),
+          authHeaderPresent: !!requestHeaders["Authorization"],
+          authHeaderName: "Authorization",
+          authHeaderFormat: requestHeaders["Authorization"]?.startsWith(
+            "Bearer "
+          )
+            ? "Bearer"
+            : "Other",
+          body: sanitizedBody,
+          bodySize: JSON.stringify(request).length,
+        }
+      );
+
       // Make the request with timeout
       const controller = new AbortController();
       const timeoutId = setTimeout(
@@ -122,47 +168,89 @@ export class SessionRegistrationService {
       try {
         const response = await this.config.fetchProvider.fetch(url, {
           method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            Authorization: `Bearer ${this.config.apiKey}`,
-          },
+          headers: requestHeaders,
           body: JSON.stringify(request),
           signal: controller.signal,
         });
 
         clearTimeout(timeoutId);
 
+        // ✅ EMPIRICAL PROOF: Capture exact response details
+        const responseHeaders: Record<string, string> = {};
+        response.headers.forEach((value, key) => {
+          responseHeaders[key] = value;
+        });
+
+        const responseText = await response
+          .text()
+          .catch(() => "Failed to read response");
+        let responseBody: unknown;
+        try {
+          responseBody = JSON.parse(responseText);
+        } catch {
+          responseBody = responseText;
+        }
+
+        // ✅ EMPIRICAL PROOF: Log exact response details
+        this.config.logger(
+          "[SessionRegistration] 🔍 EMPIRICAL DEBUG - Response details",
+          {
+            status: response.status,
+            statusText: response.statusText,
+            ok: response.ok,
+            headers: responseHeaders,
+            body: responseBody,
+            bodyLength: responseText.length,
+            clientName: request.client_info.name,
+            // ✅ DEBUG: Include request ID from response headers for AgentShield support
+            requestId:
+              responseHeaders["x-request-id"] ||
+              responseHeaders["X-Request-ID"] ||
+              "not-provided",
+            // ✅ DEBUG: Full response text for AgentShield team
+            fullResponseText: responseText,
+          }
+        );
+
         if (!response.ok) {
           // Log error but don't throw - this is fire-and-forget
-          const errorText = await response.text().catch(() => "Unknown error");
           this.config.logger("[SessionRegistration] Registration failed", {
             sessionId,
             status: response.status,
-            error: errorText,
+            error: responseText,
+            // ✅ DEBUG: EMPIRICAL: Include full response details
+            responseHeaders,
+            responseBody,
+            clientName: request.client_info.name,
+            // ✅ DEBUG: Request ID for AgentShield support ticket
+            requestId:
+              responseHeaders["x-request-id"] ||
+              responseHeaders["X-Request-ID"] ||
+              "not-provided",
+            // ✅ DEBUG: Full request body for AgentShield team
+            fullRequestBody: JSON.stringify(request, null, 2),
           });
           return {
             success: false,
             sessionId,
-            error: `HTTP ${response.status}: ${errorText}`,
+            error: `HTTP ${response.status}: ${responseText}`,
           };
         }
 
-        // Parse response
-        const responseData = (await response.json()) as {
-          data?: RegisterSessionResponse;
-        } & RegisterSessionResponse;
+        // Parse response (using already-captured responseBody)
+        const responseData = responseBody as
+          | { data?: RegisterSessionResponse }
+          | RegisterSessionResponse;
         const parseResult = registerSessionResponseSchema.safeParse(
-          responseData.data || responseData
+          (responseData as { data?: RegisterSessionResponse }).data ||
+            responseData
         );
 
         if (!parseResult.success) {
-          this.config.logger(
-            "[SessionRegistration] Invalid response format",
-            {
-              sessionId,
-              response: responseData,
-            }
-          );
+          this.config.logger("[SessionRegistration] Invalid response format", {
+            sessionId,
+            response: responseData,
+          });
           // Still consider it a success if we got a 200 OK
           return { success: true, sessionId };
         }
@@ -170,6 +258,12 @@ export class SessionRegistrationService {
         this.config.logger("[SessionRegistration] Session registered", {
           sessionId,
           registered: parseResult.data.registered,
+          // ✅ DEBUG: Include full response for AgentShield debugging
+          responseData: parseResult.data,
+          requestId:
+            responseHeaders["x-request-id"] ||
+            responseHeaders["X-Request-ID"] ||
+            "not-provided",
         });
 
         return { success: true, sessionId };
@@ -187,8 +281,7 @@ export class SessionRegistrationService {
       }
 
       // Log any other error
-      const errorMsg =
-        error instanceof Error ? error.message : "Unknown error";
+      const errorMsg = error instanceof Error ? error.message : "Unknown error";
       this.config.logger("[SessionRegistration] Unexpected error", {
         sessionId,
         error: errorMsg,
@@ -210,10 +303,13 @@ export class SessionRegistrationService {
     this.registerSession(request).catch((error) => {
       // This should never happen since registerSession catches all errors,
       // but just in case
-      this.config.logger("[SessionRegistration] Background registration failed", {
-        sessionId: request.session_id,
-        error: error instanceof Error ? error.message : "Unknown error",
-      });
+      this.config.logger(
+        "[SessionRegistration] Background registration failed",
+        {
+          sessionId: request.session_id,
+          error: error instanceof Error ? error.message : "Unknown error",
+        }
+      );
     });
   }
 }
@@ -248,4 +344,3 @@ export function createSessionRegistrationService(options: {
     logger: options.logger,
   });
 }
-

package/.claude/settings.local.json

@@ -1,9 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Read(//Users/dylanhobbs/Documents/@kya-os/xmcp-i/packages/contracts/**)"
-    ],
-    "deny": [],
-    "ask": []
-  }
-}