@kya-os/mcp-i-core 1.7.0 → 1.8.1

package/dist/utils/cors.d.ts

@@ -1,44 +0,0 @@
-/**
- * CORS Header Utilities
- *
- * Centralized CORS header management for MCP-I services.
- * Includes Vary: Origin for cache optimization when origin scoping is implemented.
- */
-/**
- * Type-safe CORS headers
- * Compatible with Response headers and HeadersInit
- */
-export type CORSHeaders = Record<string, string>;
-/**
- * Standard CORS headers for well-known endpoints (.well-known/*)
- * Includes Vary: Origin for future cache optimization when origin scoping is added
- */
-export declare const WELL_KNOWN_CORS_HEADERS: CORSHeaders;
-/**
- * CORS headers for MCP protocol responses
- * Includes exposed headers for session management
- */
-export declare const MCP_CORS_HEADERS: CORSHeaders;
-/**
- * CORS preflight headers for OPTIONS requests
- * Comprehensive header allowlist for MCP protocol
- */
-export declare const PREFLIGHT_CORS_HEADERS: CORSHeaders;
-/**
- * CORS headers for OAuth endpoints
- * Includes additional headers required for OAuth 2.0 flows
- */
-export declare const OAUTH_CORS_HEADERS: CORSHeaders;
-/**
- * Merge CORS headers with existing headers
- * Ensures CORS headers take precedence
- */
-export declare function mergeCORSHeaders(existingHeaders: Record<string, string>, corsHeaders?: CORSHeaders): Record<string, string>;
-/**
- * Apply CORS headers to an Express Response object
- * For use with Express middleware
- */
-export declare function applyCORSHeaders(res: {
-    setHeader: (name: string, value: string) => void;
-}, corsHeaders?: CORSHeaders): void;
-//# sourceMappingURL=cors.d.ts.map

package/dist/utils/cors.js

@@ -1,71 +0,0 @@
-"use strict";
-/**
- * CORS Header Utilities
- *
- * Centralized CORS header management for MCP-I services.
- * Includes Vary: Origin for cache optimization when origin scoping is implemented.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAUTH_CORS_HEADERS = exports.PREFLIGHT_CORS_HEADERS = exports.MCP_CORS_HEADERS = exports.WELL_KNOWN_CORS_HEADERS = void 0;
-exports.mergeCORSHeaders = mergeCORSHeaders;
-exports.applyCORSHeaders = applyCORSHeaders;
-/**
- * Standard CORS headers for well-known endpoints (.well-known/*)
- * Includes Vary: Origin for future cache optimization when origin scoping is added
- */
-exports.WELL_KNOWN_CORS_HEADERS = {
-    'Access-Control-Allow-Origin': '*',
-    'Vary': 'Origin'
-};
-/**
- * CORS headers for MCP protocol responses
- * Includes exposed headers for session management
- */
-exports.MCP_CORS_HEADERS = {
-    'Access-Control-Allow-Origin': '*',
-    'Access-Control-Expose-Headers': 'mcp-session-id',
-    'Vary': 'Origin'
-};
-/**
- * CORS preflight headers for OPTIONS requests
- * Comprehensive header allowlist for MCP protocol
- */
-exports.PREFLIGHT_CORS_HEADERS = {
-    'Access-Control-Allow-Origin': '*',
-    'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
-    'Access-Control-Allow-Headers': 'Content-Type, Authorization, mcp-session-id, mcp-protocol-version',
-    'Vary': 'Origin'
-};
-/**
- * CORS headers for OAuth endpoints
- * Includes additional headers required for OAuth 2.0 flows
- */
-exports.OAUTH_CORS_HEADERS = {
-    'Access-Control-Allow-Origin': '*',
-    'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
-    'Access-Control-Allow-Headers': 'Content-Type, Authorization, Accept, mcp-protocol-version',
-    'Access-Control-Expose-Headers': 'Content-Type',
-    'Vary': 'Origin'
-};
-/**
- * Merge CORS headers with existing headers
- * Ensures CORS headers take precedence
- */
-function mergeCORSHeaders(existingHeaders, corsHeaders = exports.WELL_KNOWN_CORS_HEADERS) {
-    return {
-        ...existingHeaders,
-        ...corsHeaders
-    };
-}
-/**
- * Apply CORS headers to an Express Response object
- * For use with Express middleware
- */
-function applyCORSHeaders(res, corsHeaders = exports.MCP_CORS_HEADERS) {
-    Object.entries(corsHeaders).forEach(([key, value]) => {
-        if (value !== undefined) {
-            res.setHeader(key, value);
-        }
-    });
-}
-//# sourceMappingURL=cors.js.map

package/dist/utils/index.d.ts

@@ -1,8 +0,0 @@
-/**
- * Utility exports
- */
-export * from "./cors";
-export * from "./base64";
-export * from "./storage-keys";
-export * from "./did-helpers";
-//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.js

@@ -1,24 +0,0 @@
-"use strict";
-/**
- * Utility exports
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./cors"), exports);
-__exportStar(require("./base64"), exports);
-__exportStar(require("./storage-keys"), exports);
-__exportStar(require("./did-helpers"), exports);
-//# sourceMappingURL=index.js.map

package/dist/utils/storage-keys.d.ts

@@ -1,120 +0,0 @@
-/**
- * Storage Key Migration Utilities
- *
- * Provides utilities for migrating from old storage key formats to new composite formats.
- * This supports Phase 3 Task 2 (StorageService) and Phase 4 (User DID identity linking).
- *
- * @package @kya-os/mcp-i-core
- */
-/**
- * Legacy storage key format (agent-only, causes multi-tenant conflicts)
- * Format: `agent:${agentDid}:delegation`
- */
-export declare function legacyDelegationKey(agentDid: string): string;
-/**
- * New composite storage key format (user+agent scoped, prevents conflicts)
- * Format: `delegation:user:${userDid}:agent:${agentDid}:project:${projectId}`
- *
- * Note: projectId is optional for backward compatibility
- */
-export declare function compositeDelegationKey(userDid: string, agentDid: string, projectId?: string): string;
-/**
- * Session cache key format
- * Format: `session:${sessionId}`
- */
-export declare function sessionKey(sessionId: string): string;
-/**
- * User DID storage key format
- * Format: `userDid:oauth:${provider}:${subject}`
- */
-export declare function userDidKey(provider: string, subject: string): string;
-/**
- * OAuth identity mapping key format
- * Format: `oauth:${provider}:${subject}`
- */
-export declare function oauthIdentityKey(provider: string, subject: string): string;
-/**
- * Verification cache key format
- * Format: `verified:${tokenHash}`
- */
-export declare function verificationCacheKey(tokenHash: string): string;
-/**
- * Nonce tracking key format
- * Format: `nonce:${nonce}`
- */
-export declare function nonceKey(nonce: string): string;
-/**
- * Storage key migration result
- */
-export interface MigrationResult {
-    /** Number of keys migrated */
-    migrated: number;
-    /** Number of keys that failed to migrate */
-    failed: number;
-    /** List of migrated key pairs (old -> new) */
-    migrations: Array<{
-        oldKey: string;
-        newKey: string;
-    }>;
-    /** List of errors encountered */
-    errors: Array<{
-        key: string;
-        error: string;
-    }>;
-}
-/**
- * Storage provider interface for migration operations
- *
- * Matches the base StorageProvider abstract class contract.
- */
-export interface StorageProvider {
-    get(key: string): Promise<string | null>;
-    set(key: string, value: string): Promise<void>;
-    delete(key: string): Promise<void>;
-    exists(key: string): Promise<boolean>;
-    list(prefix?: string): Promise<string[]>;
-}
-/**
- * Migrate delegation keys from legacy format to composite format
- *
- * This function:
- * 1. Finds all legacy keys (`agent:${did}:delegation`)
- * 2. Attempts to extract userDid from session data or OAuth mappings
- * 3. Creates new composite keys (`delegation:user:${userDid}:agent:${agentDid}`)
- * 4. Copies values to new keys
- * 5. Optionally deletes old keys (dry-run mode available)
- *
- * @param storage - Storage provider instance
- * @param options - Migration options
- * @returns Migration result with statistics
- */
-export declare function migrateDelegationKeys(storage: StorageProvider, options?: {
-    /** If true, only report what would be migrated without making changes */
-    dryRun?: boolean;
-    /** If true, delete old keys after successful migration */
-    deleteOldKeys?: boolean;
-    /** Optional userDid resolver function (if not provided, attempts to extract from session) */
-    resolveUserDid?: (agentDid: string, sessionId?: string) => Promise<string | null>;
-}): Promise<MigrationResult>;
-/**
- * Storage key constants for consistent namespace management
- *
- * These match the Phase 4 storage key architecture.
- */
-export declare const STORAGE_KEYS: {
-    /** User DID storage (persistent - 90 days) */
-    readonly userDid: typeof userDidKey;
-    /** OAuth identity mapping (persistent - 90 days) */
-    readonly oauthIdentity: typeof oauthIdentityKey;
-    /** User+Agent delegation tokens (persistent - 7 days) */
-    readonly delegation: typeof compositeDelegationKey;
-    /** Session cache (temporary - 30 minutes) */
-    readonly session: typeof sessionKey;
-    /** Legacy delegation format (deprecated - 24 hours) */
-    readonly legacyDelegation: typeof legacyDelegationKey;
-    /** Verification cache (temporary - 5 minutes) */
-    readonly verificationCache: typeof verificationCacheKey;
-    /** Nonce tracking (temporary - 5 minutes) */
-    readonly nonce: typeof nonceKey;
-};
-//# sourceMappingURL=storage-keys.d.ts.map

package/dist/utils/storage-keys.js

@@ -1,217 +0,0 @@
-"use strict";
-/**
- * Storage Key Migration Utilities
- *
- * Provides utilities for migrating from old storage key formats to new composite formats.
- * This supports Phase 3 Task 2 (StorageService) and Phase 4 (User DID identity linking).
- *
- * @package @kya-os/mcp-i-core
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.STORAGE_KEYS = void 0;
-exports.legacyDelegationKey = legacyDelegationKey;
-exports.compositeDelegationKey = compositeDelegationKey;
-exports.sessionKey = sessionKey;
-exports.userDidKey = userDidKey;
-exports.oauthIdentityKey = oauthIdentityKey;
-exports.verificationCacheKey = verificationCacheKey;
-exports.nonceKey = nonceKey;
-exports.migrateDelegationKeys = migrateDelegationKeys;
-/**
- * Legacy storage key format (agent-only, causes multi-tenant conflicts)
- * Format: `agent:${agentDid}:delegation`
- */
-function legacyDelegationKey(agentDid) {
-    return `agent:${agentDid}:delegation`;
-}
-/**
- * New composite storage key format (user+agent scoped, prevents conflicts)
- * Format: `delegation:user:${userDid}:agent:${agentDid}:project:${projectId}`
- *
- * Note: projectId is optional for backward compatibility
- */
-function compositeDelegationKey(userDid, agentDid, projectId) {
-    if (projectId) {
-        return `delegation:user:${userDid}:agent:${agentDid}:project:${projectId}`;
-    }
-    return `delegation:user:${userDid}:agent:${agentDid}`;
-}
-/**
- * Session cache key format
- * Format: `session:${sessionId}`
- */
-function sessionKey(sessionId) {
-    return `session:${sessionId}`;
-}
-/**
- * User DID storage key format
- * Format: `userDid:oauth:${provider}:${subject}`
- */
-function userDidKey(provider, subject) {
-    return `userDid:oauth:${provider}:${subject}`;
-}
-/**
- * OAuth identity mapping key format
- * Format: `oauth:${provider}:${subject}`
- */
-function oauthIdentityKey(provider, subject) {
-    return `oauth:${provider}:${subject}`;
-}
-/**
- * Verification cache key format
- * Format: `verified:${tokenHash}`
- */
-function verificationCacheKey(tokenHash) {
-    return `verified:${tokenHash}`;
-}
-/**
- * Nonce tracking key format
- * Format: `nonce:${nonce}`
- */
-function nonceKey(nonce) {
-    return `nonce:${nonce}`;
-}
-/**
- * Migrate delegation keys from legacy format to composite format
- *
- * This function:
- * 1. Finds all legacy keys (`agent:${did}:delegation`)
- * 2. Attempts to extract userDid from session data or OAuth mappings
- * 3. Creates new composite keys (`delegation:user:${userDid}:agent:${agentDid}`)
- * 4. Copies values to new keys
- * 5. Optionally deletes old keys (dry-run mode available)
- *
- * @param storage - Storage provider instance
- * @param options - Migration options
- * @returns Migration result with statistics
- */
-async function migrateDelegationKeys(storage, options = {}) {
-    const result = {
-        migrated: 0,
-        failed: 0,
-        migrations: [],
-        errors: [],
-    };
-    try {
-        // Find all legacy delegation keys
-        const legacyKeys = await storage.list("agent:");
-        const delegationKeys = legacyKeys.filter((key) => key.match(/^agent:[^:]+:delegation$/));
-        console.error(`Found ${delegationKeys.length} legacy delegation keys to migrate`);
-        for (const oldKey of delegationKeys) {
-            try {
-                // Extract agentDid from key: `agent:${agentDid}:delegation`
-                const match = oldKey.match(/^agent:([^:]+):delegation$/);
-                if (!match) {
-                    result.errors.push({
-                        key: oldKey,
-                        error: "Invalid legacy key format",
-                    });
-                    result.failed++;
-                    continue;
-                }
-                const agentDid = match[1];
-                // Get the value from old key
-                const value = await storage.get(oldKey);
-                if (!value) {
-                    // Key exists but has no value - skip
-                    continue;
-                }
-                // Try to resolve userDid
-                let userDid = null;
-                let sessionId = undefined;
-                // First, attempt to extract from session data to get both userDid and sessionId
-                const sessionKeys = await storage.list("session:");
-                for (const sessionKey of sessionKeys) {
-                    const sessionData = await storage.get(sessionKey);
-                    if (sessionData) {
-                        try {
-                            const parsed = JSON.parse(sessionData);
-                            if (parsed.userDid && parsed.agentDid === agentDid) {
-                                userDid = parsed.userDid;
-                                // Extract sessionId from key: `session:${sessionId}`
-                                const sessionMatch = sessionKey.match(/^session:(.+)$/);
-                                if (sessionMatch) {
-                                    sessionId = sessionMatch[1];
-                                }
-                                break;
-                            }
-                        }
-                        catch {
-                            // Not JSON, skip
-                        }
-                    }
-                }
-                // If custom resolver provided, use it (with sessionId context if available)
-                if (options.resolveUserDid) {
-                    const resolvedUserDid = await options.resolveUserDid(agentDid, sessionId);
-                    // Use resolved userDid if available, otherwise fall back to extracted one
-                    if (resolvedUserDid) {
-                        userDid = resolvedUserDid;
-                    }
-                }
-                if (!userDid) {
-                    // Cannot migrate without userDid - skip for now
-                    result.errors.push({
-                        key: oldKey,
-                        error: "Cannot resolve userDid - skipping migration",
-                    });
-                    result.failed++;
-                    continue;
-                }
-                // Create new composite key
-                const newKey = compositeDelegationKey(userDid, agentDid);
-                if (options.dryRun) {
-                    // Just record what would be migrated
-                    result.migrations.push({ oldKey, newKey });
-                    result.migrated++;
-                }
-                else {
-                    // Copy value to new key
-                    await storage.set(newKey, value);
-                    result.migrations.push({ oldKey, newKey });
-                    result.migrated++;
-                    // Optionally delete old key
-                    if (options.deleteOldKeys) {
-                        await storage.delete(oldKey);
-                    }
-                }
-            }
-            catch (error) {
-                result.errors.push({
-                    key: oldKey,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-                result.failed++;
-            }
-        }
-    }
-    catch (error) {
-        result.errors.push({
-            key: "migration",
-            error: error instanceof Error ? error.message : String(error),
-        });
-    }
-    return result;
-}
-/**
- * Storage key constants for consistent namespace management
- *
- * These match the Phase 4 storage key architecture.
- */
-exports.STORAGE_KEYS = {
-    /** User DID storage (persistent - 90 days) */
-    userDid: userDidKey,
-    /** OAuth identity mapping (persistent - 90 days) */
-    oauthIdentity: oauthIdentityKey,
-    /** User+Agent delegation tokens (persistent - 7 days) */
-    delegation: compositeDelegationKey,
-    /** Session cache (temporary - 30 minutes) */
-    session: sessionKey,
-    /** Legacy delegation format (deprecated - 24 hours) */
-    legacyDelegation: legacyDelegationKey,
-    /** Verification cache (temporary - 5 minutes) */
-    verificationCache: verificationCacheKey,
-    /** Nonce tracking (temporary - 5 minutes) */
-    nonce: nonceKey,
-};
-//# sourceMappingURL=storage-keys.js.map