@kya-os/mcp 1.7.0 → 1.9.0

package/dist/middleware/with-kya-os.delegation-verify.js

@@ -0,0 +1,165 @@
+/**
+ * KYA-OS Middleware — delegation verification plumbing.
+ *
+ * Builds the DID resolver, the embedded-proof signature verifier, the
+ * `DelegationCredentialVerifier`, and the framework-agnostic chain-validation
+ * adapter (chain-enforcement.ts) once per middleware instance. Extracted from
+ * `wrapWithDelegation` so the gate module holds only the request flow.
+ */
+import { createDidKeyResolver } from "../delegation/did-key-resolver.js";
+import { createDidWebResolver } from "../delegation/did-web-resolver.js";
+import { buildDidResolverRegistry, } from "../delegation/did-resolver-registry.js";
+import { getDidMethod } from "../utils/did-helpers.js";
+import { DelegationCredentialVerifier, } from "../delegation/vc-verifier.js";
+import { validateDelegationChain as validateDelegationChainCore } from "../delegation/chain-enforcement.js";
+import { RuntimeFetchProvider } from "../providers/runtime-fetch.js";
+import { canonicalizeJSON } from "../delegation/utils.js";
+import { base64urlDecodeToBytes, bytesToBase64 } from "../utils/base64.js";
+import { createNeedsAuthorizationError, } from "../types/protocol.js";
+import { logger } from "../logging/index.js";
+import { sanitizeForMessage } from "./with-kya-os.helpers.js";
+export function createDelegationVerification(deps) {
+    const { identity, cryptoProvider, delegationConfig } = deps;
+    const didKeyResolver = createDidKeyResolver();
+    const fetchProvider = delegationConfig?.fetchProvider ??
+        (typeof globalThis.fetch === "function"
+            ? new RuntimeFetchProvider()
+            : undefined);
+    const didWebResolver = fetchProvider
+        ? createDidWebResolver(fetchProvider)
+        : undefined;
+    const configuredDidResolvers = buildDidResolverRegistry(delegationConfig?.didResolvers, fetchProvider);
+    const didResolver = {
+        async resolve(did) {
+            const customResolver = delegationConfig?.didResolver;
+            if (customResolver) {
+                const resolved = await customResolver.resolve(did);
+                if (resolved) {
+                    return resolved;
+                }
+            }
+            const method = getDidMethod(did);
+            const configuredResolver = method ? configuredDidResolvers[method] : undefined;
+            if (configuredResolver) {
+                try {
+                    const resolved = await configuredResolver.resolve(did);
+                    if (resolved) {
+                        return resolved;
+                    }
+                }
+                catch {
+                    return null;
+                }
+            }
+            if (did.startsWith("did:key:")) {
+                return didKeyResolver.resolve(did);
+            }
+            if (did.startsWith("did:web:")) {
+                return didWebResolver?.resolve(did) ?? null;
+            }
+            return null;
+        },
+    };
+    const signatureVerifier = async (vc, publicKeyJwk) => {
+        const proof = vc.proof;
+        if (!proof) {
+            return { valid: false, reason: "Missing proof" };
+        }
+        const proofValue = proof["proofValue"];
+        if (!proofValue) {
+            return { valid: false, reason: "Missing proofValue in proof" };
+        }
+        // Reconstruct the unsigned VC (without proof) for signature verification
+        const vcRecord = vc;
+        const vcWithoutProof = {};
+        for (const [k, v] of Object.entries(vcRecord)) {
+            if (k !== "proof")
+                vcWithoutProof[k] = v;
+        }
+        const canonical = canonicalizeJSON(vcWithoutProof);
+        const data = new TextEncoder().encode(canonical);
+        // Decode signature from base64url proof value
+        const sigBytes = base64urlDecodeToBytes(proofValue);
+        // Get public key from JWK (x is base64url-encoded raw key bytes)
+        const jwk = publicKeyJwk;
+        if (!jwk.x) {
+            return { valid: false, reason: "No x field in publicKeyJwk" };
+        }
+        // Convert base64url key to standard base64 for the crypto provider
+        const pubKeyBytes = base64urlDecodeToBytes(jwk.x);
+        const pubKeyBase64 = bytesToBase64(pubKeyBytes);
+        const valid = await cryptoProvider.verify(data, sigBytes, pubKeyBase64);
+        return {
+            valid,
+            reason: valid ? undefined : "Signature verification failed",
+        };
+    };
+    const verifier = new DelegationCredentialVerifier({
+        didResolver,
+        signatureVerifier,
+        statusListResolver: delegationConfig?.statusListResolver,
+    });
+    const buildDelegationErrorResponse = (error, reason) => ({
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify({ error, reason: sanitizeForMessage(reason) }),
+            },
+        ],
+        isError: true,
+    });
+    const validateDelegationChain = (leafCredential, options) => validateDelegationChainCore(leafCredential, {
+        serverDid: identity.did,
+        verifier,
+        resolveDelegationChain: delegationConfig?.resolveDelegationChain,
+        statusListConfigured: !!delegationConfig?.statusListResolver,
+        revocationChecker: delegationConfig?.revocationChecker,
+    }, options);
+    async function buildNeedsAuthorizationChallenge(toolName, config) {
+        const tokenBytes = await cryptoProvider.randomBytes(16);
+        const hex = Array.from(tokenBytes)
+            .map((b) => b.toString(16).padStart(2, "0"))
+            .join("");
+        const resumeToken = [
+            hex.slice(0, 8),
+            hex.slice(8, 12),
+            hex.slice(12, 16),
+            hex.slice(16, 20),
+            hex.slice(20),
+        ].join("-");
+        const expiresAt = Math.floor(Date.now() / 1000) + 300;
+        const authError = createNeedsAuthorizationError({
+            message: `Tool "${toolName}" requires delegation with scope: ${config.scopeId}`,
+            authorizationUrl: config.consentUrl,
+            resumeToken,
+            expiresAt,
+            scopes: [config.scopeId],
+        });
+        // config.formatChallenge lets a server render the challenge (e.g. a markdown
+        // link for LLM clients) BEFORE it is signed, so the proof binds exactly what
+        // the client receives. A throwing hook falls back to the default challenge.
+        const defaultChallengeContent = [
+            { type: "text", text: JSON.stringify(authError) },
+        ];
+        let challengeContent = defaultChallengeContent;
+        if (config.formatChallenge) {
+            try {
+                challengeContent = config.formatChallenge(authError);
+            }
+            catch (error) {
+                logger.error("[kya-os] formatChallenge threw; using the default challenge", {
+                    tool: toolName,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                challengeContent = defaultChallengeContent;
+            }
+        }
+        return { challengeContent, message: authError.message };
+    }
+    return {
+        validateDelegationChain,
+        buildDelegationErrorResponse,
+        buildNeedsAuthorizationChallenge,
+    };
+}
+//# sourceMappingURL=with-kya-os.delegation-verify.js.map

package/dist/middleware/with-kya-os.delegation-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.delegation-verify.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os.delegation-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EACL,wBAAwB,GACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,4BAA4B,GAG7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,IAAI,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EACL,6BAA6B,GAG9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAG7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA0C9D,MAAM,UAAU,4BAA4B,CAC1C,IAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAE5D,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,MAAM,aAAa,GACjB,gBAAgB,EAAE,aAAa;QAC/B,CAAC,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU;YACrC,CAAC,CAAC,IAAI,oBAAoB,EAAE;YAC5B,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,cAAc,GAAG,aAAa;QAClC,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,sBAAsB,GAAG,wBAAwB,CACrD,gBAAgB,EAAE,YAAY,EAC9B,aAAa,CACd,CAAC;IACF,MAAM,WAAW,GAAgB;QAC/B,KAAK,CAAC,OAAO,CAAC,GAAW;YACvB,MAAM,cAAc,GAAG,gBAAgB,EAAE,WAAW,CAAC;YACrD,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACnD,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,kBAAkB,GAAG,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACvD,IAAI,QAAQ,EAAE,CAAC;wBACb,OAAO,QAAQ,CAAC;oBAClB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAC9C,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IAEF,MAAM,iBAAiB,GAAkC,KAAK,EAC5D,EAAwB,EACxB,YAAqB,EACyB,EAAE;QAChD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAuB,CAAC;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QACjE,CAAC;QAED,yEAAyE;QACzE,MAAM,QAAQ,GAAG,EAA6B,CAAC;QAC/C,MAAM,cAAc,GAA4B,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,OAAO;gBAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEjD,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAEpD,iEAAiE;QACjE,MAAM,GAAG,GAAG,YAA8B,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAChE,CAAC;QAED,mEAAmE;QACnE,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAEhD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO;YACL,KAAK;YACL,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B;SAC5D,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,4BAA4B,CAAC;QAChD,WAAW;QACX,iBAAiB;QACjB,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB;KACzD,CAAC,CAAC;IAEH,MAAM,4BAA4B,GAAG,CACnC,KAAa,EACb,MAAc,EACyB,EAAE,CAAC,CAAC;QAC3C,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;aACpE;SACF;QACD,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,CAC9B,cAAoC,EACpC,OAAqC,EACS,EAAE,CAChD,2BAA2B,CACzB,cAAc,EACd;QACE,SAAS,EAAE,QAAQ,CAAC,GAAG;QACvB,QAAQ;QACR,sBAAsB,EAAE,gBAAgB,EAAE,sBAAsB;QAChE,oBAAoB,EAAE,CAAC,CAAC,gBAAgB,EAAE,kBAAkB;QAC5D,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB;KACvD,EACD,OAAO,CACR,CAAC;IAEJ,KAAK,UAAU,gCAAgC,CAC7C,QAAgB,EAChB,MAA4B;QAK5B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;SACd,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QAEtD,MAAM,SAAS,GAAG,6BAA6B,CAAC;YAC9C,OAAO,EAAE,SAAS,QAAQ,qCAAqC,MAAM,CAAC,OAAO,EAAE;YAC/E,gBAAgB,EAAE,MAAM,CAAC,UAAU;YACnC,WAAW;YACX,SAAS;YACT,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;SACzB,CAAC,CAAC;QAEH,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,uBAAuB,GAAG;YAC9B,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;SAC3D,CAAC;QACF,IAAI,gBAAgB,GAAG,uBAAuB,CAAC;QAC/C,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE;oBAC1E,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,gBAAgB,GAAG,uBAAuB,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,uBAAuB;QACvB,4BAA4B;QAC5B,gCAAgC;KACjC,CAAC;AACJ,CAAC"}

package/dist/middleware/with-kya-os.deps.d.ts

@@ -0,0 +1,40 @@
+/**
+ * KYA-OS Middleware — the internal dependency bag.
+ *
+ * `createKyaOsMiddleware` constructs these collaborators once and threads this
+ * bag into each sub-factory (session/proof, grant-resolution, delegation-gate,
+ * policy-gate). Internal to the middleware package — not part of the public API.
+ */
+import type { CryptoProvider } from "../providers/base.js";
+import type { AuditLogProvider } from "../providers/audit-log.js";
+import type { GrantStore } from "../providers/grant-store.js";
+import type { SessionManager } from "../session/manager.js";
+import type { ProofGenerator, ProofAgentIdentity } from "../proof/generator.js";
+import type { ProofVerifier } from "../proof/verifier.js";
+import type { KyaOsConfig, KyaOsDelegationConfig, KyaOsToolHandler } from "./with-kya-os.types.js";
+/**
+ * Attach a signed proof recording an authorization OUTCOME (denied / step-up /
+ * needs-authorization) to a response. Provided by the session/proof sub-factory
+ * and consumed by the delegation- and policy-gate sub-factories, so it is typed
+ * here as the shared internal contract between them.
+ */
+export type AttachOutcomeProof = (response: Awaited<ReturnType<KyaOsToolHandler>>, toolName: string, args: Record<string, unknown>, sessionId: string | undefined, reason: string, outcome?: "denied" | "step_up_required" | "needs_authorization", paramsOverride?: Record<string, unknown>, responseData?: unknown) => Promise<Awaited<ReturnType<KyaOsToolHandler>>>;
+/** The constructed dependencies shared across the middleware sub-factories. */
+export interface MiddlewareDeps {
+    /** Proof-generation identity (DID + key material). */
+    identity: ProofAgentIdentity;
+    /** The full user config (for `identity.agentName`, `autoSession`, …). */
+    config: KyaOsConfig;
+    cryptoProvider: CryptoProvider;
+    sessionManager: SessionManager;
+    proofGenerator: ProofGenerator;
+    auditLog: AuditLogProvider;
+    grantStore: GrantStore;
+    delegationConfig: KyaOsDelegationConfig | undefined;
+    holderBindingMode: "off" | "warn" | "enforce";
+    /** Present iff holder binding is enabled; the inbound per-request proof verifier. */
+    holderBindingVerifier: ProofVerifier | undefined;
+    /** Mirror the proof under the legacy bare `_meta.proof` key (pre-1.1 back-compat). */
+    emitLegacyProofKey: boolean;
+}
+//# sourceMappingURL=with-kya-os.deps.d.ts.map

package/dist/middleware/with-kya-os.deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.deps.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.deps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EACV,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,EAC/C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,QAAQ,GAAG,kBAAkB,GAAG,qBAAqB,EAC/D,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxC,YAAY,CAAC,EAAE,OAAO,KACnB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAEpD,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,yEAAyE;IACzE,MAAM,EAAE,WAAW,CAAC;IACpB,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,gBAAgB,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACpD,iBAAiB,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IAC9C,qFAAqF;IACrF,qBAAqB,EAAE,aAAa,GAAG,SAAS,CAAC;IACjD,sFAAsF;IACtF,kBAAkB,EAAE,OAAO,CAAC;CAC7B"}

package/dist/middleware/with-kya-os.deps.js

@@ -0,0 +1,9 @@
+/**
+ * KYA-OS Middleware — the internal dependency bag.
+ *
+ * `createKyaOsMiddleware` constructs these collaborators once and threads this
+ * bag into each sub-factory (session/proof, grant-resolution, delegation-gate,
+ * policy-gate). Internal to the middleware package — not part of the public API.
+ */
+export {};
+//# sourceMappingURL=with-kya-os.deps.js.map

package/dist/middleware/with-kya-os.deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.deps.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os.deps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/middleware/with-kya-os.grants.d.ts

@@ -0,0 +1,30 @@
+/**
+ * KYA-OS Middleware — durable-grant resolution (the no-paste retry).
+ *
+ * Resolves and mints agent-anchored / session-bound authorization grants so a
+ * verified delegation need not be re-pasted on the next call — even on a fresh
+ * instance with empty memory. Extracted from `./with-kya-os.ts`; depends only on
+ * the immutable {@link MiddlewareDeps} (no shared session state).
+ */
+import type { Grant } from "../providers/grant-store.js";
+import type { DelegationCredential } from "../types/protocol.js";
+import type { MiddlewareDeps } from "./with-kya-os.deps.js";
+export interface GrantResolution {
+    /**
+     * Resolve an existing durable grant for a no-delegation (retry) call, so a
+     * fresh instance with empty memory authorizes the retry from the shared store.
+     * Fail-closed, holder-of-key first (agent-anchored, portable), then the
+     * session bearer capability. Returns undefined to fall through to the
+     * needs_authorization challenge.
+     */
+    resolveExistingGrant(toolName: string, args: Record<string, unknown>, sessionId: string | undefined, scopeId: string): Promise<Grant | undefined>;
+    /**
+     * Mint a durable grant from a freshly-verified delegation so the NEXT call —
+     * on any instance — resolves via {@link resolveExistingGrant} without
+     * re-pasting the VC. Best-effort: a store failure must not break the
+     * already-authorized response.
+     */
+    bindGrantOnSuccess(vc: DelegationCredential, delegationArg: unknown, isVCJWT: boolean, sessionId: string | undefined, scopeId: string): Promise<void>;
+}
+export declare function createGrantResolution(deps: MiddlewareDeps): GrantResolution;
+//# sourceMappingURL=with-kya-os.grants.d.ts.map

package/dist/middleware/with-kya-os.grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.grants.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.grants.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,oBAAoB,CAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,kBAAkB,CAChB,EAAE,EAAE,oBAAoB,EACxB,aAAa,EAAE,OAAO,EACtB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe,CAiK3E"}

package/dist/middleware/with-kya-os.grants.js

@@ -0,0 +1,145 @@
+/**
+ * KYA-OS Middleware — durable-grant resolution (the no-paste retry).
+ *
+ * Resolves and mints agent-anchored / session-bound authorization grants so a
+ * verified delegation need not be re-pasted on the next call — even on a fresh
+ * instance with empty memory. Extracted from `./with-kya-os.ts`; depends only on
+ * the immutable {@link MiddlewareDeps} (no shared session state).
+ */
+import { getDelegationScopes } from "../delegation/chain-enforcement.js";
+import { assertHolderBinding, isHolderBindingApplicable, toHolderBindingRequest, } from "../delegation/holder-binding.js";
+import { logger } from "../logging/index.js";
+export function createGrantResolution(deps) {
+    const { identity, cryptoProvider, grantStore, holderBindingMode, holderBindingVerifier, } = deps;
+    /**
+     * Deterministic grant id from (agentDid, sessionId, sorted scopes). Stable for
+     * the same tuple so a repeated VC-paste UPSERTS one grant rather than piling
+     * duplicate rows in a durable store.
+     */
+    async function grantId(agentDid, sessionId, scopes) {
+        const key = `${agentDid}|${sessionId ?? ""}|${[...scopes].sort().join(",")}`;
+        const digest = await cryptoProvider.hash(new TextEncoder().encode(key));
+        return `grant_${digest.replace(/^sha256:/, "")}`;
+    }
+    /** Grant expiry (ms epoch) derived from the VC, or undefined for no expiry. */
+    function delegationExpiryMs(vc) {
+        if (vc.expirationDate) {
+            const parsed = Date.parse(vc.expirationDate);
+            if (!Number.isNaN(parsed))
+                return parsed;
+        }
+        const notAfter = vc.credentialSubject?.delegation?.constraints?.notAfter;
+        if (typeof notAfter === "number")
+            return notAfter * 1000;
+        return undefined;
+    }
+    /**
+     * Resolve a durable, agent-anchored grant for a no-delegation call — BUT ONLY
+     * behind a verified holder-of-key proof. The agent DID is taken from the
+     * `_kyaos_proof` and re-proven per request (possession of the subject key over
+     * THIS request), never trusted from a bearer hint. This is the single most
+     * security-sensitive gate of the durable-consent change: without it, any
+     * caller who knows agent A's DID could replay A's grant (confused-deputy
+     * escalation, spec §A.4). Returns undefined unless possession is proven.
+     */
+    async function resolveAgentGrant(toolName, args, sessionId, scopeId) {
+        if (!holderBindingVerifier)
+            return undefined; // inert unless holder binding is on
+        const proofArg = args["_kyaos_proof"];
+        if (proofArg === undefined)
+            return undefined;
+        let parsedProof = proofArg;
+        if (typeof proofArg === "string") {
+            try {
+                parsedProof = JSON.parse(proofArg);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        const proof = parsedProof;
+        const agentDid = proof?.meta?.did;
+        if (typeof agentDid !== "string" || !isHolderBindingApplicable(agentDid)) {
+            return undefined;
+        }
+        const binding = await assertHolderBinding({
+            proof,
+            subjectDid: agentDid,
+            request: toHolderBindingRequest(toolName, args),
+            expectedAudience: identity.did,
+            proofVerifier: holderBindingVerifier,
+        });
+        if (binding.status !== "bound")
+            return undefined;
+        const grants = await grantStore.getByAgent(agentDid, [scopeId]);
+        // A session-bound grant is usable only from its own session; an
+        // agent-anchored (session-less) grant is portable across transports.
+        return grants.find((g) => g.sessionId === undefined || g.sessionId === sessionId);
+    }
+    async function resolveExistingGrant(toolName, args, sessionId, scopeId) {
+        const agentGrant = await resolveAgentGrant(toolName, args, sessionId, scopeId);
+        if (agentGrant)
+            return agentGrant;
+        if (sessionId) {
+            const [sessionGrant] = await grantStore.getBySession(sessionId, [scopeId]);
+            if (sessionGrant)
+                return sessionGrant;
+        }
+        return undefined;
+    }
+    async function bindGrantOnSuccess(vc, delegationArg, isVCJWT, sessionId, scopeId) {
+        try {
+            const agentDid = vc.credentialSubject?.id;
+            if (!agentDid)
+                return;
+            // A session-less grant minted with holder binding OFF is unresolvable on
+            // retry (getByAgent needs a holder-of-key proof; getBySession needs a
+            // sessionId), so DON'T bind it — that would only orphan a row in a durable
+            // store. Durability for such flows comes from re-presenting the delegation,
+            // not from a grant. Enable holderBinding 'enforce' or thread a sessionId to
+            // use the grant-backed no-paste retry.
+            if (holderBindingMode === "off" && sessionId === undefined) {
+                logger.debug(`[kya-os] Skipping an unresolvable session-less grant for scope "${scopeId}" (holderBinding 'off', no sessionId).`);
+                return;
+            }
+            let delegatedScopes;
+            try {
+                delegatedScopes = getDelegationScopes(vc);
+            }
+            catch {
+                delegatedScopes = [];
+            }
+            // Store the EXACT required scope alongside the delegated scopes. The retry
+            // queries by the tool's exact scopeId, but the delegation may have granted
+            // a prefix/regex scope (e.g. "cart:*"); the store's exact `coversScopes`
+            // would never match the wildcard, so the no-paste retry would silently
+            // re-challenge. Including scopeId makes the grant resolvable.
+            const scopes = Array.from(new Set([scopeId, ...delegatedScopes]));
+            const userDid = vc.credentialSubject?.delegation?.controller;
+            const expiresAt = delegationExpiryMs(vc);
+            const grant = {
+                id: await grantId(agentDid, sessionId, scopes),
+                agentDid,
+                ...(userDid !== undefined ? { userDid } : {}),
+                scopes,
+                ...(sessionId !== undefined ? { sessionId } : {}),
+                authorization: { type: "delegation" },
+                ...(isVCJWT && typeof delegationArg === "string"
+                    ? { credentialJwt: delegationArg }
+                    : {}),
+                issuedAt: Date.now(),
+                ...(expiresAt !== undefined ? { expiresAt } : {}),
+                status: "active",
+            };
+            await grantStore.bind(grant);
+        }
+        catch (error) {
+            logger.error("[kya-os] Grant bind failed", {
+                scope: scopeId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return { resolveExistingGrant, bindGrantOnSuccess };
+}
+//# sourceMappingURL=with-kya-os.grants.js.map

package/dist/middleware/with-kya-os.grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.grants.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os.grants.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAgC7C,MAAM,UAAU,qBAAqB,CAAC,IAAoB;IACxD,MAAM,EACJ,QAAQ,EACR,cAAc,EACd,UAAU,EACV,iBAAiB,EACjB,qBAAqB,GACtB,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,KAAK,UAAU,OAAO,CACpB,QAAgB,EAChB,SAA6B,EAC7B,MAAgB;QAEhB,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,SAAS,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO,SAAS,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,+EAA+E;IAC/E,SAAS,kBAAkB,CAAC,EAAwB;QAClD,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC3C,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC;QACzE,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,GAAG,IAAI,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,iBAAiB,CAC9B,QAAgB,EAChB,IAA6B,EAC7B,SAA6B,EAC7B,OAAe;QAEf,IAAI,CAAC,qBAAqB;YAAE,OAAO,SAAS,CAAC,CAAC,oCAAoC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,IAAI,WAAW,GAAY,QAAQ,CAAC;QACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,WAA4B,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC;QAClC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;YACxC,KAAK;YACL,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC/C,gBAAgB,EAAE,QAAQ,CAAC,GAAG;YAC9B,aAAa,EAAE,qBAAqB;SACrC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,gEAAgE;QAChE,qEAAqE;QACrE,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,oBAAoB,CACjC,QAAgB,EAChB,IAA6B,EAC7B,SAA6B,EAC7B,OAAe;QAEf,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/E,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAElC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3E,IAAI,YAAY;gBAAE,OAAO,YAAY,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,EAAwB,EACxB,aAAsB,EACtB,OAAgB,EAChB,SAA6B,EAC7B,OAAe;QAEf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAEtB,yEAAyE;YACzE,sEAAsE;YACtE,2EAA2E;YAC3E,4EAA4E;YAC5E,4EAA4E;YAC5E,uCAAuC;YACvC,IAAI,iBAAiB,KAAK,KAAK,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC3D,MAAM,CAAC,KAAK,CACV,mEAAmE,OAAO,wCAAwC,CACnH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,eAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,eAAe,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,2EAA2E;YAC3E,2EAA2E;YAC3E,yEAAyE;YACzE,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,EAAE,CAAC,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC;YAC7D,MAAM,SAAS,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAEzC,MAAM,KAAK,GAAU;gBACnB,EAAE,EAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;gBAC9C,QAAQ;gBACR,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM;gBACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBACrC,GAAG,CAAC,OAAO,IAAI,OAAO,aAAa,KAAK,QAAQ;oBAC9C,CAAC,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE;oBAClC,CAAC,CAAC,EAAE,CAAC;gBACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;gBACpB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,EAAE,QAAQ;aACjB,CAAC;YACF,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBACzC,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;AACtD,CAAC"}

package/dist/middleware/with-kya-os.helpers.d.ts

@@ -0,0 +1,24 @@
+/**
+ * KYA-OS Middleware — pure, dependency-free helpers.
+ *
+ * Referentially-transparent utilities used by `createKyaOsMiddleware`, split out
+ * of `./with-kya-os.ts` so the factory module stays focused on wiring. No shared
+ * mutable state, no I/O — safe to unit test in isolation.
+ */
+/**
+ * Strip control characters and cap length on caller-derived values before they
+ * are interpolated into client-facing reasons or log lines. A hostile
+ * credential could otherwise embed newlines / control chars in an id or scope to
+ * forge or corrupt log entries (log injection) or break a terminal. The fixed
+ * parts of a reason contain no control chars, so sanitizing the whole assembled
+ * string at the emission boundary is equivalent to sanitizing each interpolated
+ * value, and is idempotent.
+ */
+export declare function sanitizeForMessage(value: unknown, maxLen?: number): string;
+/** Best-effort projection of a delegation VC into policy principal facts. */
+export declare function extractPolicyPrincipal(del: unknown): {
+    agentDid: string;
+    responsibleParty?: string;
+    delegatedScopes: string[];
+};
+//# sourceMappingURL=with-kya-os.helpers.d.ts.map

package/dist/middleware/with-kya-os.helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.helpers.d.ts","sourceRoot":"","sources":["../../src/middleware/with-kya-os.helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAM,GAAG,MAAM,CAWvE;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CA0BA"}

package/dist/middleware/with-kya-os.helpers.js

@@ -0,0 +1,57 @@
+/**
+ * KYA-OS Middleware — pure, dependency-free helpers.
+ *
+ * Referentially-transparent utilities used by `createKyaOsMiddleware`, split out
+ * of `./with-kya-os.ts` so the factory module stays focused on wiring. No shared
+ * mutable state, no I/O — safe to unit test in isolation.
+ */
+import { getDelegationScopes } from "../delegation/chain-enforcement.js";
+/**
+ * Strip control characters and cap length on caller-derived values before they
+ * are interpolated into client-facing reasons or log lines. A hostile
+ * credential could otherwise embed newlines / control chars in an id or scope to
+ * forge or corrupt log entries (log injection) or break a terminal. The fixed
+ * parts of a reason contain no control chars, so sanitizing the whole assembled
+ * string at the emission boundary is equivalent to sanitizing each interpolated
+ * value, and is idempotent.
+ */
+export function sanitizeForMessage(value, maxLen = 256) {
+    const s = typeof value === "string" ? value : String(value);
+    // Replace C0/C1 control chars (incl. CR, LF, TAB, ESC, DEL) with U+FFFD so a
+    // hostile id/scope cannot forge log lines or break a terminal. Filtered by
+    // code point to keep this source ASCII-only (no literal control chars).
+    let out = "";
+    for (const ch of s) {
+        const code = ch.codePointAt(0) ?? 0;
+        out += code <= 0x1f || (code >= 0x7f && code <= 0x9f) ? "\uFFFD" : ch;
+    }
+    return out.length > maxLen ? `${out.slice(0, maxLen)}\u2026` : out;
+}
+/** Best-effort projection of a delegation VC into policy principal facts. */
+export function extractPolicyPrincipal(del) {
+    if (!del || typeof del !== "object") {
+        return { agentDid: "unknown", delegatedScopes: [] };
+    }
+    try {
+        const vc = del;
+        const subject = vc.credentialSubject;
+        const agentDid = subject?.delegation?.subjectDid ?? subject?.id ?? "unknown";
+        const responsibleParty = subject?.delegation?.controller;
+        let delegatedScopes = [];
+        try {
+            delegatedScopes = getDelegationScopes(vc);
+        }
+        catch {
+            delegatedScopes = [];
+        }
+        return {
+            agentDid,
+            ...(responsibleParty ? { responsibleParty } : {}),
+            delegatedScopes,
+        };
+    }
+    catch {
+        return { agentDid: "unknown", delegatedScopes: [] };
+    }
+}
+//# sourceMappingURL=with-kya-os.helpers.js.map

package/dist/middleware/with-kya-os.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-kya-os.helpers.js","sourceRoot":"","sources":["../../src/middleware/with-kya-os.helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IAC7D,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;AACrE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,GAAY;IAKjD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,GAA2B,CAAC;QACvC,MAAM,OAAO,GAAG,EAAE,CAAC,iBAGlB,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,EAAE,UAAU,EAAE,UAAU,IAAI,OAAO,EAAE,EAAE,IAAI,SAAS,CAAC;QAC7E,MAAM,gBAAgB,GAAG,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;QACzD,IAAI,eAAe,GAAa,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,eAAe,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,eAAe,GAAG,EAAE,CAAC;QACvB,CAAC;QACD,OAAO;YACL,QAAQ;YACR,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,eAAe;SAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;AACH,CAAC"}