@dupecom/botcha-cloudflare 0.20.2 → 0.23.0

package/dist/tap-ans-routes.d.ts

@@ -0,0 +1,302 @@
+/**
+ * BOTCHA ANS API Routes — tap-ans-routes.ts
+ *
+ * HTTP route handlers for ANS (Agent Name Service) integration.
+ *
+ * Routes:
+ *   GET  /v1/ans/resolve/:name    — Resolve ANS name to agent metadata
+ *   POST /v1/ans/verify           — Issue BOTCHA verification badge for ANS name
+ *   GET  /v1/ans/discover         — List BOTCHA-verified ANS agents
+ *   GET  /v1/ans/nonce/:name      — Get a nonce for ANS ownership proof
+ *   GET  /v1/ans/botcha           — BOTCHA's own ANS record / identity
+ *
+ * Trust levels issued:
+ *   domain-validated   — ANS TXT record exists and resolves correctly
+ *   key-validated      — Caller proved control of the ANS keypair
+ *   behavior-validated — Caller also passed a BOTCHA speed/reasoning challenge
+ */
+import type { Context } from 'hono';
+/**
+ * GET /v1/ans/resolve/:name
+ *
+ * Resolve an ANS name to agent metadata via DNS TXT lookup.
+ *
+ * Accepts:
+ *   - Path param:  /v1/ans/resolve/ans%3A%2F%2Fv1.0.myagent.example.com
+ *   - Path param:  /v1/ans/resolve/myagent.example.com
+ *   - Query param: /v1/ans/resolve/lookup?name=ans://v1.0.myagent.example.com
+ *
+ * Returns:
+ *   - Parsed ANS name components
+ *   - DNS TXT record fields (name, pub, cap, url, did)
+ *   - Optional Agent Card (if record.url is set)
+ *   - BOTCHA verification status (if already in registry)
+ */
+export declare function resolveANSNameRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+    examples: string[];
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string | undefined;
+    name: {
+        raw: string;
+        domain: string;
+        label: string;
+        dns_lookup: string;
+    } | undefined;
+    hints: string[];
+}, 404, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    ans_name: {
+        raw: string;
+        canonical: string;
+        version: string;
+        label: string;
+        domain: string;
+        fqdn: string;
+        dns_lookup_name: string;
+    };
+    record: {
+        version: string;
+        name: string | undefined;
+        capabilities: string[];
+        agent_card_url: string | undefined;
+        did: string | undefined;
+        has_public_key: boolean;
+    } | null;
+    agent_card: {
+        [x: string]: import("hono/utils/types").JSONValue;
+    } | null;
+    botcha_verified: boolean;
+    botcha_badge: {
+        badge_id: string;
+        trust_level: "domain-validated" | "key-validated" | "behavior-validated";
+        verified_at: string;
+        expires_at: string;
+    } | null;
+    resolved_at: string | null;
+    get_verified: {
+        note: string;
+        endpoint: string;
+        body: {
+            ans_name: string;
+            nonce: string;
+            signature: string;
+        };
+    };
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+/**
+ * GET /v1/ans/nonce/:name
+ *
+ * Get a fresh nonce for ANS ownership verification.
+ * The caller must sign this nonce with their ANS private key,
+ * then submit it to POST /v1/ans/verify.
+ *
+ * Nonces expire in 10 minutes (single use).
+ */
+export declare function getANSNonceRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string | undefined;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    nonce: string;
+    ans_name: string;
+    expires_in_seconds: number;
+    instructions: {
+        step1: string;
+        step2: string;
+        algorithm: string;
+        note: string;
+    };
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+/**
+ * POST /v1/ans/verify
+ *
+ * Issue a BOTCHA verification badge for an ANS name.
+ *
+ * Input (JSON body):
+ *   ans_name  string  — ANS name to verify (e.g. "ans://v1.0.myagent.example.com")
+ *   nonce     string  — From GET /v1/ans/nonce/:name (required for key-validated+)
+ *   signature string  — base64url signature of nonce (required for key-validated+)
+ *   algorithm string  — "ECDSA-P256" (default) | "Ed25519"
+ *   agent_id  string  — optional BOTCHA agent ID to link to this ANS name
+ *
+ * Trust levels:
+ *   - domain-validated: ANS TXT record exists (no nonce/signature required)
+ *   - key-validated:    Caller signs nonce with ANS key (nonce + signature required)
+ *   - behavior-validated: (future) key-validated + BOTCHA challenge passed
+ *
+ * Returns:
+ *   BOTCHA-ANS verification badge (JWT credential)
+ */
+export declare function verifyANSNameRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 403, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+    hint: string;
+}, 422, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string | undefined;
+    hint: string;
+}, 403, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 404, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    badge: {
+        badge_id: string;
+        ans_name: string;
+        domain: string;
+        agent_id: string | undefined;
+        verified: boolean;
+        trust_level: "domain-validated" | "key-validated" | "behavior-validated";
+        verification_type: "dns-ownership" | "key-ownership" | "challenge-verified";
+        credential_token: string;
+        issued_at: string;
+        expires_at: string;
+        issuer: "botcha.ai";
+    };
+    record: {
+        capabilities: string[];
+        agent_card_url: string | undefined;
+        did: string | undefined;
+        has_public_key: boolean;
+    };
+    trust_levels: {
+        current: "domain-validated" | "key-validated";
+        description: string;
+        upgrade: {
+            to: string;
+            how: string;
+        } | null;
+    };
+    discovery: {
+        note: string;
+        endpoint: string;
+    };
+}, 201, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+/**
+ * GET /v1/ans/discover
+ *
+ * List BOTCHA-verified ANS agents in the public discovery registry.
+ * These agents have passed BOTCHA verification and are safe to interact with.
+ *
+ * Query params:
+ *   domain  string  — filter by domain (e.g. ?domain=example.com)
+ *   limit   number  — max results (default: 50, max: 100)
+ */
+export declare function discoverANSAgentsRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: true;
+    count: number;
+    agents: {
+        ans_name: string;
+        domain: string;
+        label: string;
+        agent_id: string | undefined;
+        trust_level: "domain-validated" | "key-validated" | "behavior-validated";
+        capabilities: string[];
+        agent_card_url: string | undefined;
+        verified_at: string;
+        expires_at: string;
+        badge_id: string;
+    }[];
+    registry: {
+        description: string;
+        trust_levels: {
+            'domain-validated': string;
+            'key-validated': string;
+            'behavior-validated': string;
+        };
+        get_verified: string;
+        resolve_name: string;
+    };
+    filter: {
+        domain: string;
+    } | null;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+/**
+ * GET /v1/ans/botcha
+ *
+ * BOTCHA's own ANS record and identity.
+ * ans://v1.0.botcha.ai
+ *
+ * This endpoint serves as BOTCHA's Agent Card for ANS-aware clients.
+ * Also returns the DNS TXT record that should be published at _ans.botcha.ai.
+ */
+export declare function getBotchaANSRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: true;
+    identity: {
+        ans_name: string;
+        canonical: string;
+        dns_record: {
+            name: string;
+            type: string;
+            value: string;
+        };
+    };
+    agent_card: {
+        [x: string]: import("hono/utils/types").JSONValue;
+    };
+    endpoints: {
+        resolve: string;
+        verify: string;
+        discover: string;
+        nonce: string;
+    };
+    integration: {
+        note: string;
+        ans_spec: string;
+        botcha_docs: string;
+        trust_model: {
+            'ANS alone': string;
+            'ANS + BOTCHA': string;
+        };
+    };
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+declare const _default: {
+    resolveANSNameRoute: typeof resolveANSNameRoute;
+    getANSNonceRoute: typeof getANSNonceRoute;
+    verifyANSNameRoute: typeof verifyANSNameRoute;
+    discoverANSAgentsRoute: typeof discoverANSAgentsRoute;
+    getBotchaANSRoute: typeof getBotchaANSRoute;
+};
+export default _default;
+//# sourceMappingURL=tap-ans-routes.d.ts.map

package/dist/tap-ans-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tap-ans-routes.d.ts","sourceRoot":"","sources":["../src/tap-ans-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AA4DpC;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkGnD;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;kBA6ChD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6MlD;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6CtD;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwCjD;;;;;;;;AAED,wBAME"}