@kya-os/checkpoint-wasm-runtime 1.0.0

package/dist/types-D0j85fF0.d.mts

@@ -0,0 +1,163 @@
+import { McpIPayload } from '@kya-os/checkpoint-shared';
+
+/**
+ * TypeScript shapes for the `kya-os-engine` WASM `verify` ABI (E-1).
+ *
+ * These mirror the Rust types in `rust/crates/kya-os-engine/src/{types,context,signing,error}.rs`.
+ *
+ * **Wire format is camelCase across every type.** The engine crate
+ * carries `#[serde(rename_all = "camelCase")]` on every struct with
+ * multi-word fields, so JS hosts produce idiomatic camelCase and the
+ * cross-runtime parity contract has one convention. The initial E-1
+ * drop had an asymmetry (some structs lacked the rename attr) which
+ * Bugbot caught at the serde-wasm-bindgen boundary; harmonising the
+ * Rust side fixed it without changing any Rust public-API field name.
+ *
+ * **Do not extend these in this package.** When the engine's surface
+ * changes (a re-ratification event), regenerate from the Rust types.
+ * Phase 1 host wrappers see what D-design § 6 ratified — nothing more.
+ */
+
+interface McpIRequest {
+    raw: number[];
+    payload: McpIPayload;
+}
+interface A2ARequest {
+    raw: number[];
+}
+interface A2PRequest {
+    raw: number[];
+}
+interface HttpSignedRequest {
+    raw: number[];
+    method: string;
+    path: string;
+    headers: Array<[string, string]>;
+}
+interface PlainHttpRequest {
+    raw: number[];
+    method: string;
+    path: string;
+    headers: Array<[string, string]>;
+    userAgent?: string | null;
+    remoteIp?: string | null;
+}
+type AgentRequest = {
+    protocol: 'McpI';
+    request: McpIRequest;
+} | {
+    protocol: 'A2A';
+    request: A2ARequest;
+} | {
+    protocol: 'A2P';
+    request: A2PRequest;
+} | {
+    protocol: 'HttpSigned';
+    request: HttpSignedRequest;
+} | {
+    protocol: 'PlainHttp';
+    request: PlainHttpRequest;
+};
+type BlockReason = {
+    kind: 'Revoked';
+} | {
+    kind: 'InvalidSignature';
+} | {
+    kind: 'Unauthenticated';
+} | {
+    kind: 'Expired';
+} | {
+    kind: 'OutOfScope';
+    requested: string;
+    granted: string[];
+} | {
+    kind: 'LowReputation';
+    score: number;
+    threshold: number;
+} | {
+    kind: 'PolicyDenied';
+    detail: string;
+} | {
+    kind: 'ParseError';
+    detail: string;
+};
+interface ChallengeParams {
+    nonce: string;
+    audience: string;
+    expiresAt: number;
+    algorithmsAccepted: string[];
+}
+interface RedirectTarget {
+    url: string;
+    reason: string;
+    state?: string | null;
+}
+type SuggestedAction = {
+    kind: 'UseDifferentScope';
+    scope: string;
+} | {
+    kind: 'UpdateRequestField';
+    field: string;
+    acceptedValues: string[];
+} | {
+    kind: 'UpgradeProtocolVersion';
+    version: string;
+} | {
+    kind: 'Other';
+    code: string;
+    detail: string;
+};
+interface InstructPayload {
+    problem: string;
+    title: string;
+    suggestedActions: SuggestedAction[];
+}
+type Decision = {
+    kind: 'Permit';
+} | {
+    kind: 'Block';
+    reason: BlockReason;
+} | {
+    kind: 'Challenge';
+    params: ChallengeParams;
+} | {
+    kind: 'Redirect';
+    target: RedirectTarget;
+} | {
+    kind: 'Instruct';
+    payload: InstructPayload;
+};
+type EnforcementMode = 'enforce' | 'observe';
+interface EngineInfo {
+    name: string;
+    version: string;
+    rulesetHash: string;
+    rulesetVersion: string;
+    buildSha?: string;
+    extras?: Record<string, unknown>;
+}
+interface VerifyResult {
+    decision: Decision;
+    enforcementMode: EnforcementMode;
+    engineInfo: EngineInfo;
+}
+type KeyType = 'Ed25519';
+interface VerificationMethod {
+    id: string;
+    keyType: KeyType;
+    publicKeyBytes: number[];
+}
+interface DidDocument {
+    id: string;
+    verificationMethods: VerificationMethod[];
+}
+interface ContextSpec {
+    didDocs?: Record<string, DidDocument>;
+    revoked?: Record<string, number[]>;
+    reputation?: Record<string, number>;
+    tenantDecision: Decision;
+    nowUnix: number;
+    enforcementMode: EnforcementMode;
+}
+
+export type { AgentRequest as A, BlockReason as B, ContextSpec as C, Decision as D, EnforcementMode as E, HttpSignedRequest as H, InstructPayload as I, KeyType as K, McpIRequest as M, PlainHttpRequest as P, RedirectTarget as R, SuggestedAction as S, VerifyResult as V, A2ARequest as a, A2PRequest as b, ChallengeParams as c, DidDocument as d, EngineInfo as e, VerificationMethod as f };

package/dist/types-D0j85fF0.d.ts

@@ -0,0 +1,163 @@
+import { McpIPayload } from '@kya-os/checkpoint-shared';
+
+/**
+ * TypeScript shapes for the `kya-os-engine` WASM `verify` ABI (E-1).
+ *
+ * These mirror the Rust types in `rust/crates/kya-os-engine/src/{types,context,signing,error}.rs`.
+ *
+ * **Wire format is camelCase across every type.** The engine crate
+ * carries `#[serde(rename_all = "camelCase")]` on every struct with
+ * multi-word fields, so JS hosts produce idiomatic camelCase and the
+ * cross-runtime parity contract has one convention. The initial E-1
+ * drop had an asymmetry (some structs lacked the rename attr) which
+ * Bugbot caught at the serde-wasm-bindgen boundary; harmonising the
+ * Rust side fixed it without changing any Rust public-API field name.
+ *
+ * **Do not extend these in this package.** When the engine's surface
+ * changes (a re-ratification event), regenerate from the Rust types.
+ * Phase 1 host wrappers see what D-design § 6 ratified — nothing more.
+ */
+
+interface McpIRequest {
+    raw: number[];
+    payload: McpIPayload;
+}
+interface A2ARequest {
+    raw: number[];
+}
+interface A2PRequest {
+    raw: number[];
+}
+interface HttpSignedRequest {
+    raw: number[];
+    method: string;
+    path: string;
+    headers: Array<[string, string]>;
+}
+interface PlainHttpRequest {
+    raw: number[];
+    method: string;
+    path: string;
+    headers: Array<[string, string]>;
+    userAgent?: string | null;
+    remoteIp?: string | null;
+}
+type AgentRequest = {
+    protocol: 'McpI';
+    request: McpIRequest;
+} | {
+    protocol: 'A2A';
+    request: A2ARequest;
+} | {
+    protocol: 'A2P';
+    request: A2PRequest;
+} | {
+    protocol: 'HttpSigned';
+    request: HttpSignedRequest;
+} | {
+    protocol: 'PlainHttp';
+    request: PlainHttpRequest;
+};
+type BlockReason = {
+    kind: 'Revoked';
+} | {
+    kind: 'InvalidSignature';
+} | {
+    kind: 'Unauthenticated';
+} | {
+    kind: 'Expired';
+} | {
+    kind: 'OutOfScope';
+    requested: string;
+    granted: string[];
+} | {
+    kind: 'LowReputation';
+    score: number;
+    threshold: number;
+} | {
+    kind: 'PolicyDenied';
+    detail: string;
+} | {
+    kind: 'ParseError';
+    detail: string;
+};
+interface ChallengeParams {
+    nonce: string;
+    audience: string;
+    expiresAt: number;
+    algorithmsAccepted: string[];
+}
+interface RedirectTarget {
+    url: string;
+    reason: string;
+    state?: string | null;
+}
+type SuggestedAction = {
+    kind: 'UseDifferentScope';
+    scope: string;
+} | {
+    kind: 'UpdateRequestField';
+    field: string;
+    acceptedValues: string[];
+} | {
+    kind: 'UpgradeProtocolVersion';
+    version: string;
+} | {
+    kind: 'Other';
+    code: string;
+    detail: string;
+};
+interface InstructPayload {
+    problem: string;
+    title: string;
+    suggestedActions: SuggestedAction[];
+}
+type Decision = {
+    kind: 'Permit';
+} | {
+    kind: 'Block';
+    reason: BlockReason;
+} | {
+    kind: 'Challenge';
+    params: ChallengeParams;
+} | {
+    kind: 'Redirect';
+    target: RedirectTarget;
+} | {
+    kind: 'Instruct';
+    payload: InstructPayload;
+};
+type EnforcementMode = 'enforce' | 'observe';
+interface EngineInfo {
+    name: string;
+    version: string;
+    rulesetHash: string;
+    rulesetVersion: string;
+    buildSha?: string;
+    extras?: Record<string, unknown>;
+}
+interface VerifyResult {
+    decision: Decision;
+    enforcementMode: EnforcementMode;
+    engineInfo: EngineInfo;
+}
+type KeyType = 'Ed25519';
+interface VerificationMethod {
+    id: string;
+    keyType: KeyType;
+    publicKeyBytes: number[];
+}
+interface DidDocument {
+    id: string;
+    verificationMethods: VerificationMethod[];
+}
+interface ContextSpec {
+    didDocs?: Record<string, DidDocument>;
+    revoked?: Record<string, number[]>;
+    reputation?: Record<string, number>;
+    tenantDecision: Decision;
+    nowUnix: number;
+    enforcementMode: EnforcementMode;
+}
+
+export type { AgentRequest as A, BlockReason as B, ContextSpec as C, Decision as D, EnforcementMode as E, HttpSignedRequest as H, InstructPayload as I, KeyType as K, McpIRequest as M, PlainHttpRequest as P, RedirectTarget as R, SuggestedAction as S, VerifyResult as V, A2ARequest as a, A2PRequest as b, ChallengeParams as c, DidDocument as d, EngineInfo as e, VerificationMethod as f };

package/package.json

@@ -0,0 +1,141 @@
+{
+  "name": "@kya-os/checkpoint-wasm-runtime",
+  "version": "1.0.0",
+  "description": "Checkpoint WASM runtime for AI agent detection across all environments (formerly @kya-os/agentshield-wasm-runtime)",
+  "keywords": [
+    "ai",
+    "agent",
+    "detection",
+    "wasm",
+    "webassembly",
+    "edge-runtime",
+    "checkpoint"
+  ],
+  "license": "MIT OR Apache-2.0",
+  "author": "KnowThat.ai",
+  "homepage": "https://github.com/Know-That-Ai/agent-shield#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Know-That-Ai/agent-shield.git",
+    "directory": "packages/checkpoint-wasm-runtime"
+  },
+  "bugs": {
+    "url": "https://github.com/Know-That-Ai/agent-shield/issues"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "edge-runtime": "./dist/edge.mjs",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    },
+    "./edge": {
+      "types": "./dist/edge.d.ts",
+      "edge-runtime": "./dist/edge.mjs",
+      "import": "./dist/edge.mjs"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "import": "./dist/node.mjs",
+      "require": "./dist/node.js"
+    },
+    "./wasm": {
+      "types": "./dist/wasm.d.ts",
+      "import": "./dist/wasm.mjs"
+    },
+    "./engine": {
+      "edge-runtime": {
+        "types": "./dist/engine-edge.d.ts",
+        "import": "./dist/engine-edge.mjs"
+      },
+      "browser": {
+        "types": "./dist/engine-edge.d.ts",
+        "import": "./dist/engine-edge.mjs"
+      },
+      "types": "./dist/engine.d.ts",
+      "import": "./dist/engine.mjs",
+      "require": "./dist/engine.js"
+    },
+    "./engine/edge": {
+      "types": "./dist/engine-edge.d.ts",
+      "edge-runtime": "./dist/engine-edge.mjs",
+      "browser": "./dist/engine-edge.mjs",
+      "import": "./dist/engine-edge.mjs",
+      "require": "./dist/engine-edge.js"
+    },
+    "./orchestrator": {
+      "edge-runtime": {
+        "types": "./dist/orchestrator-edge.d.ts",
+        "import": "./dist/orchestrator-edge.mjs"
+      },
+      "browser": {
+        "types": "./dist/orchestrator-edge.d.ts",
+        "import": "./dist/orchestrator-edge.mjs"
+      },
+      "types": "./dist/orchestrator.d.ts",
+      "import": "./dist/orchestrator.mjs",
+      "require": "./dist/orchestrator.js"
+    },
+    "./orchestrator/edge": {
+      "types": "./dist/orchestrator-edge.d.ts",
+      "edge-runtime": "./dist/orchestrator-edge.mjs",
+      "browser": "./dist/orchestrator-edge.mjs",
+      "import": "./dist/orchestrator-edge.mjs",
+      "require": "./dist/orchestrator-edge.js"
+    },
+    "./adapters": {
+      "types": "./dist/adapters.d.ts",
+      "import": "./dist/adapters.mjs",
+      "require": "./dist/adapters.js"
+    },
+    "./wasm/agentshield_wasm_bg.wasm": "./wasm/agentshield_wasm_bg.wasm",
+    "./wasm/kya-os-engine/kya_os_engine_bg.wasm": "./wasm/kya-os-engine/kya_os_engine_bg.wasm",
+    "./wasm/kya-os-engine-web/kya_os_engine_bg.wasm": "./wasm/kya-os-engine-web/kya_os_engine_bg.wasm",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "wasm",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "multiformats": "^13",
+    "@kya-os/checkpoint-shared": "1.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.24",
+    "@vitest/coverage-v8": "^1.3.1",
+    "rimraf": "^5.0.5",
+    "tsup": "^8.0.2",
+    "typescript": "^5.4.2",
+    "vitest": "^1.3.1"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup",
+    "build:watch": "tsup --watch",
+    "dev": "tsup --watch",
+    "clean": "rimraf dist .tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src --ext .ts,.tsx",
+    "lint:fix": "eslint src --ext .ts,.tsx --fix",
+    "format": "prettier --write \"src/**/*.{ts,tsx,json,md}\"",
+    "format:check": "prettier --check \"src/**/*.{ts,tsx,json,md}\"",
+    "copy-wasm": "mkdir -p ./wasm && cp ../../rust/crates/agentshield-wasm/pkg/agentshield_wasm_bg.wasm ./wasm/",
+    "copy-engine-wasm": "mkdir -p ./wasm/kya-os-engine && cp ../../rust/crates/kya-os-engine/pkg/kya_os_engine_bg.wasm ../../rust/crates/kya-os-engine/pkg/kya_os_engine_bg.wasm.d.ts ../../rust/crates/kya-os-engine/pkg/kya_os_engine.d.ts ../../rust/crates/kya-os-engine/pkg/kya_os_engine.js ./wasm/kya-os-engine/",
+    "copy-engine-wasm-web": "mkdir -p ./wasm/kya-os-engine-web && cp ../../rust/crates/kya-os-engine/pkg-web/kya_os_engine_bg.wasm ../../rust/crates/kya-os-engine/pkg-web/kya_os_engine_bg.wasm.d.ts ../../rust/crates/kya-os-engine/pkg-web/kya_os_engine.d.ts ../../rust/crates/kya-os-engine/pkg-web/kya_os_engine.js ./wasm/kya-os-engine-web/"
+  }
+}