@kya-os/cli 1.8.3 → 2.0.2

package/dist/commands/review.js

@@ -1,220 +0,0 @@
-/**
- * `kya-os review verify <pr-url>` (review-loop P9 commit 3)
- *
- * Extracts every fenced `kya-os-signed-verdict` block from a PR's reviews
- * (posted by compute's review-publisher.ts), resolves each block's reviewer
- * DID, and verifies its signed proof. Scope v1: `did:web` only — the
- * epic's reviewer DIDs are all `did:web:knowthat.ai:agents:<slug>`;
- * did:key support is straightforward to add later but is left out until a
- * real reviewer uses one, rather than half-supporting it here.
- *
- * IMPORTANT SCOPE NOTE (sm2 finding, fixed): a block's proof carries a
- * self-declared `kid` (the DID it claims to be) — this command resolves
- * THAT DID's own published key and checks the signature against it. That
- * proves internal consistency ("whoever signed this controls the private
- * key for the DID it names"), NOT that the named DID is a recognized
- * reviewer for this org: anyone who can post a review comment on a public
- * PR can self-host a `did:web` document and produce a block that verifies
- * this way. Pass `--registry` (or set `REVIEW_REGISTRY_PATH`/
- * `REVIEW_REGISTRY_JSON`, matching compute's own review loop) to
- * additionally cross-check the signer against a real `ReviewerRegistry` —
- * without one, every VALID row prints a banner making that narrower
- * guarantee explicit rather than letting "VALID" be misread as "trusted."
- *
- * @module cli/commands/review
- */
-import chalk from "chalk";
-import { Command } from "commander";
-import { ReviewVerdictBodySchema, isDesignatedReviewer, } from "@kya-os/contracts/review";
-import { getPullRequestReviewData } from "../utils/dco/github.js";
-import { extractSignedVerdictBlocks, verifyLocalReviewVerdictProof } from "../utils/review/verdict-verify.js";
-import { resolveDidWebEd25519Key } from "../utils/review/did-web-key.js";
-import { loadReviewerRegistryForVerify } from "../utils/review/load-registry.js";
-async function verifyOneBlock(raw, currentHeadSha, registry) {
-    let parsedJson;
-    try {
-        parsedJson = JSON.parse(raw);
-    }
-    catch {
-        return {
-            reviewerDid: null,
-            verdict: null,
-            headSha: null,
-            valid: false,
-            reason: "schema (block is not valid JSON)",
-            stale: false,
-        };
-    }
-    const schemaResult = ReviewVerdictBodySchema.safeParse(parsedJson);
-    if (!schemaResult.success) {
-        return {
-            reviewerDid: null,
-            verdict: null,
-            headSha: null,
-            valid: false,
-            reason: "schema (does not match ReviewVerdictBodySchema)",
-            stale: false,
-        };
-    }
-    const body = schemaResult.data;
-    const stale = body.subject.headSha !== currentHeadSha;
-    const reviewerDid = body.proof.kid?.split("#")[0] ?? null;
-    if (!reviewerDid || !reviewerDid.startsWith("did:web:")) {
-        return {
-            reviewerDid,
-            verdict: body.verdict,
-            headSha: body.subject.headSha,
-            valid: false,
-            reason: "unresolvable DID (proof carries no did:web kid — v1 supports did:web only)",
-            stale,
-        };
-    }
-    const keyResult = await resolveDidWebEd25519Key(reviewerDid);
-    if (!keyResult.ok || !keyResult.raw) {
-        return {
-            reviewerDid,
-            verdict: body.verdict,
-            headSha: body.subject.headSha,
-            valid: false,
-            reason: `unresolvable DID (${keyResult.reason}${keyResult.detail ? `: ${keyResult.detail}` : ""})`,
-            stale,
-        };
-    }
-    const proofResult = verifyLocalReviewVerdictProof(body, keyResult.raw);
-    if (!proofResult.valid) {
-        return {
-            reviewerDid,
-            verdict: body.verdict,
-            headSha: body.subject.headSha,
-            valid: false,
-            reason: proofResult.reason === "digest"
-                ? "digest mismatch (findings do not match findingsDigest)"
-                : "signature does not verify",
-            stale,
-        };
-    }
-    // The signature being internally consistent only proves the signer
-    // controls reviewerDid's own private key — NOT that reviewerDid is a
-    // recognized, DESIGNATED reviewer for this org (reviews: true — a real
-    // registry entry with fixes: true, reviews: false, like the registry's
-    // own "Brian" worked example, is not a reviewer). When a registry is
-    // available, that is an additional, separate gate on top of (not a
-    // replacement for) the cryptographic check above. isDesignatedReviewer
-    // is the canonical check (registry.ts) review-publisher.ts and
-    // fix-dispatcher.ts both use for this exact purpose (/sm2 finding: this
-    // command's own bespoke check was weaker — presence-only, not
-    // reviews:true).
-    if (registry && !isDesignatedReviewer(registry, reviewerDid)) {
-        return {
-            reviewerDid,
-            verdict: body.verdict,
-            headSha: body.subject.headSha,
-            valid: false,
-            reason: "signer is not a registered reviewer for this org (--registry)",
-            stale,
-        };
-    }
-    return {
-        reviewerDid,
-        verdict: body.verdict,
-        headSha: body.subject.headSha,
-        valid: true,
-        stale,
-    };
-}
-function printHumanReport(rows, registryChecked) {
-    console.log(chalk.cyan("\nSigned review verdicts\n"));
-    if (!registryChecked) {
-        console.log(chalk.yellow("  No reviewer registry supplied (--registry) — VALID here means only that the\n" +
-            "  signature is self-consistent for the DID the block names, NOT that the\n" +
-            "  signer is a recognized reviewer for this org. Pass --registry <path> (or\n" +
-            "  set REVIEW_REGISTRY_PATH/REVIEW_REGISTRY_JSON) to also check that.\n"));
-    }
-    for (const row of rows) {
-        const status = row.valid ? chalk.green("VALID") : chalk.red("INVALID");
-        const staleTag = row.stale ? chalk.yellow(" [stale]") : "";
-        console.log(`  ${status}  ${row.reviewerDid ?? chalk.gray("(unknown)")}  ${row.verdict ?? "?"}  ${row.headSha ?? "?"}${staleTag}`);
-        if (!row.valid && row.reason) {
-            console.log(chalk.gray(`         reason: ${row.reason}`));
-        }
-    }
-    console.log("");
-}
-/**
- * Fetch a PR's reviews, extract every signed-verdict block, verify each,
- * print a row per block, and set the process exit code: non-zero if any
- * block is INVALID, zero when all valid or none found.
- */
-export async function reviewVerify(target, options = {}) {
-    // A registry SOURCE that was configured (flag or env) but failed to load
-    // or validate fails the command loudly — the user explicitly asked for
-    // the membership check, so silently downgrading to "unchecked" would be
-    // exactly the misleading-VALID gap this option exists to close. No
-    // source configured at all is not an error; it just means the check is
-    // skipped (see the disclaimer banner in printHumanReport).
-    const registryResult = loadReviewerRegistryForVerify(options.registry);
-    if (registryResult.error) {
-        if (options.json) {
-            console.log(JSON.stringify({ ok: false, error: registryResult.error }, null, 2));
-        }
-        else {
-            console.error(chalk.red(`\n${registryResult.error}\n`));
-        }
-        process.exitCode = 1;
-        return;
-    }
-    const registry = registryResult.registry;
-    let data;
-    try {
-        data = await getPullRequestReviewData(target);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        if (options.json) {
-            console.log(JSON.stringify({ ok: false, error: message }, null, 2));
-        }
-        else {
-            console.error(chalk.red(`\nCould not read that pull request: ${message}\n`));
-        }
-        process.exitCode = 1;
-        return;
-    }
-    const blocks = data.reviews.flatMap((review) => extractSignedVerdictBlocks(review.body));
-    if (blocks.length === 0) {
-        if (options.json) {
-            console.log(JSON.stringify({ ok: true, rows: [], message: "no signed verdicts found" }, null, 2));
-        }
-        else {
-            console.log(chalk.gray("\nNo signed verdicts found.\n"));
-        }
-        process.exitCode = 0;
-        return;
-    }
-    const rows = [];
-    for (const block of blocks) {
-        rows.push(await verifyOneBlock(block, data.headSha, registry));
-    }
-    const allValid = rows.every((row) => row.valid);
-    const registryChecked = registry !== undefined;
-    if (options.json) {
-        console.log(JSON.stringify({ ok: allValid, registryChecked, rows }, null, 2));
-    }
-    else {
-        printHumanReport(rows, registryChecked);
-    }
-    process.exitCode = allValid ? 0 : 1;
-}
-export function createReviewCommand() {
-    const cmd = new Command("review").description("Inspect signed PR review verdicts posted by review-loop reviewer agents");
-    cmd
-        .command("verify <pr-url>")
-        .description("Verify every signed review verdict on a PR (did:web reviewer identities only, v1). " +
-        "A valid signature alone only proves the signer controls the DID it names, not that " +
-        "the DID is a recognized reviewer for this org — pass --registry to also check that.")
-        .option("--json", "Emit machine-readable JSON")
-        .option("--registry <path>", "Path to a ReviewerRegistry JSON file; cross-checks each signer's DID against it " +
-        "(falls back to REVIEW_REGISTRY_PATH/REVIEW_REGISTRY_JSON when omitted)")
-        .action((prUrl, opts) => reviewVerify(prUrl, opts));
-    return cmd;
-}
-//# sourceMappingURL=review.js.map

package/dist/commands/review.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/commands/review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,GAGrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAC9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAkBjF,KAAK,UAAU,cAAc,CAC3B,GAAW,EACX,cAAsB,EACtB,QAA2B;IAE3B,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,kCAAkC;YAC1C,KAAK,EAAE,KAAK;SACb,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,iDAAiD;YACzD,KAAK,EAAE,KAAK;SACb,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAsB,YAAY,CAAC,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,cAAc,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAE1D,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,4EAA4E;YACpF,KAAK;SACN,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;QACpC,OAAO;YACL,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,qBAAqB,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAClG,KAAK;SACN,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,6BAA6B,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO;YACL,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,KAAK,EAAE,KAAK;YACZ,MAAM,EACJ,WAAW,CAAC,MAAM,KAAK,QAAQ;gBAC7B,CAAC,CAAC,wDAAwD;gBAC1D,CAAC,CAAC,2BAA2B;YACjC,KAAK;SACN,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,mEAAmE;IACnE,uEAAuE;IACvE,+DAA+D;IAC/D,wEAAwE;IACxE,8DAA8D;IAC9D,iBAAiB;IACjB,IAAI,QAAQ,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+DAA+D;YACvE,KAAK;SACN,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;QAC7B,KAAK,EAAE,IAAI;QACX,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAuB,EAAE,eAAwB;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,iFAAiF;YAC/E,4EAA4E;YAC5E,8EAA8E;YAC9E,wEAAwE,CAC3E,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,KAAK,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,GAAG,QAAQ,EAAE,CACtH,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,UAA+B,EAAE;IAEjC,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,mEAAmE;IACnE,uEAAuE;IACvE,2DAA2D;IAC3D,MAAM,cAAc,GAAG,6BAA6B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;IAEzC,IAAI,IAA0D,CAAC;IAC/D,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,uCAAuC,OAAO,IAAI,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS,CAAC;IAE/C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAC3C,yEAAyE,CAC1E,CAAC;IAEF,GAAG;SACA,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACV,qFAAqF;QACnF,qFAAqF;QACrF,qFAAqF,CACxF;SACA,MAAM,CAAC,QAAQ,EAAE,4BAA4B,CAAC;SAC9C,MAAM,CACL,mBAAmB,EACnB,kFAAkF;QAChF,wEAAwE,CAC3E;SACA,MAAM,CAAC,CAAC,KAAa,EAAE,IAA2C,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAErG,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/rotate.d.ts

@@ -1,13 +0,0 @@
-interface RotateOptions {
-    force?: boolean;
-    reason?: string;
-    newDid?: boolean;
-    yes?: boolean;
-}
-/**
- * Rotate identity keys with dev/prod mode handling
- * Requirements: 2.3, 2.4, 2.5, 2.6
- */
-export declare function rotate(options?: RotateOptions): Promise<void>;
-export {};
-//# sourceMappingURL=rotate.d.ts.map

package/dist/commands/rotate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rotate.d.ts","sourceRoot":"","sources":["../../src/commands/rotate.ts"],"names":[],"mappings":"AAeA,UAAU,aAAa;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAAC,OAAO,GAAE,aAAkB,iBA6NvD"}

package/dist/commands/rotate.js

@@ -1,167 +0,0 @@
-import chalk from "chalk";
-import ora from "ora";
-import inquirer from "inquirer";
-import { showSuccess, showError, showInfo } from "../utils/prompts.js";
-import { hasDelegation, isKTAAvailable } from "../utils/kta-api.js";
-import { loadCurrentIdentity, archiveOldKey, generateNewIdentity, saveIdentityToDev, generateAuditLine, } from "../utils/identity-manager.js";
-import contractsCli from "@kya-os/contracts/cli";
-const { CLI_EXIT_CODES } = contractsCli;
-/**
- * Rotate identity keys with dev/prod mode handling
- * Requirements: 2.3, 2.4, 2.5, 2.6
- */
-export async function rotate(options = {}) {
-    console.log(chalk.cyan("\n🔄 Rotating Identity Keys\n"));
-    const { force = false, reason, newDid = false, yes = false } = options;
-    try {
-        // Determine environment
-        const isDev = !process.env.AGENT_PRIVATE_KEY;
-        const mode = isDev ? "dev" : "prod";
-        console.log(`${chalk.bold("Environment:")} ${chalk.gray(mode)}`);
-        if (reason) {
-            console.log(`${chalk.bold("Reason:")} ${chalk.gray(reason)}`);
-        }
-        // Load current identity
-        const currentIdentity = loadCurrentIdentity();
-        if (!currentIdentity) {
-            showError("No current identity found. Run 'kya-os init' first.");
-            process.exit(CLI_EXIT_CODES.NOIDENTITY);
-        }
-        console.log(`\n${chalk.bold("Current Identity:")}`);
-        console.log(`   DID: ${chalk.gray(currentIdentity.did)}`);
-        console.log(`   Key ID: ${chalk.gray(currentIdentity.kid)}`);
-        // Production mode validation
-        if (!isDev) {
-            console.log(`\n${chalk.bold("🔒 Production Mode Detected")}`);
-            if (!force) {
-                // Check delegation via KTA lookup by DID/KID (Requirement 2.4)
-                const spinner = ora("Checking delegation status via KTA...").start();
-                try {
-                    const ktaAvailable = await isKTAAvailable();
-                    if (!ktaAvailable) {
-                        spinner.fail("KTA is not reachable");
-                        showError("Cannot verify delegation status - KTA is unavailable");
-                        console.log(`\n${chalk.gray("To proceed:")}`);
-                        console.log(`${chalk.gray("• Check your internet connection")}`);
-                        console.log(`${chalk.gray("• Verify KTA service status")}`);
-                        console.log(`${chalk.gray("• Or use --force with --yes for emergency rotation")}`);
-                        process.exit(CLI_EXIT_CODES.CONFIG);
-                    }
-                    const delegationExists = await hasDelegation(currentIdentity.did, currentIdentity.kid);
-                    if (delegationExists) {
-                        spinner.succeed("Delegation verified via KTA");
-                    }
-                    else {
-                        spinner.fail("No delegation found for current key");
-                        showError("Key rotation requires delegation to new key ID or --force flag");
-                        console.log(`\n${chalk.gray("To proceed:")}`);
-                        console.log(`${chalk.gray("• Set up delegation via KTA for the new key")}`);
-                        console.log(`${chalk.gray("• Or use --force with --yes for emergency rotation")}`);
-                        process.exit(CLI_EXIT_CODES.CONFIG);
-                    }
-                }
-                catch (error) {
-                    spinner.fail("Failed to check delegation");
-                    showError(`Delegation check failed: ${error}`);
-                    console.log(`\n${chalk.gray("To proceed:")}`);
-                    console.log(`${chalk.gray("• Check your KYA_VOUCHED_API_KEY environment variable")}`);
-                    console.log(`${chalk.gray("• Verify your network connection")}`);
-                    console.log(`${chalk.gray("• Or use --force with --yes for emergency rotation")}`);
-                    process.exit(CLI_EXIT_CODES.CONFIG);
-                }
-            }
-            else {
-                // Force mode requires confirmation (Requirement 2.5)
-                if (!yes) {
-                    console.log(`\n${chalk.red("⚠️  FORCE ROTATION WARNING")}`);
-                    console.log(`${chalk.gray("This will rotate keys without delegation check.")}`);
-                    console.log(`${chalk.gray("Current DID:")} ${chalk.yellow(currentIdentity.did)}`);
-                    console.log(`${chalk.gray("Current Key ID:")} ${chalk.yellow(currentIdentity.kid)}`);
-                    const { confirmed } = await inquirer.prompt([
-                        {
-                            type: "confirm",
-                            name: "confirmed",
-                            message: "Are you sure you want to force rotate keys?",
-                            default: false,
-                        },
-                    ]);
-                    if (!confirmed) {
-                        console.log(chalk.yellow("Key rotation cancelled."));
-                        return;
-                    }
-                }
-            }
-        }
-        // Development mode - archive old key (Requirement 2.3)
-        let archiveFile;
-        if (isDev) {
-            const spinner = ora("Archiving old key...").start();
-            try {
-                archiveFile = archiveOldKey(currentIdentity, reason);
-                spinner.succeed(`Old key archived to: ${archiveFile}`);
-            }
-            catch (error) {
-                spinner.fail("Failed to archive old key");
-                throw error;
-            }
-        }
-        // Generate new keys
-        const spinner = ora("Generating new keys...").start();
-        try {
-            // Generate new identity (keeping same DID unless --new-did)
-            const preserveDID = newDid ? undefined : currentIdentity.did;
-            const newIdentity = generateNewIdentity(preserveDID);
-            // Save new identity in development mode
-            if (isDev) {
-                saveIdentityToDev(newIdentity);
-            }
-            spinner.succeed("New keys generated successfully!");
-            console.log(`\n${chalk.bold("New Identity:")}`);
-            console.log(`   DID: ${chalk.gray(newIdentity.did)}`);
-            console.log(`   Key ID: ${chalk.gray(newIdentity.kid)}`);
-            // Emit audit line (Requirement 2.6)
-            const delegated = !isDev && !force;
-            const auditLine = generateAuditLine(currentIdentity.kid, newIdentity.kid, newIdentity.did, mode, delegated, force);
-            console.log(`\n${chalk.bold("📋 Audit Log:")}`);
-            console.log(`   ${chalk.gray(auditLine)}`);
-            showSuccess("Key rotation completed successfully!");
-            console.log(`\n${chalk.bold("🚀 Next Steps:")}`);
-            if (isDev) {
-                console.log(`   ${chalk.gray("• Restart your development server")}`);
-                console.log(`   ${chalk.gray("• Test with:")} ${chalk.cyan("kya-os dev")}`);
-                if (archiveFile) {
-                    console.log(`   ${chalk.gray("• Old key archived at:")} ${chalk.cyan(archiveFile)}`);
-                }
-            }
-            else {
-                console.log(`   ${chalk.gray("• Update production environment variables:")}`);
-                console.log(`     ${chalk.gray("AGENT_PRIVATE_KEY=")}${chalk.yellow(newIdentity.privateKey)}`);
-                console.log(`     ${chalk.gray("AGENT_KEY_ID=")}${chalk.yellow(newIdentity.kid)}`);
-                if (newDid) {
-                    console.log(`     ${chalk.gray("AGENT_DID=")}${chalk.yellow(newIdentity.did)}`);
-                }
-                console.log(`   ${chalk.gray("• Deploy updated configuration")}`);
-                console.log(`   ${chalk.gray("• Verify with:")} ${chalk.cyan("kya-os status")}`);
-            }
-            if (!newDid) {
-                showInfo("DID remained unchanged. Use --new-did to generate a new DID.");
-            }
-            if (newDid && isDev) {
-                showInfo("New DID generated. You may need to re-register with KTA.");
-            }
-        }
-        catch (error) {
-            spinner.fail("Key rotation failed");
-            throw error;
-        }
-    }
-    catch (error) {
-        showError(`Key rotation failed: ${error.message}`);
-        console.log(`\n${chalk.gray("You can:")}`);
-        console.log(`${chalk.gray("• Check your current identity with:")} ${chalk.cyan("kya-os status")}`);
-        console.log(`${chalk.gray("• Try with --force flag (production only)")}`);
-        console.log(`${chalk.gray("• Check file permissions and network connectivity")}`);
-        process.exit(CLI_EXIT_CODES.GENERAL_ERROR);
-    }
-}
-//# sourceMappingURL=rotate.js.map

package/dist/commands/rotate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rotate.js","sourceRoot":"","sources":["../../src/commands/rotate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,YAAY,MAAM,uBAAuB,CAAC;AACjD,MAAM,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;AASxC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAyB,EAAE;IACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAEzD,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEvE,IAAI,CAAC;QACH,wBAAwB;QACxB,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAEpC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEjE,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,wBAAwB;QACxB,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,SAAS,CAAC,qDAAqD,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE7D,6BAA6B;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;YAE9D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,+DAA+D;gBAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,uCAAuC,CAAC,CAAC,KAAK,EAAE,CAAC;gBAErE,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,cAAc,EAAE,CAAC;oBAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;wBACrC,SAAS,CAAC,sDAAsD,CAAC,CAAC;wBAClE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;wBAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC;wBACjE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;wBAC5D,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,EAAE,CACtE,CAAC;wBACF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;oBACtC,CAAC;oBAED,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAC1C,eAAe,CAAC,GAAG,EACnB,eAAe,CAAC,GAAG,CACpB,CAAC;oBAEF,IAAI,gBAAgB,EAAE,CAAC;wBACrB,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;oBACjD,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;wBACpD,SAAS,CACP,gEAAgE,CACjE,CAAC;wBACF,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;wBAC9C,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,EAAE,CAC/D,CAAC;wBACF,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,EAAE,CACtE,CAAC;wBACF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;oBACtC,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;oBAC3C,SAAS,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;oBAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;oBAC9C,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,EAAE,CACzE,CAAC;oBACF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC;oBACjE,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,EAAE,CACtE,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,qDAAqD;gBACrD,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;oBAC5D,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,EAAE,CACnE,CAAC;oBACF,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CACrE,CAAC;oBACF,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CACxE,CAAC;oBAEF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;wBAC1C;4BACE,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,6CAA6C;4BACtD,OAAO,EAAE,KAAK;yBACf;qBACF,CAAC,CAAC;oBAEH,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC;wBACrD,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,IAAI,WAA+B,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,WAAW,GAAG,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;gBACrD,OAAO,CAAC,OAAO,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC1C,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,4DAA4D;YAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC;YAC7D,MAAM,WAAW,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAErD,wCAAwC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YAED,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;YAEpD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEzD,oCAAoC;YACpC,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC;YACnC,MAAM,SAAS,GAAG,iBAAiB,CACjC,eAAe,CAAC,GAAG,EACnB,WAAW,CAAC,GAAG,EACf,WAAW,CAAC,GAAG,EACf,IAAI,EACJ,SAAS,EACT,KAAK,CACN,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAE3C,WAAW,CAAC,sCAAsC,CAAC,CAAC;YAEpD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;gBACrE,OAAO,CAAC,GAAG,CACT,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAC/D,CAAC;gBACF,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CACT,MAAM,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CACxE,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CACT,MAAM,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,EAAE,CACjE,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,QAAQ,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAClF,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,QAAQ,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CACtE,CAAC;gBACF,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,GAAG,CACT,QAAQ,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CACnE,CAAC;gBACJ,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;gBAClE,OAAO,CAAC,GAAG,CACT,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CACpE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CACN,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,QAAQ,CAAC,0DAA0D,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACpC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,SAAS,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAEnD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CACtF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,EAAE,CACrE,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/commands/score.d.ts

@@ -1,15 +0,0 @@
-export interface ScoreOptions {
-    minGrade?: string;
-    json?: boolean;
-    ci?: boolean;
-    timeout?: string;
-    ktaUrl?: string;
-}
-/**
- * Audits an MCP server's Spec Score via KTA's public on-demand audit API:
- * submits the URL, polls until the audit completes, and prints the letter
- * grade + rawScore/100. With --min-grade, gates on the ten-band ordinal
- * comparison so a release can fail a build on a bad grade.
- */
-export declare function score(url: string, opts?: ScoreOptions): Promise<void>;
-//# sourceMappingURL=score.d.ts.map

package/dist/commands/score.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/commands/score.ts"],"names":[],"mappings":"AAkCA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoWD;;;;;GAKG;AACH,wBAAsB,KAAK,CACzB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CAgOf"}