@kya-os/cli 2.0.0 → 2.0.2

package/node_modules/@kya-os/contracts/dist/identity/schemas.d.ts

@@ -0,0 +1,250 @@
+/**
+ * Identity Resolution Schemas
+ *
+ * Types and schemas for OAuth identity → persistent user DID resolution.
+ * Used by xmcp-i to call AgentShield's identity resolution endpoint.
+ *
+ * Part of Phase 5: Identity Resolution Integration
+ *
+ * @see ACCOUNT_CENTRIC_IDENTITY_AND_VC_IMPLEMENTATION.md
+ */
+import { z } from "zod";
+/**
+ * OAuth result from identity provider
+ *
+ * Contains user information from OAuth authentication flow.
+ */
+export declare const OAuthResultSchema: z.ZodObject<{
+    /** OAuth provider name (e.g., 'google', 'github', 'microsoft') */
+    provider: z.ZodString;
+    /** OAuth subject claim (unique per provider) */
+    sub: z.ZodString;
+    /** User's email from OAuth provider */
+    email: z.ZodOptional<z.ZodString>;
+    /** Whether email was verified by provider */
+    email_verified: z.ZodOptional<z.ZodBoolean>;
+    /** Display name from OAuth provider */
+    name: z.ZodOptional<z.ZodString>;
+    /** Avatar URL from OAuth provider */
+    picture: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    provider: string;
+    sub: string;
+    name?: string | undefined;
+    email?: string | undefined;
+    email_verified?: boolean | undefined;
+    picture?: string | undefined;
+}, {
+    provider: string;
+    sub: string;
+    name?: string | undefined;
+    email?: string | undefined;
+    email_verified?: boolean | undefined;
+    picture?: string | undefined;
+}>;
+export type OAuthResult = z.infer<typeof OAuthResultSchema>;
+/**
+ * Identity resolution request
+ *
+ * POST /api/v1/bouncer/identity/resolve
+ */
+export declare const IdentityResolveRequestSchema: z.ZodObject<{
+    /** Project UUID */
+    project_id: z.ZodString;
+    /** OAuth authentication result */
+    oauth_result: z.ZodObject<{
+        /** OAuth provider name (e.g., 'google', 'github', 'microsoft') */
+        provider: z.ZodString;
+        /** OAuth subject claim (unique per provider) */
+        sub: z.ZodString;
+        /** User's email from OAuth provider */
+        email: z.ZodOptional<z.ZodString>;
+        /** Whether email was verified by provider */
+        email_verified: z.ZodOptional<z.ZodBoolean>;
+        /** Display name from OAuth provider */
+        name: z.ZodOptional<z.ZodString>;
+        /** Avatar URL from OAuth provider */
+        picture: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        provider: string;
+        sub: string;
+        name?: string | undefined;
+        email?: string | undefined;
+        email_verified?: boolean | undefined;
+        picture?: string | undefined;
+    }, {
+        provider: string;
+        sub: string;
+        name?: string | undefined;
+        email?: string | undefined;
+        email_verified?: boolean | undefined;
+        picture?: string | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    project_id: string;
+    oauth_result: {
+        provider: string;
+        sub: string;
+        name?: string | undefined;
+        email?: string | undefined;
+        email_verified?: boolean | undefined;
+        picture?: string | undefined;
+    };
+}, {
+    project_id: string;
+    oauth_result: {
+        provider: string;
+        sub: string;
+        name?: string | undefined;
+        email?: string | undefined;
+        email_verified?: boolean | undefined;
+        picture?: string | undefined;
+    };
+}>;
+export type IdentityResolveRequest = z.infer<typeof IdentityResolveRequestSchema>;
+/**
+ * Identity resolution response
+ *
+ * Returns the persistent user DID and account information.
+ */
+export declare const IdentityResolveResponseSchema: z.ZodObject<{
+    success: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        /** Persistent user DID (did:key:z6Mk...) */
+        user_did: z.ZodString;
+        /** User account UUID */
+        user_account_id: z.ZodString;
+        /** Whether a new account was created */
+        is_new_account: z.ZodBoolean;
+        /** Whether identity was auto-linked by email */
+        auto_linked: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        user_did: string;
+        user_account_id: string;
+        is_new_account: boolean;
+        auto_linked: boolean;
+    }, {
+        user_did: string;
+        user_account_id: string;
+        is_new_account: boolean;
+        auto_linked: boolean;
+    }>;
+    metadata: z.ZodOptional<z.ZodObject<{
+        requestId: z.ZodOptional<z.ZodString>;
+        timestamp: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        timestamp?: string | undefined;
+        requestId?: string | undefined;
+    }, {
+        timestamp?: string | undefined;
+        requestId?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    success: true;
+    data: {
+        user_did: string;
+        user_account_id: string;
+        is_new_account: boolean;
+        auto_linked: boolean;
+    };
+    metadata?: {
+        timestamp?: string | undefined;
+        requestId?: string | undefined;
+    } | undefined;
+}, {
+    success: true;
+    data: {
+        user_did: string;
+        user_account_id: string;
+        is_new_account: boolean;
+        auto_linked: boolean;
+    };
+    metadata?: {
+        timestamp?: string | undefined;
+        requestId?: string | undefined;
+    } | undefined;
+}>;
+export type IdentityResolveResponse = z.infer<typeof IdentityResolveResponseSchema>;
+/**
+ * Identity resolution error response
+ */
+export declare const IdentityResolveErrorSchema: z.ZodObject<{
+    success: z.ZodLiteral<false>;
+    error: z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+        details: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            message: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            message: string;
+        }, {
+            path: string;
+            message: string;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        code: string;
+        message: string;
+        details?: {
+            path: string;
+            message: string;
+        }[] | undefined;
+    }, {
+        code: string;
+        message: string;
+        details?: {
+            path: string;
+            message: string;
+        }[] | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    error: {
+        code: string;
+        message: string;
+        details?: {
+            path: string;
+            message: string;
+        }[] | undefined;
+    };
+    success: false;
+}, {
+    error: {
+        code: string;
+        message: string;
+        details?: {
+            path: string;
+            message: string;
+        }[] | undefined;
+    };
+    success: false;
+}>;
+export type IdentityResolveError = z.infer<typeof IdentityResolveErrorSchema>;
+/**
+ * Parse and validate identity resolution request
+ */
+export declare function parseIdentityResolveRequest(data: unknown): IdentityResolveRequest;
+/**
+ * Safely validate identity resolution request
+ */
+export declare function safeParseIdentityResolveRequest(data: unknown): {
+    success: true;
+    data: IdentityResolveRequest;
+} | {
+    success: false;
+    error: z.ZodError;
+};
+/**
+ * Parse and validate identity resolution response
+ */
+export declare function parseIdentityResolveResponse(data: unknown): IdentityResolveResponse;
+/**
+ * Safely validate identity resolution response
+ */
+export declare function safeParseIdentityResolveResponse(data: unknown): {
+    success: true;
+    data: IdentityResolveResponse;
+} | {
+    success: false;
+    error: z.ZodError;
+};

package/node_modules/@kya-os/contracts/dist/identity/schemas.js

@@ -0,0 +1,115 @@
+"use strict";
+/**
+ * Identity Resolution Schemas
+ *
+ * Types and schemas for OAuth identity → persistent user DID resolution.
+ * Used by xmcp-i to call AgentShield's identity resolution endpoint.
+ *
+ * Part of Phase 5: Identity Resolution Integration
+ *
+ * @see ACCOUNT_CENTRIC_IDENTITY_AND_VC_IMPLEMENTATION.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityResolveErrorSchema = exports.IdentityResolveResponseSchema = exports.IdentityResolveRequestSchema = exports.OAuthResultSchema = void 0;
+exports.parseIdentityResolveRequest = parseIdentityResolveRequest;
+exports.safeParseIdentityResolveRequest = safeParseIdentityResolveRequest;
+exports.parseIdentityResolveResponse = parseIdentityResolveResponse;
+exports.safeParseIdentityResolveResponse = safeParseIdentityResolveResponse;
+const zod_1 = require("zod");
+/**
+ * OAuth result from identity provider
+ *
+ * Contains user information from OAuth authentication flow.
+ */
+exports.OAuthResultSchema = zod_1.z.object({
+    /** OAuth provider name (e.g., 'google', 'github', 'microsoft') */
+    provider: zod_1.z.string().min(1, "Provider is required"),
+    /** OAuth subject claim (unique per provider) */
+    sub: zod_1.z.string().min(1, "Subject claim is required"),
+    /** User's email from OAuth provider */
+    email: zod_1.z.string().email().optional(),
+    /** Whether email was verified by provider */
+    email_verified: zod_1.z.boolean().optional(),
+    /** Display name from OAuth provider */
+    name: zod_1.z.string().optional(),
+    /** Avatar URL from OAuth provider */
+    picture: zod_1.z.string().url().optional(),
+});
+/**
+ * Identity resolution request
+ *
+ * POST /api/v1/bouncer/identity/resolve
+ */
+exports.IdentityResolveRequestSchema = zod_1.z.object({
+    /** Project UUID */
+    project_id: zod_1.z.string().uuid("Invalid project ID format"),
+    /** OAuth authentication result */
+    oauth_result: exports.OAuthResultSchema,
+});
+/**
+ * Identity resolution response
+ *
+ * Returns the persistent user DID and account information.
+ */
+exports.IdentityResolveResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    data: zod_1.z.object({
+        /** Persistent user DID (did:key:z6Mk...) */
+        user_did: zod_1.z.string().regex(/^did:(key|web):.+$/, "Invalid user DID format"),
+        /** User account UUID */
+        user_account_id: zod_1.z.string().uuid(),
+        /** Whether a new account was created */
+        is_new_account: zod_1.z.boolean(),
+        /** Whether identity was auto-linked by email */
+        auto_linked: zod_1.z.boolean(),
+    }),
+    metadata: zod_1.z
+        .object({
+        requestId: zod_1.z.string().optional(),
+        timestamp: zod_1.z.string().datetime().optional(),
+    })
+        .optional(),
+});
+/**
+ * Identity resolution error response
+ */
+exports.IdentityResolveErrorSchema = zod_1.z.object({
+    success: zod_1.z.literal(false),
+    error: zod_1.z.object({
+        code: zod_1.z.string(),
+        message: zod_1.z.string(),
+        details: zod_1.z.array(zod_1.z.object({ path: zod_1.z.string(), message: zod_1.z.string() })).optional(),
+    }),
+});
+/**
+ * Parse and validate identity resolution request
+ */
+function parseIdentityResolveRequest(data) {
+    return exports.IdentityResolveRequestSchema.parse(data);
+}
+/**
+ * Safely validate identity resolution request
+ */
+function safeParseIdentityResolveRequest(data) {
+    const result = exports.IdentityResolveRequestSchema.safeParse(data);
+    if (result.success) {
+        return { success: true, data: result.data };
+    }
+    return { success: false, error: result.error };
+}
+/**
+ * Parse and validate identity resolution response
+ */
+function parseIdentityResolveResponse(data) {
+    return exports.IdentityResolveResponseSchema.parse(data);
+}
+/**
+ * Safely validate identity resolution response
+ */
+function safeParseIdentityResolveResponse(data) {
+    const result = exports.IdentityResolveResponseSchema.safeParse(data);
+    if (result.success) {
+        return { success: true, data: result.data };
+    }
+    return { success: false, error: result.error };
+}

package/node_modules/@kya-os/contracts/dist/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @kya-os/contracts - Shared types and schemas for XMCP-I ecosystem
+ *
+ * This package provides a single source of truth for all types and contracts
+ * used across the XMCP-I ecosystem, including runtime, CLI, verifier, and registry.
+ *
+ * NOTE: Some exports may conflict. Use subpath imports for new modules:
+ * - import { ... } from '@kya-os/contracts/did'
+ * - import { ... } from '@kya-os/contracts/vc'
+ * - import { ... } from '@kya-os/contracts/delegation'
+ * - import { ... } from '@kya-os/contracts/runtime'
+ * - import { ... } from '@kya-os/contracts/tlkrc'
+ * - import { ... } from '@kya-os/contracts/env'
+ */
+export * from "./handshake/index.js";
+export * from "./proof/index.js";
+export * from "./verifier/index.js";
+export * from "./registry.js";
+export * from "./cli.js";
+export * from "./test.js";
+export * from "./utils/validation.js";
+export * from "./vc/index.js";
+export * from "./delegation/index.js";
+export * from "./policy/index.js";
+export * from "./pairing/index.js";
+export declare const CONTRACTS_VERSION = "1.2.1";
+export declare const SUPPORTED_XMCP_I_VERSION = "^1.0.0";
+export * from './workbench/index.js';

package/node_modules/@kya-os/contracts/dist/index.js

@@ -0,0 +1,66 @@
+"use strict";
+/**
+ * @kya-os/contracts - Shared types and schemas for XMCP-I ecosystem
+ *
+ * This package provides a single source of truth for all types and contracts
+ * used across the XMCP-I ecosystem, including runtime, CLI, verifier, and registry.
+ *
+ * NOTE: Some exports may conflict. Use subpath imports for new modules:
+ * - import { ... } from '@kya-os/contracts/did'
+ * - import { ... } from '@kya-os/contracts/vc'
+ * - import { ... } from '@kya-os/contracts/delegation'
+ * - import { ... } from '@kya-os/contracts/runtime'
+ * - import { ... } from '@kya-os/contracts/tlkrc'
+ * - import { ... } from '@kya-os/contracts/env'
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPORTED_XMCP_I_VERSION = exports.CONTRACTS_VERSION = void 0;
+// Legacy exports (maintain backward compatibility)
+__exportStar(require("./handshake/index.js"), exports);
+__exportStar(require("./proof/index.js"), exports);
+__exportStar(require("./verifier/index.js"), exports);
+__exportStar(require("./registry.js"), exports);
+__exportStar(require("./cli.js"), exports);
+__exportStar(require("./test.js"), exports);
+__exportStar(require("./utils/validation.js"), exports);
+// W3C VC and Delegation exports (for mcp-i-core compatibility)
+__exportStar(require("./vc/index.js"), exports);
+__exportStar(require("./delegation/index.js"), exports);
+// Policy types (for mcp-i-core compatibility with webpack alias)
+__exportStar(require("./policy/index.js"), exports);
+// Pairing WS event types (compute → dashboard)
+__exportStar(require("./pairing/index.js"), exports);
+// Version information
+exports.CONTRACTS_VERSION = "1.2.1";
+exports.SUPPORTED_XMCP_I_VERSION = "^1.0.0";
+// New MCP-I contract types are available via subpath imports:
+// import { ... } from '@kya-os/contracts/did'
+// import { ... } from '@kya-os/contracts/vc'
+// import { ... } from '@kya-os/contracts/delegation'
+// import { ... } from '@kya-os/contracts/runtime'
+// import { ... } from '@kya-os/contracts/tlkrc'
+// import { ... } from '@kya-os/contracts/env'
+// import { ... } from '@kya-os/contracts/agentshield-api'
+// import { ... } from '@kya-os/contracts/tool-protection'
+// import { ... } from '@kya-os/contracts/well-known'
+// import { ... } from '@kya-os/contracts/identity'  // Phase 5: Identity resolution
+// import { ... } from '@kya-os/contracts/reputation' // Reputation scoring system
+// import { ... } from '@kya-os/contracts/policy'     // Agent policy configuration
+// import { ... } from '@kya-os/contracts/review'     // PR review verdicts
+// import { ... } from '@kya-os/contracts/skills'     // Agent skill manifests (review-loop P19)
+// import { ... } from '@kya-os/contracts/cli-read'   // Checkpoint CLI read plane (review-loop P24)
+__exportStar(require("./workbench/index.js"), exports);