@kya-os/contracts 1.2.2 → 1.3.1-canary.0

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAQ/B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;EASlC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAO7B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAK5B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAIjC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;EAIxB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;EAI1B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAKlC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;EAMjC,CAAC;AAGH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,WAAW;;;;;;;;;CASd,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,WAAW,CAAC;AAGjD,eAAO,MAAM,cAAc;;;;;;;;;;CAUjB,CAAC"}

package/dist/delegation/constraints.d.ts

@@ -112,8 +112,10 @@ export declare const DelegationConstraintsSchema: z.ZodObject<{
     notBefore: z.ZodOptional<z.ZodNumber>;
     /** Not valid after (Unix timestamp in seconds) */
     notAfter: z.ZodOptional<z.ZodNumber>;
-    /** CRISP-specific constraints */
-    crisp: z.ZodObject<{
+    /** Simple scopes array (for Phase 1 bouncer - simplified model) */
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** CRISP-specific constraints (full model) */
+    crisp: z.ZodOptional<z.ZodObject<{
         /** Optional budget constraint */
         budget: z.ZodOptional<z.ZodObject<{
             /** Unit of the budget */
@@ -269,14 +271,16 @@ export declare const DelegationConstraintsSchema: z.ZodObject<{
             matcher: "exact" | "prefix" | "regex";
             constraints?: Record<string, any> | undefined;
         }>, "many">;
-    }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     /** Not valid before (Unix timestamp in seconds) */
     notBefore: z.ZodOptional<z.ZodNumber>;
     /** Not valid after (Unix timestamp in seconds) */
     notAfter: z.ZodOptional<z.ZodNumber>;
-    /** CRISP-specific constraints */
-    crisp: z.ZodObject<{
+    /** Simple scopes array (for Phase 1 bouncer - simplified model) */
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** CRISP-specific constraints (full model) */
+    crisp: z.ZodOptional<z.ZodObject<{
         /** Optional budget constraint */
         budget: z.ZodOptional<z.ZodObject<{
             /** Unit of the budget */
@@ -432,14 +436,16 @@ export declare const DelegationConstraintsSchema: z.ZodObject<{
             matcher: "exact" | "prefix" | "regex";
             constraints?: Record<string, any> | undefined;
         }>, "many">;
-    }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     /** Not valid before (Unix timestamp in seconds) */
     notBefore: z.ZodOptional<z.ZodNumber>;
     /** Not valid after (Unix timestamp in seconds) */
     notAfter: z.ZodOptional<z.ZodNumber>;
-    /** CRISP-specific constraints */
-    crisp: z.ZodObject<{
+    /** Simple scopes array (for Phase 1 bouncer - simplified model) */
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** CRISP-specific constraints (full model) */
+    crisp: z.ZodOptional<z.ZodObject<{
         /** Optional budget constraint */
         budget: z.ZodOptional<z.ZodObject<{
             /** Unit of the budget */
@@ -595,7 +601,7 @@ export declare const DelegationConstraintsSchema: z.ZodObject<{
             matcher: "exact" | "prefix" | "regex";
             constraints?: Record<string, any> | undefined;
         }>, "many">;
-    }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, z.ZodTypeAny, "passthrough">>;
 export type DelegationConstraints = z.infer<typeof DelegationConstraintsSchema>;
 /**
@@ -612,8 +618,10 @@ export declare function validateDelegationConstraints(constraints: unknown): z.S
     notBefore: z.ZodOptional<z.ZodNumber>;
     /** Not valid after (Unix timestamp in seconds) */
     notAfter: z.ZodOptional<z.ZodNumber>;
-    /** CRISP-specific constraints */
-    crisp: z.ZodObject<{
+    /** Simple scopes array (for Phase 1 bouncer - simplified model) */
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** CRISP-specific constraints (full model) */
+    crisp: z.ZodOptional<z.ZodObject<{
         /** Optional budget constraint */
         budget: z.ZodOptional<z.ZodObject<{
             /** Unit of the budget */
@@ -769,14 +777,16 @@ export declare function validateDelegationConstraints(constraints: unknown): z.S
             matcher: "exact" | "prefix" | "regex";
             constraints?: Record<string, any> | undefined;
         }>, "many">;
-    }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, z.ZodTypeAny, "passthrough">, z.objectOutputType<{
     /** Not valid before (Unix timestamp in seconds) */
     notBefore: z.ZodOptional<z.ZodNumber>;
     /** Not valid after (Unix timestamp in seconds) */
     notAfter: z.ZodOptional<z.ZodNumber>;
-    /** CRISP-specific constraints */
-    crisp: z.ZodObject<{
+    /** Simple scopes array (for Phase 1 bouncer - simplified model) */
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** CRISP-specific constraints (full model) */
+    crisp: z.ZodOptional<z.ZodObject<{
         /** Optional budget constraint */
         budget: z.ZodOptional<z.ZodObject<{
             /** Unit of the budget */
@@ -932,7 +942,7 @@ export declare function validateDelegationConstraints(constraints: unknown): z.S
             matcher: "exact" | "prefix" | "regex";
             constraints?: Record<string, any> | undefined;
         }>, "many">;
-    }, z.ZodTypeAny, "passthrough">>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, z.ZodTypeAny, "passthrough">>;
 /**
  * Check if constraints have a valid time range

package/dist/delegation/constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../../src/delegation/constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,cAAc,qCAAmC,CAAC;AAC/D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,gBAAgB,iCAA+B,CAAC;AAC7D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;IAC7B,wCAAwC;;IAGxC,0BAA0B;;;;;;;;EAE1B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;IAC5B,yBAAyB;;IAGzB,+BAA+B;;IAG/B,0CAA0C;;QArB1C,wCAAwC;;QAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;EAoB1B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,kBAAkB,yCAAuC,CAAC;AACvE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;IAC3B,6DAA6D;;IAG7D,gCAAgC;;IAGhC,oDAAoD;;;;;;;;;;EAEpD,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;IACtC,mDAAmD;;IAGnD,kDAAkD;;IAGlD,mEAAmE;;IAGnE,8CAA8C;;QAE5C,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;;IAYpD,mDAAmD;;IAGnD,kDAAkD;;IAGlD,mEAAmE;;IAGnE,8CAA8C;;QAE5C,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;;IAYpD,mDAAmD;;IAGnD,kDAAkD;;IAGlD,mEAAmE;;IAGnE,8CAA8C;;QAE5C,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;gCA+BtC,CAAC;AAEjB,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;GAEG;AAEH;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,OAAO;IAjChE,mDAAmD;;IAGnD,kDAAkD;;IAGlD,mEAAmE;;IAGnE,8CAA8C;;QAE5C,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;;IAYpD,mDAAmD;;IAGnD,kDAAkD;;IAGlD,mEAAmE;;IAGnE,8CAA8C;;QAE5C,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;QAuBlD,iCAAiC;;YArDnC,yBAAyB;;YAGzB,+BAA+B;;YAG/B,0CAA0C;;gBArB1C,wCAAwC;;gBAGxC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;QAoExB,mCAAmC;;YAhCrC,6DAA6D;;YAG7D,gCAAgC;;YAGhC,oDAAoD;;;;;;;;;;;;iCA+CrD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAU7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAiDT;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,GAChB,OAAO,CAgBT;AAED;;GAEG;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,EAA6B,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,YAAY,EAAiC,CAAC;AAE/E;;GAEG;AACH,eAAO,MAAM,cAAc,QAA0B,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,uBAAuB,QAA0B,CAAC"}

package/dist/delegation/constraints.js

@@ -74,14 +74,16 @@ exports.DelegationConstraintsSchema = zod_1.z.object({
     notBefore: zod_1.z.number().int().optional(),
     /** Not valid after (Unix timestamp in seconds) */
     notAfter: zod_1.z.number().int().optional(),
-    /** CRISP-specific constraints */
+    /** Simple scopes array (for Phase 1 bouncer - simplified model) */
+    scopes: zod_1.z.array(zod_1.z.string()).optional(),
+    /** CRISP-specific constraints (full model) */
     crisp: zod_1.z.object({
         /** Optional budget constraint */
         budget: exports.CrispBudgetSchema.optional(),
         /** Required: at least one scope */
         scopes: zod_1.z.array(exports.CrispScopeSchema).min(1),
         /** Optional additional CRISP fields */
-    }).passthrough(),
+    }).passthrough().optional(),
 }).passthrough(); // Allow extensibility
 /**
  * Validation Helpers
@@ -133,8 +135,8 @@ function areChildConstraintsValid(parent, child) {
         }
     }
     // Budget: child must be ≤ parent (if same unit)
-    if (parent.crisp.budget &&
-        child.crisp.budget &&
+    if (parent.crisp?.budget &&
+        child.crisp?.budget &&
         parent.crisp.budget.unit === child.crisp.budget.unit) {
         if (child.crisp.budget.cap > parent.crisp.budget.cap) {
             return false;
@@ -142,21 +144,24 @@ function areChildConstraintsValid(parent, child) {
     }
     // Scopes: child scopes must be subset of parent scopes
     // This is a simplified check - full validation is complex
-    const parentResources = new Set(parent.crisp.scopes.map((s) => s.resource));
-    const allChildResourcesInParent = child.crisp.scopes.every((childScope) => {
-        // Check if child resource matches any parent resource
-        return parent.crisp.scopes.some((parentScope) => {
-            if (parentScope.matcher === 'exact') {
-                return parentScope.resource === childScope.resource;
-            }
-            if (parentScope.matcher === 'prefix') {
-                return childScope.resource.startsWith(parentScope.resource);
-            }
-            // regex matching would require runtime regex evaluation
-            return true; // Can't validate regex at type level
+    if (parent.crisp && child.crisp) {
+        const parentResources = new Set(parent.crisp.scopes.map((s) => s.resource));
+        const allChildResourcesInParent = child.crisp.scopes.every((childScope) => {
+            // Check if child resource matches any parent resource
+            return parent.crisp.scopes.some((parentScope) => {
+                if (parentScope.matcher === 'exact') {
+                    return parentScope.resource === childScope.resource;
+                }
+                if (parentScope.matcher === 'prefix') {
+                    return childScope.resource.startsWith(parentScope.resource);
+                }
+                // regex matching would require runtime regex evaluation
+                return true; // Can't validate regex at type level
+            });
         });
-    });
-    return allChildResourcesInParent;
+        return allChildResourcesInParent;
+    }
+    return true; // Can't validate if crisp is not present
 }
 /**
  * Check if a resource matches a scope

package/dist/delegation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/delegation/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC"}