@kya-os/contracts 1.3.1-canary.0 → 1.3.1-canary.1

package/dist/verifier.d.ts

@@ -4,7 +4,7 @@ import { z } from "zod";
  */
 export declare const AgentContextSchema: z.ZodObject<{
     did: z.ZodString;
-    keyId: z.ZodString;
+    kid: z.ZodString;
     subject: z.ZodOptional<z.ZodString>;
     scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     session: z.ZodString;
@@ -14,31 +14,31 @@ export declare const AgentContextSchema: z.ZodObject<{
     verifiedAt: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
     did: string;
-    keyId: string;
-    session: string;
+    kid: string;
     scopes: string[];
+    session: string;
     confidence: "verified";
     registry: string;
     verifiedAt: number;
-    delegationRef?: string | undefined;
     subject?: string | undefined;
+    delegationRef?: string | undefined;
 }, {
     did: string;
-    keyId: string;
+    kid: string;
     session: string;
     confidence: "verified";
     registry: string;
     verifiedAt: number;
-    delegationRef?: string | undefined;
     subject?: string | undefined;
     scopes?: string[] | undefined;
+    delegationRef?: string | undefined;
 }>;
 export declare const VerifierResultSchema: z.ZodObject<{
     success: z.ZodBoolean;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     agentContext: z.ZodOptional<z.ZodObject<{
         did: z.ZodString;
-        keyId: z.ZodString;
+        kid: z.ZodString;
         subject: z.ZodOptional<z.ZodString>;
         scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         session: z.ZodString;
@@ -48,24 +48,24 @@ export declare const VerifierResultSchema: z.ZodObject<{
         verifiedAt: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
         did: string;
-        keyId: string;
-        session: string;
+        kid: string;
         scopes: string[];
+        session: string;
         confidence: "verified";
         registry: string;
         verifiedAt: number;
-        delegationRef?: string | undefined;
         subject?: string | undefined;
+        delegationRef?: string | undefined;
     }, {
         did: string;
-        keyId: string;
+        kid: string;
         session: string;
         confidence: "verified";
         registry: string;
         verifiedAt: number;
-        delegationRef?: string | undefined;
         subject?: string | undefined;
         scopes?: string[] | undefined;
+        delegationRef?: string | undefined;
     }>>;
     error: z.ZodOptional<z.ZodObject<{
         code: z.ZodString;
@@ -85,43 +85,43 @@ export declare const VerifierResultSchema: z.ZodObject<{
     }>>;
 }, "strip", z.ZodTypeAny, {
     success: boolean;
-    error?: {
-        code: string;
-        message: string;
-        httpStatus: number;
-        details?: any;
-    } | undefined;
     headers?: Record<string, string> | undefined;
     agentContext?: {
         did: string;
-        keyId: string;
-        session: string;
+        kid: string;
         scopes: string[];
+        session: string;
         confidence: "verified";
         registry: string;
         verifiedAt: number;
-        delegationRef?: string | undefined;
         subject?: string | undefined;
+        delegationRef?: string | undefined;
     } | undefined;
-}, {
-    success: boolean;
     error?: {
         code: string;
         message: string;
         httpStatus: number;
         details?: any;
     } | undefined;
+}, {
+    success: boolean;
     headers?: Record<string, string> | undefined;
     agentContext?: {
         did: string;
-        keyId: string;
+        kid: string;
         session: string;
         confidence: "verified";
         registry: string;
         verifiedAt: number;
-        delegationRef?: string | undefined;
         subject?: string | undefined;
         scopes?: string[] | undefined;
+        delegationRef?: string | undefined;
+    } | undefined;
+    error?: {
+        code: string;
+        message: string;
+        httpStatus: number;
+        details?: any;
     } | undefined;
 }>;
 export declare const StructuredErrorSchema: z.ZodObject<{
@@ -179,6 +179,14 @@ export declare const AGENT_HEADERS: {
     readonly REGISTRY: "X-Agent-Registry";
     readonly VERIFIED_AT: "X-Agent-Verified-At";
 };
+export declare const VERIFIER_ERROR_CODES: {
+    readonly PROOF_INVALID_TS: "XMCP_I_PROOF_INVALID_TS";
+    readonly PROOF_FUTURE_TS: "XMCP_I_PROOF_FUTURE_TS";
+    readonly PROOF_TOO_OLD: "XMCP_I_PROOF_TOO_OLD";
+    readonly PROOF_SKEW_EXCEEDED: "XMCP_I_PROOF_SKEW_EXCEEDED";
+    readonly SESSION_IDLE_EXPIRED: "XMCP_I_SESSION_IDLE_EXPIRED";
+    readonly SERVER_TIME_INVALID: "XMCP_I_SERVER_TIME_INVALID";
+};
 export declare const ERROR_HTTP_STATUS: {
     readonly XMCP_I_EBADPROOF: 403;
     readonly XMCP_I_ENOIDENTITY: 500;
@@ -188,5 +196,11 @@ export declare const ERROR_HTTP_STATUS: {
     readonly XMCP_I_ECLAIM: 400;
     readonly XMCP_I_ECONFIG: 500;
     readonly XMCP_I_ERUNTIME: 500;
+    readonly XMCP_I_PROOF_INVALID_TS: 403;
+    readonly XMCP_I_PROOF_FUTURE_TS: 403;
+    readonly XMCP_I_PROOF_TOO_OLD: 403;
+    readonly XMCP_I_PROOF_SKEW_EXCEEDED: 401;
+    readonly XMCP_I_SESSION_IDLE_EXPIRED: 401;
+    readonly XMCP_I_SERVER_TIME_INVALID: 500;
 };
 //# sourceMappingURL=verifier.d.ts.map

package/dist/verifier.js

@@ -1,13 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ERROR_HTTP_STATUS = exports.AGENT_HEADERS = exports.StructuredErrorSchema = exports.VerifierResultSchema = exports.AgentContextSchema = void 0;
+exports.ERROR_HTTP_STATUS = exports.VERIFIER_ERROR_CODES = exports.AGENT_HEADERS = exports.StructuredErrorSchema = exports.VerifierResultSchema = exports.AgentContextSchema = void 0;
 const zod_1 = require("zod");
 /**
  * Verifier middleware schemas and headers
  */
 exports.AgentContextSchema = zod_1.z.object({
     did: zod_1.z.string().min(1),
-    keyId: zod_1.z.string().min(1),
+    kid: zod_1.z.string().min(1),
     subject: zod_1.z.string().optional(),
     scopes: zod_1.z.array(zod_1.z.string()).default([]),
     session: zod_1.z.string().min(1),
@@ -54,6 +54,15 @@ exports.AGENT_HEADERS = {
     REGISTRY: "X-Agent-Registry",
     VERIFIED_AT: "X-Agent-Verified-At",
 };
+// Verifier-specific error codes
+exports.VERIFIER_ERROR_CODES = {
+    PROOF_INVALID_TS: "XMCP_I_PROOF_INVALID_TS",
+    PROOF_FUTURE_TS: "XMCP_I_PROOF_FUTURE_TS",
+    PROOF_TOO_OLD: "XMCP_I_PROOF_TOO_OLD",
+    PROOF_SKEW_EXCEEDED: "XMCP_I_PROOF_SKEW_EXCEEDED",
+    SESSION_IDLE_EXPIRED: "XMCP_I_SESSION_IDLE_EXPIRED",
+    SERVER_TIME_INVALID: "XMCP_I_SERVER_TIME_INVALID",
+};
 // HTTP status mappings
 exports.ERROR_HTTP_STATUS = {
     XMCP_I_EBADPROOF: 403,
@@ -64,5 +73,12 @@ exports.ERROR_HTTP_STATUS = {
     XMCP_I_ECLAIM: 400,
     XMCP_I_ECONFIG: 500,
     XMCP_I_ERUNTIME: 500,
+    // Verifier-specific codes
+    [exports.VERIFIER_ERROR_CODES.PROOF_INVALID_TS]: 403,
+    [exports.VERIFIER_ERROR_CODES.PROOF_FUTURE_TS]: 403,
+    [exports.VERIFIER_ERROR_CODES.PROOF_TOO_OLD]: 403,
+    [exports.VERIFIER_ERROR_CODES.PROOF_SKEW_EXCEEDED]: 401,
+    [exports.VERIFIER_ERROR_CODES.SESSION_IDLE_EXPIRED]: 401,
+    [exports.VERIFIER_ERROR_CODES.SERVER_TIME_INVALID]: 500,
 };
 //# sourceMappingURL=verifier.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.3.1-canary.0",
+  "version": "1.3.1-canary.1",
   "description": "Shared types and schemas for XMCP-I ecosystem",
   "type": "commonjs",
   "sideEffects": false,
@@ -71,18 +71,16 @@
       "types": "./dist/env/index.d.ts",
       "import": "./dist/env/index.js",
       "require": "./dist/env/index.js"
-    },
-    "./schemas/*": "./dist/json-schema/*"
+    }
   },
   "files": [
     "dist/**/*.js",
     "dist/**/*.d.ts",
-    "dist/**/*.d.ts.map",
+    "!dist/**/*.map",
     "!dist/**/__tests__/**",
     "!dist/**/__fixtures__/**",
     "!dist/**/*.spec.*",
     "!dist/**/*.test.*",
-    "schemas",
     "README.md"
   ],
   "scripts": {

package/dist/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAQ/B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;EASlC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAO7B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAK5B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAIjC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;EAIxB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;EAI1B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAKlC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;EAMjC,CAAC;AAGH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,WAAW;;;;;;;;;CASd,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,WAAW,CAAC;AAGjD,eAAO,MAAM,cAAc;;;;;;;;;;CAUjB,CAAC"}