@kya-os/contracts 1.4.0 → 1.5.2-canary.0

package/dist/agentshield-api/schemas.js

@@ -162,4 +162,3 @@ exports.revokeDelegationResponseSchema = zod_1.z.object({
  * Wrapped revocation response schema
  */
 exports.revokeDelegationAPIResponseSchema = (0, exports.agentShieldAPIResponseSchema)(exports.revokeDelegationResponseSchema);
-//# sourceMappingURL=schemas.js.map

package/dist/agentshield-api/types.d.ts

@@ -109,7 +109,7 @@ export interface AgentShieldToolProtection {
 }
 /**
  * Response from tool protection config endpoint
- * GET /api/v1/bouncer/config/{projectId}
+ * GET /api/v1/bouncer/projects/{projectId}/config
  */
 export interface ToolProtectionConfigResponse {
     agent_did: string;
@@ -166,3 +166,4 @@ export declare class AgentShieldAPIError extends Error {
     readonly details?: Record<string, unknown> | undefined;
     constructor(code: string, message: string, details?: Record<string, unknown> | undefined);
 }
+//# sourceMappingURL=types.d.ts.map

package/dist/agentshield-api/types.js

@@ -24,4 +24,3 @@ class AgentShieldAPIError extends Error {
     }
 }
 exports.AgentShieldAPIError = AgentShieldAPIError;
-//# sourceMappingURL=types.js.map

package/dist/config/builder.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Configuration Builder Utilities
+ *
+ * Shared utilities for building MCP-I configuration objects with sensible defaults.
+ * These functions are platform-agnostic and can be used by any adapter/platform.
+ *
+ * @module @kya-os/contracts/config
+ */
+import type { MCPIBaseConfig } from './base.js';
+import type { RuntimeIdentityConfig } from './identity.js';
+import type { ProofingConfig } from './proofing.js';
+import type { DelegationConfig } from './delegation.js';
+import type { ToolProtectionSourceConfig } from './tool-protection.js';
+/**
+ * Complete runtime configuration type
+ * This can be extended by platform-specific configs
+ */
+export interface MCPIConfig extends MCPIBaseConfig {
+    identity?: RuntimeIdentityConfig;
+    proofing?: ProofingConfig;
+    delegation?: DelegationConfig;
+    toolProtection?: ToolProtectionSourceConfig;
+}
+/**
+ * Build base MCPIConfig that works across all platforms
+ *
+ * Creates a platform-agnostic configuration object with sensible defaults
+ * for identity, proofing, delegation, audit, and session management.
+ *
+ * @param env - Environment variables object (works with process.env or Cloudflare env)
+ * @returns Complete MCPIConfig object
+ */
+export declare function buildBaseConfig(env: Record<string, any>): MCPIConfig;
+//# sourceMappingURL=builder.d.ts.map

package/dist/config/builder.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * Configuration Builder Utilities
+ *
+ * Shared utilities for building MCP-I configuration objects with sensible defaults.
+ * These functions are platform-agnostic and can be used by any adapter/platform.
+ *
+ * @module @kya-os/contracts/config
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildBaseConfig = buildBaseConfig;
+/**
+ * Build base MCPIConfig that works across all platforms
+ *
+ * Creates a platform-agnostic configuration object with sensible defaults
+ * for identity, proofing, delegation, audit, and session management.
+ *
+ * @param env - Environment variables object (works with process.env or Cloudflare env)
+ * @returns Complete MCPIConfig object
+ */
+function buildBaseConfig(env) {
+    const environment = (env.MCPI_ENV || env.ENVIRONMENT || 'development');
+    const isDevelopment = environment === 'development';
+    const baseConfig = {
+        environment,
+        identity: {
+            enabled: true,
+            environment,
+            devIdentityPath: '.mcpi/identity.json'
+        },
+        proofing: {
+            enabled: true,
+            batchQueue: {
+                destinations: [
+                    {
+                        type: 'agentshield',
+                        apiUrl: env.AGENTSHIELD_API_URL || 'https://kya.vouched.id',
+                        apiKey: env.AGENTSHIELD_API_KEY || ''
+                    }
+                ],
+                maxBatchSize: 10,
+                flushIntervalMs: 5000,
+                maxRetries: 3,
+                debug: isDevelopment
+            }
+        },
+        delegation: {
+            enabled: true,
+            enforceDelegations: true,
+            verifier: {
+                type: 'agentshield',
+                apiUrl: env.AGENTSHIELD_API_URL || 'https://kya.vouched.id',
+                apiKey: env.AGENTSHIELD_API_KEY || '',
+                cacheTtl: 60000, // 1 minute cache
+                debug: isDevelopment
+            },
+            authorization: {
+                authorizationUrl: env.AUTHORIZATION_URL || `${env.AGENTSHIELD_API_URL || 'https://kya.vouched.id'}/authorize`,
+                resumeTokenTtl: 600000, // 10 minutes
+                minReputationScore: 76
+            }
+        },
+        audit: {
+            enabled: true,
+            includeProofHashes: false,
+            includePayloads: false
+        },
+        session: {
+            timestampSkewSeconds: 120,
+            ttlMinutes: 30
+        }
+    };
+    return baseConfig;
+}
+//# sourceMappingURL=builder.js.map

package/dist/config/index.d.ts

@@ -6,21 +6,22 @@
  *
  * @module @kya-os/contracts/config
  */
-import type { MCPIBaseConfig } from './base.js';
-import type { RuntimeIdentityConfig } from './identity.js';
-import type { ProofingConfig } from './proofing.js';
-import type { DelegationConfig } from './delegation.js';
-import type { ToolProtectionSourceConfig } from './tool-protection.js';
-export { MCPIBaseConfig } from './base.js';
-export { RuntimeIdentityConfig, AgentIdentity } from './identity.js';
+import type { MCPIBaseConfig } from "./base.js";
+import type { RuntimeIdentityConfig } from "./identity.js";
+import type { ProofingConfig } from "./proofing.js";
+import type { DelegationConfig } from "./delegation.js";
+import type { ToolProtectionSourceConfig } from "./tool-protection.js";
+export { MCPIBaseConfig } from "./base.js";
+export { RuntimeIdentityConfig, AgentIdentity } from "./identity.js";
 /**
  * @deprecated Use RuntimeIdentityConfig instead
  * This export is maintained for backward compatibility
  */
 export type IdentityConfig = RuntimeIdentityConfig;
-export { ProofingConfig, ProofBatchQueueConfig, ProofDestination, ProofDestinationType } from './proofing.js';
-export { DelegationConfig, DelegationVerifierConfig, DelegationVerifierType, AuthorizationConfig, DelegationRecord } from './delegation.js';
-export { ToolProtection, ToolProtectionMap, ToolProtectionSourceConfig, ToolProtectionSourceType, ToolProtectionServiceConfig, DelegationRequiredErrorData, ToolProtectionResponse } from './tool-protection.js';
+export { ProofingConfig, ProofBatchQueueConfig, ProofDestination, ProofDestinationType, } from "./proofing.js";
+export { DelegationConfig, DelegationVerifierConfig, DelegationVerifierType, AuthorizationConfig, DelegationRecord, } from "./delegation.js";
+export { ToolProtection, ToolProtectionMap, ToolProtectionSourceConfig, ToolProtectionSourceType, ToolProtectionServiceConfig, DelegationRequiredErrorData, ToolProtectionResponse, } from "./tool-protection.js";
+export { buildBaseConfig } from "./builder.js";
 /**
  * Complete runtime configuration type
  * This can be extended by platform-specific configs
@@ -31,3 +32,4 @@ export interface MCPIConfig extends MCPIBaseConfig {
     delegation?: DelegationConfig;
     toolProtection?: ToolProtectionSourceConfig;
 }
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.js

@@ -8,4 +8,8 @@
  * @module @kya-os/contracts/config
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildBaseConfig = void 0;
+// Configuration builder utilities
+var builder_js_1 = require("./builder.js");
+Object.defineProperty(exports, "buildBaseConfig", { enumerable: true, get: function () { return builder_js_1.buildBaseConfig; } });
 //# sourceMappingURL=index.js.map

package/dist/dashboard-config/default-config.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Default Configuration for MCP-I Servers
+ *
+ * Provides safe, production-ready defaults for new user configurations.
+ * Used by AgentShield Dashboard, Scaffolder, and Runtime fallbacks.
+ *
+ * @package @kya-os/contracts/dashboard-config
+ */
+import type { MCPIServerConfig } from "./types.js";
+/**
+ * Default configuration object
+ *
+ * This is the base default configuration used when creating new user configs.
+ * Platform-specific defaults are available via getDefaultConfigForPlatform().
+ */
+export declare const defaultConfig: MCPIServerConfig;
+/**
+ * Get default configuration for a specific platform
+ *
+ * Returns the base default config merged with platform-specific defaults.
+ *
+ * @param platform - Platform type ('node', 'cloudflare', or 'vercel')
+ * @returns Platform-specific default configuration
+ *
+ * @example
+ * ```typescript
+ * const nodeConfig = getDefaultConfigForPlatform('node');
+ * const cloudflareConfig = getDefaultConfigForPlatform('cloudflare');
+ * ```
+ */
+export declare function getDefaultConfigForPlatform(platform: "node" | "cloudflare" | "vercel"): MCPIServerConfig;
+/**
+ * Merge partial configuration with defaults
+ *
+ * Deep merges a partial configuration object with the base defaults,
+ * ensuring all required fields are present.
+ *
+ * @param partial - Partial configuration to merge with defaults
+ * @returns Complete configuration with defaults applied
+ *
+ * @example
+ * ```typescript
+ * const config = mergeWithDefaults({
+ *   proofing: { enabled: false },
+ *   identity: { environment: 'production' }
+ * });
+ * ```
+ */
+export declare function mergeWithDefaults(partial: Partial<MCPIServerConfig>): MCPIServerConfig;
+//# sourceMappingURL=default-config.d.ts.map

package/dist/dashboard-config/default-config.js

@@ -0,0 +1,241 @@
+"use strict";
+/**
+ * Default Configuration for MCP-I Servers
+ *
+ * Provides safe, production-ready defaults for new user configurations.
+ * Used by AgentShield Dashboard, Scaffolder, and Runtime fallbacks.
+ *
+ * @package @kya-os/contracts/dashboard-config
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultConfig = void 0;
+exports.getDefaultConfigForPlatform = getDefaultConfigForPlatform;
+exports.mergeWithDefaults = mergeWithDefaults;
+const schemas_js_1 = require("./schemas.js");
+const zod_1 = require("zod");
+/**
+ * Default configuration JSON content
+ * Embedded here to avoid TypeScript JSON import issues in build
+ */
+const defaultConfigJson = {
+    identity: {
+        // agentDid removed - deprecated, use serverDid instead
+        serverDid: "", // New field - will be populated when identity is generated
+        environment: "development",
+        storageLocation: "env-vars",
+    },
+    proofing: {
+        enabled: true,
+        destinations: [
+            {
+                type: "agentshield",
+                apiUrl: "https://kya.vouched.id",
+            },
+        ],
+        batchQueue: {
+            maxBatchSize: 10,
+            flushIntervalMs: 5000,
+            maxRetries: 3,
+        },
+    },
+    delegation: {
+        enabled: true,
+        enforceStrictly: false,
+        verifier: {
+            type: "agentshield",
+            apiUrl: "https://kya.vouched.id/api/v1/bouncer/delegations/verify",
+            cacheTtl: 300000,
+        },
+        authorization: {
+            authorizationUrl: "https://kya.vouched.id/api/v1/bouncer/delegations/authorize",
+            minReputationScore: 80,
+            resumeTokenTtl: 3600000,
+            requireAuthForUnknown: false,
+        },
+    },
+    toolProtection: {
+        source: "agentshield",
+        agentShield: {
+            apiUrl: "https://kya.vouched.id",
+            cacheTtl: 300000,
+        },
+        fallback: {},
+    },
+    audit: {
+        enabled: true,
+        includeProofHashes: false,
+        includePayloads: false,
+    },
+    session: {
+        timestampSkewSeconds: 120,
+        ttlMinutes: 30,
+    },
+    platform: {
+        type: "node",
+        node: {
+            server: {
+                port: 3000,
+                host: "0.0.0.0",
+                cors: true,
+                timeout: 30000,
+            },
+            storage: {
+                type: "memory",
+            },
+        },
+        cloudflare: {
+            workers: {
+                cpuMs: 50,
+                memoryMb: 128,
+            },
+            kvNamespaces: [],
+            environmentVariables: [],
+        },
+        vercel: {
+            environmentVariables: [],
+            edgeRuntime: {},
+        },
+    },
+    metadata: {
+        version: "1.0.0",
+        lastUpdated: "",
+        source: "dashboard",
+        deploymentStatus: "inactive",
+    },
+};
+/**
+ * Relaxed schema for default config validation
+ * Allows empty strings for fields that will be populated later
+ *
+ * Note: Empty `agentDid` is valid for new/incomplete configurations.
+ * This allows users to create configs before registering their agent DID.
+ * The base schema (mcpIServerConfigSchema) requires non-empty agentDid for
+ * complete configurations, but defaults allow empty to support progressive
+ * configuration.
+ */
+const defaultConfigSchema = schemas_js_1.mcpIServerConfigSchema.extend({
+    identity: schemas_js_1.mcpIServerConfigSchema.shape.identity.extend({
+        agentDid: zod_1.z.string().optional(), // Allow empty string or undefined for defaults (deprecated)
+        serverDid: zod_1.z.string(), // Allow empty string for defaults (will be populated later)
+    }),
+    metadata: schemas_js_1.mcpIServerConfigSchema.shape.metadata.extend({
+        lastUpdated: zod_1.z.string(), // Allow empty string (will be set dynamically)
+    }),
+});
+/**
+ * Default configuration object
+ *
+ * This is the base default configuration used when creating new user configs.
+ * Platform-specific defaults are available via getDefaultConfigForPlatform().
+ */
+exports.defaultConfig = defaultConfigSchema.parse(defaultConfigJson);
+/**
+ * Platform-specific default configurations
+ */
+const platformDefaults = {
+    node: {
+        platform: {
+            type: "node",
+            node: {
+                server: {
+                    port: 3000,
+                    host: "0.0.0.0",
+                    cors: true,
+                    timeout: 30000,
+                },
+                storage: {
+                    type: "memory",
+                },
+            },
+        },
+    },
+    cloudflare: {
+        platform: {
+            type: "cloudflare",
+            cloudflare: {
+                workers: {
+                    cpuMs: 50,
+                    memoryMb: 128,
+                },
+                kvNamespaces: [],
+                environmentVariables: [],
+            },
+        },
+    },
+    vercel: {
+        platform: {
+            type: "vercel",
+            vercel: {
+                environmentVariables: [],
+                edgeRuntime: {},
+            },
+        },
+    },
+};
+/**
+ * Get default configuration for a specific platform
+ *
+ * Returns the base default config merged with platform-specific defaults.
+ *
+ * @param platform - Platform type ('node', 'cloudflare', or 'vercel')
+ * @returns Platform-specific default configuration
+ *
+ * @example
+ * ```typescript
+ * const nodeConfig = getDefaultConfigForPlatform('node');
+ * const cloudflareConfig = getDefaultConfigForPlatform('cloudflare');
+ * ```
+ */
+function getDefaultConfigForPlatform(platform) {
+    const platformDefault = platformDefaults[platform];
+    return {
+        ...exports.defaultConfig,
+        platform: platformDefault.platform,
+    };
+}
+/**
+ * Deep merge utility for objects
+ */
+function deepMerge(target, source) {
+    const result = { ...target };
+    for (const key in source) {
+        const sourceValue = source[key];
+        if (sourceValue &&
+            typeof sourceValue === "object" &&
+            !Array.isArray(sourceValue) &&
+            sourceValue !== null) {
+            const targetValue = target[key];
+            if (targetValue &&
+                typeof targetValue === "object" &&
+                !Array.isArray(targetValue) &&
+                targetValue !== null) {
+                result[key] = deepMerge(targetValue, sourceValue);
+            }
+        }
+        else if (sourceValue !== undefined) {
+            result[key] = sourceValue;
+        }
+    }
+    return result;
+}
+/**
+ * Merge partial configuration with defaults
+ *
+ * Deep merges a partial configuration object with the base defaults,
+ * ensuring all required fields are present.
+ *
+ * @param partial - Partial configuration to merge with defaults
+ * @returns Complete configuration with defaults applied
+ *
+ * @example
+ * ```typescript
+ * const config = mergeWithDefaults({
+ *   proofing: { enabled: false },
+ *   identity: { environment: 'production' }
+ * });
+ * ```
+ */
+function mergeWithDefaults(partial) {
+    return deepMerge(exports.defaultConfig, partial);
+}
+//# sourceMappingURL=default-config.js.map

package/dist/dashboard-config/index.d.ts

@@ -7,4 +7,5 @@
  */
 export type { MCPIServerConfig, GetServerConfigRequest, GetServerConfigResponse, UpdateServerConfigRequest, UpdateServerConfigResponse, ValidateServerConfigRequest, ValidateServerConfigResponse, } from './types.js';
 export { identityConfigSchema, proofingConfigSchema, delegationConfigSchema, toolProtectionConfigSchema, auditConfigSchema, sessionConfigSchema, platformConfigSchema, cloudflarePlatformConfigSchema, nodePlatformConfigSchema, vercelPlatformConfigSchema, configMetadataSchema, mcpIServerConfigSchema, getServerConfigRequestSchema, getServerConfigResponseSchema, updateServerConfigRequestSchema, updateServerConfigResponseSchema, validateServerConfigRequestSchema, validateServerConfigResponseSchema, } from './schemas.js';
+export { defaultConfig, getDefaultConfigForPlatform, mergeWithDefaults, } from './default-config.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/dashboard-config/index.js

@@ -7,7 +7,7 @@
  * @package @kya-os/contracts/dashboard-config
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateServerConfigResponseSchema = exports.validateServerConfigRequestSchema = exports.updateServerConfigResponseSchema = exports.updateServerConfigRequestSchema = exports.getServerConfigResponseSchema = exports.getServerConfigRequestSchema = exports.mcpIServerConfigSchema = exports.configMetadataSchema = exports.vercelPlatformConfigSchema = exports.nodePlatformConfigSchema = exports.cloudflarePlatformConfigSchema = exports.platformConfigSchema = exports.sessionConfigSchema = exports.auditConfigSchema = exports.toolProtectionConfigSchema = exports.delegationConfigSchema = exports.proofingConfigSchema = exports.identityConfigSchema = void 0;
+exports.mergeWithDefaults = exports.getDefaultConfigForPlatform = exports.defaultConfig = exports.validateServerConfigResponseSchema = exports.validateServerConfigRequestSchema = exports.updateServerConfigResponseSchema = exports.updateServerConfigRequestSchema = exports.getServerConfigResponseSchema = exports.getServerConfigRequestSchema = exports.mcpIServerConfigSchema = exports.configMetadataSchema = exports.vercelPlatformConfigSchema = exports.nodePlatformConfigSchema = exports.cloudflarePlatformConfigSchema = exports.platformConfigSchema = exports.sessionConfigSchema = exports.auditConfigSchema = exports.toolProtectionConfigSchema = exports.delegationConfigSchema = exports.proofingConfigSchema = exports.identityConfigSchema = void 0;
 // Schema exports
 var schemas_js_1 = require("./schemas.js");
 Object.defineProperty(exports, "identityConfigSchema", { enumerable: true, get: function () { return schemas_js_1.identityConfigSchema; } });
@@ -28,4 +28,9 @@ Object.defineProperty(exports, "updateServerConfigRequestSchema", { enumerable:
 Object.defineProperty(exports, "updateServerConfigResponseSchema", { enumerable: true, get: function () { return schemas_js_1.updateServerConfigResponseSchema; } });
 Object.defineProperty(exports, "validateServerConfigRequestSchema", { enumerable: true, get: function () { return schemas_js_1.validateServerConfigRequestSchema; } });
 Object.defineProperty(exports, "validateServerConfigResponseSchema", { enumerable: true, get: function () { return schemas_js_1.validateServerConfigResponseSchema; } });
+// Default configuration exports
+var default_config_js_1 = require("./default-config.js");
+Object.defineProperty(exports, "defaultConfig", { enumerable: true, get: function () { return default_config_js_1.defaultConfig; } });
+Object.defineProperty(exports, "getDefaultConfigForPlatform", { enumerable: true, get: function () { return default_config_js_1.getDefaultConfigForPlatform; } });
+Object.defineProperty(exports, "mergeWithDefaults", { enumerable: true, get: function () { return default_config_js_1.mergeWithDefaults; } });
 //# sourceMappingURL=index.js.map