@kya-os/contracts 1.5.2-canary.3 → 1.5.2-canary.5

package/dist/delegation/schemas.js

@@ -473,4 +473,3 @@ function isDelegationCredentialNotYetValid(vc) {
     }
     return false;
 }
-//# sourceMappingURL=schemas.js.map

package/dist/handshake.d.ts

@@ -31,11 +31,11 @@ export declare const SessionContextSchema: z.ZodObject<{
     clientDid: z.ZodOptional<z.ZodString>;
     userDid: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
+    createdAt: number;
     nonce: string;
     audience: string;
     timestamp: number;
     sessionId: string;
-    createdAt: number;
     lastActivity: number;
     ttlMinutes: number;
     agentDid?: string | undefined;
@@ -43,11 +43,11 @@ export declare const SessionContextSchema: z.ZodObject<{
     clientDid?: string | undefined;
     userDid?: string | undefined;
 }, {
+    createdAt: number;
     nonce: string;
     audience: string;
     timestamp: number;
     sessionId: string;
-    createdAt: number;
     lastActivity: number;
     agentDid?: string | undefined;
     ttlMinutes?: number | undefined;
@@ -74,13 +74,18 @@ export type NonceCacheEntry = z.infer<typeof NonceCacheEntrySchema>;
 export interface NonceCache {
     /**
      * Check if a nonce exists in the cache
+     * @param nonce - The nonce to check
+     * @param agentDid - Optional agent DID for agent-scoped nonces (prevents cross-agent replay attacks)
      */
-    has(nonce: string): Promise<boolean>;
+    has(nonce: string, agentDid?: string): Promise<boolean>;
     /**
      * Add a nonce to the cache with TTL
      * MUST ensure atomic add-if-absent semantics for replay prevention
+     * @param nonce - The nonce to add
+     * @param ttl - Time to live in seconds
+     * @param agentDid - Optional agent DID for agent-scoped nonces (prevents cross-agent replay attacks)
      */
-    add(nonce: string, ttl: number): Promise<void>;
+    add(nonce: string, ttl: number, agentDid?: string): Promise<void>;
     /**
      * Clean up expired entries
      * Should be safe to call frequently and should be no-op for backends that auto-expire

package/dist/proof/index.d.ts

@@ -1,8 +1,9 @@
 /**
  * Proof Module Exports
  *
- * Note: This module exports proof record and signing spec types.
- * The existing proof.ts file with DetachedProofSchema is separate.
+ * This module exports all proof-related types including DetachedProof,
+ * proof records, and signing specs.
  */
+export { DetachedProofSchema, ProofMetaSchema, CanonicalHashesSchema, AuditRecordSchema, ToolCallContextSchema, ProofSubmissionContextSchema, ProofSubmissionRequestSchema, JWS_ALGORITHM, HASH_ALGORITHM, AUDIT_VERSION, type DetachedProof, type ProofMeta, type CanonicalHashes, type AuditRecord, type ToolCallContext, type ProofSubmissionContext, type ProofSubmissionRequest, } from '../proof.js';
 export * from './signing-spec.js';
 export * from './proof-record.js';

package/dist/proof/index.js

@@ -2,8 +2,8 @@
 /**
  * Proof Module Exports
  *
- * Note: This module exports proof record and signing spec types.
- * The existing proof.ts file with DetachedProofSchema is separate.
+ * This module exports all proof-related types including DetachedProof,
+ * proof records, and signing specs.
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -20,5 +20,19 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUDIT_VERSION = exports.HASH_ALGORITHM = exports.JWS_ALGORITHM = exports.ProofSubmissionRequestSchema = exports.ProofSubmissionContextSchema = exports.ToolCallContextSchema = exports.AuditRecordSchema = exports.CanonicalHashesSchema = exports.ProofMetaSchema = exports.DetachedProofSchema = void 0;
+// Export DetachedProof and related schemas from root proof.ts
+var proof_js_1 = require("../proof.js");
+Object.defineProperty(exports, "DetachedProofSchema", { enumerable: true, get: function () { return proof_js_1.DetachedProofSchema; } });
+Object.defineProperty(exports, "ProofMetaSchema", { enumerable: true, get: function () { return proof_js_1.ProofMetaSchema; } });
+Object.defineProperty(exports, "CanonicalHashesSchema", { enumerable: true, get: function () { return proof_js_1.CanonicalHashesSchema; } });
+Object.defineProperty(exports, "AuditRecordSchema", { enumerable: true, get: function () { return proof_js_1.AuditRecordSchema; } });
+Object.defineProperty(exports, "ToolCallContextSchema", { enumerable: true, get: function () { return proof_js_1.ToolCallContextSchema; } });
+Object.defineProperty(exports, "ProofSubmissionContextSchema", { enumerable: true, get: function () { return proof_js_1.ProofSubmissionContextSchema; } });
+Object.defineProperty(exports, "ProofSubmissionRequestSchema", { enumerable: true, get: function () { return proof_js_1.ProofSubmissionRequestSchema; } });
+Object.defineProperty(exports, "JWS_ALGORITHM", { enumerable: true, get: function () { return proof_js_1.JWS_ALGORITHM; } });
+Object.defineProperty(exports, "HASH_ALGORITHM", { enumerable: true, get: function () { return proof_js_1.HASH_ALGORITHM; } });
+Object.defineProperty(exports, "AUDIT_VERSION", { enumerable: true, get: function () { return proof_js_1.AUDIT_VERSION; } });
+// Export proof record and signing spec types
 __exportStar(require("./signing-spec.js"), exports);
 __exportStar(require("./proof-record.js"), exports);

package/dist/proof.d.ts

@@ -24,27 +24,27 @@ export declare const ProofMetaSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     did: string;
     kid: string;
-    ts: number;
     nonce: string;
     audience: string;
     sessionId: string;
+    ts: number;
     requestHash: string;
     responseHash: string;
+    clientDid?: string | undefined;
     scopeId?: string | undefined;
     delegationRef?: string | undefined;
-    clientDid?: string | undefined;
 }, {
     did: string;
     kid: string;
-    ts: number;
     nonce: string;
     audience: string;
     sessionId: string;
+    ts: number;
     requestHash: string;
     responseHash: string;
+    clientDid?: string | undefined;
     scopeId?: string | undefined;
     delegationRef?: string | undefined;
-    clientDid?: string | undefined;
 }>;
 export declare const DetachedProofSchema: z.ZodObject<{
     jws: z.ZodString;
@@ -63,57 +63,57 @@ export declare const DetachedProofSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         did: string;
         kid: string;
-        ts: number;
         nonce: string;
         audience: string;
         sessionId: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
+        clientDid?: string | undefined;
         scopeId?: string | undefined;
         delegationRef?: string | undefined;
-        clientDid?: string | undefined;
     }, {
         did: string;
         kid: string;
-        ts: number;
         nonce: string;
         audience: string;
         sessionId: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
+        clientDid?: string | undefined;
         scopeId?: string | undefined;
         delegationRef?: string | undefined;
-        clientDid?: string | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     jws: string;
     meta: {
         did: string;
         kid: string;
-        ts: number;
         nonce: string;
         audience: string;
         sessionId: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
+        clientDid?: string | undefined;
         scopeId?: string | undefined;
         delegationRef?: string | undefined;
-        clientDid?: string | undefined;
     };
 }, {
     jws: string;
     meta: {
         did: string;
         kid: string;
-        ts: number;
         nonce: string;
         audience: string;
         sessionId: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
+        clientDid?: string | undefined;
         scopeId?: string | undefined;
         delegationRef?: string | undefined;
-        clientDid?: string | undefined;
     };
 }>;
 export declare const CanonicalHashesSchema: z.ZodObject<{
@@ -138,22 +138,22 @@ export declare const AuditRecordSchema: z.ZodObject<{
     verified: z.ZodEnum<["yes", "no"]>;
     scope: z.ZodString;
 }, "strip", z.ZodTypeAny, {
+    version: "audit.v1";
     did: string;
     kid: string;
-    ts: number;
     audience: string;
-    version: "audit.v1";
+    ts: number;
     session: string;
     reqHash: string;
     resHash: string;
     verified: "yes" | "no";
     scope: string;
 }, {
+    version: "audit.v1";
     did: string;
     kid: string;
-    ts: number;
     audience: string;
-    version: "audit.v1";
+    ts: number;
     session: string;
     reqHash: string;
     resHash: string;
@@ -257,57 +257,57 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             did: string;
             kid: string;
-            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
+            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
-            clientDid?: string | undefined;
         }, {
             did: string;
             kid: string;
-            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
+            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
-            clientDid?: string | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
         jws: string;
         meta: {
             did: string;
             kid: string;
-            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
+            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
-            clientDid?: string | undefined;
         };
     }, {
         jws: string;
         meta: {
             did: string;
             kid: string;
-            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
+            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
-            clientDid?: string | undefined;
         };
     }>, "many">;
     context: z.ZodOptional<z.ZodObject<{
@@ -357,15 +357,15 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
         meta: {
             did: string;
             kid: string;
-            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
+            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
-            clientDid?: string | undefined;
         };
     }[];
     delegation_id?: string | null | undefined;
@@ -386,15 +386,15 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
         meta: {
             did: string;
             kid: string;
-            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
+            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
-            clientDid?: string | undefined;
         };
     }[];
     delegation_id?: string | null | undefined;
@@ -412,4 +412,3 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
 export type ToolCallContext = z.infer<typeof ToolCallContextSchema>;
 export type ProofSubmissionContext = z.infer<typeof ProofSubmissionContextSchema>;
 export type ProofSubmissionRequest = z.infer<typeof ProofSubmissionRequestSchema>;
-//# sourceMappingURL=proof.d.ts.map

package/dist/proof.js

@@ -80,4 +80,3 @@ exports.ProofSubmissionRequestSchema = zod_1.z.object({
     })),
     context: exports.ProofSubmissionContextSchema.optional(),
 });
-//# sourceMappingURL=proof.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.5.2-canary.3",
+  "version": "1.5.2-canary.5",
   "description": "Shared types and schemas for XMCP-I ecosystem",
   "type": "commonjs",
   "sideEffects": false,
@@ -18,9 +18,9 @@
       "require": "./dist/handshake.js"
     },
     "./proof": {
-      "types": "./dist/proof.d.ts",
-      "import": "./dist/proof.js",
-      "require": "./dist/proof.js"
+      "types": "./dist/proof/index.d.ts",
+      "import": "./dist/proof/index.js",
+      "require": "./dist/proof/index.js"
     },
     "./verifier": {
       "types": "./dist/verifier.d.ts",
@@ -124,7 +124,7 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
-    "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
+    "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-dependencies.js"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",