@kya-os/contracts 1.6.17 → 1.6.19

package/dist/deploy/schemas.js

@@ -0,0 +1,283 @@
+"use strict";
+/**
+ * One-Click Deployment Zod Validation Schemas
+ *
+ * Runtime validation schemas for the AgentShield One-Click Deployment API.
+ * These schemas ensure request/response validation at API boundaries.
+ *
+ * @package @kya-os/contracts/deploy
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deploymentProgressSchema = exports.deployStepSchema = exports.deployStepStatusSchema = exports.scaffolderResultSchema = exports.scaffolderOptionsSchema = exports.generatedFileSchema = exports.listDeployedRepositoriesResponseSchema = exports.deployedRepositorySchema = exports.deployToGitHubResultSchema = exports.deployErrorResponseSchema = exports.deployToGitHubResponseSchema = exports.deployToGitHubDataSchema = exports.deployedProjectSchema = exports.deployToGitHubRequestSchema = exports.repoNameSchema = exports.deployErrorCodeSchema = exports.gitHubDisconnectResponseSchema = exports.gitHubStatusResponseSchema = exports.gitHubCallbackResponseSchema = exports.gitHubCallbackQuerySchema = exports.gitHubInstallInitResponseSchema = exports.gitHubRepositorySchema = exports.gitHubInstallationSchema = exports.gitHubAccountTypeSchema = exports.deployPlatformSchema = exports.templateTypeSchema = void 0;
+const zod_1 = require("zod");
+// ============================================================================
+// Template & Platform Schemas
+// ============================================================================
+/**
+ * Valid template types for deployment
+ */
+exports.templateTypeSchema = zod_1.z.enum([
+    "blank",
+    "ecommerce",
+    "hardware-world",
+]);
+/**
+ * Valid deployment platforms
+ */
+exports.deployPlatformSchema = zod_1.z.enum(["cloudflare", "vercel"]);
+// ============================================================================
+// GitHub Installation Schemas
+// ============================================================================
+/**
+ * GitHub account type schema
+ */
+exports.gitHubAccountTypeSchema = zod_1.z.enum(["User", "Organization"]);
+/**
+ * GitHub installation schema
+ */
+exports.gitHubInstallationSchema = zod_1.z.object({
+    id: zod_1.z.string().uuid(),
+    installationId: zod_1.z.number().int().positive(),
+    account: zod_1.z.object({
+        login: zod_1.z.string().min(1),
+        avatarUrl: zod_1.z.string().url(),
+        type: exports.gitHubAccountTypeSchema,
+        id: zod_1.z.number().int().positive(),
+    }),
+    permissions: zod_1.z.array(zod_1.z.string()),
+    suspendedAt: zod_1.z.string().datetime().nullable().optional(),
+    createdAt: zod_1.z.string().datetime(),
+    updatedAt: zod_1.z.string().datetime(),
+});
+/**
+ * GitHub repository schema
+ */
+exports.gitHubRepositorySchema = zod_1.z.object({
+    name: zod_1.z.string().min(1),
+    fullName: zod_1.z.string().regex(/^[a-zA-Z0-9_-]+\/[a-zA-Z0-9_.-]+$/),
+    private: zod_1.z.boolean(),
+    url: zod_1.z.string().url(),
+    defaultBranch: zod_1.z.string().min(1),
+});
+// ============================================================================
+// GitHub OAuth/Installation API Schemas
+// ============================================================================
+/**
+ * GitHub install initiation response schema
+ */
+exports.gitHubInstallInitResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    installationUrl: zod_1.z.string().url(),
+});
+/**
+ * GitHub callback query schema
+ */
+exports.gitHubCallbackQuerySchema = zod_1.z.object({
+    installation_id: zod_1.z.string().regex(/^\d+$/),
+    setup_action: zod_1.z.enum(["install", "update"]),
+    code: zod_1.z.string().optional(),
+});
+/**
+ * GitHub callback response schema
+ */
+exports.gitHubCallbackResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    installation: exports.gitHubInstallationSchema,
+});
+/**
+ * GitHub status response schema
+ */
+exports.gitHubStatusResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    data: zod_1.z.object({
+        connected: zod_1.z.boolean(),
+        installation: exports.gitHubInstallationSchema.optional(),
+        repositories: zod_1.z.array(exports.gitHubRepositorySchema).optional(),
+    }),
+});
+/**
+ * GitHub disconnect response schema
+ */
+exports.gitHubDisconnectResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    disconnected: zod_1.z.boolean(),
+});
+// ============================================================================
+// Deploy API Schemas
+// ============================================================================
+/**
+ * Deploy error code schema
+ */
+exports.deployErrorCodeSchema = zod_1.z.enum([
+    "GITHUB_NOT_CONNECTED",
+    "REPO_NAME_TAKEN",
+    "REPO_NAME_INVALID",
+    "RATE_LIMIT_EXCEEDED",
+    "PLAN_LIMIT_EXCEEDED",
+    "TEMPLATE_NOT_FOUND",
+    "GITHUB_API_ERROR",
+    "SCAFFOLDER_ERROR",
+    "PROJECT_CREATION_ERROR",
+    "SECRETS_ERROR",
+    "INTERNAL_ERROR",
+]);
+/**
+ * Repository name validation
+ * - Must be lowercase alphanumeric with hyphens
+ * - Cannot start or end with hyphen
+ * - Length 1-100 characters
+ */
+exports.repoNameSchema = zod_1.z
+    .string()
+    .min(1, "Repository name is required")
+    .max(100, "Repository name must be 100 characters or less")
+    .regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/, "Repository name must be lowercase, alphanumeric, and can contain hyphens (but not at start/end)");
+/**
+ * Deploy to GitHub request schema
+ */
+exports.deployToGitHubRequestSchema = zod_1.z.object({
+    repoName: exports.repoNameSchema,
+    template: exports.templateTypeSchema,
+    platform: exports.deployPlatformSchema,
+    isPrivate: zod_1.z.boolean().optional().default(true),
+    description: zod_1.z.string().max(500).optional(),
+});
+/**
+ * Deployed project schema
+ */
+exports.deployedProjectSchema = zod_1.z.object({
+    id: zod_1.z.string().uuid(),
+    friendlyId: zod_1.z.string().min(1),
+    apiKey: zod_1.z.string().min(1), // API key - sensitive, shown only once
+});
+/**
+ * Deploy to GitHub data schema
+ */
+exports.deployToGitHubDataSchema = zod_1.z.object({
+    repoUrl: zod_1.z.string().url(),
+    repoFullName: zod_1.z.string().regex(/^[a-zA-Z0-9_-]+\/[a-zA-Z0-9_.-]+$/),
+    project: exports.deployedProjectSchema,
+    deployUrl: zod_1.z.string().url(),
+    nextSteps: zod_1.z.array(zod_1.z.string()),
+});
+/**
+ * Deploy success response schema
+ */
+exports.deployToGitHubResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    data: exports.deployToGitHubDataSchema,
+});
+/**
+ * Deploy error response schema
+ */
+exports.deployErrorResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(false),
+    error: zod_1.z.object({
+        code: exports.deployErrorCodeSchema,
+        message: zod_1.z.string(),
+        details: zod_1.z.record(zod_1.z.unknown()).optional(),
+    }),
+});
+/**
+ * Deploy result union schema
+ */
+exports.deployToGitHubResultSchema = zod_1.z.discriminatedUnion("success", [
+    exports.deployToGitHubResponseSchema,
+    exports.deployErrorResponseSchema,
+]);
+// ============================================================================
+// Deployed Repository Schemas
+// ============================================================================
+/**
+ * Deployed repository schema
+ */
+exports.deployedRepositorySchema = zod_1.z.object({
+    id: zod_1.z.string().uuid(),
+    userId: zod_1.z.string().uuid(),
+    projectId: zod_1.z.string().uuid(),
+    installationId: zod_1.z.string().uuid(),
+    repoFullName: zod_1.z.string(),
+    repoUrl: zod_1.z.string().url(),
+    template: exports.templateTypeSchema,
+    platform: exports.deployPlatformSchema,
+    cloudflareDeployed: zod_1.z.boolean(),
+    cloudflareUrl: zod_1.z.string().url().nullable().optional(),
+    createdAt: zod_1.z.string().datetime(),
+    updatedAt: zod_1.z.string().datetime(),
+});
+/**
+ * List deployed repositories response schema
+ */
+exports.listDeployedRepositoriesResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    data: zod_1.z.array(exports.deployedRepositorySchema),
+});
+// ============================================================================
+// File Generation Schemas (for scaffolder)
+// ============================================================================
+/**
+ * Generated file schema
+ */
+exports.generatedFileSchema = zod_1.z.object({
+    path: zod_1.z.string().min(1),
+    content: zod_1.z.string(),
+    isBase64: zod_1.z.boolean().optional(),
+});
+/**
+ * Scaffolder options schema
+ */
+exports.scaffolderOptionsSchema = zod_1.z.object({
+    projectName: zod_1.z.string().min(1).max(100),
+    template: exports.templateTypeSchema,
+    platform: exports.deployPlatformSchema,
+    agentShieldProjectId: zod_1.z.string().optional(),
+    agentShieldApiKey: zod_1.z.string().optional(),
+    skipIdentity: zod_1.z.boolean().optional(),
+});
+/**
+ * Scaffolder result schema
+ */
+exports.scaffolderResultSchema = zod_1.z.object({
+    success: zod_1.z.boolean(),
+    files: zod_1.z.array(exports.generatedFileSchema),
+    identity: zod_1.z
+        .object({
+        did: zod_1.z.string().min(1),
+        publicKey: zod_1.z.string().min(1),
+        privateKey: zod_1.z.string().min(1),
+    })
+        .optional(),
+    warnings: zod_1.z.array(zod_1.z.string()).optional(),
+});
+// ============================================================================
+// Deployment Progress Schemas
+// ============================================================================
+/**
+ * Deploy step status schema
+ */
+exports.deployStepStatusSchema = zod_1.z.enum([
+    "pending",
+    "in_progress",
+    "completed",
+    "failed",
+]);
+/**
+ * Deploy step schema
+ */
+exports.deployStepSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+    status: exports.deployStepStatusSchema,
+    message: zod_1.z.string().optional(),
+    startedAt: zod_1.z.string().datetime().optional(),
+    completedAt: zod_1.z.string().datetime().optional(),
+});
+/**
+ * Deployment progress schema
+ */
+exports.deploymentProgressSchema = zod_1.z.object({
+    steps: zod_1.z.array(exports.deployStepSchema),
+    currentStep: zod_1.z.number().int().min(0),
+    totalSteps: zod_1.z.number().int().positive(),
+    overallStatus: zod_1.z.enum(["pending", "in_progress", "completed", "failed"]),
+});

package/dist/deploy/types.d.ts

@@ -0,0 +1,256 @@
+/**
+ * One-Click Deployment API Type Definitions
+ *
+ * TypeScript interfaces for the AgentShield One-Click Deployment feature.
+ * Enables users to deploy MCP-I agents to Cloudflare Workers with a single click.
+ *
+ * @package @kya-os/contracts/deploy
+ */
+import type { AgentShieldAPIResponse } from "../agentshield-api/types.js";
+/**
+ * Supported deployment templates
+ * - blank: Minimal MCP-I server with a greet tool
+ * - ecommerce: E-commerce focused with cart/checkout tools
+ * - hardware-world: IoT/Hardware world demo template
+ */
+export type TemplateType = "blank" | "ecommerce" | "hardware-world";
+/**
+ * Supported deployment platforms
+ * - cloudflare: Cloudflare Workers
+ * - vercel: Vercel Edge Functions (future)
+ */
+export type DeployPlatformType = "cloudflare" | "vercel";
+/**
+ * GitHub account type (user or organization)
+ */
+export type GitHubAccountType = "User" | "Organization";
+/**
+ * GitHub App installation status
+ */
+export interface GitHubInstallation {
+    id: string;
+    installationId: number;
+    account: {
+        login: string;
+        avatarUrl: string;
+        type: GitHubAccountType;
+        id: number;
+    };
+    permissions: string[];
+    suspendedAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Repository information returned from GitHub API
+ */
+export interface GitHubRepository {
+    name: string;
+    fullName: string;
+    private: boolean;
+    url: string;
+    defaultBranch: string;
+}
+/**
+ * Response from GitHub App installation initiation
+ * GET /api/internal/github/install
+ */
+export interface GitHubInstallInitResponse {
+    success: true;
+    installationUrl: string;
+}
+/**
+ * Query parameters for GitHub App callback
+ * GET /api/internal/github/callback
+ */
+export interface GitHubCallbackQuery {
+    installation_id: string;
+    setup_action: "install" | "update";
+    code?: string;
+}
+/**
+ * Response from GitHub App callback
+ */
+export interface GitHubCallbackResponse {
+    success: true;
+    installation: GitHubInstallation;
+}
+/**
+ * Response from GitHub connection status endpoint
+ * GET /api/internal/github/status
+ */
+export interface GitHubStatusResponse {
+    success: true;
+    data: {
+        connected: boolean;
+        installation?: GitHubInstallation;
+        repositories?: GitHubRepository[];
+    };
+}
+/**
+ * Request to disconnect GitHub
+ * DELETE /api/internal/github/disconnect
+ */
+export interface GitHubDisconnectResponse {
+    success: true;
+    disconnected: boolean;
+}
+/**
+ * Error codes for deployment failures
+ */
+export type DeployErrorCode = "GITHUB_NOT_CONNECTED" | "REPO_NAME_TAKEN" | "REPO_NAME_INVALID" | "RATE_LIMIT_EXCEEDED" | "PLAN_LIMIT_EXCEEDED" | "TEMPLATE_NOT_FOUND" | "GITHUB_API_ERROR" | "SCAFFOLDER_ERROR" | "PROJECT_CREATION_ERROR" | "SECRETS_ERROR" | "INTERNAL_ERROR";
+/**
+ * Request body for deploy to GitHub endpoint
+ * POST /api/internal/deploy/github
+ */
+export interface DeployToGitHubRequest {
+    /** Repository name (e.g., "my-mcp-agent") */
+    repoName: string;
+    /** Template to use for scaffolding */
+    template: TemplateType;
+    /** Target deployment platform */
+    platform: DeployPlatformType;
+    /** Optional: Make repository private (default: true) */
+    isPrivate?: boolean;
+    /** Optional: Repository description */
+    description?: string;
+}
+/**
+ * AgentShield project information created during deployment
+ */
+export interface DeployedProject {
+    id: string;
+    friendlyId: string;
+    /** API key - shown only once, must be saved by user */
+    apiKey: string;
+}
+/**
+ * Deployment result data
+ */
+export interface DeployToGitHubData {
+    /** GitHub repository URL */
+    repoUrl: string;
+    /** Full repository name (e.g., "user/my-mcp-agent") */
+    repoFullName: string;
+    /** AgentShield project (auto-created) */
+    project: DeployedProject;
+    /** Cloudflare Deploy Button URL */
+    deployUrl: string;
+    /** Next steps for the user */
+    nextSteps: string[];
+}
+/**
+ * Successful deploy response
+ * POST /api/internal/deploy/github
+ */
+export interface DeployToGitHubResponse {
+    success: true;
+    data: DeployToGitHubData;
+}
+/**
+ * Deploy error response
+ */
+export interface DeployErrorResponse {
+    success: false;
+    error: {
+        code: DeployErrorCode;
+        message: string;
+        details?: Record<string, unknown>;
+    };
+}
+/**
+ * Union type for deploy response
+ */
+export type DeployToGitHubResult = DeployToGitHubResponse | DeployErrorResponse;
+/**
+ * Tracked deployed repository
+ */
+export interface DeployedRepository {
+    id: string;
+    userId: string;
+    projectId: string;
+    installationId: string;
+    repoFullName: string;
+    repoUrl: string;
+    template: TemplateType;
+    platform: DeployPlatformType;
+    cloudflareDeployed: boolean;
+    cloudflareUrl?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Response for listing deployed repositories
+ * GET /api/internal/deploy/repositories
+ */
+export interface ListDeployedRepositoriesResponse {
+    success: true;
+    data: DeployedRepository[];
+}
+/**
+ * Generated file for GitHub commit
+ */
+export interface GeneratedFile {
+    /** File path relative to repository root */
+    path: string;
+    /** File content (UTF-8 string or base64 for binary) */
+    content: string;
+    /** Whether content is base64 encoded */
+    isBase64?: boolean;
+}
+/**
+ * Scaffolder options for in-memory file generation
+ */
+export interface ScaffolderOptions {
+    projectName: string;
+    template: TemplateType;
+    platform: DeployPlatformType;
+    agentShieldProjectId?: string;
+    agentShieldApiKey?: string;
+    skipIdentity?: boolean;
+}
+/**
+ * Result of scaffolder file generation
+ */
+export interface ScaffolderResult {
+    success: boolean;
+    files: GeneratedFile[];
+    identity?: {
+        did: string;
+        publicKey: string;
+        privateKey: string;
+    };
+    warnings?: string[];
+}
+/**
+ * Deployment step status
+ */
+export type DeployStepStatus = "pending" | "in_progress" | "completed" | "failed";
+/**
+ * Individual deployment step
+ */
+export interface DeployStep {
+    id: string;
+    name: string;
+    status: DeployStepStatus;
+    message?: string;
+    startedAt?: string;
+    completedAt?: string;
+}
+/**
+ * Overall deployment progress
+ */
+export interface DeploymentProgress {
+    steps: DeployStep[];
+    currentStep: number;
+    totalSteps: number;
+    overallStatus: "pending" | "in_progress" | "completed" | "failed";
+}
+/**
+ * Wrapped GitHub status response
+ */
+export type GitHubStatusAPIResponse = AgentShieldAPIResponse<GitHubStatusResponse["data"]>;
+/**
+ * Wrapped deploy response
+ */
+export type DeployToGitHubAPIResponse = AgentShieldAPIResponse<DeployToGitHubData>;

package/dist/deploy/types.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * One-Click Deployment API Type Definitions
+ *
+ * TypeScript interfaces for the AgentShield One-Click Deployment feature.
+ * Enables users to deploy MCP-I agents to Cloudflare Workers with a single click.
+ *
+ * @package @kya-os/contracts/deploy
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/identity/index.d.ts

@@ -3,5 +3,8 @@
  *
  * Exports for OAuth identity → persistent user DID resolution.
  * Part of Phase 5: Identity Resolution Integration
+ *
+ * Also exports KTA registration types for reputation tracking.
  */
 export * from "./schemas.js";
+export { KTARegistration, KTARegistrationSchema, AgentIdentity, AgentIdentitySchema, } from "../config/identity.js";

package/dist/identity/index.js

@@ -4,6 +4,8 @@
  *
  * Exports for OAuth identity → persistent user DID resolution.
  * Part of Phase 5: Identity Resolution Integration
+ *
+ * Also exports KTA registration types for reputation tracking.
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -20,4 +22,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentIdentitySchema = exports.KTARegistrationSchema = void 0;
 __exportStar(require("./schemas.js"), exports);
+// Re-export KTA registration and AgentIdentity types from config/identity (canonical location)
+var identity_js_1 = require("../config/identity.js");
+Object.defineProperty(exports, "KTARegistrationSchema", { enumerable: true, get: function () { return identity_js_1.KTARegistrationSchema; } });
+Object.defineProperty(exports, "AgentIdentitySchema", { enumerable: true, get: function () { return identity_js_1.AgentIdentitySchema; } });

package/dist/index.js

@@ -56,3 +56,4 @@ exports.SUPPORTED_XMCP_I_VERSION = "^1.0.0";
 // import { ... } from '@kya-os/contracts/tool-protection'
 // import { ... } from '@kya-os/contracts/well-known'
 // import { ... } from '@kya-os/contracts/identity'  // Phase 5: Identity resolution
+// import { ... } from '@kya-os/contracts/reputation' // Reputation scoring system