@kya-os/create-molti 0.1.0-canary.1

package/src/templates/tsconfig-template.ts

@@ -0,0 +1,26 @@
+/**
+ * tsconfig.json Template
+ *
+ * Generates TypeScript configuration for the scaffolded project.
+ */
+
+export function generateTsconfig(): string {
+  return JSON.stringify(
+    {
+      compilerOptions: {
+        target: 'ES2022',
+        module: 'ESNext',
+        moduleResolution: 'bundler',
+        lib: ['ES2022', 'DOM', 'DOM.Iterable'],
+        types: ['@cloudflare/workers-types'],
+        strict: true,
+        noEmit: true,
+        skipLibCheck: true,
+      },
+      include: ['src/**/*'],
+      exclude: ['node_modules'],
+    },
+    null,
+    2
+  );
+}

package/src/templates/types-module.ts

@@ -0,0 +1,73 @@
+/**
+ * Types Module Template (src/types.ts)
+ *
+ * Generates the TypeScript type definitions for the Worker environment.
+ */
+
+export function generateTypesModule(): string {
+  return `/**
+ * Moltworker Environment Types
+ */
+
+export interface MoltbotEnv {
+  // Cloudflare bindings
+  Sandbox: DurableObjectNamespace;
+  ASSETS: Fetcher;
+  MOLTBOT_BUCKET: R2Bucket;
+  BROWSER: Fetcher;
+
+  // KV bindings (MCP-I identity)
+  NONCE_CACHE: KVNamespace;
+  PROOF_ARCHIVE: KVNamespace;
+
+  // MCP-I Identity
+  MCP_IDENTITY_AGENT_DID: string;
+  MCP_IDENTITY_PUBLIC_KEY: string;
+  MCP_IDENTITY_PRIVATE_KEY: string;
+
+  // AI Configuration
+  AI_GATEWAY_API_KEY?: string;
+  AI_GATEWAY_BASE_URL?: string;
+  ANTHROPIC_API_KEY?: string;
+  OPENAI_API_KEY?: string;
+
+  // Bot tokens
+  TELEGRAM_BOT_TOKEN?: string;
+  DISCORD_BOT_TOKEN?: string;
+  SLACK_BOT_TOKEN?: string;
+
+  // Cloudflare Access
+  CF_ACCESS_TEAM_DOMAIN?: string;
+  CF_ACCESS_AUD?: string;
+  MOLTBOT_GATEWAY_TOKEN?: string;
+
+  // R2 Storage
+  R2_ACCESS_KEY_ID?: string;
+  R2_SECRET_ACCESS_KEY?: string;
+  CF_ACCOUNT_ID?: string;
+
+  // AgentShield
+  AGENTSHIELD_API_KEY?: string;
+  AGENTSHIELD_API_URL?: string;
+  AGENTSHIELD_PROJECT_ID?: string;
+
+  // Runtime
+  DEV_MODE?: string;
+  SANDBOX_SLEEP_AFTER?: string;
+  MCPI_ENV?: string;
+}
+
+export interface AccessUser {
+  email: string;
+  name?: string;
+}
+
+export type AppEnv = {
+  Bindings: MoltbotEnv;
+  Variables: {
+    sandbox: any; // Sandbox type from @cloudflare/sandbox
+    accessUser?: AccessUser;
+  };
+};
+`;
+}

package/src/templates/worker-index.ts

@@ -0,0 +1,99 @@
+/**
+ * Worker Entry Point Template (src/index.ts)
+ *
+ * Generates the main Hono Worker that handles routing, auth,
+ * sandbox lifecycle, and proxy to the container.
+ */
+
+export function generateWorkerIndex(projectName: string): string {
+  return `/**
+ * ${projectName} — Moltworker with MCP-I Identity
+ *
+ * Hono Worker that manages:
+ * - Sandbox (Container) lifecycle
+ * - CF Access authentication
+ * - Proxy to Moltbot gateway on port 18789
+ * - MCP-I identity proof generation
+ * - Health checks and status endpoints
+ */
+
+import { Hono } from "hono";
+import { getSandbox, buildSandboxOptions } from "@cloudflare/sandbox";
+import type { MoltbotEnv, AppEnv } from "./types";
+import { publicRoutes } from "./routes/public";
+import { createAccessMiddleware } from "./auth";
+import { ensureMoltbotGateway, MOLTBOT_PORT } from "./gateway";
+import { getIdentityProvider } from "./identity";
+
+const app = new Hono<AppEnv>();
+
+// Initialize sandbox for all requests
+app.use("*", async (c, next) => {
+  const options = buildSandboxOptions({
+    sleepAfter: Number(c.env.SANDBOX_SLEEP_AFTER) || 300,
+  });
+  const sandbox = getSandbox(c.env.Sandbox, "moltbot", options);
+  c.set("sandbox", sandbox);
+  await next();
+});
+
+// Public routes (no auth required)
+app.route("/", publicRoutes);
+
+// CF Access auth for protected routes
+app.use("/api/*", createAccessMiddleware({ type: "api" }));
+app.use("/_admin/*", createAccessMiddleware({ type: "admin" }));
+
+// Proxy all other requests to Moltbot container
+app.all("*", async (c) => {
+  const sandbox = c.get("sandbox");
+
+  try {
+    await ensureMoltbotGateway(sandbox, c.env as unknown as MoltbotEnv);
+  } catch {
+    return c.html(loadingPage(), 503);
+  }
+
+  // WebSocket upgrade
+  if (c.req.header("upgrade")?.toLowerCase() === "websocket") {
+    const ws = await sandbox.wsConnect(c.req.raw, MOLTBOT_PORT);
+    return new Response(null, {
+      status: 101,
+      webSocket: ws,
+    } as ResponseInit);
+  }
+
+  // HTTP proxy
+  const response = await sandbox.containerFetch(c.req.raw, MOLTBOT_PORT);
+  return response;
+});
+
+function loadingPage(): string {
+  return \`<!DOCTYPE html>
+<html>
+<head><title>${projectName} — Starting</title></head>
+<body style="font-family:system-ui;display:flex;align-items:center;justify-content:center;height:100vh;margin:0;background:#0a0a0a;color:#e5e5e5">
+  <div style="text-align:center">
+    <h2>Starting ${projectName}...</h2>
+    <p>The agent container is warming up. This page will refresh automatically.</p>
+    <script>setTimeout(() => location.reload(), 3000)</script>
+  </div>
+</body>
+</html>\`;
+}
+
+// Export for scheduled handler (R2 backup)
+export default {
+  fetch: app.fetch,
+  async scheduled(_event: ScheduledEvent, env: MoltbotEnv, _ctx: ExecutionContext) {
+    const options = buildSandboxOptions({ sleepAfter: 300 });
+    const sandbox = getSandbox(env.Sandbox, "moltbot", options);
+    // Scheduled backup can be added here
+    void sandbox;
+  },
+};
+
+// Export Durable Object class
+export { Sandbox } from "@cloudflare/sandbox";
+`;
+}

package/src/templates/wrangler.ts

@@ -0,0 +1,89 @@
+/**
+ * wrangler.jsonc Template
+ *
+ * Generates Cloudflare Workers configuration with Container binding,
+ * R2 storage, Browser binding, and MCP-I identity vars.
+ */
+
+import type { MoltiProjectOptions } from '../types.js';
+
+interface WranglerOptions {
+  projectName: string;
+  agentDid: string;
+  publicKey: string;
+  agentShieldProjectId?: string;
+  instanceType: string;
+}
+
+export function generateWranglerJsonc(opts: WranglerOptions): string {
+  const { projectName, agentDid, publicKey, agentShieldProjectId, instanceType } = opts;
+
+  const agentShieldLine = agentShieldProjectId
+    ? `  // AgentShield Integration
+  "AGENTSHIELD_PROJECT_ID": "${agentShieldProjectId}",
+  "AGENTSHIELD_API_URL": "https://kya.vouched.id",`
+    : `  // AgentShield Integration (uncomment when configured)
+  // "AGENTSHIELD_PROJECT_ID": "your-project-id",
+  // "AGENTSHIELD_API_URL": "https://kya.vouched.id",`;
+
+  return `{
+  "name": "${projectName}",
+  "main": "src/index.ts",
+  "compatibility_date": "2025-05-06",
+  "compatibility_flags": ["nodejs_compat"],
+  "observability": { "enabled": true },
+
+  // Sandbox (Container) binding
+  "containers": [
+    {
+      "class_name": "Sandbox",
+      "image": "./Dockerfile",
+      "instance_type": "${instanceType}",
+      "max_instances": 1
+    }
+  ],
+
+  // Durable Object for Sandbox state
+  "durable_objects": {
+    "bindings": [
+      { "name": "Sandbox", "class_name": "Sandbox" }
+    ]
+  },
+
+  // R2 bucket for persistent storage
+  "r2_buckets": [
+    { "binding": "MOLTBOT_BUCKET", "bucket_name": "${projectName}-data" }
+  ],
+
+  // Browser binding for CDP
+  "browser": { "binding": "BROWSER" },
+
+  // KV for identity (nonce cache + proof archive)
+  "kv_namespaces": [
+    { "binding": "NONCE_CACHE" },
+    { "binding": "PROOF_ARCHIVE" }
+  ],
+
+  // Scheduled backup (every 5 minutes)
+  "triggers": {
+    "crons": ["*/5 * * * *"]
+  },
+
+  "vars": {
+    // MCP-I Identity (public — safe to commit)
+    "MCP_IDENTITY_AGENT_DID": "${agentDid}",
+    "MCP_IDENTITY_PUBLIC_KEY": "${publicKey}",
+
+${agentShieldLine}
+
+    "MCPI_ENV": "development"
+  }
+
+  // SECRETS (via wrangler secret or GitHub Secrets):
+  // - MCP_IDENTITY_PRIVATE_KEY
+  // - AGENTSHIELD_API_KEY
+  // - ANTHROPIC_API_KEY or OPENAI_API_KEY
+  // - CLOUDFLARE_API_TOKEN (for CI/CD)
+}
+`;
+}

package/src/types.ts

@@ -0,0 +1,64 @@
+/**
+ * Types for @kya-os/create-molti
+ *
+ * Defines the configuration options and result types
+ * for scaffolding Moltworker projects with MCP-I identity.
+ */
+
+/**
+ * Represents a generated file with its content
+ */
+export interface GeneratedFile {
+  /** Relative path from project root (e.g., "src/index.ts") */
+  path: string;
+  /** File content as string */
+  content: string;
+  /** Encoding type */
+  encoding: 'utf-8' | 'base64';
+}
+
+/**
+ * Options for generating a Molti project
+ */
+export interface MoltiProjectOptions {
+  /** Project name (used for package.json, wrangler config, container name) */
+  projectName: string;
+  /** Human-readable agent name (defaults to projectName) */
+  agentName?: string;
+  /** Agent description for metadata */
+  agentDescription?: string;
+  /** AgentShield project ID (for proof reporting) */
+  agentShieldProjectId?: string;
+  /** AgentShield API key (stored as GitHub Secret) */
+  agentShieldApiKey?: string;
+  /** Enable KTA reputation tracking */
+  enableReputation?: boolean;
+  /** Cloudflare Container instance type */
+  instanceType?: 'lite' | 'basic' | 'standard-1' | 'standard-2' | 'standard-3' | 'standard-4';
+  /** Skip identity generation (for testing) */
+  skipIdentity?: boolean;
+}
+
+/**
+ * Generated identity from Ed25519 keypair
+ */
+export interface MoltiIdentity {
+  /** DID:key identifier (e.g., "did:key:z6Mk...") */
+  did: string;
+  /** Base64-encoded Ed25519 public key */
+  publicKey: string;
+  /** Base64-encoded Ed25519 private key */
+  privateKey: string;
+}
+
+/**
+ * Result of project generation
+ */
+export interface MoltiGenerateResult {
+  /** All generated files */
+  files: GeneratedFile[];
+  /** Generated identity (DID, keys) */
+  identity: MoltiIdentity;
+  /** Secrets that should be added to GitHub Secrets (not committed to repo) */
+  secrets: Record<string, string>;
+}