@kya-os/mcp-i 1.5.4 → 1.5.5

package/dist/runtime/delegation-verifier-agentshield.js

@@ -106,14 +106,15 @@ class AgentShieldAPIDelegationVerifier {
             console.log(`[AgentShield] Cache MISS for ${agentDid}, calling API...`);
         }
         try {
-            const response = await fetch(`${this.apiUrl}/api/v1/delegations/verify`, {
+            // Use the correct AgentShield bouncer API endpoint
+            const response = await fetch(`${this.apiUrl}/api/v1/bouncer/delegations/verify`, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    'X-API-Key': this.apiKey,
+                    'Authorization': `Bearer ${this.apiKey}`,
                 },
                 body: JSON.stringify({
-                    agentDid,
+                    agent_did: agentDid, // AgentShield uses snake_case
                     scopes,
                 }),
             });
@@ -133,30 +134,37 @@ class AgentShieldAPIDelegationVerifier {
                 }
                 throw new Error(`AgentShield API error: ${response.status} ${response.statusText}`);
             }
-            const data = await response.json();
-            // Validate response
-            if (data.delegation) {
-                const parsed = delegation_1.DelegationRecordSchema.safeParse(data.delegation);
-                if (!parsed.success) {
-                    console.error('[AgentShield] Invalid delegation in API response:', parsed.error);
-                    data.valid = false;
-                    data.reason = 'Invalid delegation format';
-                }
-                else {
-                    // Re-validate locally (trust but verify)
-                    const validation = (0, delegation_verifier_1.validateDelegation)(parsed.data);
-                    if (!validation.valid) {
-                        data.valid = false;
-                        data.reason = validation.reason;
-                    }
-                }
+            // AgentShield wraps response in success/data structure
+            const response_body = await response.json();
+            const data = response_body.data || response_body;
+            // AgentShield returns either valid with credential or error
+            let result;
+            if (data.valid && data.credential) {
+                // For valid delegations, we only need to return that it's valid
+                // The delegation details are not needed for the verification flow
+                result = {
+                    valid: true,
+                    // Only return delegation if it's in the correct format
+                    delegation: data.delegation, // This will be undefined if not provided
+                    reason: undefined,
+                    cached: false,
+                };
+            }
+            else if (data.error) {
+                result = {
+                    valid: false,
+                    reason: data.error.message || data.error.code || 'Delegation not valid',
+                    cached: false,
+                };
+            }
+            else {
+                result = {
+                    valid: data.valid || false,
+                    delegation: data.delegation,
+                    reason: data.reason || 'Unknown error',
+                    cached: false,
+                };
             }
-            const result = {
-                valid: data.valid,
-                delegation: data.delegation,
-                reason: data.reason,
-                cached: false,
-            };
             // Cache result
             const ttl = data.valid ? this.cacheTtl : this.cacheTtl / 2;
             this.cache.set(cacheKey, result, ttl);
@@ -185,10 +193,10 @@ class AgentShieldAPIDelegationVerifier {
         if (cached)
             return cached;
         try {
-            const response = await fetch(`${this.apiUrl}/api/v1/delegations/${delegationId}`, {
+            const response = await fetch(`${this.apiUrl}/api/v1/bouncer/delegations/${delegationId}`, {
                 method: 'GET',
                 headers: {
-                    'X-API-Key': this.apiKey,
+                    'Authorization': `Bearer ${this.apiKey}`,
                 },
             });
             if (!response.ok) {
@@ -225,11 +233,11 @@ class AgentShieldAPIDelegationVerifier {
             throw new Error(`Invalid delegation record: ${parsed.error.message}`);
         }
         try {
-            const response = await fetch(`${this.apiUrl}/api/v1/delegations`, {
+            const response = await fetch(`${this.apiUrl}/api/v1/bouncer/delegations`, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    'X-API-Key': this.apiKey,
+                    'Authorization': `Bearer ${this.apiKey}`,
                 },
                 body: JSON.stringify(delegation),
             });
@@ -255,11 +263,11 @@ class AgentShieldAPIDelegationVerifier {
      */
     async revoke(delegationId, reason) {
         try {
-            const response = await fetch(`${this.apiUrl}/api/v1/delegations/${delegationId}/revoke`, {
+            const response = await fetch(`${this.apiUrl}/api/v1/bouncer/delegations/${delegationId}/revoke`, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    'X-API-Key': this.apiKey,
+                    'Authorization': `Bearer ${this.apiKey}`,
                 },
                 body: JSON.stringify({ reason }),
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i",
-  "version": "1.5.4",
+  "version": "1.5.5",
   "description": "The TypeScript MCP framework with identity features built-in",
   "type": "commonjs",
   "main": "dist/index.js",