@kya-os/verifier 1.3.1-canary.0 → 1.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/worker.d.ts +10 -8
- package/dist/worker.js +5 -5
- package/dist/worker.js.map +1 -1
- package/package.json +2 -2
- package/dist/core.d.ts +0 -131
package/dist/worker.d.ts
CHANGED
|
@@ -10,7 +10,6 @@ export interface WorkerEnv {
|
|
|
10
10
|
KYA_API_KEY?: string;
|
|
11
11
|
XMCP_I_TS_SKEW_SEC?: string;
|
|
12
12
|
XMCP_I_SESSION_TTL?: string;
|
|
13
|
-
PROOF_MAX_AGE_SEC?: string;
|
|
14
13
|
KYA_VOUCHED_API_KEY?: string;
|
|
15
14
|
}
|
|
16
15
|
/**
|
|
@@ -61,8 +60,8 @@ export declare function createConfigFromEnv(env: WorkerEnv, overrides?: Partial<
|
|
|
61
60
|
* ```typescript
|
|
62
61
|
* export default {
|
|
63
62
|
* async fetch(request: Request, env: WorkerEnv): Promise<Response> {
|
|
64
|
-
*
|
|
65
|
-
* const result = await verifyWorker(request,
|
|
63
|
+
* const config = createConfigFromEnv(env);
|
|
64
|
+
* const result = await verifyWorker(request, config);
|
|
66
65
|
*
|
|
67
66
|
* if (!result.success) {
|
|
68
67
|
* return applyVerificationToResponse(result);
|
|
@@ -74,10 +73,10 @@ export declare function createConfigFromEnv(env: WorkerEnv, overrides?: Partial<
|
|
|
74
73
|
* ```
|
|
75
74
|
*
|
|
76
75
|
* @param request - The incoming request
|
|
77
|
-
* @param
|
|
76
|
+
* @param config - Optional verifier configuration
|
|
78
77
|
* @returns Promise<VerifierResult> - Verification result with headers or error
|
|
79
78
|
*/
|
|
80
|
-
export declare function verifyWorker(request: Request,
|
|
79
|
+
export declare function verifyWorker(request: Request, config?: WorkerVerifierConfig): Promise<VerifierResult>;
|
|
81
80
|
/**
|
|
82
81
|
* Cloudflare Worker middleware factory
|
|
83
82
|
*
|
|
@@ -114,12 +113,15 @@ export declare function applyVerificationToResponse(result: VerifierResult, resp
|
|
|
114
113
|
*
|
|
115
114
|
* src/index.ts:
|
|
116
115
|
* ```typescript
|
|
117
|
-
* import { verifyWorker, applyVerificationToResponse, type WorkerEnv } from "@kya-os/verifier/worker";
|
|
116
|
+
* import { verifyWorker, applyVerificationToResponse, createConfigFromEnv, type WorkerEnv } from "@kya-os/verifier/worker";
|
|
118
117
|
*
|
|
119
118
|
* export default {
|
|
120
119
|
* async fetch(request: Request, env: WorkerEnv): Promise<Response> {
|
|
121
|
-
* //
|
|
122
|
-
* const
|
|
120
|
+
* // Create config from environment
|
|
121
|
+
* const config = createConfigFromEnv(env);
|
|
122
|
+
*
|
|
123
|
+
* // Verify the request
|
|
124
|
+
* const result = await verifyWorker(request, config);
|
|
123
125
|
*
|
|
124
126
|
* if (!result.success) {
|
|
125
127
|
* return applyVerificationToResponse(result);
|
package/dist/worker.js
CHANGED
|
@@ -140,13 +140,13 @@ export async function verifyWorker(request, envOrConfig) {
|
|
|
140
140
|
if (!envOrConfig) {
|
|
141
141
|
throw new Error("Either env or config must be provided");
|
|
142
142
|
}
|
|
143
|
-
else if ("
|
|
144
|
-
// It's a
|
|
145
|
-
config =
|
|
143
|
+
else if ("kvNamespace" in envOrConfig || "ktaBaseUrl" in envOrConfig || "enableDelegationCheck" in envOrConfig) {
|
|
144
|
+
// It's already a WorkerVerifierConfig
|
|
145
|
+
config = envOrConfig;
|
|
146
146
|
}
|
|
147
147
|
else {
|
|
148
|
-
// It's
|
|
149
|
-
config = envOrConfig;
|
|
148
|
+
// It's a WorkerEnv, use cached config
|
|
149
|
+
config = getConfigFromEnv(envOrConfig);
|
|
150
150
|
}
|
|
151
151
|
// Extract proof from request
|
|
152
152
|
const proof = await extractProofFromRequest(request);
|
package/dist/worker.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAuB,MAAM,WAAW,CAAC;AAqD9D;;GAEG;AACH,KAAK,UAAU,uBAAuB,CACpC,OAAgB;IAEhB,IAAI,CAAC;QACH,8CAA8C;QAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,wDAAwD;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAQ,CAAC;gBACnD,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,KAAyB,EACzB,YAAoB,EACpB,GAAW,EACX,GAAW;IAEX,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAEhC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEnC,uCAAuC;IACvC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,8BAA8B,KAAK,oBAAoB,YAAY,EAAE,CAAC,CAAC;QACpF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAc,EACd,SAAyC;IAEzC,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,qBAAqB;QACpD,qBAAqB,EAAE,IAAI;QAC3B,kBAAkB,EAAE,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC;QACrE,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC;QACpE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC;QAC9D,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,IAAI;QACd,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,IAAI,YAAY,GAAgC,IAAI,CAAC;AACrD,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C;;GAEG;AACH,SAAS,eAAe,CAAC,GAAc;IACrC,OAAO;QACL,GAAG,CAAC,WAAW,IAAI,EAAE;QACrB,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAC5B,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAC5B,GAAG,CAAC,iBAAiB,IAAI,EAAE;KAC5B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,GAAc,EACd,SAAyC;IAEzC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEvC,6CAA6C;IAC7C,IAAI,YAAY,IAAI,kBAAkB,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QACnE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,6BAA6B;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,YAAY,GAAG,MAAM,CAAC;QACtB,kBAAkB,GAAG,SAAS,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB,EAChB,WAA8C;IAE9C,IAAI,CAAC;QACH,gEAAgE;QAChE,IAAI,MAA4B,CAAC;QACjC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,aAAa,IAAI,WAAW,IAAI,
|
|
1
|
+
{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAuB,MAAM,WAAW,CAAC;AAqD9D;;GAEG;AACH,KAAK,UAAU,uBAAuB,CACpC,OAAgB;IAEhB,IAAI,CAAC;QACH,8CAA8C;QAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,wDAAwD;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAQ,CAAC;gBACnD,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,KAAyB,EACzB,YAAoB,EACpB,GAAW,EACX,GAAW;IAEX,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAEhC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEnC,uCAAuC;IACvC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,8BAA8B,KAAK,oBAAoB,YAAY,EAAE,CAAC,CAAC;QACpF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAc,EACd,SAAyC;IAEzC,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,qBAAqB;QACpD,qBAAqB,EAAE,IAAI;QAC3B,kBAAkB,EAAE,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC;QACrE,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC;QACpE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC;QAC9D,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,IAAI;QACd,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,IAAI,YAAY,GAAgC,IAAI,CAAC;AACrD,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C;;GAEG;AACH,SAAS,eAAe,CAAC,GAAc;IACrC,OAAO;QACL,GAAG,CAAC,WAAW,IAAI,EAAE;QACrB,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAC5B,GAAG,CAAC,kBAAkB,IAAI,EAAE;QAC5B,GAAG,CAAC,iBAAiB,IAAI,EAAE;KAC5B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,GAAc,EACd,SAAyC;IAEzC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEvC,6CAA6C;IAC7C,IAAI,YAAY,IAAI,kBAAkB,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QACnE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,6BAA6B;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,YAAY,GAAG,MAAM,CAAC;QACtB,kBAAkB,GAAG,SAAS,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB,EAChB,WAA8C;IAE9C,IAAI,CAAC;QACH,gEAAgE;QAChE,IAAI,MAA4B,CAAC;QACjC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,aAAa,IAAI,WAAW,IAAI,YAAY,IAAI,WAAW,IAAI,uBAAuB,IAAI,WAAW,EAAE,CAAC;YACjH,sCAAsC;YACtC,MAAM,GAAG,WAAmC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,MAAM,GAAG,gBAAgB,CAAC,WAAwB,CAAC,CAAC;QACtD,CAAC;QAED,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,2BAA2B;oBACpC,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE;wBACP,MAAM,EACJ,qEAAqE;wBACvE,WAAW,EAAE,6CAA6C;qBAC3D;iBACF;aACF,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAErD,mCAAmC;QACnC,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACnC,KAAK;YACL,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACzC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;gBACvE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE;oBACP,MAAM,EAAE,6CAA6C;oBACrD,WAAW,EAAE,oCAAoC;iBAClD;aACF;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,OAAO,KAAK,EAAE,OAAgB,EAA2B,EAAE;QACzD,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAsB,EACtB,QAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,MAAM,CAAC,KAAM,CAAC,IAAI;YACxB,OAAO,EAAE,MAAM,CAAC,KAAM,CAAC,OAAO;YAC9B,OAAO,EAAE,MAAM,CAAC,KAAM,CAAC,OAAO;SAC/B,CAAC,EACF;YACE,MAAM,EAAE,MAAM,CAAC,KAAM,CAAC,UAAU;YAChC,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;SACF,CACF,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACtD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kya-os/verifier",
|
|
3
|
-
"version": "1.3.
|
|
3
|
+
"version": "1.3.2",
|
|
4
4
|
"description": "Isomorphic verifier middleware for XMCP-I proof validation",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
"clean": "rm -rf dist"
|
|
33
33
|
},
|
|
34
34
|
"dependencies": {
|
|
35
|
-
"@kya-os/contracts": "
|
|
35
|
+
"@kya-os/contracts": "^1.3.1-canary.3",
|
|
36
36
|
"jose": "^5.2.0",
|
|
37
37
|
"json-canonicalize": "^2.0.0"
|
|
38
38
|
},
|
package/dist/core.d.ts
DELETED
|
@@ -1,131 +0,0 @@
|
|
|
1
|
-
import type { DetachedProof } from "@kya-os/contracts/proof";
|
|
2
|
-
import type { VerifierResult } from "@kya-os/contracts/verifier";
|
|
3
|
-
/**
|
|
4
|
-
* Configuration for the verifier core
|
|
5
|
-
*/
|
|
6
|
-
export interface VerifierConfig {
|
|
7
|
-
/**
|
|
8
|
-
* KTA base URL for delegation checking
|
|
9
|
-
*/
|
|
10
|
-
ktaBaseUrl?: string;
|
|
11
|
-
/**
|
|
12
|
-
* Enable delegation checking via KTA
|
|
13
|
-
*/
|
|
14
|
-
enableDelegationCheck?: boolean;
|
|
15
|
-
/**
|
|
16
|
-
* Clock skew tolerance in seconds
|
|
17
|
-
*/
|
|
18
|
-
clockSkewTolerance?: number;
|
|
19
|
-
/**
|
|
20
|
-
* Session timeout in seconds
|
|
21
|
-
*/
|
|
22
|
-
sessionTimeout?: number;
|
|
23
|
-
/**
|
|
24
|
-
* Maximum age for proofs in seconds (prevents replay of old proofs)
|
|
25
|
-
*/
|
|
26
|
-
proofMaxAge?: number;
|
|
27
|
-
/**
|
|
28
|
-
* Allow mock data for testing
|
|
29
|
-
*/
|
|
30
|
-
allowMockData?: boolean;
|
|
31
|
-
/**
|
|
32
|
-
* Cache TTL for DID documents in seconds
|
|
33
|
-
*/
|
|
34
|
-
didCacheTtl?: number;
|
|
35
|
-
/**
|
|
36
|
-
* Cache TTL for delegation status in seconds
|
|
37
|
-
*/
|
|
38
|
-
delegationCacheTtl?: number;
|
|
39
|
-
}
|
|
40
|
-
/**
|
|
41
|
-
* Context for proof verification
|
|
42
|
-
*/
|
|
43
|
-
export interface VerificationContext {
|
|
44
|
-
proof: DetachedProof;
|
|
45
|
-
audience: string;
|
|
46
|
-
timestamp?: number;
|
|
47
|
-
}
|
|
48
|
-
/**
|
|
49
|
-
* Isomorphic verifier core for XMCP-I proof validation
|
|
50
|
-
*
|
|
51
|
-
* This is the heart of the trust system - it verifies that AI agents
|
|
52
|
-
* are who they claim to be and have the authority to perform actions.
|
|
53
|
-
*/
|
|
54
|
-
export declare class VerifierCore {
|
|
55
|
-
private config;
|
|
56
|
-
private didCache;
|
|
57
|
-
private delegationCache;
|
|
58
|
-
constructor(config?: VerifierConfig);
|
|
59
|
-
/**
|
|
60
|
-
* Verify a detached proof and return verification result
|
|
61
|
-
*
|
|
62
|
-
* This is the main entry point for proof verification. It performs
|
|
63
|
-
* a comprehensive validation of the agent's identity and authorization.
|
|
64
|
-
*/
|
|
65
|
-
verify(context: VerificationContext): Promise<VerifierResult>;
|
|
66
|
-
/**
|
|
67
|
-
* Validate proof structure with comprehensive checks
|
|
68
|
-
*/
|
|
69
|
-
private validateProofStructure;
|
|
70
|
-
/**
|
|
71
|
-
* Validate timestamp with configurable clock skew tolerance
|
|
72
|
-
*/
|
|
73
|
-
private validateTimestamp;
|
|
74
|
-
/**
|
|
75
|
-
* Validate audience matches expected value
|
|
76
|
-
*/
|
|
77
|
-
private validateAudience;
|
|
78
|
-
/**
|
|
79
|
-
* Verify Ed25519 signature using JOSE with proper detached JWS handling
|
|
80
|
-
*
|
|
81
|
-
* This is the cryptographic heart of the verification process.
|
|
82
|
-
* It ensures the proof was signed by the claimed identity.
|
|
83
|
-
*/
|
|
84
|
-
private verifySignature;
|
|
85
|
-
/**
|
|
86
|
-
* Create canonical payload that matches runtime implementation
|
|
87
|
-
* Uses JSON Canonicalization Scheme (JCS) RFC 8785 for deterministic ordering
|
|
88
|
-
*/
|
|
89
|
-
private createCanonicalPayload;
|
|
90
|
-
/**
|
|
91
|
-
* Verify delegation status via KTA with caching
|
|
92
|
-
*/
|
|
93
|
-
private verifyDelegation;
|
|
94
|
-
/**
|
|
95
|
-
* Validate delegation response
|
|
96
|
-
*/
|
|
97
|
-
private validateDelegationResponse;
|
|
98
|
-
/**
|
|
99
|
-
* Fetch public key from DID document with caching
|
|
100
|
-
*/
|
|
101
|
-
private fetchPublicKeyWithCache;
|
|
102
|
-
/**
|
|
103
|
-
* Fetch DID document from well-known endpoint
|
|
104
|
-
*/
|
|
105
|
-
private fetchDIDDocument;
|
|
106
|
-
/**
|
|
107
|
-
* Extract public key from DID document
|
|
108
|
-
*/
|
|
109
|
-
private extractPublicKey;
|
|
110
|
-
/**
|
|
111
|
-
* Generate trusted headers for successful verification
|
|
112
|
-
*/
|
|
113
|
-
private generateHeaders;
|
|
114
|
-
/**
|
|
115
|
-
* Generate agent context for MCP recipients
|
|
116
|
-
*/
|
|
117
|
-
private generateAgentContext;
|
|
118
|
-
/**
|
|
119
|
-
* Create error result from structured error
|
|
120
|
-
*/
|
|
121
|
-
private createErrorResult;
|
|
122
|
-
/**
|
|
123
|
-
* Log verification attempt for security monitoring
|
|
124
|
-
*/
|
|
125
|
-
private logVerificationAttempt;
|
|
126
|
-
/**
|
|
127
|
-
* Clean up expired cache entries
|
|
128
|
-
*/
|
|
129
|
-
cleanupCache(): void;
|
|
130
|
-
}
|
|
131
|
-
//# sourceMappingURL=core.d.ts.map
|