@shield-agent/kya 0.5.0 → 0.7.0

package/dist/sign/evidence-bundle.js

@@ -0,0 +1,193 @@
+/**
+ * Signed evidence bundles (v1) — the OSS half of hosted verification.
+ * Self-signed by a locally generated ed25519 key: proves bundle integrity and
+ * continuity of a key, NOT identity. Identity binding is a hosted claim.
+ * node:crypto only — the package dependency list is locked.
+ */
+import { createHash, createPrivateKey, createPublicKey, generateKeyPairSync, sign, verify, } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync, } from "node:fs";
+import { dirname, join } from "node:path";
+import { globalConfigDir } from "../config.js";
+import { assertNoSecrets } from "../dash/render.js";
+import { UsageError } from "../errors.js";
+import { canonicalJson } from "../hash.js";
+export const EVIDENCE_BUNDLE_FORMAT = "shield-kya-evidence-bundle";
+export const EVIDENCE_BUNDLE_VERSION = 1;
+export function evidenceKeyPath(env = process.env) {
+    return join(globalConfigDir(env), "keys", "evidence-ed25519.json");
+}
+export function fingerprintSpki(spkiDer) {
+    return createHash("sha256").update(spkiDer).digest("hex").slice(0, 16);
+}
+/** Rebuild an EvidenceKey from the on-disk JSON shape. Throws UsageError on corrupt input. */
+export function evidenceKeyFromSerialized(raw) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new UsageError("evidence key file is not an object");
+    }
+    const rec = raw;
+    if (rec.version !== 1) {
+        throw new UsageError("evidence key file has an unsupported version");
+    }
+    if (typeof rec.privateKeyPkcs8 !== "string" ||
+        typeof rec.publicKeySpki !== "string") {
+        throw new UsageError("evidence key file is missing key material");
+    }
+    try {
+        const privateKey = createPrivateKey({
+            key: Buffer.from(rec.privateKeyPkcs8, "base64url"),
+            format: "der",
+            type: "pkcs8",
+        });
+        const publicKey = createPublicKey({
+            key: Buffer.from(rec.publicKeySpki, "base64url"),
+            format: "der",
+            type: "spki",
+        });
+        const spkiDer = Buffer.from(publicKey.export({ format: "der", type: "spki" }));
+        const derivedSpkiDer = Buffer.from(createPublicKey(privateKey).export({ format: "der", type: "spki" }));
+        if (!derivedSpkiDer.equals(spkiDer)) {
+            throw new Error("pub/private key mismatch");
+        }
+        return {
+            publicKey,
+            privateKey,
+            pubkeyB64u: spkiDer.toString("base64url"),
+            fingerprint: fingerprintSpki(spkiDer),
+            created: false,
+            regenerated: false,
+        };
+    }
+    catch {
+        throw new UsageError("evidence key file is corrupt — regenerating (old bundles stay verifiable only with the old pubkey)");
+    }
+}
+/** Load the evidence signing key, generating one (mode 0600) on first use. */
+export function loadOrCreateEvidenceKey(env = process.env) {
+    const path = evidenceKeyPath(env);
+    let existed = false;
+    if (existsSync(path)) {
+        existed = true;
+        try {
+            return evidenceKeyFromSerialized(JSON.parse(readFileSync(path, "utf8")));
+        }
+        catch {
+            /* corrupt or unreadable key file: regenerate below */
+        }
+    }
+    const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+    const spkiDer = Buffer.from(publicKey.export({ format: "der", type: "spki" }));
+    const pkcs8Der = Buffer.from(privateKey.export({ format: "der", type: "pkcs8" }));
+    const doc = {
+        version: 1,
+        createdAt: new Date().toISOString(),
+        publicKeySpki: spkiDer.toString("base64url"),
+        privateKeyPkcs8: pkcs8Der.toString("base64url"),
+    };
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    writeFileSync(path, `${JSON.stringify(doc, null, 2)}\n`, {
+        encoding: "utf8",
+        mode: 0o600,
+    });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        /* best-effort on non-POSIX */
+    }
+    return {
+        publicKey,
+        privateKey,
+        pubkeyB64u: doc.publicKeySpki,
+        fingerprint: fingerprintSpki(spkiDer),
+        created: true,
+        regenerated: existed,
+    };
+}
+/** sig = base64url( ed25519_sign( canonicalJson(body) ) ) — canonicalJson from src/hash.ts. */
+export function signCanonicalPayload(body, privateKey) {
+    const payload = Buffer.from(canonicalJson(body), "utf8");
+    return sign(null, payload, privateKey).toString("base64url");
+}
+/** Verify `sig` over canonicalJson(bundle without the `sig` and `pubkey` fields) using the embedded `pubkey`. */
+export function verifyBundleSignature(bundle) {
+    const sig = bundle.sig;
+    const pubkey = bundle.pubkey;
+    if (typeof sig !== "string" || typeof pubkey !== "string")
+        return false;
+    const { sig: _omitSig, pubkey: _omitPubkey, ...body } = bundle;
+    void _omitSig;
+    void _omitPubkey;
+    try {
+        const key = createPublicKey({
+            key: Buffer.from(pubkey, "base64url"),
+            format: "der",
+            type: "spki",
+        });
+        return verify(null, Buffer.from(canonicalJson(body), "utf8"), key, Buffer.from(sig, "base64url"));
+    }
+    catch {
+        return false;
+    }
+}
+const MAX_BUNDLE_EVIDENCE_CHARS = 200;
+/**
+ * Clip to MAX code points (not UTF-16 units): a surrogate-splitting slice
+ * re-encodes differently in Java (`?`) than Node (U+FFFD) → cross-repo sig mismatch.
+ */
+function clipBundleEvidence(evidence) {
+    const chars = Array.from(evidence);
+    return chars.length > MAX_BUNDLE_EVIDENCE_CHARS
+        ? `${chars.slice(0, MAX_BUNDLE_EVIDENCE_CHARS - 1).join("")}…`
+        : evidence;
+}
+/**
+ * Build a signed evidence bundle v1 (hard cross-repo contract — see
+ * docs/certify.md). sig = base64url(ed25519_sign(canonicalJson(body))) where
+ * body is the bundle without the sig and pubkey fields (same stripping as
+ * verifyBundleSignature). Self-signed: integrity + key continuity, NOT identity.
+ */
+export function buildEvidenceBundle(input, key) {
+    const report = input.report;
+    const agent = input.agent && Object.values(input.agent).some((v) => v !== undefined)
+        ? Object.fromEntries(Object.entries(input.agent).filter(([, v]) => v !== undefined))
+        : undefined;
+    const body = {
+        format: EVIDENCE_BUNDLE_FORMAT,
+        version: EVIDENCE_BUNDLE_VERSION,
+        generatedAt: report.generatedAt,
+        ...(agent ? { agent } : {}),
+        catalog: { id: report.catalog.id, version: report.catalog.version },
+        window: {
+            days: report.window.days,
+            since: report.window.since,
+            until: report.window.until,
+        },
+        trail: {
+            eventCount: report.trail.eventCount,
+            digest: createHash("sha256")
+                .update(canonicalJson(input.windowEvents), "utf8")
+                .digest("hex"),
+            verdictMix: report.trail.verdictMix,
+            modes: report.trail.modes,
+        },
+        requirements: report.requirements.map((r) => ({
+            id: r.id,
+            domain: r.domain,
+            status: r.status,
+            evidence: clipBundleEvidence(r.evidence),
+            ...(r.attestation
+                ? { attestation: { text: r.attestation.text, at: r.attestation.at } }
+                : {}),
+        })),
+        overall: report.overall,
+    };
+    // egress-artifact defense-in-depth, same scan as report.json
+    const payload = canonicalJson(body);
+    assertNoSecrets(payload);
+    return {
+        ...body,
+        pubkey: key.pubkeyB64u,
+        sig: sign(null, Buffer.from(payload, "utf8"), key.privateKey).toString("base64url"),
+    };
+}
+//# sourceMappingURL=evidence-bundle.js.map

package/dist/sign/evidence-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-bundle.js","sourceRoot":"","sources":["../../src/sign/evidence-bundle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,IAAI,EACJ,MAAM,GAEP,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAI3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAsBzC,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IACD,IACE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;QACvC,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,EACrC,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,gBAAgB,CAAC;YAClC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC;YAClD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAChC,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CACpE,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO;YACL,SAAS;YACT,UAAU;YACV,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YACzC,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC;YACrC,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAClB,oGAAoG,CACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,GAAG,GAA0B;QACjC,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;KAChD,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACvD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,OAAO;QACL,SAAS;QACT,UAAU;QACV,UAAU,EAAE,GAAG,CAAC,aAAa;QAC7B,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,OAAO;KACrB,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,IAAa,EAAE,UAAqB;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/D,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,qBAAqB,CAAC,MAA+B;IACnE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAC/D,KAAK,QAAQ,CAAC;IACd,KAAK,WAAW,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC;YAC1B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,OAAO,MAAM,CACX,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EACxC,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAC9B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAgBD,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC;;;GAGG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,yBAAyB;QAC7C,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;QAC9D,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAA0B,EAC1B,GAAgB;IAEhB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;QACpE,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAC/D;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAA4B;QACpC,MAAM,EAAE,sBAAsB;QAC9B,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;QACnE,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;SAC3B;QACD,KAAK,EAAE;YACL,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;YACnC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;iBACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;iBACjD,MAAM,CAAC,KAAK,CAAC;YAChB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;YACnC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;SAC1B;QACD,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxC,GAAG,CAAC,CAAC,CAAC,WAAW;gBACf,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE;gBACrE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;IACF,6DAA6D;IAC7D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,GAAG,CAAC,UAAU;QACtB,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KACpF,CAAC;AACJ,CAAC"}

package/droid/README.md

@@ -1,6 +1,6 @@
 # Droid (Factory) + Shield KYA
 
-Preferred path is Droid's own CLI: `droid mcp add shield-kya "npx --no-install @shield-agent/kya@0.5.0 serve-mcp --stdio" --env KYA_BASE_URL=https://shield-agent.com --env KYA_API_KEY=$KYA_API_KEY --env KYA_HOST=ide`.
+Preferred path is Droid's own CLI: `droid mcp add shield-kya "npx --no-install @shield-agent/kya@0.7.0 serve-mcp --stdio" --env KYA_BASE_URL=https://shield-agent.com --env KYA_API_KEY=$KYA_API_KEY --env KYA_HOST=ide`.
 
 `mcp.example.json` shows the expected on-disk shape (`~/.factory/mcp.json`) — **schema not yet verified against a live Droid install**; treat as a starting point and prefer `droid mcp add`.
 

package/droid/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/gemini/settings.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/grok/README.md

@@ -40,7 +40,7 @@ chat = client.chat.create(
 There is no grok.com stdio path. For a local agent host use the same stdio launch as Claude:
 
 ```bash
-npx --no-install @shield-agent/kya@0.5.0 serve-mcp --stdio
+npx --no-install @shield-agent/kya@0.7.0 serve-mcp --stdio
 ```
 
 Env: `KYA_BASE_URL`, `KYA_API_KEY`, `KYA_HOST`. Codex and Gemini example configs in this package show the full snippets.

package/kilo/kilo.example.json

@@ -2,7 +2,7 @@
   "mcp": {
     "shield-kya": {
       "type": "local",
-      "command": ["npx", "--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "command": ["npx", "--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "enabled": true,
       "environment": {
         "KYA_BASE_URL": "https://shield-agent.com",

package/kimi/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/kiro/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "shield-kya",
   "display_name": "Shield KYA",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Know Your Agent MCP gate: ALLOW / DENY / REQUIRE_APPROVE. Sole PEP is Shield.",
   "long_description": "Local Claude Desktop extension that runs the packaged `dist/cli.js serve-mcp --stdio` against your Shield control plane (local or https://shield-agent.com). Tools evaluate policy, ingest session risk, and open Hold tickets. They never execute irreversible side effects.",
   "author": {

package/mastracode/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/mcp.json

@@ -3,7 +3,7 @@
     "shield-kya": {
       "description": "Know Your Agent local MCP gate: wrap-before-write, named-agent registry, Hold/Clear.",
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "${KYA_BASE_URL}",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/openai/codex.config.example.toml

@@ -11,7 +11,7 @@
 # --- Local stdio (OSS) ---
 [mcp_servers.shield-kya]
 command = "npx"
-args = ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"]
+args = ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"]
 startup_timeout_sec = 20
 env_vars = ["KYA_BASE_URL", "KYA_API_KEY", "KYA_HOST", "KYA_AGENT_ID"]
 

package/opencode/opencode.example.json

@@ -2,7 +2,7 @@
   "mcp": {
     "shield-kya": {
       "type": "local",
-      "command": ["npx", "--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "command": ["npx", "--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "enabled": true,
       "environment": {
         "KYA_BASE_URL": "https://shield-agent.com",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shield-agent/kya",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Know Your Agent light CLI + local MCP gate (provider-agnostic, zero vertical packs required).",
   "license": "MIT",
   "type": "module",
@@ -20,6 +20,7 @@
   },
   "files": [
     "dist",
+    "catalog",
     "README.md",
     "server.json",
     "LICENSE",

package/qwen/settings.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.5.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.7.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/The-Pixel-Boys/shield-kya",
     "source": "github"
   },
-  "version": "0.5.0",
+  "version": "0.7.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@shield-agent/kya",
-      "version": "0.5.0",
+      "version": "0.7.0",
       "transport": {
         "type": "stdio"
       },