@vess-id/vess 0.9.0 → 0.12.0-alpha.0

package/dist/utils/credential-errors.d.ts

@@ -1,3 +1,44 @@
 /** Check if an error message indicates an invalid credential (expired, revoked, etc.) */
 export declare function isCredentialInvalidError(message?: string): boolean;
+/**
+ * Minimal shape of the reauth payload api returns on revoked/expired OAuth tokens.
+ * Kept loose on purpose — the api may add fields without breaking agentd.
+ *
+ * Layer note — three similar types intentionally exist in this repo:
+ *   - `ApiReauthRequired` (this file): wire shape parsed from api bodies
+ *   - `ReauthRequiredInfo`     (gateway-client.ts): wire-level result carried
+ *     alongside `InvokeToolResult.errorCode`
+ *   - `ReauthRequiredExecutionInfo` (core/types.ts): user-facing ExecuteResult
+ *     field, trimmed of wire-level knobs (e.g. `metadata`)
+ * The duplication is deliberate: each layer drops context the next one
+ * doesn't need, which keeps the CLI surface minimal.
+ */
+export interface ApiReauthRequired {
+    provider: string;
+    reason: string;
+    message: string;
+    authUrl: string;
+    projectId?: string;
+    metadata?: Record<string, any>;
+}
+/**
+ * Probe an api response body for a reauth_required signal.
+ *
+ * The api shape is:
+ *   `{ success:false, error, metadata: { action: 'reauth_required',
+ *      reauthRequired: { provider, reason, message, authUrl, projectId, ... } } }`
+ *
+ * Returns the extracted payload if present, otherwise `undefined`.
+ *
+ * Guards:
+ *   - Requires `authUrl` to be a non-empty string (without it the signal is
+ *     useless — the CLI caller has nothing to surface to the user).
+ *   - Does not trust the outer `success` flag. If a future api bug sets
+ *     `success:true` on a reauth response, we still treat it as a reauth
+ *     failure: the underlying SaaS token is gone, and any "data" in that
+ *     envelope would be stale or misleading. `action:'reauth_required'`
+ *     is the canonical signal, not `success`. (Spec'd in gateway-client
+ *     reauth tests as the "contradictory body" regression guard.)
+ */
+export declare function extractReauthRequired(body: unknown): ApiReauthRequired | undefined;
 //# sourceMappingURL=credential-errors.d.ts.map

package/dist/utils/credential-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-errors.d.ts","sourceRoot":"","sources":["../../src/utils/credential-errors.ts"],"names":[],"mappings":"AAcA,yFAAyF;AACzF,wBAAgB,wBAAwB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAGlE"}
+{"version":3,"file":"credential-errors.d.ts","sourceRoot":"","sources":["../../src/utils/credential-errors.ts"],"names":[],"mappings":"AAgBA,yFAAyF;AACzF,wBAAgB,wBAAwB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAC/B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,GAAG,SAAS,CAclF"}

package/dist/utils/credential-errors.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isCredentialInvalidError = isCredentialInvalidError;
+exports.extractReauthRequired = extractReauthRequired;
+const ai_identity_1 = require("@vess-id/ai-identity");
 /**
  * Patterns that indicate a credential/VP is invalid (expired, revoked, malformed).
  * Shared between gateway-client (HTTP response detection) and execution-engine (error classification).
@@ -20,4 +22,41 @@ function isCredentialInvalidError(message) {
         return false;
     return CREDENTIAL_ERROR_PATTERNS.some(pattern => pattern.test(message));
 }
+/**
+ * Probe an api response body for a reauth_required signal.
+ *
+ * The api shape is:
+ *   `{ success:false, error, metadata: { action: 'reauth_required',
+ *      reauthRequired: { provider, reason, message, authUrl, projectId, ... } } }`
+ *
+ * Returns the extracted payload if present, otherwise `undefined`.
+ *
+ * Guards:
+ *   - Requires `authUrl` to be a non-empty string (without it the signal is
+ *     useless — the CLI caller has nothing to surface to the user).
+ *   - Does not trust the outer `success` flag. If a future api bug sets
+ *     `success:true` on a reauth response, we still treat it as a reauth
+ *     failure: the underlying SaaS token is gone, and any "data" in that
+ *     envelope would be stale or misleading. `action:'reauth_required'`
+ *     is the canonical signal, not `success`. (Spec'd in gateway-client
+ *     reauth tests as the "contradictory body" regression guard.)
+ */
+function extractReauthRequired(body) {
+    if (!body || typeof body !== 'object')
+        return undefined;
+    const metadata = body.metadata;
+    if (!metadata || metadata.action !== ai_identity_1.REAUTH_REQUIRED_ACTION)
+        return undefined;
+    const r = metadata.reauthRequired;
+    if (!r || typeof r.authUrl !== 'string' || r.authUrl.length === 0)
+        return undefined;
+    return {
+        provider: String(r.provider ?? ''),
+        reason: String(r.reason ?? ''),
+        message: String(r.message ?? body.error ?? ''),
+        authUrl: r.authUrl,
+        projectId: r.projectId,
+        metadata: r.metadata,
+    };
+}
 //# sourceMappingURL=credential-errors.js.map

package/dist/utils/credential-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-errors.js","sourceRoot":"","sources":["../../src/utils/credential-errors.ts"],"names":[],"mappings":";;AAeA,4DAGC;AAlBD;;;GAGG;AACH,MAAM,yBAAyB,GAAa;IAC1C,yBAAyB;IACzB,8BAA8B;IAC9B,iBAAiB;IACjB,iBAAiB;IACjB,0BAA0B;IAC1B,sBAAsB;IACtB,wBAAwB;CACzB,CAAA;AAED,yFAAyF;AACzF,SAAgB,wBAAwB,CAAC,OAAgB;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,OAAO,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACzE,CAAC"}
+{"version":3,"file":"credential-errors.js","sourceRoot":"","sources":["../../src/utils/credential-errors.ts"],"names":[],"mappings":";;AAiBA,4DAGC;AA2CD,sDAcC;AA7ED,sDAA6D;AAE7D;;;GAGG;AACH,MAAM,yBAAyB,GAAa;IAC1C,yBAAyB;IACzB,8BAA8B;IAC9B,iBAAiB;IACjB,iBAAiB;IACjB,0BAA0B;IAC1B,sBAAsB;IACtB,wBAAwB;CACzB,CAAA;AAED,yFAAyF;AACzF,SAAgB,wBAAwB,CAAC,OAAgB;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,OAAO,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACzE,CAAC;AAwBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,qBAAqB,CAAC,IAAa;IACjD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACvD,MAAM,QAAQ,GAAI,IAAY,CAAC,QAAQ,CAAA;IACvC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,oCAAsB;QAAE,OAAO,SAAS,CAAA;IAC7E,MAAM,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAA;IACjC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACnF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAK,IAAY,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAA;AACH,CAAC"}

package/dist/wallet/vp-builder.d.ts

@@ -9,8 +9,16 @@ export interface VPBuildOptions {
  * Build a Verifiable Presentation (SD-JWT KB-JWT) for local signing.
  *
  * The VP signer is the Agent DID (not Root DID — spec §4.2).
- * Follows the same pattern as remote-mcp's VPCreationService.
- * Accepts injectable signing key for future session key switching.
+ *
+ * KB-JWT payload construction is delegated to
+ * `buildKbJwtPayload()` in `@vess-id/ai-identity`
+ * (`packages/sdk/src/vp/kb-jwt-builder.ts`), which is the SINGLE SOURCE OF
+ * TRUTH shared with the api / remote-mcp / SDK issuers. Do NOT inline an
+ * `{ iss, aud, nonce, iat }` literal here: agentd alpha builds prior to
+ * this change drifted from the API verifier's `exp` requirement and every
+ * VP was rejected with `KB-JWT missing exp`. The four-way lock-step
+ * (api / remote-mcp / SDK / agentd) is documented in the kb-jwt-builder
+ * header.
  */
 export declare class VPBuilder {
     buildVP(options: VPBuildOptions): Promise<string>;

package/dist/wallet/vp-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vp-builder.d.ts","sourceRoot":"","sources":["../../src/wallet/vp-builder.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;GAMG;AACH,qBAAa,SAAS;IACd,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;CAwCxD"}
+{"version":3,"file":"vp-builder.d.ts","sourceRoot":"","sources":["../../src/wallet/vp-builder.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,SAAS;IACd,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;CAwCxD"}

package/dist/wallet/vp-builder.js

@@ -3,12 +3,21 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.VPBuilder = void 0;
 const sd_jwt_vc_1 = require("@sd-jwt/sd-jwt-vc");
 const crypto_nodejs_1 = require("@sd-jwt/crypto-nodejs");
+const ai_identity_1 = require("@vess-id/ai-identity");
 /**
  * Build a Verifiable Presentation (SD-JWT KB-JWT) for local signing.
  *
  * The VP signer is the Agent DID (not Root DID — spec §4.2).
- * Follows the same pattern as remote-mcp's VPCreationService.
- * Accepts injectable signing key for future session key switching.
+ *
+ * KB-JWT payload construction is delegated to
+ * `buildKbJwtPayload()` in `@vess-id/ai-identity`
+ * (`packages/sdk/src/vp/kb-jwt-builder.ts`), which is the SINGLE SOURCE OF
+ * TRUTH shared with the api / remote-mcp / SDK issuers. Do NOT inline an
+ * `{ iss, aud, nonce, iat }` literal here: agentd alpha builds prior to
+ * this change drifted from the API verifier's `exp` requirement and every
+ * VP was rejected with `KB-JWT missing exp`. The four-way lock-step
+ * (api / remote-mcp / SDK / agentd) is documented in the kb-jwt-builder
+ * header.
  */
 class VPBuilder {
     async buildVP(options) {
@@ -32,12 +41,12 @@ class VPBuilder {
         for (const key of presentableKeys) {
             presentationFrame[key] = true;
         }
-        const kbJwtPayload = {
-            iss: options.signerDid,
-            aud: options.domain,
+        const kbJwtPayload = (0, ai_identity_1.buildKbJwtPayload)({
+            holderDid: options.signerDid,
+            audience: options.domain,
             nonce: options.nonce,
-            iat: Math.floor(Date.now() / 1000),
-        };
+            vcCredential: options.credentialJwt,
+        });
         const presentation = await sdJwtInstance.present(options.credentialJwt, presentationFrame, { kb: { payload: kbJwtPayload } });
         return presentation;
     }

package/dist/wallet/vp-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"vp-builder.js","sourceRoot":"","sources":["../../src/wallet/vp-builder.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AACnD,yDAAmE;AAUnE;;;;;;GAMG;AACH,MAAa,SAAS;IACpB,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,qBAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAChD,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,GAAG,UAAqC,CAAA;QAC7E,MAAM,QAAQ,GAAG,MAAM,qBAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;QAEtD,MAAM,aAAa,GAAG,IAAI,2BAAe,CAAC;YACxC,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,qBAAK,CAAC,GAAG;YAClB,MAAM,EAAE,sBAAM;YACd,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,4BAAY;YAC3B,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,qBAAK,CAAC,GAAG;SACrB,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnE,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,sBAAM,CAAC,CAAA;QAE/D,MAAM,iBAAiB,GAA4B,EAAE,CAAA;QACrD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,iBAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QAC/B,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,GAAG,EAAE,OAAO,CAAC,SAAS;YACtB,GAAG,EAAE,OAAO,CAAC,MAAM;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACnC,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,CAC9C,OAAO,CAAC,aAAa,EACrB,iBAAiB,EACjB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAClC,CAAA;QAED,OAAO,YAAY,CAAA;IACrB,CAAC;CACF;AAzCD,8BAyCC"}
+{"version":3,"file":"vp-builder.js","sourceRoot":"","sources":["../../src/wallet/vp-builder.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AACnD,yDAAmE;AACnE,sDAAwD;AAUxD;;;;;;;;;;;;;;GAcG;AACH,MAAa,SAAS;IACpB,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,qBAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAChD,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,GAAG,UAAqC,CAAA;QAC7E,MAAM,QAAQ,GAAG,MAAM,qBAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;QAEtD,MAAM,aAAa,GAAG,IAAI,2BAAe,CAAC;YACxC,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,qBAAK,CAAC,GAAG;YAClB,MAAM,EAAE,sBAAM;YACd,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,4BAAY;YAC3B,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,qBAAK,CAAC,GAAG;SACrB,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnE,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,sBAAM,CAAC,CAAA;QAE/D,MAAM,iBAAiB,GAA4B,EAAE,CAAA;QACrD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,iBAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QAC/B,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,+BAAiB,EAAC;YACrC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,aAAa;SACpC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,CAC9C,OAAO,CAAC,aAAa,EACrB,iBAAiB,EACjB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAClC,CAAA;QAED,OAAO,YAAY,CAAA;IACrB,CAAC;CACF;AAzCD,8BAyCC"}

package/package.json

@@ -1,50 +1,32 @@
 {
   "name": "@vess-id/vess",
-  "version": "0.9.0",
+  "version": "0.12.0-alpha.0",
   "description": "VESS local AI agent runtime — manages agent identity, permissions, and execution boundaries",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
     "vess": "./bin/vess.js"
   },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "jest --no-coverage",
-    "test:cov": "jest",
-    "lint": "eslint src/**/*.ts",
-    "start": "node dist/cli/index.js",
-    "semantic-release": "semantic-release"
-  },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.18.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@napi-rs/keyring": "^1.2.0",
     "@sd-jwt/crypto-nodejs": "^0.15.0",
     "@sd-jwt/sd-jwt-vc": "^0.15.1",
-    "@vess-id/ai-identity": "0.11.0",
-    "better-sqlite3": "^11.0.0",
-    "commander": "^12.0.0",
-    "zod": "^3.23.0"
+    "better-sqlite3": "^11.10.0",
+    "commander": "^12.1.0",
+    "zod": "^3.25.76",
+    "@vess-id/ai-identity": "0.12.0-alpha.0"
   },
   "optionalDependencies": {
-    "node-mac-auth": "^1.0.0"
+    "node-mac-auth": "^1.1.0"
   },
   "devDependencies": {
-    "@semantic-release/changelog": "^6.0.3",
-    "@semantic-release/commit-analyzer": "^13.0.1",
-    "@semantic-release/exec": "^7.1.0",
-    "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.6",
-    "@semantic-release/npm": "^13.0.0",
-    "@semantic-release/release-notes-generator": "^14.1.0",
-    "@types/better-sqlite3": "^7.6.0",
-    "@types/jest": "^29.5.0",
-    "@types/node": "^22.0.0",
-    "conventional-changelog-conventionalcommits": "^9.3.0",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^22.19.17",
     "jest": "^29.7.0",
-    "semantic-release": "^25.0.3",
-    "ts-jest": "^29.1.0",
-    "typescript": "^5.3.0"
+    "ts-jest": "^29.4.9",
+    "typescript": "^5.9.3"
   },
   "engines": {
     "node": ">=22.0.0"
@@ -53,6 +35,7 @@
   "files": [
     "bin",
     "dist",
+    "required-sdk-symbols.json",
     "LICENSE",
     "README.md"
   ],
@@ -76,5 +59,13 @@
   "homepage": "https://vess.id",
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "jest --no-coverage",
+    "test:cov": "jest",
+    "lint": "eslint src/**/*.ts",
+    "start": "node dist/cli/index.js"
   }
-}
+}

package/required-sdk-symbols.json

@@ -0,0 +1,18 @@
+[
+  "ACTION_REGISTRY",
+  "AgentDIDManager",
+  "DeviceEnrollManager",
+  "GATEWAY_ERROR_CODE",
+  "GatewayClient",
+  "REAUTH_REQUIRED_ACTION",
+  "VALID_MCP_TOOLS",
+  "VCManager",
+  "buildKbJwtPayload",
+  "createDidJwk",
+  "extractProjectKey",
+  "generateKeyPair",
+  "getAllValidMcpActionNames",
+  "normalizeDomain",
+  "normalizeMcpActionName",
+  "readVcExpSeconds"
+]