@vess-id/vess 0.9.0 → 0.12.0

package/dist/wallet/vp-builder.js

@@ -3,12 +3,21 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.VPBuilder = void 0;
 const sd_jwt_vc_1 = require("@sd-jwt/sd-jwt-vc");
 const crypto_nodejs_1 = require("@sd-jwt/crypto-nodejs");
+const ai_identity_1 = require("@vess-id/ai-identity");
 /**
  * Build a Verifiable Presentation (SD-JWT KB-JWT) for local signing.
  *
  * The VP signer is the Agent DID (not Root DID — spec §4.2).
- * Follows the same pattern as remote-mcp's VPCreationService.
- * Accepts injectable signing key for future session key switching.
+ *
+ * KB-JWT payload construction is delegated to
+ * `buildKbJwtPayload()` in `@vess-id/ai-identity`
+ * (`packages/sdk/src/vp/kb-jwt-builder.ts`), which is the SINGLE SOURCE OF
+ * TRUTH shared with the api / remote-mcp / SDK issuers. Do NOT inline an
+ * `{ iss, aud, nonce, iat }` literal here: agentd alpha builds prior to
+ * this change drifted from the API verifier's `exp` requirement and every
+ * VP was rejected with `KB-JWT missing exp`. The four-way lock-step
+ * (api / remote-mcp / SDK / agentd) is documented in the kb-jwt-builder
+ * header.
  */
 class VPBuilder {
     async buildVP(options) {
@@ -32,12 +41,12 @@ class VPBuilder {
         for (const key of presentableKeys) {
             presentationFrame[key] = true;
         }
-        const kbJwtPayload = {
-            iss: options.signerDid,
-            aud: options.domain,
+        const kbJwtPayload = (0, ai_identity_1.buildKbJwtPayload)({
+            holderDid: options.signerDid,
+            audience: options.domain,
             nonce: options.nonce,
-            iat: Math.floor(Date.now() / 1000),
-        };
+            vcCredential: options.credentialJwt,
+        });
         const presentation = await sdJwtInstance.present(options.credentialJwt, presentationFrame, { kb: { payload: kbJwtPayload } });
         return presentation;
     }

package/dist/wallet/vp-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"vp-builder.js","sourceRoot":"","sources":["../../src/wallet/vp-builder.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AACnD,yDAAmE;AAUnE;;;;;;GAMG;AACH,MAAa,SAAS;IACpB,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,qBAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAChD,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,GAAG,UAAqC,CAAA;QAC7E,MAAM,QAAQ,GAAG,MAAM,qBAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;QAEtD,MAAM,aAAa,GAAG,IAAI,2BAAe,CAAC;YACxC,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,qBAAK,CAAC,GAAG;YAClB,MAAM,EAAE,sBAAM;YACd,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,4BAAY;YAC3B,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,qBAAK,CAAC,GAAG;SACrB,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnE,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,sBAAM,CAAC,CAAA;QAE/D,MAAM,iBAAiB,GAA4B,EAAE,CAAA;QACrD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,iBAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QAC/B,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,GAAG,EAAE,OAAO,CAAC,SAAS;YACtB,GAAG,EAAE,OAAO,CAAC,MAAM;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACnC,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,CAC9C,OAAO,CAAC,aAAa,EACrB,iBAAiB,EACjB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAClC,CAAA;QAED,OAAO,YAAY,CAAA;IACrB,CAAC;CACF;AAzCD,8BAyCC"}
+{"version":3,"file":"vp-builder.js","sourceRoot":"","sources":["../../src/wallet/vp-builder.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AACnD,yDAAmE;AACnE,sDAAwD;AAUxD;;;;;;;;;;;;;;GAcG;AACH,MAAa,SAAS;IACpB,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,qBAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAChD,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,GAAG,UAAqC,CAAA;QAC7E,MAAM,QAAQ,GAAG,MAAM,qBAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;QAEtD,MAAM,aAAa,GAAG,IAAI,2BAAe,CAAC;YACxC,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,qBAAK,CAAC,GAAG;YAClB,MAAM,EAAE,sBAAM;YACd,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,4BAAY;YAC3B,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,qBAAK,CAAC,GAAG;SACrB,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnE,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,sBAAM,CAAC,CAAA;QAE/D,MAAM,iBAAiB,GAA4B,EAAE,CAAA;QACrD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,iBAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QAC/B,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,+BAAiB,EAAC;YACrC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,aAAa;SACpC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,CAC9C,OAAO,CAAC,aAAa,EACrB,iBAAiB,EACjB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAClC,CAAA;QAED,OAAO,YAAY,CAAA;IACrB,CAAC;CACF;AAzCD,8BAyCC"}

package/package.json

@@ -1,50 +1,32 @@
 {
   "name": "@vess-id/vess",
-  "version": "0.9.0",
+  "version": "0.12.0",
   "description": "VESS local AI agent runtime — manages agent identity, permissions, and execution boundaries",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
     "vess": "./bin/vess.js"
   },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "jest --no-coverage",
-    "test:cov": "jest",
-    "lint": "eslint src/**/*.ts",
-    "start": "node dist/cli/index.js",
-    "semantic-release": "semantic-release"
-  },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.18.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@napi-rs/keyring": "^1.2.0",
     "@sd-jwt/crypto-nodejs": "^0.15.0",
     "@sd-jwt/sd-jwt-vc": "^0.15.1",
-    "@vess-id/ai-identity": "0.11.0",
-    "better-sqlite3": "^11.0.0",
-    "commander": "^12.0.0",
-    "zod": "^3.23.0"
+    "better-sqlite3": "^11.10.0",
+    "commander": "^12.1.0",
+    "zod": "^3.25.76",
+    "@vess-id/ai-identity": "0.12.0"
   },
   "optionalDependencies": {
-    "node-mac-auth": "^1.0.0"
+    "node-mac-auth": "^1.1.0"
   },
   "devDependencies": {
-    "@semantic-release/changelog": "^6.0.3",
-    "@semantic-release/commit-analyzer": "^13.0.1",
-    "@semantic-release/exec": "^7.1.0",
-    "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.6",
-    "@semantic-release/npm": "^13.0.0",
-    "@semantic-release/release-notes-generator": "^14.1.0",
-    "@types/better-sqlite3": "^7.6.0",
-    "@types/jest": "^29.5.0",
-    "@types/node": "^22.0.0",
-    "conventional-changelog-conventionalcommits": "^9.3.0",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^22.19.17",
     "jest": "^29.7.0",
-    "semantic-release": "^25.0.3",
-    "ts-jest": "^29.1.0",
-    "typescript": "^5.3.0"
+    "ts-jest": "^29.4.9",
+    "typescript": "^5.9.3"
   },
   "engines": {
     "node": ">=22.0.0"
@@ -53,6 +35,7 @@
   "files": [
     "bin",
     "dist",
+    "required-sdk-symbols.json",
     "LICENSE",
     "README.md"
   ],
@@ -76,5 +59,13 @@
   "homepage": "https://vess.id",
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "jest --no-coverage",
+    "test:cov": "jest",
+    "lint": "eslint src/**/*.ts",
+    "start": "node dist/cli/index.js"
   }
-}
+}

package/required-sdk-symbols.json

@@ -0,0 +1,18 @@
+[
+  "ACTION_REGISTRY",
+  "AgentDIDManager",
+  "DeviceEnrollManager",
+  "GATEWAY_ERROR_CODE",
+  "GatewayClient",
+  "REAUTH_REQUIRED_ACTION",
+  "VALID_MCP_TOOLS",
+  "VCManager",
+  "buildKbJwtPayload",
+  "createDidJwk",
+  "extractProjectKey",
+  "generateKeyPair",
+  "getAllValidMcpActionNames",
+  "normalizeDomain",
+  "normalizeMcpActionName",
+  "readVcExpSeconds"
+]