agentbnb 8.4.5 → 9.0.0

package/dist/{chunk-UNXCKETK.js → chunk-27VHBFUP.js}

@@ -1,25 +1,27 @@
 import {
   DEFAULT_BUDGET_CONFIG
-} from "./chunk-AZKVGC5T.js";
+} from "./chunk-TLT6F35V.js";
 import {
   KNOWN_API_KEYS,
   buildDraftCard,
   detectApiKeys,
   detectOpenPorts
-} from "./chunk-CFHCG5FE.js";
+} from "./chunk-2GWOFP24.js";
 import {
   DEFAULT_AUTONOMY_CONFIG
 } from "./chunk-G5WKW3ED.js";
 import {
-  createLedger,
+  createLedger
+} from "./chunk-NZTLBAML.js";
+import {
   loadOrRepairIdentity
-} from "./chunk-WK2QSO4E.js";
+} from "./chunk-5CC6O6SO.js";
 import {
   bootstrapAgent,
   getBalance,
   migrateOwner,
   openCreditDb
-} from "./chunk-HU46M4JA.js";
+} from "./chunk-P3FDT7G5.js";
 import {
   getConfigDir,
   loadConfig,
@@ -27,23 +29,23 @@ import {
 } from "./chunk-3XPBFF6H.js";
 import {
   parseSoulMd
-} from "./chunk-VAAEBCMU.js";
+} from "./chunk-N3TXLBGK.js";
 import {
   attachCanonicalAgentId,
   insertCard,
   listCards,
   openDatabase
-} from "./chunk-COA2D7QM.js";
+} from "./chunk-NLQCHO7N.js";
 import {
   createAgentRecord,
   lookupAgent,
   lookupAgentByOwner,
   updateAgentRecord
-} from "./chunk-WTHMHNKC.js";
+} from "./chunk-J4RFJVXI.js";
 import {
   AgentBnBError,
   CapabilityCardV2Schema
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/openclaw/soul-sync.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-CFHCG5FE.js → chunk-2GWOFP24.js}

@@ -1,6 +1,6 @@
 import {
   searchCards
-} from "./chunk-HU46M4JA.js";
+} from "./chunk-P3FDT7G5.js";
 
 // src/registry/pricing.ts
 function getPricingStats(db, query) {

package/dist/{chunk-PQIP7EXY.js → chunk-3466S65P.js}

@@ -34,7 +34,9 @@ var RelayRequestMessageSchema = z.object({
   skill_id: z.string().optional(),
   params: z.record(z.unknown()).default({}),
   requester: z.string().optional(),
-  escrow_receipt: z.record(z.unknown()).optional()
+  escrow_receipt: z.record(z.unknown()).optional(),
+  /** Optional UCAN token for capability delegation. */
+  ucan_token: z.string().optional()
 });
 var IncomingRequestMessageSchema = z.object({
   type: z.literal("incoming_request"),
@@ -44,7 +46,9 @@ var IncomingRequestMessageSchema = z.object({
   skill_id: z.string().optional(),
   params: z.record(z.unknown()).default({}),
   requester: z.string().optional(),
-  escrow_receipt: z.record(z.unknown()).optional()
+  escrow_receipt: z.record(z.unknown()).optional(),
+  /** Optional UCAN token for capability delegation. */
+  ucan_token: z.string().optional()
 });
 var RelayResponseMessageSchema = z.object({
   type: z.literal("relay_response"),

package/dist/{chunk-SME5LJTE.js → chunk-4FK45WJI.js}

@@ -3,17 +3,17 @@ import {
 } from "./chunk-3MJT4PZG.js";
 import {
   scorePeers
-} from "./chunk-IMLFBU3H.js";
+} from "./chunk-LLL3KYEM.js";
 import {
   fetchRemoteCards
-} from "./chunk-PIPCGRCR.js";
+} from "./chunk-ELFGYC22.js";
 import {
   searchCards
-} from "./chunk-HU46M4JA.js";
+} from "./chunk-P3FDT7G5.js";
 import {
   requestCapability,
   requestCapabilityBatch
-} from "./chunk-YKMBFQC2.js";
+} from "./chunk-W6LOCBWQ.js";
 
 // src/conductor/decomposition-validator.ts
 function validateAndNormalizeSubtasks(raw, context) {

package/dist/chunk-5CC6O6SO.js

@@ -0,0 +1,152 @@
+import {
+  generateKeyPair,
+  loadKeyPair,
+  saveKeyPair
+} from "./chunk-YNBZLXYS.js";
+
+// src/identity/identity.ts
+import { z } from "zod";
+import { createHash, createPrivateKey, createPublicKey } from "crypto";
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join } from "path";
+var AgentIdentitySchema = z.object({
+  /** Deterministic ID derived from public key: sha256(hex).slice(0, 16). */
+  agent_id: z.string().min(1),
+  /** Human-readable owner name (from config or init). */
+  owner: z.string().min(1),
+  /** Hex-encoded Ed25519 public key. */
+  public_key: z.string().min(1),
+  /** W3C Decentralized Identifier (e.g. did:agentbnb:<agent_id>). */
+  did: z.string().optional(),
+  /** ISO 8601 timestamp of identity creation. */
+  created_at: z.string().datetime(),
+  /** Optional guarantor info if linked to a human. */
+  guarantor: z.object({
+    github_login: z.string().min(1),
+    verified_at: z.string().datetime()
+  }).optional()
+});
+var AgentCertificateSchema = z.object({
+  identity: AgentIdentitySchema,
+  /** ISO 8601 timestamp of certificate issuance. */
+  issued_at: z.string().datetime(),
+  /** ISO 8601 timestamp of certificate expiry. */
+  expires_at: z.string().datetime(),
+  /** Hex-encoded public key of the issuer (same as identity for self-signed). */
+  issuer_public_key: z.string().min(1),
+  /** Base64url Ed25519 signature over { identity, issued_at, expires_at, issuer_public_key }. */
+  signature: z.string().min(1)
+});
+var IDENTITY_FILENAME = "identity.json";
+var PRIVATE_KEY_FILENAME = "private.key";
+var PUBLIC_KEY_FILENAME = "public.key";
+function derivePublicKeyFromPrivate(privateKey) {
+  const privateKeyObject = createPrivateKey({ key: privateKey, format: "der", type: "pkcs8" });
+  const publicKeyObject = createPublicKey(privateKeyObject);
+  const publicKey = publicKeyObject.export({ format: "der", type: "spki" });
+  return Buffer.from(publicKey);
+}
+function buildIdentityFromPublicKey(publicKey, owner, createdAt) {
+  const publicKeyHex = publicKey.toString("hex");
+  const agentId = deriveAgentId(publicKeyHex);
+  return {
+    agent_id: agentId,
+    owner,
+    public_key: publicKeyHex,
+    did: `did:agentbnb:${agentId}`,
+    created_at: createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function generateFreshIdentity(configDir, owner) {
+  const keys = generateKeyPair();
+  saveKeyPair(configDir, keys);
+  const identity = buildIdentityFromPublicKey(keys.publicKey, owner);
+  saveIdentity(configDir, identity);
+  return { identity, keys, status: "generated" };
+}
+function deriveAgentId(publicKeyHex) {
+  return createHash("sha256").update(publicKeyHex, "hex").digest("hex").slice(0, 16);
+}
+function loadIdentity(configDir) {
+  const filePath = join(configDir, IDENTITY_FILENAME);
+  if (!existsSync(filePath)) return null;
+  try {
+    const raw = readFileSync(filePath, "utf-8");
+    return AgentIdentitySchema.parse(JSON.parse(raw));
+  } catch {
+    return null;
+  }
+}
+function saveIdentity(configDir, identity) {
+  if (!existsSync(configDir)) {
+    mkdirSync(configDir, { recursive: true });
+  }
+  const filePath = join(configDir, IDENTITY_FILENAME);
+  writeFileSync(filePath, JSON.stringify(identity, null, 2), "utf-8");
+}
+function loadOrRepairIdentity(configDir, ownerHint) {
+  if (!existsSync(configDir)) {
+    mkdirSync(configDir, { recursive: true });
+  }
+  const identityPath = join(configDir, IDENTITY_FILENAME);
+  const privateKeyPath = join(configDir, PRIVATE_KEY_FILENAME);
+  const publicKeyPath = join(configDir, PUBLIC_KEY_FILENAME);
+  const hasIdentity = existsSync(identityPath);
+  const hasPrivateKey = existsSync(privateKeyPath);
+  const hasPublicKey = existsSync(publicKeyPath);
+  if (!hasIdentity || !hasPrivateKey || !hasPublicKey) {
+    return generateFreshIdentity(configDir, ownerHint ?? "agent");
+  }
+  let keys;
+  try {
+    keys = loadKeyPair(configDir);
+  } catch {
+    return generateFreshIdentity(configDir, ownerHint ?? "agent");
+  }
+  let derivedPublicKey;
+  try {
+    derivedPublicKey = derivePublicKeyFromPrivate(keys.privateKey);
+  } catch {
+    return generateFreshIdentity(configDir, ownerHint ?? "agent");
+  }
+  let keypairRepaired = false;
+  if (!keys.publicKey.equals(derivedPublicKey)) {
+    keypairRepaired = true;
+    keys = { privateKey: keys.privateKey, publicKey: derivedPublicKey };
+    saveKeyPair(configDir, keys);
+  }
+  const loadedIdentity = loadIdentity(configDir);
+  const expectedAgentId = deriveAgentId(derivedPublicKey.toString("hex"));
+  const expectedPublicKeyHex = derivedPublicKey.toString("hex");
+  const identityMismatch = !loadedIdentity || loadedIdentity.public_key !== expectedPublicKeyHex || loadedIdentity.agent_id !== expectedAgentId;
+  if (identityMismatch) {
+    const repairedIdentity = buildIdentityFromPublicKey(
+      derivedPublicKey,
+      loadedIdentity?.owner ?? ownerHint ?? "agent",
+      loadedIdentity?.created_at
+    );
+    saveIdentity(configDir, repairedIdentity);
+    return { identity: repairedIdentity, keys, status: "repaired" };
+  }
+  if (ownerHint && loadedIdentity.owner !== ownerHint) {
+    const updatedIdentity = { ...loadedIdentity, owner: ownerHint };
+    saveIdentity(configDir, updatedIdentity);
+    return { identity: updatedIdentity, keys, status: "repaired" };
+  }
+  if (!loadedIdentity.did) {
+    const updatedIdentity = { ...loadedIdentity, did: `did:agentbnb:${loadedIdentity.agent_id}` };
+    saveIdentity(configDir, updatedIdentity);
+    return { identity: updatedIdentity, keys, status: "repaired" };
+  }
+  return { identity: loadedIdentity, keys, status: keypairRepaired ? "repaired" : "existing" };
+}
+function ensureIdentity(configDir, owner) {
+  return loadOrRepairIdentity(configDir, owner).identity;
+}
+
+export {
+  deriveAgentId,
+  loadIdentity,
+  loadOrRepairIdentity,
+  ensureIdentity
+};

package/dist/{chunk-MZSVVG55.js → chunk-5PV5YCSN.js}

@@ -1,6 +1,6 @@
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/autonomy/pending-requests.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-5SIGMKOD.js → chunk-77HAL2ZL.js}

@@ -8,7 +8,7 @@ import {
   releaseEscrow,
   resolveTargetCapability,
   settleEscrow
-} from "./chunk-NQANA6WH.js";
+} from "./chunk-BNS76U6K.js";
 import {
   canonicalizeCreditOwner
 } from "./chunk-6QMDJVMS.js";
@@ -18,7 +18,7 @@ import {
   saveKeyPair,
   signEscrowReceipt,
   verifyEscrowReceipt
-} from "./chunk-GIEJVKZZ.js";
+} from "./chunk-YNBZLXYS.js";
 import {
   getConfigDir,
   loadConfig
@@ -27,13 +27,13 @@ import {
   getCard,
   insertRequestLog,
   updateReputation
-} from "./chunk-ZU2TP7CN.js";
+} from "./chunk-PG3CLSAH.js";
 import {
   lookupAgent
 } from "./chunk-EE3V3DXK.js";
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/gateway/execute.ts
 import { randomUUID } from "crypto";
@@ -50,6 +50,8 @@ var AgentIdentitySchema = z.object({
   owner: z.string().min(1),
   /** Hex-encoded Ed25519 public key. */
   public_key: z.string().min(1),
+  /** W3C Decentralized Identifier (e.g. did:agentbnb:<agent_id>). */
+  did: z.string().optional(),
   /** ISO 8601 timestamp of identity creation. */
   created_at: z.string().datetime(),
   /** Optional guarantor info if linked to a human. */
@@ -80,10 +82,12 @@ function derivePublicKeyFromPrivate(privateKey) {
 }
 function buildIdentityFromPublicKey(publicKey, owner, createdAt) {
   const publicKeyHex = publicKey.toString("hex");
+  const agentId = deriveAgentId(publicKeyHex);
   return {
-    agent_id: deriveAgentId(publicKeyHex),
+    agent_id: agentId,
     owner,
     public_key: publicKeyHex,
+    did: `did:agentbnb:${agentId}`,
     created_at: createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
   };
 }
@@ -163,6 +167,11 @@ function loadOrRepairIdentity(configDir, ownerHint) {
     saveIdentity(configDir, updatedIdentity);
     return { identity: updatedIdentity, keys, status: "repaired" };
   }
+  if (!loadedIdentity.did) {
+    const updatedIdentity = { ...loadedIdentity, did: `did:agentbnb:${loadedIdentity.agent_id}` };
+    saveIdentity(configDir, updatedIdentity);
+    return { identity: updatedIdentity, keys, status: "repaired" };
+  }
   return { identity: loadedIdentity, keys, status: keypairRepaired ? "repaired" : "existing" };
 }
 function ensureIdentity(configDir, owner) {

package/dist/{chunk-EKLVNIIY.js → chunk-AZEGOADG.js}

@@ -4,16 +4,16 @@ import {
   decompose,
   matchSubTasks,
   orchestrate
-} from "./chunk-SME5LJTE.js";
+} from "./chunk-4FK45WJI.js";
 import {
   BudgetManager
-} from "./chunk-AZKVGC5T.js";
+} from "./chunk-TLT6F35V.js";
 import {
   openCreditDb
-} from "./chunk-HU46M4JA.js";
+} from "./chunk-P3FDT7G5.js";
 import {
   RelayClient
-} from "./chunk-NX27AFPA.js";
+} from "./chunk-UR3MISL2.js";
 import {
   loadPeers
 } from "./chunk-3YQ73ZM6.js";
@@ -23,7 +23,7 @@ import {
 import {
   listCards,
   openDatabase
-} from "./chunk-COA2D7QM.js";
+} from "./chunk-NLQCHO7N.js";
 
 // src/cli/conduct.ts
 async function conductAction(task, opts) {

package/dist/{chunk-NQANA6WH.js → chunk-BNS76U6K.js}

@@ -7,14 +7,14 @@ import {
 import {
   getCard,
   getFeedbackForProvider
-} from "./chunk-ZU2TP7CN.js";
+} from "./chunk-PG3CLSAH.js";
 import {
   ensureAgentsTable,
   resolveCanonicalIdentity
 } from "./chunk-EE3V3DXK.js";
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/credit/ledger.ts
 import Database from "better-sqlite3";

package/dist/{chunk-JDAFLPR7.js → chunk-BOBND3QV.js}

@@ -1,15 +1,15 @@
 import {
   syncCreditsFromRegistry
-} from "./chunk-RF4A5X5U.js";
+} from "./chunk-W5J3PEQ6.js";
 import {
   resolveTargetCapability
-} from "./chunk-2PP5MQPD.js";
+} from "./chunk-UIPGGNRC.js";
 import {
   getBalance,
   holdEscrow,
   releaseEscrow,
   settleEscrow
-} from "./chunk-HU46M4JA.js";
+} from "./chunk-P3FDT7G5.js";
 import {
   loadConfig
 } from "./chunk-3XPBFF6H.js";
@@ -17,10 +17,10 @@ import {
   getCard,
   insertRequestLog,
   updateReputation
-} from "./chunk-COA2D7QM.js";
+} from "./chunk-NLQCHO7N.js";
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/gateway/execute.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-VRPLSK34.js → chunk-D4IJQ3TK.js}

@@ -1,6 +1,6 @@
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/discovery/mdns.ts
 import { Bonjour } from "bonjour-service";

package/dist/{chunk-4NFJ3VYZ.js → chunk-DYJ7YGBM.js}

@@ -38,7 +38,9 @@ var RelayRequestMessageSchema = z.object({
   skill_id: z.string().optional(),
   params: z.record(z.unknown()).default({}),
   requester: z.string().optional(),
-  escrow_receipt: z.record(z.unknown()).optional()
+  escrow_receipt: z.record(z.unknown()).optional(),
+  /** Optional UCAN token for capability delegation. */
+  ucan_token: z.string().optional()
 });
 var IncomingRequestMessageSchema = z.object({
   type: z.literal("incoming_request"),
@@ -48,7 +50,9 @@ var IncomingRequestMessageSchema = z.object({
   skill_id: z.string().optional(),
   params: z.record(z.unknown()).default({}),
   requester: z.string().optional(),
-  escrow_receipt: z.record(z.unknown()).optional()
+  escrow_receipt: z.record(z.unknown()).optional(),
+  /** Optional UCAN token for capability delegation. */
+  ucan_token: z.string().optional()
 });
 var RelayResponseMessageSchema = z.object({
   type: z.literal("relay_response"),

package/dist/{chunk-PIPCGRCR.js → chunk-ELFGYC22.js}

@@ -1,6 +1,6 @@
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/cli/remote-registry.ts
 var RegistryTimeoutError = class extends AgentBnBError {

package/dist/{chunk-WTHMHNKC.js → chunk-J4RFJVXI.js}

@@ -1,6 +1,6 @@
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/identity/agent-identity.ts
 var AGENTS_SCHEMA = `

package/dist/{chunk-IMLFBU3H.js → chunk-LLL3KYEM.js}

@@ -1,38 +1,38 @@
 import {
   createPendingRequest
-} from "./chunk-MZSVVG55.js";
+} from "./chunk-5PV5YCSN.js";
 import {
   getAutonomyTier,
   insertAuditEvent
 } from "./chunk-G5WKW3ED.js";
 import {
   resolveTargetCapability
-} from "./chunk-2PP5MQPD.js";
+} from "./chunk-UIPGGNRC.js";
 import {
   fetchRemoteCards
-} from "./chunk-PIPCGRCR.js";
+} from "./chunk-ELFGYC22.js";
 import {
   holdEscrow,
   releaseEscrow,
   searchCards,
   settleEscrow
-} from "./chunk-HU46M4JA.js";
+} from "./chunk-P3FDT7G5.js";
 import {
   RelayClient
-} from "./chunk-NX27AFPA.js";
+} from "./chunk-UR3MISL2.js";
 import {
   requestCapability,
   requestViaRelay
-} from "./chunk-YKMBFQC2.js";
+} from "./chunk-W6LOCBWQ.js";
 import {
   findPeer
 } from "./chunk-3YQ73ZM6.js";
 import {
   resolveCanonicalIdentity
-} from "./chunk-WTHMHNKC.js";
+} from "./chunk-J4RFJVXI.js";
 import {
   AgentBnBError
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/gateway/relay-dispatch.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-VAAEBCMU.js → chunk-N3TXLBGK.js}

@@ -1,9 +1,9 @@
 import {
   insertCard
-} from "./chunk-COA2D7QM.js";
+} from "./chunk-NLQCHO7N.js";
 import {
   CapabilityCardSchema
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/skills/publish-capability.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-COA2D7QM.js → chunk-NLQCHO7N.js}

@@ -1,12 +1,12 @@
 import {
   ensureAgentsTable,
   resolveCanonicalIdentity
-} from "./chunk-WTHMHNKC.js";
+} from "./chunk-J4RFJVXI.js";
 import {
   AgentBnBError,
   AnyCardSchema,
   CapabilityCardSchema
-} from "./chunk-I7KWA7OB.js";
+} from "./chunk-UVCNMRPS.js";
 
 // src/registry/store.ts
 import Database from "better-sqlite3";