TypeScript client

npm install @kavachos/client

import { createKavachClient } from '@kavachos/client';

const client = createKavachClient({
  baseUrl: 'https://yourapp.com/api/kavach',
  token: process.env.KAVACH_API_TOKEN,
});

// Create
const agent = await client.agents.create({
  ownerId: 'user-123',
  name: 'data-pipeline-bot',
  type: 'autonomous',
  permissions: [
    { resource: 'db:reports:*', actions: ['read'] },
  ],
});

console.log(agent.token); // kv_a3f8c2e1..., save this now

// List with optional filters
const active = await client.agents.list({
  userId: 'user-123',
  status: 'active',
  type: 'autonomous',
});

// Get by ID (returns null for 404)
const found = await client.agents.get('agt_abc123');

// Update name and permissions
const updated = await client.agents.update('agt_abc123', {
  name: 'data-pipeline-bot-v2',
  permissions: [
    { resource: 'db:reports:*', actions: ['read', 'export'] },
  ],
});

// Rotate the token
const rotated = await client.agents.rotate('agt_abc123');
console.log(rotated.token); // new token, old one is now invalid

// Revoke
await client.agents.revoke('agt_abc123');

// By agent ID, useful in admin or backend code
const result = await client.authorize('agt_abc123', {
  action: 'read',
  resource: 'db:reports:monthly',
  arguments: { reportId: 'r-456' },
});

if (!result.allowed) {
  console.error(result.reason); // why it was denied
}

// By bearer token, useful in middleware
const bearerToken = request.headers.get('Authorization')?.replace('Bearer ', '') ?? '';
const result = await client.authorizeByToken(bearerToken, {
  action: 'read',
  resource: 'db:reports:monthly',
});

// Delegate from one agent to another with a subset of permissions
const chain = await client.delegations.create({
  fromAgent: 'agt_parent',
  toAgent: 'agt_child',
  permissions: [
    { resource: 'db:reports:*', actions: ['read'] },
  ],
  expiresAt: new Date(Date.now() + 60 * 60 * 1000), // 1 hour
});

// List delegations for an agent
const delegations = await client.delegations.list('agt_parent');

// Effective permissions: union of own + delegated
const effective = await client.delegations.getEffectivePermissions('agt_child');

// Revoke a delegation
await client.delegations.revoke(chain.id);

// Query with filters
const entries = await client.audit.query({
  agentId: 'agt_abc123',
  since: new Date('2024-01-01'),
  until: new Date('2024-02-01'),
  result: 'denied',
  limit: 100,
  offset: 0,
});

// Export as CSV for billing or compliance
const csv = await client.audit.export({
  format: 'csv',
  since: new Date('2024-01-01'),
  until: new Date('2024-02-01'),
});

// Export as JSON
const json = await client.audit.export({ format: 'json' });

import { KavachApiError } from '@kavachos/client';

try {
  const agent = await client.agents.get('agt_nonexistent');
} catch (err) {
  if (err instanceof KavachApiError) {
    console.error(err.code);    // e.g. 'AGENT_NOT_FOUND'
    console.error(err.message); // human-readable message
    console.error(err.status);  // HTTP status code
  }
}

// Register an MCP server
const server = await client.mcp.register({
  name: 'github-mcp',
  endpoint: 'https://mcp.yourapp.com/github',
  tools: ['list_repos', 'get_issue', 'create_comment'],
  authRequired: true,
  rateLimit: { rpm: 60 },
});

// List all registered servers
const servers = await client.mcp.list();

// Get one by ID (returns null for 404)
const found = await client.mcp.get(server.id);