@kya-os/cli 2.0.0 → 2.0.2

package/node_modules/@kya-os/contracts/dist/config/tool-refusal.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Tool Refusal Marker
+ *
+ * A tool that refuses a call on policy grounds (a spend cap, a product out of
+ * scope) returns an error result. Without a marker, that result looks the same
+ * as a tool that crashed, and the only way to tell them apart is to read free
+ * text. The marker is one namespaced `_meta` entry holding a machine-readable
+ * code, so telemetry and dashboards can record a refusal as a refusal.
+ *
+ * The key is namespaced so it cannot collide with a tenant's own
+ * `structuredContent` or `_meta` fields. Checkpoint mirrors this wire
+ * contract, so the key and the code pattern must not change.
+ *
+ * @module @kya-os/contracts/config/tool-refusal
+ */
+/** The `_meta` key that carries a tool refusal. */
+export declare const TOOL_REFUSAL_META_KEY: "ai.kya-os/refusal";
+/** A policy refusal, as read back from a tool result. */
+export interface ToolRefusal {
+    code: string;
+}
+/** The `_meta` entry that marks a tool result as a refusal. */
+export type ToolRefusalMeta = {
+    [TOOL_REFUSAL_META_KEY]: ToolRefusal;
+};
+/**
+ * Build the `_meta` entry for a refusal. Spread it into the tool result's
+ * `_meta` next to `isError: true`.
+ *
+ * @throws Error when `code` is not upper snake case of 2 to 64 characters
+ *
+ * @example
+ * ```typescript
+ * return {
+ *   isError: true,
+ *   content: [{ type: "text", text: "Over the spend cap. Nothing was ordered." }],
+ *   _meta: { ...markToolRefusal("SPEND_CAP_EXCEEDED") },
+ * };
+ * ```
+ */
+export declare function markToolRefusal(code: string): ToolRefusalMeta;
+/**
+ * Read the refusal marker from a tool result, or undefined when the result
+ * carries none or the marker is malformed. A bare `isError` result is a tool
+ * error, not a refusal, and gives undefined.
+ *
+ * @example
+ * ```typescript
+ * readToolRefusal({ isError: true, _meta: markToolRefusal("WRONG_AGENT") });
+ * // { code: "WRONG_AGENT" }
+ * readToolRefusal({ isError: true, content: [] }); // undefined
+ * ```
+ */
+export declare function readToolRefusal(result: unknown): ToolRefusal | undefined;

package/node_modules/@kya-os/contracts/dist/config/tool-refusal.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * Tool Refusal Marker
+ *
+ * A tool that refuses a call on policy grounds (a spend cap, a product out of
+ * scope) returns an error result. Without a marker, that result looks the same
+ * as a tool that crashed, and the only way to tell them apart is to read free
+ * text. The marker is one namespaced `_meta` entry holding a machine-readable
+ * code, so telemetry and dashboards can record a refusal as a refusal.
+ *
+ * The key is namespaced so it cannot collide with a tenant's own
+ * `structuredContent` or `_meta` fields. Checkpoint mirrors this wire
+ * contract, so the key and the code pattern must not change.
+ *
+ * @module @kya-os/contracts/config/tool-refusal
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_REFUSAL_META_KEY = void 0;
+exports.markToolRefusal = markToolRefusal;
+exports.readToolRefusal = readToolRefusal;
+/** The `_meta` key that carries a tool refusal. */
+exports.TOOL_REFUSAL_META_KEY = "ai.kya-os/refusal";
+/**
+ * Upper snake case, 2 to 64 characters. Codes travel into activity excerpts
+ * and dashboard rows, so they are restricted to a shape that can never carry
+ * user data or free text.
+ */
+const TOOL_REFUSAL_CODE_PATTERN = /^[A-Z][A-Z0-9_]{1,63}$/;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isToolRefusalCode(code) {
+    return typeof code === "string" && TOOL_REFUSAL_CODE_PATTERN.test(code);
+}
+/**
+ * Build the `_meta` entry for a refusal. Spread it into the tool result's
+ * `_meta` next to `isError: true`.
+ *
+ * @throws Error when `code` is not upper snake case of 2 to 64 characters
+ *
+ * @example
+ * ```typescript
+ * return {
+ *   isError: true,
+ *   content: [{ type: "text", text: "Over the spend cap. Nothing was ordered." }],
+ *   _meta: { ...markToolRefusal("SPEND_CAP_EXCEEDED") },
+ * };
+ * ```
+ */
+function markToolRefusal(code) {
+    if (!isToolRefusalCode(code)) {
+        throw new Error(`Invalid tool refusal code "${code}": expected ${TOOL_REFUSAL_CODE_PATTERN.source}`);
+    }
+    return { [exports.TOOL_REFUSAL_META_KEY]: { code } };
+}
+/**
+ * Read the refusal marker from a tool result, or undefined when the result
+ * carries none or the marker is malformed. A bare `isError` result is a tool
+ * error, not a refusal, and gives undefined.
+ *
+ * @example
+ * ```typescript
+ * readToolRefusal({ isError: true, _meta: markToolRefusal("WRONG_AGENT") });
+ * // { code: "WRONG_AGENT" }
+ * readToolRefusal({ isError: true, content: [] }); // undefined
+ * ```
+ */
+function readToolRefusal(result) {
+    if (!isRecord(result))
+        return undefined;
+    const meta = result["_meta"];
+    if (!isRecord(meta))
+        return undefined;
+    const marker = meta[exports.TOOL_REFUSAL_META_KEY];
+    if (!isRecord(marker))
+        return undefined;
+    // Own property only: a code inherited through the prototype is not a marker.
+    if (!Object.prototype.hasOwnProperty.call(marker, "code"))
+        return undefined;
+    const code = marker["code"];
+    return isToolRefusalCode(code) ? { code } : undefined;
+}

package/node_modules/@kya-os/contracts/dist/consent/authorization-progress.d.ts

@@ -0,0 +1,163 @@
+import { z } from "zod";
+/** Presentation only: never an authorization decision or a substitute for proof. */
+export declare const AuthorizationProgressSchema: z.ZodDiscriminatedUnion<"state", [z.ZodObject<{
+    state: z.ZodLiteral<"preparation_required">;
+    approval_ready: z.ZodLiteral<false>;
+}, "strict", z.ZodTypeAny, {
+    state: "preparation_required";
+    approval_ready: false;
+}, {
+    state: "preparation_required";
+    approval_ready: false;
+}>, z.ZodObject<{
+    state: z.ZodLiteral<"approval_ready">;
+    approval_ready: z.ZodLiteral<true>;
+}, "strict", z.ZodTypeAny, {
+    state: "approval_ready";
+    approval_ready: true;
+}, {
+    state: "approval_ready";
+    approval_ready: true;
+}>, z.ZodObject<{
+    state: z.ZodLiteral<"completed">;
+    approval_ready: z.ZodLiteral<false>;
+}, "strict", z.ZodTypeAny, {
+    state: "completed";
+    approval_ready: false;
+}, {
+    state: "completed";
+    approval_ready: false;
+}>, z.ZodObject<{
+    state: z.ZodLiteral<"expired">;
+    approval_ready: z.ZodLiteral<false>;
+}, "strict", z.ZodTypeAny, {
+    state: "expired";
+    approval_ready: false;
+}, {
+    state: "expired";
+    approval_ready: false;
+}>, z.ZodObject<{
+    state: z.ZodLiteral<"not_found">;
+    approval_ready: z.ZodLiteral<false>;
+}, "strict", z.ZodTypeAny, {
+    state: "not_found";
+    approval_ready: false;
+}, {
+    state: "not_found";
+    approval_ready: false;
+}>, z.ZodObject<{
+    state: z.ZodLiteral<"unavailable">;
+    approval_ready: z.ZodLiteral<false>;
+}, "strict", z.ZodTypeAny, {
+    state: "unavailable";
+    approval_ready: false;
+}, {
+    state: "unavailable";
+    approval_ready: false;
+}>]>;
+export type AuthorizationProgress = z.infer<typeof AuthorizationProgressSchema>;
+/** Public, read-only projection. Deliberately excludes holder keys and identities. */
+export declare const ConsentPreparationStatusSchema: z.ZodObject<{
+    authorization: z.ZodDiscriminatedUnion<"state", [z.ZodObject<{
+        state: z.ZodLiteral<"preparation_required">;
+        approval_ready: z.ZodLiteral<false>;
+    }, "strict", z.ZodTypeAny, {
+        state: "preparation_required";
+        approval_ready: false;
+    }, {
+        state: "preparation_required";
+        approval_ready: false;
+    }>, z.ZodObject<{
+        state: z.ZodLiteral<"approval_ready">;
+        approval_ready: z.ZodLiteral<true>;
+    }, "strict", z.ZodTypeAny, {
+        state: "approval_ready";
+        approval_ready: true;
+    }, {
+        state: "approval_ready";
+        approval_ready: true;
+    }>, z.ZodObject<{
+        state: z.ZodLiteral<"completed">;
+        approval_ready: z.ZodLiteral<false>;
+    }, "strict", z.ZodTypeAny, {
+        state: "completed";
+        approval_ready: false;
+    }, {
+        state: "completed";
+        approval_ready: false;
+    }>, z.ZodObject<{
+        state: z.ZodLiteral<"expired">;
+        approval_ready: z.ZodLiteral<false>;
+    }, "strict", z.ZodTypeAny, {
+        state: "expired";
+        approval_ready: false;
+    }, {
+        state: "expired";
+        approval_ready: false;
+    }>, z.ZodObject<{
+        state: z.ZodLiteral<"not_found">;
+        approval_ready: z.ZodLiteral<false>;
+    }, "strict", z.ZodTypeAny, {
+        state: "not_found";
+        approval_ready: false;
+    }, {
+        state: "not_found";
+        approval_ready: false;
+    }>, z.ZodObject<{
+        state: z.ZodLiteral<"unavailable">;
+        approval_ready: z.ZodLiteral<false>;
+    }, "strict", z.ZodTypeAny, {
+        state: "unavailable";
+        approval_ready: false;
+    }, {
+        state: "unavailable";
+        approval_ready: false;
+    }>]>;
+    expires_in: z.ZodNumber;
+    poll_interval_s: z.ZodLiteral<3>;
+}, "strict", z.ZodTypeAny, {
+    authorization: {
+        state: "preparation_required";
+        approval_ready: false;
+    } | {
+        state: "approval_ready";
+        approval_ready: true;
+    } | {
+        state: "completed";
+        approval_ready: false;
+    } | {
+        state: "expired";
+        approval_ready: false;
+    } | {
+        state: "not_found";
+        approval_ready: false;
+    } | {
+        state: "unavailable";
+        approval_ready: false;
+    };
+    expires_in: number;
+    poll_interval_s: 3;
+}, {
+    authorization: {
+        state: "preparation_required";
+        approval_ready: false;
+    } | {
+        state: "approval_ready";
+        approval_ready: true;
+    } | {
+        state: "completed";
+        approval_ready: false;
+    } | {
+        state: "expired";
+        approval_ready: false;
+    } | {
+        state: "not_found";
+        approval_ready: false;
+    } | {
+        state: "unavailable";
+        approval_ready: false;
+    };
+    expires_in: number;
+    poll_interval_s: 3;
+}>;
+export type ConsentPreparationStatus = z.infer<typeof ConsentPreparationStatusSchema>;

package/node_modules/@kya-os/contracts/dist/consent/authorization-progress.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConsentPreparationStatusSchema = exports.AuthorizationProgressSchema = void 0;
+const zod_1 = require("zod");
+/** Presentation only: never an authorization decision or a substitute for proof. */
+exports.AuthorizationProgressSchema = zod_1.z.discriminatedUnion("state", [
+    zod_1.z
+        .object({
+        state: zod_1.z.literal("preparation_required"),
+        approval_ready: zod_1.z.literal(false),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        state: zod_1.z.literal("approval_ready"),
+        approval_ready: zod_1.z.literal(true),
+    })
+        .strict(),
+    zod_1.z
+        .object({ state: zod_1.z.literal("completed"), approval_ready: zod_1.z.literal(false) })
+        .strict(),
+    zod_1.z
+        .object({ state: zod_1.z.literal("expired"), approval_ready: zod_1.z.literal(false) })
+        .strict(),
+    zod_1.z
+        .object({ state: zod_1.z.literal("not_found"), approval_ready: zod_1.z.literal(false) })
+        .strict(),
+    zod_1.z
+        .object({
+        state: zod_1.z.literal("unavailable"),
+        approval_ready: zod_1.z.literal(false),
+    })
+        .strict(),
+]);
+/** Public, read-only projection. Deliberately excludes holder keys and identities. */
+exports.ConsentPreparationStatusSchema = zod_1.z
+    .object({
+    authorization: exports.AuthorizationProgressSchema,
+    expires_in: zod_1.z.number().int().min(0).max(600),
+    poll_interval_s: zod_1.z.literal(3),
+})
+    .strict();

package/node_modules/@kya-os/contracts/dist/consent/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Consent Module Exports
+ *
+ * Types and schemas for consent page configuration and approval handling.
+ *
+ * This module re-exports from @kya-os/consent (the single source of truth)
+ * while maintaining backward compatibility with existing contracts consumers.
+ */
+export { AuthorizationProgressSchema, ConsentPreparationStatusSchema, } from "./authorization-progress";
+export type { AuthorizationProgress, ConsentPreparationStatus, } from "./authorization-progress";
+export type { ConsentConfig, ConsentConfigWithMeta, ConsentCustomField, ConsentCustomFieldOption, ConsentMetadata, ResolvedConsentConfig, ResolvedUI, ResolvedTerms, ResolvedSuccess, ConsentBranding, ResolvedConsentBranding, ConsentUI, ConsentTerms, ConsentSuccess, ResolvedConsentCopy, AuthMode, CredentialsConfig, OAuthConfig, MagicLinkConfig, OTPConfig, QRCodeConfig, PasskeyConfig, IDVConfig, ConsentPageConfig, ExtendedConsentPageConfig, OAuthIdentity, ConsentApprovalRequest, ConsentApprovalResponse, ConsentConfigAPIResponse, CredentialAuthRequest, CredentialAuthResponse, Capability, CapabilityGroup, CapabilityIcon, AgentMetadata, ConsentTheme, RiskLevel, CedarTemplateContext, CedarExplanation, } from "@kya-os/consent";
+export { ConsentConfigSchema, ConsentConfigWithMetaSchema, ConsentCustomFieldSchema, ConsentCustomFieldOptionSchema, ConsentTermsSchema, ConsentUISchema, ConsentSuccessSchema, ConsentMetadataSchema, ConsentBrandingSchema, AuthModeSchema, CredentialsConfigSchema, OAuthConfigSchema, MagicLinkConfigSchema, OTPConfigSchema, QRCodeConfigSchema, PasskeyConfigSchema, IDVConfigSchema, OAuthIdentitySchema, ConsentApprovalRequestSchema, ConsentApprovalResponseSchema, ConsentPageConfigSchema, CredentialAuthRequestSchema, CredentialAuthResponseSchema, validateConsentApprovalRequest, validateConsentApprovalResponse, validateOAuthIdentity, validateConsentPageConfig, validateConsentConfig, validateConsentBranding, validateCustomField, CapabilitySchema, CapabilityGroupSchema, CapabilityIconSchema, AgentMetadataSchema, ConsentThemeSchema, RiskLevelSchema, CedarPolicySchema, CedarTemplateContextSchema, validateCapability, validateCapabilityGroup, validateAgentMetadata, } from "@kya-os/consent";
+export { DEFAULT_BRANDING, DEFAULT_UI, DEFAULT_TERMS, DEFAULT_SUCCESS, DEFAULT_METADATA, DEFAULT_EXPIRATION_DAYS, DEFAULT_COLORS, AUTH_MODES, AUTH_MODE_REGISTRY, getAuthModeMetadata, getImplementedAuthModes, isAuthModeImplemented, requiresExternalAuth, collectsCredentials, } from "@kya-os/consent";
+export { ConsentBrandingSchema as consentBrandingSchema, ConsentTermsSchema as consentTermsSchema, ConsentConfigSchema as consentConfigSchema, ConsentCustomFieldSchema as consentCustomFieldSchema, ConsentCustomFieldOptionSchema as consentCustomFieldOptionSchema, ConsentPageConfigSchema as consentPageConfigSchema, ConsentApprovalRequestSchema as consentApprovalRequestSchema, ConsentApprovalResponseSchema as consentApprovalResponseSchema, OAuthIdentitySchema as oauthIdentitySchema, } from "@kya-os/consent";

package/node_modules/@kya-os/contracts/dist/consent/index.js

@@ -0,0 +1,94 @@
+"use strict";
+/**
+ * Consent Module Exports
+ *
+ * Types and schemas for consent page configuration and approval handling.
+ *
+ * This module re-exports from @kya-os/consent (the single source of truth)
+ * while maintaining backward compatibility with existing contracts consumers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_COLORS = exports.DEFAULT_EXPIRATION_DAYS = exports.DEFAULT_METADATA = exports.DEFAULT_SUCCESS = exports.DEFAULT_TERMS = exports.DEFAULT_UI = exports.DEFAULT_BRANDING = exports.validateAgentMetadata = exports.validateCapabilityGroup = exports.validateCapability = exports.CedarTemplateContextSchema = exports.CedarPolicySchema = exports.RiskLevelSchema = exports.ConsentThemeSchema = exports.AgentMetadataSchema = exports.CapabilityIconSchema = exports.CapabilityGroupSchema = exports.CapabilitySchema = exports.validateCustomField = exports.validateConsentBranding = exports.validateConsentConfig = exports.validateConsentPageConfig = exports.validateOAuthIdentity = exports.validateConsentApprovalResponse = exports.validateConsentApprovalRequest = exports.CredentialAuthResponseSchema = exports.CredentialAuthRequestSchema = exports.ConsentPageConfigSchema = exports.ConsentApprovalResponseSchema = exports.ConsentApprovalRequestSchema = exports.OAuthIdentitySchema = exports.IDVConfigSchema = exports.PasskeyConfigSchema = exports.QRCodeConfigSchema = exports.OTPConfigSchema = exports.MagicLinkConfigSchema = exports.OAuthConfigSchema = exports.CredentialsConfigSchema = exports.AuthModeSchema = exports.ConsentBrandingSchema = exports.ConsentMetadataSchema = exports.ConsentSuccessSchema = exports.ConsentUISchema = exports.ConsentTermsSchema = exports.ConsentCustomFieldOptionSchema = exports.ConsentCustomFieldSchema = exports.ConsentConfigWithMetaSchema = exports.ConsentConfigSchema = exports.ConsentPreparationStatusSchema = exports.AuthorizationProgressSchema = void 0;
+exports.oauthIdentitySchema = exports.consentApprovalResponseSchema = exports.consentApprovalRequestSchema = exports.consentPageConfigSchema = exports.consentCustomFieldOptionSchema = exports.consentCustomFieldSchema = exports.consentConfigSchema = exports.consentTermsSchema = exports.consentBrandingSchema = exports.collectsCredentials = exports.requiresExternalAuth = exports.isAuthModeImplemented = exports.getImplementedAuthModes = exports.getAuthModeMetadata = exports.AUTH_MODE_REGISTRY = exports.AUTH_MODES = void 0;
+var authorization_progress_1 = require("./authorization-progress");
+Object.defineProperty(exports, "AuthorizationProgressSchema", { enumerable: true, get: function () { return authorization_progress_1.AuthorizationProgressSchema; } });
+Object.defineProperty(exports, "ConsentPreparationStatusSchema", { enumerable: true, get: function () { return authorization_progress_1.ConsentPreparationStatusSchema; } });
+// Re-export schemas from @kya-os/consent
+var consent_1 = require("@kya-os/consent");
+// Config schemas
+Object.defineProperty(exports, "ConsentConfigSchema", { enumerable: true, get: function () { return consent_1.ConsentConfigSchema; } });
+Object.defineProperty(exports, "ConsentConfigWithMetaSchema", { enumerable: true, get: function () { return consent_1.ConsentConfigWithMetaSchema; } });
+Object.defineProperty(exports, "ConsentCustomFieldSchema", { enumerable: true, get: function () { return consent_1.ConsentCustomFieldSchema; } });
+Object.defineProperty(exports, "ConsentCustomFieldOptionSchema", { enumerable: true, get: function () { return consent_1.ConsentCustomFieldOptionSchema; } });
+Object.defineProperty(exports, "ConsentTermsSchema", { enumerable: true, get: function () { return consent_1.ConsentTermsSchema; } });
+Object.defineProperty(exports, "ConsentUISchema", { enumerable: true, get: function () { return consent_1.ConsentUISchema; } });
+Object.defineProperty(exports, "ConsentSuccessSchema", { enumerable: true, get: function () { return consent_1.ConsentSuccessSchema; } });
+Object.defineProperty(exports, "ConsentMetadataSchema", { enumerable: true, get: function () { return consent_1.ConsentMetadataSchema; } });
+// Branding schemas
+Object.defineProperty(exports, "ConsentBrandingSchema", { enumerable: true, get: function () { return consent_1.ConsentBrandingSchema; } });
+// Mode schemas
+Object.defineProperty(exports, "AuthModeSchema", { enumerable: true, get: function () { return consent_1.AuthModeSchema; } });
+Object.defineProperty(exports, "CredentialsConfigSchema", { enumerable: true, get: function () { return consent_1.CredentialsConfigSchema; } });
+Object.defineProperty(exports, "OAuthConfigSchema", { enumerable: true, get: function () { return consent_1.OAuthConfigSchema; } });
+Object.defineProperty(exports, "MagicLinkConfigSchema", { enumerable: true, get: function () { return consent_1.MagicLinkConfigSchema; } });
+Object.defineProperty(exports, "OTPConfigSchema", { enumerable: true, get: function () { return consent_1.OTPConfigSchema; } });
+Object.defineProperty(exports, "QRCodeConfigSchema", { enumerable: true, get: function () { return consent_1.QRCodeConfigSchema; } });
+Object.defineProperty(exports, "PasskeyConfigSchema", { enumerable: true, get: function () { return consent_1.PasskeyConfigSchema; } });
+Object.defineProperty(exports, "IDVConfigSchema", { enumerable: true, get: function () { return consent_1.IDVConfigSchema; } });
+// API schemas
+Object.defineProperty(exports, "OAuthIdentitySchema", { enumerable: true, get: function () { return consent_1.OAuthIdentitySchema; } });
+Object.defineProperty(exports, "ConsentApprovalRequestSchema", { enumerable: true, get: function () { return consent_1.ConsentApprovalRequestSchema; } });
+Object.defineProperty(exports, "ConsentApprovalResponseSchema", { enumerable: true, get: function () { return consent_1.ConsentApprovalResponseSchema; } });
+Object.defineProperty(exports, "ConsentPageConfigSchema", { enumerable: true, get: function () { return consent_1.ConsentPageConfigSchema; } });
+Object.defineProperty(exports, "CredentialAuthRequestSchema", { enumerable: true, get: function () { return consent_1.CredentialAuthRequestSchema; } });
+Object.defineProperty(exports, "CredentialAuthResponseSchema", { enumerable: true, get: function () { return consent_1.CredentialAuthResponseSchema; } });
+// Validation helpers
+Object.defineProperty(exports, "validateConsentApprovalRequest", { enumerable: true, get: function () { return consent_1.validateConsentApprovalRequest; } });
+Object.defineProperty(exports, "validateConsentApprovalResponse", { enumerable: true, get: function () { return consent_1.validateConsentApprovalResponse; } });
+Object.defineProperty(exports, "validateOAuthIdentity", { enumerable: true, get: function () { return consent_1.validateOAuthIdentity; } });
+Object.defineProperty(exports, "validateConsentPageConfig", { enumerable: true, get: function () { return consent_1.validateConsentPageConfig; } });
+Object.defineProperty(exports, "validateConsentConfig", { enumerable: true, get: function () { return consent_1.validateConsentConfig; } });
+Object.defineProperty(exports, "validateConsentBranding", { enumerable: true, get: function () { return consent_1.validateConsentBranding; } });
+Object.defineProperty(exports, "validateCustomField", { enumerable: true, get: function () { return consent_1.validateCustomField; } });
+// Capability + agent metadata + cedar schemas
+Object.defineProperty(exports, "CapabilitySchema", { enumerable: true, get: function () { return consent_1.CapabilitySchema; } });
+Object.defineProperty(exports, "CapabilityGroupSchema", { enumerable: true, get: function () { return consent_1.CapabilityGroupSchema; } });
+Object.defineProperty(exports, "CapabilityIconSchema", { enumerable: true, get: function () { return consent_1.CapabilityIconSchema; } });
+Object.defineProperty(exports, "AgentMetadataSchema", { enumerable: true, get: function () { return consent_1.AgentMetadataSchema; } });
+Object.defineProperty(exports, "ConsentThemeSchema", { enumerable: true, get: function () { return consent_1.ConsentThemeSchema; } });
+Object.defineProperty(exports, "RiskLevelSchema", { enumerable: true, get: function () { return consent_1.RiskLevelSchema; } });
+Object.defineProperty(exports, "CedarPolicySchema", { enumerable: true, get: function () { return consent_1.CedarPolicySchema; } });
+Object.defineProperty(exports, "CedarTemplateContextSchema", { enumerable: true, get: function () { return consent_1.CedarTemplateContextSchema; } });
+Object.defineProperty(exports, "validateCapability", { enumerable: true, get: function () { return consent_1.validateCapability; } });
+Object.defineProperty(exports, "validateCapabilityGroup", { enumerable: true, get: function () { return consent_1.validateCapabilityGroup; } });
+Object.defineProperty(exports, "validateAgentMetadata", { enumerable: true, get: function () { return consent_1.validateAgentMetadata; } });
+// Re-export constants and defaults
+var consent_2 = require("@kya-os/consent");
+// Defaults
+Object.defineProperty(exports, "DEFAULT_BRANDING", { enumerable: true, get: function () { return consent_2.DEFAULT_BRANDING; } });
+Object.defineProperty(exports, "DEFAULT_UI", { enumerable: true, get: function () { return consent_2.DEFAULT_UI; } });
+Object.defineProperty(exports, "DEFAULT_TERMS", { enumerable: true, get: function () { return consent_2.DEFAULT_TERMS; } });
+Object.defineProperty(exports, "DEFAULT_SUCCESS", { enumerable: true, get: function () { return consent_2.DEFAULT_SUCCESS; } });
+Object.defineProperty(exports, "DEFAULT_METADATA", { enumerable: true, get: function () { return consent_2.DEFAULT_METADATA; } });
+Object.defineProperty(exports, "DEFAULT_EXPIRATION_DAYS", { enumerable: true, get: function () { return consent_2.DEFAULT_EXPIRATION_DAYS; } });
+Object.defineProperty(exports, "DEFAULT_COLORS", { enumerable: true, get: function () { return consent_2.DEFAULT_COLORS; } });
+// Auth mode constants and utilities
+Object.defineProperty(exports, "AUTH_MODES", { enumerable: true, get: function () { return consent_2.AUTH_MODES; } });
+Object.defineProperty(exports, "AUTH_MODE_REGISTRY", { enumerable: true, get: function () { return consent_2.AUTH_MODE_REGISTRY; } });
+Object.defineProperty(exports, "getAuthModeMetadata", { enumerable: true, get: function () { return consent_2.getAuthModeMetadata; } });
+Object.defineProperty(exports, "getImplementedAuthModes", { enumerable: true, get: function () { return consent_2.getImplementedAuthModes; } });
+Object.defineProperty(exports, "isAuthModeImplemented", { enumerable: true, get: function () { return consent_2.isAuthModeImplemented; } });
+Object.defineProperty(exports, "requiresExternalAuth", { enumerable: true, get: function () { return consent_2.requiresExternalAuth; } });
+Object.defineProperty(exports, "collectsCredentials", { enumerable: true, get: function () { return consent_2.collectsCredentials; } });
+// Legacy schema exports (aliased for backward compatibility)
+// These map old camelCase naming to new PascalCase canonical names
+var consent_3 = require("@kya-os/consent");
+Object.defineProperty(exports, "consentBrandingSchema", { enumerable: true, get: function () { return consent_3.ConsentBrandingSchema; } });
+Object.defineProperty(exports, "consentTermsSchema", { enumerable: true, get: function () { return consent_3.ConsentTermsSchema; } });
+Object.defineProperty(exports, "consentConfigSchema", { enumerable: true, get: function () { return consent_3.ConsentConfigSchema; } });
+Object.defineProperty(exports, "consentCustomFieldSchema", { enumerable: true, get: function () { return consent_3.ConsentCustomFieldSchema; } });
+Object.defineProperty(exports, "consentCustomFieldOptionSchema", { enumerable: true, get: function () { return consent_3.ConsentCustomFieldOptionSchema; } });
+Object.defineProperty(exports, "consentPageConfigSchema", { enumerable: true, get: function () { return consent_3.ConsentPageConfigSchema; } });
+Object.defineProperty(exports, "consentApprovalRequestSchema", { enumerable: true, get: function () { return consent_3.ConsentApprovalRequestSchema; } });
+Object.defineProperty(exports, "consentApprovalResponseSchema", { enumerable: true, get: function () { return consent_3.ConsentApprovalResponseSchema; } });
+Object.defineProperty(exports, "oauthIdentitySchema", { enumerable: true, get: function () { return consent_3.OAuthIdentitySchema; } });