@kya-os/cli 2.0.0 → 2.0.3

package/node_modules/@kya-os/contracts/dist/delegation/schemas.js

@@ -0,0 +1,585 @@
+"use strict";
+/**
+ * Delegation Record Schemas
+ *
+ * Types and schemas for delegation records that link VCs with CRISP constraints.
+ * Delegations represent the transfer of authority from one DID to another.
+ *
+ * **IMPORTANT**: Per Python POC design (Delegation-Service.md:136-146),
+ * delegations SHOULD be issued as W3C Verifiable Credentials, not just reference them.
+ * This file provides both:
+ * - DelegationRecord: Legacy/internal format (contains delegation data)
+ * - DelegationCredential: W3C VC format (delegation as credentialSubject)
+ *
+ * Related Spec: MCP-I §4.1, §4.2, W3C VC Data Model 1.1
+ * Python Reference: Delegation-Documentation.md, Delegation-Service.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DelegationCredentialSchema = exports.DelegationCredentialSubjectSchema = exports.DELEGATION_CREDENTIAL_CONTEXT = exports.DELEGATION_STATUSES = exports.DEFAULT_DELEGATION_STATUS = exports.MAX_DELEGATION_CHAIN_DEPTH = exports.DelegationVerificationResultSchema = exports.DelegationVerificationDetailsSchema = exports.AuthorizationInfoSchema = exports.DelegationCreationRequestSchema = exports.DelegationChainSchema = exports.DelegationChainEntrySchema = exports.DelegationRecordSchema = exports.DelegationStatusSchema = void 0;
+exports.validateDelegationRecord = validateDelegationRecord;
+exports.validateDelegationChain = validateDelegationChain;
+exports.isDelegationExpired = isDelegationExpired;
+exports.isDelegationNotYetValid = isDelegationNotYetValid;
+exports.isDelegationCurrentlyValid = isDelegationCurrentlyValid;
+exports.validateDelegationCredential = validateDelegationCredential;
+exports.extractDelegationFromVC = extractDelegationFromVC;
+exports.wrapDelegationAsVC = wrapDelegationAsVC;
+exports.isDelegationCredentialExpired = isDelegationCredentialExpired;
+exports.isDelegationCredentialNotYetValid = isDelegationCredentialNotYetValid;
+const zod_1 = require("zod");
+const constraints_js_1 = require("./constraints.js");
+const schemas_js_1 = require("../vc/schemas.js");
+/**
+ * Delegation Status
+ *
+ * Lifecycle status of a delegation
+ */
+exports.DelegationStatusSchema = zod_1.z.enum(['active', 'revoked', 'expired']);
+/**
+ * Delegation Record Schema
+ *
+ * Complete delegation record linking issuer (delegator) to subject (delegatee)
+ * with backing VC and CRISP constraints.
+ *
+ * **Key Invariants:**
+ * - Delegation MUST reference a live VC via `vcId`
+ * - Revocation of VC invalidates all linked delegations
+ * - Chain: no cycles allowed
+ * - Child `notAfter` ≤ parent `notAfter`
+ * - Child scopes ⊆ parent scopes
+ * - Child budgets ≤ parent budgets (same unit)
+ */
+exports.DelegationRecordSchema = zod_1.z.object({
+    /** Unique identifier for the delegation */
+    id: zod_1.z.string().min(1),
+    /** DID of the delegator (issuer, e.g., merchant/user) */
+    issuerDid: zod_1.z.string().min(1),
+    /** DID of the delegatee (subject, e.g., agent) */
+    subjectDid: zod_1.z.string().min(1),
+    /** Optional controller (user account ID or DID) */
+    controller: zod_1.z.string().optional(),
+    /** ID of the backing Verifiable Credential */
+    vcId: zod_1.z.string().min(1),
+    /** Optional parent delegation ID for chain tracking */
+    parentId: zod_1.z.string().optional(),
+    /** CRISP constraints on this delegation */
+    constraints: constraints_js_1.DelegationConstraintsSchema,
+    /** Detached JWS signature over canonical delegation document */
+    signature: zod_1.z.string().min(1),
+    /** Current status of the delegation */
+    status: exports.DelegationStatusSchema,
+    /** Timestamp when created (milliseconds since epoch) */
+    createdAt: zod_1.z.number().int().positive().optional(),
+    /** Timestamp when revoked (if status is revoked) */
+    revokedAt: zod_1.z.number().int().positive().optional(),
+    /** Optional reason for revocation */
+    revokedReason: zod_1.z.string().optional(),
+    /** Optional metadata */
+    metadata: zod_1.z.record(zod_1.z.any()).optional(),
+}).passthrough(); // Allow extensibility
+/**
+ * Delegation Chain Entry
+ *
+ * Represents a single link in a delegation chain
+ */
+exports.DelegationChainEntrySchema = zod_1.z.object({
+    /** Delegation ID */
+    delegationId: zod_1.z.string().min(1),
+    /** Issuer DID */
+    issuerDid: zod_1.z.string().min(1),
+    /** Subject DID */
+    subjectDid: zod_1.z.string().min(1),
+    /** VC ID */
+    vcId: zod_1.z.string().min(1),
+    /** Depth in chain (0 = root) */
+    depth: zod_1.z.number().int().nonnegative(),
+    /** Constraints */
+    constraints: constraints_js_1.DelegationConstraintsSchema,
+    /** Status */
+    status: exports.DelegationStatusSchema,
+});
+/**
+ * Delegation Chain
+ *
+ * Represents a complete delegation chain from root to leaf
+ */
+exports.DelegationChainSchema = zod_1.z.object({
+    /** Root issuer DID */
+    rootIssuer: zod_1.z.string().min(1),
+    /** Leaf subject DID */
+    leafSubject: zod_1.z.string().min(1),
+    /** All delegations in the chain, ordered root to leaf */
+    chain: zod_1.z.array(exports.DelegationChainEntrySchema).min(1),
+    /** Total chain depth */
+    depth: zod_1.z.number().int().nonnegative(),
+    /** Whether the entire chain is valid */
+    valid: zod_1.z.boolean(),
+    /** Optional validation errors */
+    errors: zod_1.z.array(zod_1.z.string()).optional(),
+});
+/**
+ * Delegation Creation Request
+ *
+ * Input for creating a new delegation
+ */
+exports.DelegationCreationRequestSchema = zod_1.z.object({
+    /** Delegator DID */
+    issuerDid: zod_1.z.string().min(1),
+    /** Delegatee DID */
+    subjectDid: zod_1.z.string().min(1),
+    /** Optional controller */
+    controller: zod_1.z.string().optional(),
+    /** Constraints */
+    constraints: constraints_js_1.DelegationConstraintsSchema,
+    /** Optional parent delegation ID */
+    parentId: zod_1.z.string().optional(),
+    /** Optional VC ID (if not provided, will be created) */
+    vcId: zod_1.z.string().optional(),
+});
+/**
+ * Authorization Info Schema
+ *
+ * Captures HOW the user verified their identity during consent.
+ * This is runtime verification metadata, separate from tool requirements.
+ *
+ * Note: This schema describes authorization info in verification results,
+ * not tool protection requirements (which use AuthorizationRequirementSchema).
+ */
+exports.AuthorizationInfoSchema = zod_1.z.object({
+    /**
+     * The authorization method used during consent
+     *
+     * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+     * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+     * - 'password': Password/credential authentication
+     * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+     * - 'verifiable_credential': W3C Verifiable Credential
+     * - 'mdl': Mobile Driver's License
+     * - 'idv': Identity Verification
+     * - 'webauthn': WebAuthn/Passkey authentication
+     * - 'siwe': Sign-In with Ethereum (EIP-4361)
+     * - 'none': Consent-only (no authentication)
+     */
+    type: zod_1.z.enum([
+        'oauth',
+        'oauth2',
+        'password',
+        'credential',
+        'verifiable_credential',
+        'mdl',
+        'idv',
+        'webauthn',
+        'siwe',
+        'none',
+    ]),
+    /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+    provider: zod_1.z.string().optional(),
+    /** Credential type for verifiable_credential or mdl auth */
+    credentialType: zod_1.z.string().optional(),
+    /** MDL issuer DID or identifier */
+    issuer: zod_1.z.string().optional(),
+    /** IDV verification level */
+    verificationLevel: zod_1.z.enum(['basic', 'enhanced', 'loa3']).optional(),
+    /** WebAuthn Relying Party ID */
+    rpId: zod_1.z.string().optional(),
+    /** WebAuthn user verification level */
+    userVerification: zod_1.z.enum(['required', 'preferred', 'discouraged']).optional(),
+    /** SIWE Ethereum chain ID */
+    chainId: zod_1.z.number().optional(),
+    /** SIWE domain */
+    domain: zod_1.z.string().optional(),
+    /** Timestamp when authorization was verified (milliseconds since epoch) */
+    verifiedAt: zod_1.z.number().int().positive().optional(),
+});
+/**
+ * Delegation Verification Details Schema
+ *
+ * Typed details object for verification results
+ */
+exports.DelegationVerificationDetailsSchema = zod_1.z.object({
+    /** Authorization info - how identity was verified during consent */
+    authorization: exports.AuthorizationInfoSchema.optional(),
+    /** Additional metadata fields (extensible) */
+}).passthrough();
+/**
+ * Delegation Verification Result
+ *
+ * Result of delegation verification
+ */
+exports.DelegationVerificationResultSchema = zod_1.z.object({
+    /** Whether delegation is valid */
+    valid: zod_1.z.boolean(),
+    /** Delegation ID */
+    delegationId: zod_1.z.string().min(1),
+    /** Status */
+    status: exports.DelegationStatusSchema,
+    /** Optional reason for invalid status */
+    reason: zod_1.z.string().optional(),
+    /** Whether backing VC is valid */
+    credentialValid: zod_1.z.boolean().optional(),
+    /** Whether chain is valid (if part of chain) */
+    chainValid: zod_1.z.boolean().optional(),
+    /** Timestamp of verification */
+    verifiedAt: zod_1.z.number().int().positive(),
+    /** Verification details including authorization info */
+    details: exports.DelegationVerificationDetailsSchema.optional(),
+});
+/**
+ * Validation Helpers
+ */
+/**
+ * Validate a delegation record
+ *
+ * @param record - The delegation record to validate
+ * @returns Validation result
+ */
+function validateDelegationRecord(record) {
+    return exports.DelegationRecordSchema.safeParse(record);
+}
+/**
+ * Validate a delegation chain
+ *
+ * @param chain - The delegation chain to validate
+ * @returns Validation result
+ */
+function validateDelegationChain(chain) {
+    return exports.DelegationChainSchema.safeParse(chain);
+}
+/**
+ * Check if a delegation is expired based on constraints
+ *
+ * @param delegation - The delegation to check
+ * @returns true if expired
+ */
+function isDelegationExpired(delegation) {
+    if (!delegation.constraints.notAfter) {
+        return false;
+    }
+    const nowSec = Math.floor(Date.now() / 1000);
+    return nowSec > delegation.constraints.notAfter;
+}
+/**
+ * Check if a delegation is not yet valid based on constraints
+ *
+ * @param delegation - The delegation to check
+ * @returns true if not yet valid
+ */
+function isDelegationNotYetValid(delegation) {
+    if (!delegation.constraints.notBefore) {
+        return false;
+    }
+    const nowSec = Math.floor(Date.now() / 1000);
+    return nowSec < delegation.constraints.notBefore;
+}
+/**
+ * Check if a delegation is currently valid (active and within time bounds)
+ *
+ * @param delegation - The delegation to check
+ * @returns true if currently valid
+ */
+function isDelegationCurrentlyValid(delegation) {
+    if (delegation.status !== 'active') {
+        return false;
+    }
+    if (isDelegationExpired(delegation)) {
+        return false;
+    }
+    if (isDelegationNotYetValid(delegation)) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Constants
+ */
+/**
+ * Maximum reasonable delegation chain depth
+ */
+exports.MAX_DELEGATION_CHAIN_DEPTH = 10;
+/**
+ * Default delegation status for new delegations
+ */
+exports.DEFAULT_DELEGATION_STATUS = 'active';
+/**
+ * Supported delegation statuses
+ */
+exports.DELEGATION_STATUSES = ['active', 'revoked', 'expired'];
+// ============================================================================
+// W3C VC-BASED DELEGATION CREDENTIALS (Phase 3 Implementation)
+// ============================================================================
+/**
+ * Delegation Credential Context
+ *
+ * Additional JSON-LD context for delegation credentials
+ */
+exports.DELEGATION_CREDENTIAL_CONTEXT = 'https://schema.modelcontextprotocol-identity.io/xmcp-i/credentials/delegation.v1.0.0.json';
+/**
+ * Delegation Credential Subject Schema
+ *
+ * The credentialSubject of a DelegationCredential contains:
+ * - id: The delegatee DID (subject of the delegation)
+ * - delegation: The complete delegation record
+ *
+ * Per Python POC (Delegation-Service.md:136-146), delegations are issued AS
+ * W3C VCs, with the delegation data embedded in the credentialSubject.
+ *
+ * Phase 7 Update: Added userDid, userIdentifier, sessionId, and scopes
+ * to support Agent Shield VC-JWT tokens and MCP session tracking.
+ */
+exports.DelegationCredentialSubjectSchema = zod_1.z.object({
+    /** Subject DID (delegatee) */
+    id: zod_1.z.string().min(1),
+    /** The delegation information */
+    delegation: zod_1.z.object({
+        /** Unique identifier for the delegation */
+        id: zod_1.z.string().min(1),
+        /** DID of the delegator (issuer, e.g., merchant/user) */
+        issuerDid: zod_1.z.string().min(1),
+        /** DID of the delegatee (subject, e.g., agent) */
+        subjectDid: zod_1.z.string().min(1),
+        /**
+         * DID of the user who granted the delegation.
+         *
+         * This is the authorizing user's identity. In simple cases, this equals
+         * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+         * of a user), userDid identifies the actual user who consented.
+         *
+         * Required by Agent Shield API for user-scoped delegations.
+         * @see delegationCredentialSchema in agentshield-api/schemas.ts
+         */
+        userDid: zod_1.z.string().optional(),
+        /**
+         * Human-readable identifier for the user (e.g., email, OAuth subject).
+         *
+         * Used for backward compatibility and display purposes.
+         * Should not be used for cryptographic identity verification.
+         */
+        userIdentifier: zod_1.z.string().optional(),
+        /**
+         * MCP session ID for session tracking and integration.
+         *
+         * Links the delegation to a specific MCP session, enabling
+         * session-scoped token caching and audit trails.
+         */
+        sessionId: zod_1.z.string().optional(),
+        /**
+         * Authorized scopes for this delegation.
+         *
+         * Array of scope strings (e.g., ['tool:execute', 'resource:read']).
+         * When present, defines what actions the delegatee is authorized to perform.
+         */
+        scopes: zod_1.z.array(zod_1.z.string()).optional(),
+        /** Optional controller (user account ID or DID) */
+        controller: zod_1.z.string().optional(),
+        /** Optional parent delegation ID for chain tracking */
+        parentId: zod_1.z.string().optional(),
+        /** CRISP constraints on this delegation */
+        constraints: constraints_js_1.DelegationConstraintsSchema,
+        /** Current status of the delegation */
+        status: exports.DelegationStatusSchema.default('active'),
+        /** Timestamp when created (milliseconds since epoch) */
+        createdAt: zod_1.z.number().int().positive().optional(),
+        /** Optional metadata */
+        metadata: zod_1.z.record(zod_1.z.any()).optional(),
+    }),
+});
+/**
+ * Delegation Credential Schema
+ *
+ * W3C Verifiable Credential for delegations.
+ * This is the PRIMARY format for delegation issuance and verification.
+ *
+ * Structure:
+ * - @context: [...W3C VC contexts, delegation context]
+ * - type: ['VerifiableCredential', 'DelegationCredential']
+ * - issuer: Delegator DID
+ * - issuanceDate: When delegation was created
+ * - expirationDate: Maps to delegation.constraints.notAfter
+ * - credentialSubject: Contains delegatee DID + delegation data
+ * - credentialStatus: StatusList2021Entry for revocation checking
+ * - proof: Ed25519Signature2020
+ *
+ * Per Python POC design (Delegation-Service.md:136-163):
+ * - Every delegation MUST be issued as a VC
+ * - Verification checks BOTH the VC signature AND delegation constraints
+ * - Revocation updates the StatusList2021
+ *
+ * Related Spec: MCP-I §4.1, §4.2, W3C VC Data Model 1.1
+ */
+exports.DelegationCredentialSchema = schemas_js_1.VerifiableCredentialSchema.extend({
+    /** @context MUST include delegation context */
+    '@context': zod_1.z
+        .array(zod_1.z.union([zod_1.z.string().url(), zod_1.z.record(zod_1.z.any())]))
+        .refine((contexts) => {
+        // Check for W3C VC context (first)
+        const firstContext = contexts[0];
+        if (typeof firstContext !== 'string' ||
+            firstContext !== 'https://www.w3.org/2018/credentials/v1') {
+            return false;
+        }
+        // Optionally include delegation context (recommended)
+        return true;
+    }, {
+        message: 'First @context must be W3C VC context',
+    }),
+    /** type MUST include both VerifiableCredential and DelegationCredential */
+    type: zod_1.z
+        .array(zod_1.z.string())
+        .refine((types) => types.includes('VerifiableCredential') &&
+        types.includes('DelegationCredential'), {
+        message: 'type must include both "VerifiableCredential" and "DelegationCredential"',
+    }),
+    /** issuer is the delegator DID */
+    issuer: schemas_js_1.IssuerSchema,
+    /** issuanceDate maps to delegation creation time */
+    issuanceDate: zod_1.z.string().datetime(),
+    /** expirationDate maps to delegation.constraints.notAfter */
+    expirationDate: zod_1.z.string().datetime().optional(),
+    /** credentialSubject contains delegatee DID + delegation data */
+    credentialSubject: exports.DelegationCredentialSubjectSchema,
+    /** credentialStatus for StatusList2021 revocation checking */
+    credentialStatus: schemas_js_1.CredentialStatusSchema.optional(),
+    /** proof is Ed25519Signature2020 */
+    proof: schemas_js_1.ProofSchema.optional(),
+});
+/**
+ * Validate a delegation credential
+ *
+ * @param credential - The delegation credential to validate
+ * @returns Validation result
+ */
+function validateDelegationCredential(credential) {
+    return exports.DelegationCredentialSchema.safeParse(credential);
+}
+/**
+ * Extract DelegationRecord from DelegationCredential
+ *
+ * Utility to extract the legacy DelegationRecord format from a W3C VC.
+ * Useful for backward compatibility and internal processing.
+ *
+ * @param vc - The delegation credential
+ * @returns DelegationRecord
+ */
+function extractDelegationFromVC(vc) {
+    const delegation = vc.credentialSubject.delegation;
+    // Extract signature from proof (may be in different formats)
+    let signature = '';
+    if (vc.proof) {
+        const proof = vc.proof;
+        signature = proof.proofValue || proof.jws || proof.signatureValue || '';
+    }
+    return {
+        id: delegation.id,
+        issuerDid: delegation.issuerDid,
+        subjectDid: delegation.subjectDid,
+        controller: delegation.controller,
+        vcId: vc.id || `vc:${delegation.id}`, // VC id becomes vcId
+        parentId: delegation.parentId,
+        constraints: delegation.constraints,
+        signature,
+        status: delegation.status,
+        createdAt: delegation.createdAt,
+        revokedAt: undefined, // Revocation status comes from credentialStatus
+        revokedReason: undefined,
+        metadata: delegation.metadata,
+    };
+}
+/**
+ * Create DelegationCredential from DelegationRecord (unsigned)
+ *
+ * Wraps a DelegationRecord in a W3C VC structure (without proof).
+ * The caller must sign this to create a valid DelegationCredential.
+ *
+ * @param delegation - The delegation record
+ * @param options - Optional VC options (id, issuanceDate, userDid, sessionId, etc.)
+ * @returns Unsigned DelegationCredential
+ */
+function wrapDelegationAsVC(delegation, options) {
+    const now = new Date().toISOString();
+    const expirationDate = delegation.constraints.notAfter
+        ? new Date(delegation.constraints.notAfter * 1000).toISOString()
+        : options?.expirationDate;
+    // Compute issuanceDate
+    let issuanceDate = options?.issuanceDate || now;
+    if (!options?.issuanceDate && delegation.createdAt) {
+        issuanceDate = new Date(delegation.createdAt).toISOString();
+    }
+    // Extract scopes from constraints if not provided
+    const scopes = options?.scopes || delegation.constraints.scopes;
+    return {
+        '@context': [
+            'https://www.w3.org/2018/credentials/v1',
+            exports.DELEGATION_CREDENTIAL_CONTEXT,
+        ],
+        id: options?.id || delegation.vcId || `urn:uuid:${delegation.id}`,
+        type: ['VerifiableCredential', 'DelegationCredential'],
+        issuer: delegation.issuerDid,
+        issuanceDate,
+        expirationDate,
+        credentialSubject: {
+            id: delegation.subjectDid,
+            delegation: {
+                id: delegation.id,
+                issuerDid: delegation.issuerDid,
+                subjectDid: delegation.subjectDid,
+                // Include userDid if provided or fallback to controller
+                ...(options?.userDid && { userDid: options.userDid }),
+                // Include userIdentifier if provided
+                ...(options?.userIdentifier && { userIdentifier: options.userIdentifier }),
+                // Include sessionId if provided
+                ...(options?.sessionId && { sessionId: options.sessionId }),
+                // Include scopes if available
+                ...(scopes && scopes.length > 0 && { scopes }),
+                controller: delegation.controller,
+                parentId: delegation.parentId,
+                constraints: delegation.constraints,
+                status: delegation.status,
+                createdAt: delegation.createdAt,
+                metadata: delegation.metadata,
+            },
+        },
+        credentialStatus: options?.credentialStatus,
+    };
+}
+/**
+ * Check if a delegation credential is expired
+ *
+ * @param vc - The delegation credential
+ * @returns true if expired
+ */
+function isDelegationCredentialExpired(vc) {
+    // Check VC expiration
+    if (vc.expirationDate) {
+        const expirationDate = new Date(vc.expirationDate);
+        const now = new Date();
+        if (expirationDate < now) {
+            return true;
+        }
+    }
+    // Check delegation constraints notAfter
+    const delegation = vc.credentialSubject.delegation;
+    if (delegation.constraints.notAfter) {
+        const nowSec = Math.floor(Date.now() / 1000);
+        if (nowSec > delegation.constraints.notAfter) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if a delegation credential is not yet valid
+ *
+ * @param vc - The delegation credential
+ * @returns true if not yet valid
+ */
+function isDelegationCredentialNotYetValid(vc) {
+    const delegation = vc.credentialSubject.delegation;
+    // Check delegation constraints notBefore
+    if (delegation.constraints.notBefore) {
+        const nowSec = Math.floor(Date.now() / 1000);
+        if (nowSec < delegation.constraints.notBefore) {
+            return true;
+        }
+    }
+    return false;
+}

package/node_modules/@kya-os/contracts/dist/deploy/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * One-Click Deployment Contracts
+ *
+ * Centralized type definitions and validation schemas for the
+ * AgentShield One-Click Deployment feature.
+ *
+ * @package @kya-os/contracts/deploy
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   DeployToGitHubRequest,
+ *   deployToGitHubRequestSchema,
+ *   TemplateType,
+ * } from '@kya-os/contracts/deploy';
+ *
+ * // Validate request
+ * const result = deployToGitHubRequestSchema.safeParse(body);
+ * if (!result.success) {
+ *   throw new Error('Invalid deploy request');
+ * }
+ *
+ * const validatedRequest: DeployToGitHubRequest = result.data;
+ * ```
+ */
+export type { TemplateType, DeployPlatformType, GitHubAccountType, GitHubInstallation, GitHubRepository, GitHubInstallInitResponse, GitHubCallbackQuery, GitHubCallbackResponse, GitHubStatusResponse, GitHubDisconnectResponse, DeployErrorCode, DeployToGitHubRequest, DeployedProject, DeployToGitHubData, DeployToGitHubResponse, DeployErrorResponse, DeployToGitHubResult, DeployedRepository, ListDeployedRepositoriesResponse, GeneratedFile, ScaffolderOptions, ScaffolderResult, DeployStepStatus, DeployStep, DeploymentProgress, GitHubStatusAPIResponse, DeployToGitHubAPIResponse, } from "./types.js";
+export { templateTypeSchema, deployPlatformSchema, gitHubAccountTypeSchema, gitHubInstallationSchema, gitHubRepositorySchema, gitHubInstallInitResponseSchema, gitHubCallbackQuerySchema, gitHubCallbackResponseSchema, gitHubStatusResponseSchema, gitHubDisconnectResponseSchema, deployErrorCodeSchema, repoNameSchema, deployToGitHubRequestSchema, deployedProjectSchema, deployToGitHubDataSchema, deployToGitHubResponseSchema, deployErrorResponseSchema, deployToGitHubResultSchema, deployedRepositorySchema, listDeployedRepositoriesResponseSchema, generatedFileSchema, scaffolderOptionsSchema, scaffolderResultSchema, deployStepStatusSchema, deployStepSchema, deploymentProgressSchema, } from "./schemas.js";

package/node_modules/@kya-os/contracts/dist/deploy/index.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * One-Click Deployment Contracts
+ *
+ * Centralized type definitions and validation schemas for the
+ * AgentShield One-Click Deployment feature.
+ *
+ * @package @kya-os/contracts/deploy
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   DeployToGitHubRequest,
+ *   deployToGitHubRequestSchema,
+ *   TemplateType,
+ * } from '@kya-os/contracts/deploy';
+ *
+ * // Validate request
+ * const result = deployToGitHubRequestSchema.safeParse(body);
+ * if (!result.success) {
+ *   throw new Error('Invalid deploy request');
+ * }
+ *
+ * const validatedRequest: DeployToGitHubRequest = result.data;
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deploymentProgressSchema = exports.deployStepSchema = exports.deployStepStatusSchema = exports.scaffolderResultSchema = exports.scaffolderOptionsSchema = exports.generatedFileSchema = exports.listDeployedRepositoriesResponseSchema = exports.deployedRepositorySchema = exports.deployToGitHubResultSchema = exports.deployErrorResponseSchema = exports.deployToGitHubResponseSchema = exports.deployToGitHubDataSchema = exports.deployedProjectSchema = exports.deployToGitHubRequestSchema = exports.repoNameSchema = exports.deployErrorCodeSchema = exports.gitHubDisconnectResponseSchema = exports.gitHubStatusResponseSchema = exports.gitHubCallbackResponseSchema = exports.gitHubCallbackQuerySchema = exports.gitHubInstallInitResponseSchema = exports.gitHubRepositorySchema = exports.gitHubInstallationSchema = exports.gitHubAccountTypeSchema = exports.deployPlatformSchema = exports.templateTypeSchema = void 0;
+// Schema exports
+var schemas_js_1 = require("./schemas.js");
+// Template & Platform schemas
+Object.defineProperty(exports, "templateTypeSchema", { enumerable: true, get: function () { return schemas_js_1.templateTypeSchema; } });
+Object.defineProperty(exports, "deployPlatformSchema", { enumerable: true, get: function () { return schemas_js_1.deployPlatformSchema; } });
+// GitHub schemas
+Object.defineProperty(exports, "gitHubAccountTypeSchema", { enumerable: true, get: function () { return schemas_js_1.gitHubAccountTypeSchema; } });
+Object.defineProperty(exports, "gitHubInstallationSchema", { enumerable: true, get: function () { return schemas_js_1.gitHubInstallationSchema; } });
+Object.defineProperty(exports, "gitHubRepositorySchema", { enumerable: true, get: function () { return schemas_js_1.gitHubRepositorySchema; } });
+Object.defineProperty(exports, "gitHubInstallInitResponseSchema", { enumerable: true, get: function () { return schemas_js_1.gitHubInstallInitResponseSchema; } });
+Object.defineProperty(exports, "gitHubCallbackQuerySchema", { enumerable: true, get: function () { return schemas_js_1.gitHubCallbackQuerySchema; } });
+Object.defineProperty(exports, "gitHubCallbackResponseSchema", { enumerable: true, get: function () { return schemas_js_1.gitHubCallbackResponseSchema; } });
+Object.defineProperty(exports, "gitHubStatusResponseSchema", { enumerable: true, get: function () { return schemas_js_1.gitHubStatusResponseSchema; } });
+Object.defineProperty(exports, "gitHubDisconnectResponseSchema", { enumerable: true, get: function () { return schemas_js_1.gitHubDisconnectResponseSchema; } });
+// Deploy API schemas
+Object.defineProperty(exports, "deployErrorCodeSchema", { enumerable: true, get: function () { return schemas_js_1.deployErrorCodeSchema; } });
+Object.defineProperty(exports, "repoNameSchema", { enumerable: true, get: function () { return schemas_js_1.repoNameSchema; } });
+Object.defineProperty(exports, "deployToGitHubRequestSchema", { enumerable: true, get: function () { return schemas_js_1.deployToGitHubRequestSchema; } });
+Object.defineProperty(exports, "deployedProjectSchema", { enumerable: true, get: function () { return schemas_js_1.deployedProjectSchema; } });
+Object.defineProperty(exports, "deployToGitHubDataSchema", { enumerable: true, get: function () { return schemas_js_1.deployToGitHubDataSchema; } });
+Object.defineProperty(exports, "deployToGitHubResponseSchema", { enumerable: true, get: function () { return schemas_js_1.deployToGitHubResponseSchema; } });
+Object.defineProperty(exports, "deployErrorResponseSchema", { enumerable: true, get: function () { return schemas_js_1.deployErrorResponseSchema; } });
+Object.defineProperty(exports, "deployToGitHubResultSchema", { enumerable: true, get: function () { return schemas_js_1.deployToGitHubResultSchema; } });
+// Deployed repository schemas
+Object.defineProperty(exports, "deployedRepositorySchema", { enumerable: true, get: function () { return schemas_js_1.deployedRepositorySchema; } });
+Object.defineProperty(exports, "listDeployedRepositoriesResponseSchema", { enumerable: true, get: function () { return schemas_js_1.listDeployedRepositoriesResponseSchema; } });
+// Scaffolder schemas
+Object.defineProperty(exports, "generatedFileSchema", { enumerable: true, get: function () { return schemas_js_1.generatedFileSchema; } });
+Object.defineProperty(exports, "scaffolderOptionsSchema", { enumerable: true, get: function () { return schemas_js_1.scaffolderOptionsSchema; } });
+Object.defineProperty(exports, "scaffolderResultSchema", { enumerable: true, get: function () { return schemas_js_1.scaffolderResultSchema; } });
+// Progress schemas
+Object.defineProperty(exports, "deployStepStatusSchema", { enumerable: true, get: function () { return schemas_js_1.deployStepStatusSchema; } });
+Object.defineProperty(exports, "deployStepSchema", { enumerable: true, get: function () { return schemas_js_1.deployStepSchema; } });
+Object.defineProperty(exports, "deploymentProgressSchema", { enumerable: true, get: function () { return schemas_js_1.deploymentProgressSchema; } });