@kya-os/cli 2.0.0 → 2.0.3

package/node_modules/@kya-os/contracts/dist/runtime/errors.d.ts

@@ -0,0 +1,347 @@
+/**
+ * Runtime Error Contracts
+ *
+ * Error types and schemas for runtime errors, especially authorization errors
+ *
+ * Related Spec: MCP-I §6
+ * Python Reference: Core-Documentation.md
+ */
+import { z } from 'zod';
+/**
+ * Display hint types for authorization UI
+ */
+export declare const DisplayHintSchema: z.ZodEnum<["link", "qr", "code"]>;
+export type DisplayHint = z.infer<typeof DisplayHintSchema>;
+/**
+ * Display options for authorization flow
+ */
+export declare const AuthorizationDisplaySchema: z.ZodObject<{
+    /** Optional title for the authorization screen */
+    title: z.ZodOptional<z.ZodString>;
+    /** Hints for how to display authorization (link, QR code, or code) */
+    hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+    /** Optional short authorization code */
+    authorizationCode: z.ZodOptional<z.ZodString>;
+    /** Optional QR code URL */
+    qrUrl: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    /** Optional title for the authorization screen */
+    title: z.ZodOptional<z.ZodString>;
+    /** Hints for how to display authorization (link, QR code, or code) */
+    hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+    /** Optional short authorization code */
+    authorizationCode: z.ZodOptional<z.ZodString>;
+    /** Optional QR code URL */
+    qrUrl: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    /** Optional title for the authorization screen */
+    title: z.ZodOptional<z.ZodString>;
+    /** Hints for how to display authorization (link, QR code, or code) */
+    hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+    /** Optional short authorization code */
+    authorizationCode: z.ZodOptional<z.ZodString>;
+    /** Optional QR code URL */
+    qrUrl: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type AuthorizationDisplay = z.infer<typeof AuthorizationDisplaySchema>;
+/**
+ * NeedsAuthorizationError Schema
+ *
+ * Error returned when a request requires authorization.
+ * Includes a resumeToken and authorizationUrl for the authorization flow.
+ */
+export declare const NeedsAuthorizationErrorSchema: z.ZodObject<{
+    /** Error code */
+    error: z.ZodLiteral<"needs_authorization">;
+    /** Human-readable error message */
+    message: z.ZodString;
+    /** URL for the user to authorize (includes resume token) */
+    authorizationUrl: z.ZodString;
+    /** Short-lived resume token for continuing after authorization */
+    resumeToken: z.ZodString;
+    /** Expiration timestamp for the resume token (milliseconds since epoch) */
+    expiresAt: z.ZodNumber;
+    /** Required scopes for authorization */
+    scopes: z.ZodArray<z.ZodString, "many">;
+    /** Optional display configuration for authorization UI */
+    display: z.ZodOptional<z.ZodObject<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    /** Optional additional context */
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    /** Error code */
+    error: z.ZodLiteral<"needs_authorization">;
+    /** Human-readable error message */
+    message: z.ZodString;
+    /** URL for the user to authorize (includes resume token) */
+    authorizationUrl: z.ZodString;
+    /** Short-lived resume token for continuing after authorization */
+    resumeToken: z.ZodString;
+    /** Expiration timestamp for the resume token (milliseconds since epoch) */
+    expiresAt: z.ZodNumber;
+    /** Required scopes for authorization */
+    scopes: z.ZodArray<z.ZodString, "many">;
+    /** Optional display configuration for authorization UI */
+    display: z.ZodOptional<z.ZodObject<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    /** Optional additional context */
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    /** Error code */
+    error: z.ZodLiteral<"needs_authorization">;
+    /** Human-readable error message */
+    message: z.ZodString;
+    /** URL for the user to authorize (includes resume token) */
+    authorizationUrl: z.ZodString;
+    /** Short-lived resume token for continuing after authorization */
+    resumeToken: z.ZodString;
+    /** Expiration timestamp for the resume token (milliseconds since epoch) */
+    expiresAt: z.ZodNumber;
+    /** Required scopes for authorization */
+    scopes: z.ZodArray<z.ZodString, "many">;
+    /** Optional display configuration for authorization UI */
+    display: z.ZodOptional<z.ZodObject<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    /** Optional additional context */
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type NeedsAuthorizationError = z.infer<typeof NeedsAuthorizationErrorSchema>;
+/**
+ * Generic Error Schema
+ *
+ * Standard error format for all runtime errors
+ */
+export declare const RuntimeErrorSchema: z.ZodObject<{
+    /** Error code */
+    error: z.ZodString;
+    /** Human-readable error message */
+    message: z.ZodString;
+    /** Optional error details */
+    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    /** HTTP status code (if applicable) */
+    httpStatus: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    message: string;
+    error: string;
+    details?: Record<string, any> | undefined;
+    httpStatus?: number | undefined;
+}, {
+    message: string;
+    error: string;
+    details?: Record<string, any> | undefined;
+    httpStatus?: number | undefined;
+}>;
+export type RuntimeError = z.infer<typeof RuntimeErrorSchema>;
+/**
+ * Validation Helpers
+ */
+/**
+ * Validate a needs authorization error
+ *
+ * @param error - The error to validate
+ * @returns Validation result
+ */
+export declare function validateNeedsAuthorizationError(error: unknown): z.SafeParseReturnType<z.objectInputType<{
+    /** Error code */
+    error: z.ZodLiteral<"needs_authorization">;
+    /** Human-readable error message */
+    message: z.ZodString;
+    /** URL for the user to authorize (includes resume token) */
+    authorizationUrl: z.ZodString;
+    /** Short-lived resume token for continuing after authorization */
+    resumeToken: z.ZodString;
+    /** Expiration timestamp for the resume token (milliseconds since epoch) */
+    expiresAt: z.ZodNumber;
+    /** Required scopes for authorization */
+    scopes: z.ZodArray<z.ZodString, "many">;
+    /** Optional display configuration for authorization UI */
+    display: z.ZodOptional<z.ZodObject<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    /** Optional additional context */
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.ZodTypeAny, "passthrough">, z.objectOutputType<{
+    /** Error code */
+    error: z.ZodLiteral<"needs_authorization">;
+    /** Human-readable error message */
+    message: z.ZodString;
+    /** URL for the user to authorize (includes resume token) */
+    authorizationUrl: z.ZodString;
+    /** Short-lived resume token for continuing after authorization */
+    resumeToken: z.ZodString;
+    /** Expiration timestamp for the resume token (milliseconds since epoch) */
+    expiresAt: z.ZodNumber;
+    /** Required scopes for authorization */
+    scopes: z.ZodArray<z.ZodString, "many">;
+    /** Optional display configuration for authorization UI */
+    display: z.ZodOptional<z.ZodObject<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        /** Optional title for the authorization screen */
+        title: z.ZodOptional<z.ZodString>;
+        /** Hints for how to display authorization (link, QR code, or code) */
+        hint: z.ZodOptional<z.ZodArray<z.ZodEnum<["link", "qr", "code"]>, "many">>;
+        /** Optional short authorization code */
+        authorizationCode: z.ZodOptional<z.ZodString>;
+        /** Optional QR code URL */
+        qrUrl: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    /** Optional additional context */
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.ZodTypeAny, "passthrough">>;
+/**
+ * Check if error is a needs authorization error
+ *
+ * @param error - The error to check
+ * @returns true if it's a needs authorization error
+ */
+export declare function isNeedsAuthorizationError(error: any): error is NeedsAuthorizationError;
+/**
+ * Create a needs authorization error
+ *
+ * @param config - Configuration for the error
+ * @returns NeedsAuthorizationError instance
+ */
+export declare function createNeedsAuthorizationError(config: {
+    message: string;
+    authorizationUrl: string;
+    resumeToken: string;
+    expiresAt: number;
+    scopes: string[];
+    display?: AuthorizationDisplay;
+}): NeedsAuthorizationError;
+/**
+ * Constants
+ */
+/**
+ * Error codes
+ */
+export declare const ERROR_CODES: Readonly<{
+    readonly NEEDS_AUTHORIZATION: "needs_authorization";
+    readonly INVALID_TOKEN: "invalid_token";
+    readonly TOKEN_EXPIRED: "token_expired";
+    readonly INSUFFICIENT_SCOPE: "insufficient_scope";
+    readonly INVALID_SIGNATURE: "invalid_signature";
+    readonly DELEGATION_REVOKED: "delegation_revoked";
+    readonly CREDENTIAL_REVOKED: "credential_revoked";
+}>;
+export type ErrorCode = typeof ERROR_CODES[keyof typeof ERROR_CODES];

package/node_modules/@kya-os/contracts/dist/runtime/errors.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * Runtime Error Contracts
+ *
+ * Error types and schemas for runtime errors, especially authorization errors
+ *
+ * Related Spec: MCP-I §6
+ * Python Reference: Core-Documentation.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ERROR_CODES = exports.RuntimeErrorSchema = exports.NeedsAuthorizationErrorSchema = exports.AuthorizationDisplaySchema = exports.DisplayHintSchema = void 0;
+exports.validateNeedsAuthorizationError = validateNeedsAuthorizationError;
+exports.isNeedsAuthorizationError = isNeedsAuthorizationError;
+exports.createNeedsAuthorizationError = createNeedsAuthorizationError;
+const zod_1 = require("zod");
+/**
+ * Display hint types for authorization UI
+ */
+exports.DisplayHintSchema = zod_1.z.enum(['link', 'qr', 'code']);
+/**
+ * Display options for authorization flow
+ */
+exports.AuthorizationDisplaySchema = zod_1.z.object({
+    /** Optional title for the authorization screen */
+    title: zod_1.z.string().optional(),
+    /** Hints for how to display authorization (link, QR code, or code) */
+    hint: zod_1.z.array(exports.DisplayHintSchema).optional(),
+    /** Optional short authorization code */
+    authorizationCode: zod_1.z.string().optional(),
+    /** Optional QR code URL */
+    qrUrl: zod_1.z.string().url().optional(),
+}).passthrough();
+/**
+ * NeedsAuthorizationError Schema
+ *
+ * Error returned when a request requires authorization.
+ * Includes a resumeToken and authorizationUrl for the authorization flow.
+ */
+exports.NeedsAuthorizationErrorSchema = zod_1.z.object({
+    /** Error code */
+    error: zod_1.z.literal('needs_authorization'),
+    /** Human-readable error message */
+    message: zod_1.z.string().min(1),
+    /** URL for the user to authorize (includes resume token) */
+    authorizationUrl: zod_1.z.string().url(),
+    /** Short-lived resume token for continuing after authorization */
+    resumeToken: zod_1.z.string().min(1),
+    /** Expiration timestamp for the resume token (milliseconds since epoch) */
+    expiresAt: zod_1.z.number().int().positive(),
+    /** Required scopes for authorization */
+    scopes: zod_1.z.array(zod_1.z.string()),
+    /** Optional display configuration for authorization UI */
+    display: exports.AuthorizationDisplaySchema.optional(),
+    /** Optional additional context */
+    context: zod_1.z.record(zod_1.z.any()).optional(),
+}).passthrough();
+/**
+ * Generic Error Schema
+ *
+ * Standard error format for all runtime errors
+ */
+exports.RuntimeErrorSchema = zod_1.z.object({
+    /** Error code */
+    error: zod_1.z.string().min(1),
+    /** Human-readable error message */
+    message: zod_1.z.string().min(1),
+    /** Optional error details */
+    details: zod_1.z.record(zod_1.z.any()).optional(),
+    /** HTTP status code (if applicable) */
+    httpStatus: zod_1.z.number().int().min(400).max(599).optional(),
+});
+/**
+ * Validation Helpers
+ */
+/**
+ * Validate a needs authorization error
+ *
+ * @param error - The error to validate
+ * @returns Validation result
+ */
+function validateNeedsAuthorizationError(error) {
+    return exports.NeedsAuthorizationErrorSchema.safeParse(error);
+}
+/**
+ * Check if error is a needs authorization error
+ *
+ * @param error - The error to check
+ * @returns true if it's a needs authorization error
+ */
+function isNeedsAuthorizationError(error) {
+    return error && error.error === 'needs_authorization';
+}
+/**
+ * Create a needs authorization error
+ *
+ * @param config - Configuration for the error
+ * @returns NeedsAuthorizationError instance
+ */
+function createNeedsAuthorizationError(config) {
+    return {
+        error: 'needs_authorization',
+        ...config,
+    };
+}
+/**
+ * Constants
+ */
+/**
+ * Error codes
+ */
+exports.ERROR_CODES = Object.freeze({
+    NEEDS_AUTHORIZATION: 'needs_authorization',
+    INVALID_TOKEN: 'invalid_token',
+    TOKEN_EXPIRED: 'token_expired',
+    INSUFFICIENT_SCOPE: 'insufficient_scope',
+    INVALID_SIGNATURE: 'invalid_signature',
+    DELEGATION_REVOKED: 'delegation_revoked',
+    CREDENTIAL_REVOKED: 'credential_revoked',
+});

package/node_modules/@kya-os/contracts/dist/runtime/headers.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Runtime Header Contracts
+ *
+ * Header contracts for downstream services
+ *
+ * Related Spec: MCP-I §6
+ * Python Reference: Core-Documentation.md
+ */
+/**
+ * Downstream Headers Interface
+ *
+ * Headers passed to downstream services after verification
+ */
+export interface DownstreamHeaders {
+    /** DID of the verified agent */
+    'KYA-OS-Agent-DID': string;
+    /** Optional delegation chain (format: vc_id>del_id>...) */
+    'KYA-OS-Delegation-Chain'?: string;
+    /** Optional Layer 2 delegation proof (signed JWT) */
+    'KYA-OS-Delegation-Proof'?: string;
+    /** Optional JWS-compact DelegationCredential VC */
+    'KYA-OS-Delegation-Credential'?: string;
+    /** Proof ID for audit trail */
+    'KYA-Proof-Id': string;
+    /** Optional CRISP spend info (JSON string: {unit, delta, remaining}) */
+    'KYA-CRISP-Spend'?: string;
+    /** Optional session ID */
+    'KYA-OS-Session-Id'?: string;
+    /** Optional scopes */
+    'KYA-OS-Granted-Scopes'?: string;
+}
+/**
+ * Header names as constants for type safety
+ */
+export declare const DOWNSTREAM_HEADER_NAMES: Readonly<{
+    readonly AGENT_DID: "KYA-OS-Agent-DID";
+    readonly DELEGATION_CHAIN: "KYA-OS-Delegation-Chain";
+    readonly DELEGATION_PROOF: "KYA-OS-Delegation-Proof";
+    readonly DELEGATION_CREDENTIAL: "KYA-OS-Delegation-Credential";
+    readonly PROOF_ID: "KYA-Proof-Id";
+    readonly CRISP_SPEND: "KYA-CRISP-Spend";
+    readonly SESSION_ID: "KYA-OS-Session-Id";
+    readonly SCOPES: "KYA-OS-Granted-Scopes";
+}>;
+/**
+ * CRISP Spend Info
+ *
+ * Structure for KYA-CRISP-Spend header value
+ */
+export interface CrispSpendInfo {
+    /** Unit of spending */
+    unit: 'USD' | 'ops' | 'points';
+    /** Amount spent in this request */
+    delta?: number;
+    /** Remaining budget */
+    remaining?: number;
+}
+/**
+ * Helper to serialize CRISP spend info to header value
+ *
+ * @param info - CRISP spend info
+ * @returns JSON string for header
+ */
+export declare function serializeCrispSpend(info: CrispSpendInfo): string;
+/**
+ * Helper to parse CRISP spend info from header value
+ *
+ * @param headerValue - JSON string from header
+ * @returns Parsed CRISP spend info or null if invalid
+ */
+export declare function parseCrispSpend(headerValue: string): CrispSpendInfo | null;
+/**
+ * Helper to create downstream headers
+ *
+ * @param config - Configuration for headers
+ * @returns DownstreamHeaders object
+ */
+export declare function createDownstreamHeaders(config: {
+    agentDid: string;
+    proofId: string;
+    delegationChain?: string;
+    delegationProof?: string;
+    delegationCredential?: string;
+    crispSpend?: CrispSpendInfo;
+    sessionId?: string;
+    scopes?: string[];
+}): DownstreamHeaders;

package/node_modules/@kya-os/contracts/dist/runtime/headers.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Runtime Header Contracts
+ *
+ * Header contracts for downstream services
+ *
+ * Related Spec: MCP-I §6
+ * Python Reference: Core-Documentation.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DOWNSTREAM_HEADER_NAMES = void 0;
+exports.serializeCrispSpend = serializeCrispSpend;
+exports.parseCrispSpend = parseCrispSpend;
+exports.createDownstreamHeaders = createDownstreamHeaders;
+/**
+ * Header names as constants for type safety
+ */
+exports.DOWNSTREAM_HEADER_NAMES = Object.freeze({
+    AGENT_DID: 'KYA-OS-Agent-DID',
+    DELEGATION_CHAIN: 'KYA-OS-Delegation-Chain',
+    DELEGATION_PROOF: 'KYA-OS-Delegation-Proof',
+    DELEGATION_CREDENTIAL: 'KYA-OS-Delegation-Credential',
+    PROOF_ID: 'KYA-Proof-Id',
+    CRISP_SPEND: 'KYA-CRISP-Spend',
+    SESSION_ID: 'KYA-OS-Session-Id',
+    SCOPES: 'KYA-OS-Granted-Scopes',
+});
+/**
+ * Helper to serialize CRISP spend info to header value
+ *
+ * @param info - CRISP spend info
+ * @returns JSON string for header
+ */
+function serializeCrispSpend(info) {
+    return JSON.stringify(info);
+}
+/**
+ * Helper to parse CRISP spend info from header value
+ *
+ * @param headerValue - JSON string from header
+ * @returns Parsed CRISP spend info or null if invalid
+ */
+function parseCrispSpend(headerValue) {
+    try {
+        const parsed = JSON.parse(headerValue);
+        if (parsed && typeof parsed.unit === 'string') {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Helper to create downstream headers
+ *
+ * @param config - Configuration for headers
+ * @returns DownstreamHeaders object
+ */
+function createDownstreamHeaders(config) {
+    const headers = {
+        'KYA-OS-Agent-DID': config.agentDid,
+        'KYA-Proof-Id': config.proofId,
+    };
+    if (config.delegationChain) {
+        headers['KYA-OS-Delegation-Chain'] = config.delegationChain;
+    }
+    if (config.delegationProof) {
+        headers['KYA-OS-Delegation-Proof'] = config.delegationProof;
+    }
+    if (config.delegationCredential) {
+        headers['KYA-OS-Delegation-Credential'] = config.delegationCredential;
+    }
+    if (config.crispSpend) {
+        headers['KYA-CRISP-Spend'] = serializeCrispSpend(config.crispSpend);
+    }
+    if (config.sessionId) {
+        headers['KYA-OS-Session-Id'] = config.sessionId;
+    }
+    if (config.scopes && config.scopes.length > 0) {
+        headers['KYA-OS-Granted-Scopes'] = config.scopes.join(',');
+    }
+    return headers;
+}

package/node_modules/@kya-os/contracts/dist/runtime/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Runtime Module Exports
+ */
+export * from './errors.js';
+export * from './headers.js';

package/node_modules/@kya-os/contracts/dist/runtime/index.js

@@ -0,0 +1,21 @@
+"use strict";
+/**
+ * Runtime Module Exports
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./errors.js"), exports);
+__exportStar(require("./headers.js"), exports);

package/node_modules/@kya-os/contracts/dist/skills/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Agent Skill Manifest Exports (review-loop P19)
+ *
+ * Types and Zod schemas for the skill format `@kya-os/cli`'s
+ * `kya-os skill list|install|remove|show` manages and `@kya-os/compute`'s
+ * personal-agent executor resolves dispatched tasks against.
+ */
+export * from './schemas.js';