@kya-os/cli 2.0.0 → 2.0.3

package/node_modules/@kya-os/contracts/dist/agent-deployment.js

@@ -0,0 +1,270 @@
+"use strict";
+/**
+ * Managed Agent Deployment Contracts
+ *
+ * Schemas for the managed hosting tier where agents run on Fly.io
+ * instead of user-managed Cloudflare Workers.
+ *
+ * @package @kya-os/contracts/agent-deployment
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nameToFlySlug = exports.didToFlyApp = exports.didToSlug = exports.ManagedSSEEventSchema = exports.ManagedSSEKeepaliveEventSchema = exports.ManagedSSEErrorEventSchema = exports.ManagedSSECompleteEventSchema = exports.ManagedSSEProgressEventSchema = exports.ManagedDeployResponseSchema = exports.ManagedDeploySuccessResponseSchema = exports.ManagedDeployErrorResponseSchema = exports.ManagedDeployErrorCodeSchema = exports.ManagedDeployProgressSchema = exports.ManagedDeployStepSchema = exports.ManagedDeployStepStatusSchema = exports.MANAGED_DEPLOY_STEP_NAMES = exports.ManagedDeployStepIdSchema = exports.ManagedDeployResultSchema = exports.ManagedDeployRequestSchema = exports.HostingModeSchema = exports.AgentStatusSchema = exports.FlyRegionSchema = exports.DidStringSchema = void 0;
+const zod_1 = require("zod");
+// ============================================================================
+// Shared Schemas
+// ============================================================================
+/**
+ * Validated DID string schema.
+ * Reusable across all contract files that reference agent DIDs.
+ *
+ * Format: `did:<method>:<method-specific-id>`
+ * - method: 1+ lowercase alphanumeric chars
+ * - method-specific-id: 1+ non-whitespace chars
+ *
+ * Examples: `did:key:z6Mk...`, `did:web:example.com`
+ */
+exports.DidStringSchema = zod_1.z
+    .string()
+    .min(8, "DID must be at least 8 characters")
+    .regex(/^did:[a-z0-9]+:\S+$/, "DID must match format did:<method>:<method-specific-id>");
+/**
+ * Fly.io deployment regions.
+ * Enumerated to prevent arbitrary strings from being accepted.
+ * @see https://fly.io/docs/reference/regions/
+ */
+exports.FlyRegionSchema = zod_1.z.enum([
+    "ams", // Amsterdam, Netherlands
+    "arn", // Stockholm, Sweden
+    "atl", // Atlanta, Georgia (US)
+    "bog", // Bogotá, Colombia
+    "bos", // Boston, Massachusetts (US)
+    "cdg", // Paris, France
+    "den", // Denver, Colorado (US)
+    "dfw", // Dallas, Texas (US)
+    "ewr", // Secaucus, NJ (US)
+    "eze", // Ezeiza, Argentina
+    "fra", // Frankfurt, Germany
+    "gdl", // Guadalajara, Mexico
+    "gig", // Rio de Janeiro, Brazil
+    "gru", // São Paulo, Brazil
+    "hkg", // Hong Kong
+    "iad", // Ashburn, Virginia (US)
+    "jnb", // Johannesburg, South Africa
+    "lax", // Los Angeles, California (US)
+    "lhr", // London, United Kingdom
+    "mad", // Madrid, Spain
+    "mia", // Miami, Florida (US)
+    "nrt", // Tokyo, Japan
+    "ord", // Chicago, Illinois (US)
+    "otp", // Bucharest, Romania
+    "phx", // Phoenix, Arizona (US)
+    "qro", // Querétaro, Mexico
+    "scl", // Santiago, Chile
+    "sea", // Seattle, Washington (US)
+    "sin", // Singapore
+    "sjc", // San Jose, California (US)
+    "syd", // Sydney, Australia
+    "waw", // Warsaw, Poland
+    "yul", // Montreal, Canada
+    "yyz", // Toronto, Canada
+]);
+// ============================================================================
+// Status & Mode Schemas
+// ============================================================================
+/**
+ * Agent lifecycle status — tracks the full state machine
+ * from initial provisioning through running to permanent revocation.
+ */
+exports.AgentStatusSchema = zod_1.z.enum([
+    "provisioning", // DID created, Fly resources not yet allocated
+    "starting", // Machine started, compute process booting
+    "running", // Healthy, accepting requests, heartbeats flowing
+    "stopping", // Graceful shutdown in progress
+    "stopped", // Machine stopped (scale-to-zero or manual stop)
+    "error", // Unhealthy — needs attention
+    "revoked", // Permanently killed — cannot restart
+]);
+/**
+ * Hosting mode discriminator — differentiates between
+ * self-managed BYOK deploys and platform-managed deploys.
+ */
+exports.HostingModeSchema = zod_1.z.enum(["byok", "managed"]);
+// ============================================================================
+// Deploy Request/Response Schemas
+// ============================================================================
+/**
+ * Request body for POST /api/v1/molti/deploy/managed/fly
+ *
+ * Validated server-side before any resources are created.
+ * The name field becomes the agent's subdomain: {name}.agents.kya-os.ai
+ */
+exports.ManagedDeployRequestSchema = zod_1.z.object({
+    /** Agent name — becomes DNS subdomain. Must be DNS-safe. */
+    name: zod_1.z
+        .string()
+        .min(1, "Agent name is required")
+        .max(63, "Agent name must be 63 characters or less")
+        .regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/, "Agent name must be lowercase alphanumeric with hyphens, cannot start or end with hyphen"),
+    /** AI provider for inference */
+    aiProvider: zod_1.z.enum(["anthropic", "openai"]),
+    /** User's AI API key — encrypted before storage */
+    aiApiKey: zod_1.z.string().min(1, "AI API key is required").max(500, "AI API key too long"),
+    /** Fly.io deployment region */
+    region: exports.FlyRegionSchema.default("yyz"),
+});
+/**
+ * Successful managed deployment result.
+ * Returned at the end of the SSE stream as the "complete" event data.
+ */
+exports.ManagedDeployResultSchema = zod_1.z.object({
+    /** Agent DID — the primary identifier */
+    agentDid: exports.DidStringSchema,
+    /** Live agent URL (e.g., https://my-agent.agents.kya-os.ai) */
+    agentUrl: zod_1.z.string().url(),
+    /** Current agent status */
+    status: exports.AgentStatusSchema,
+    /** AgentShield project ID */
+    projectId: zod_1.z.string().uuid(),
+    /** AgentShield project friendly ID */
+    friendlyId: zod_1.z.string().min(1),
+});
+// ============================================================================
+// Deploy Progress Schemas (SSE)
+// ============================================================================
+/**
+ * Steps in the managed deploy pipeline.
+ * Different from BYOK steps — no GitHub, no Cloudflare.
+ */
+exports.ManagedDeployStepIdSchema = zod_1.z.enum([
+    "identity_create", // Generate DID + keypair
+    "project_create", // Create AS project + API key
+    "kta_register", // Register agent with KTA
+    "fly_provision", // Create Fly app + volume + machine
+    "compute_boot", // Wait for first heartbeat from compute
+    "health_check", // Verify gateway responds at agent URL
+]);
+/**
+ * Human-readable names for each managed deploy step.
+ * Used by the frontend progress UI.
+ */
+exports.MANAGED_DEPLOY_STEP_NAMES = {
+    identity_create: "Creating agent identity",
+    project_create: "Setting up project",
+    kta_register: "Registering with KTA",
+    fly_provision: "Provisioning infrastructure",
+    compute_boot: "Booting compute process",
+    health_check: "Verifying agent health",
+};
+/**
+ * Deploy step status — reuses same status enum as BYOK.
+ */
+exports.ManagedDeployStepStatusSchema = zod_1.z.enum([
+    "pending",
+    "in_progress",
+    "completed",
+    "failed",
+    "skipped",
+]);
+/**
+ * Individual managed deploy step with timing.
+ */
+exports.ManagedDeployStepSchema = zod_1.z.object({
+    id: exports.ManagedDeployStepIdSchema,
+    name: zod_1.z.string().min(1),
+    status: exports.ManagedDeployStepStatusSchema,
+    message: zod_1.z.string().optional(),
+    startedAt: zod_1.z.string().datetime().optional(),
+    completedAt: zod_1.z.string().datetime().optional(),
+});
+/**
+ * Overall managed deployment progress — sent via SSE "progress" events.
+ */
+exports.ManagedDeployProgressSchema = zod_1.z.object({
+    deploymentId: zod_1.z.string().uuid(),
+    steps: zod_1.z.array(exports.ManagedDeployStepSchema),
+    currentStep: zod_1.z.number().int().min(0),
+    totalSteps: zod_1.z.number().int().positive(),
+    overallStatus: zod_1.z.enum(["pending", "in_progress", "completed", "failed"]),
+});
+// ============================================================================
+// Managed Deploy Error Schemas
+// ============================================================================
+/**
+ * Error codes specific to managed deployment failures.
+ */
+exports.ManagedDeployErrorCodeSchema = zod_1.z.enum([
+    "IDENTITY_ERROR",
+    "PROJECT_CREATION_ERROR",
+    "KTA_REGISTRATION_ERROR",
+    "FLY_PROVISION_FAILED",
+    "COMPUTE_BOOT_TIMEOUT",
+    "HEALTH_CHECK_FAILED",
+    "RATE_LIMIT_EXCEEDED",
+    "NAME_TAKEN",
+    "INTERNAL_ERROR",
+]);
+/**
+ * Managed deploy error response.
+ */
+exports.ManagedDeployErrorResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(false),
+    error: zod_1.z.object({
+        code: exports.ManagedDeployErrorCodeSchema,
+        message: zod_1.z.string(),
+        details: zod_1.z.record(zod_1.z.unknown()).optional(),
+    }),
+});
+/**
+ * Managed deploy success response.
+ */
+exports.ManagedDeploySuccessResponseSchema = zod_1.z.object({
+    success: zod_1.z.literal(true),
+    data: exports.ManagedDeployResultSchema,
+});
+/**
+ * Union response type for managed deploy endpoint.
+ */
+exports.ManagedDeployResponseSchema = zod_1.z.discriminatedUnion("success", [
+    exports.ManagedDeploySuccessResponseSchema,
+    exports.ManagedDeployErrorResponseSchema,
+]);
+// ============================================================================
+// Managed SSE Event Schemas
+// ============================================================================
+exports.ManagedSSEProgressEventSchema = zod_1.z.object({
+    type: zod_1.z.literal("progress"),
+    data: exports.ManagedDeployProgressSchema,
+});
+exports.ManagedSSECompleteEventSchema = zod_1.z.object({
+    type: zod_1.z.literal("complete"),
+    data: exports.ManagedDeployResultSchema,
+});
+exports.ManagedSSEErrorEventSchema = zod_1.z.object({
+    type: zod_1.z.literal("error"),
+    data: zod_1.z.object({
+        code: exports.ManagedDeployErrorCodeSchema,
+        message: zod_1.z.string(),
+        step: exports.ManagedDeployStepIdSchema.optional(),
+    }),
+});
+exports.ManagedSSEKeepaliveEventSchema = zod_1.z.object({
+    type: zod_1.z.literal("keepalive"),
+    data: zod_1.z.object({
+        timestamp: zod_1.z.string().datetime(),
+    }),
+});
+exports.ManagedSSEEventSchema = zod_1.z.discriminatedUnion("type", [
+    exports.ManagedSSEProgressEventSchema,
+    exports.ManagedSSECompleteEventSchema,
+    exports.ManagedSSEErrorEventSchema,
+    exports.ManagedSSEKeepaliveEventSchema,
+]);
+// ============================================================================
+// Utility Functions (re-exported from agent-deployment-utils.ts)
+// ============================================================================
+// Crypto-dependent functions are in a separate file to keep this module
+// free of Node.js dependencies. Pure Zod schemas remain portable.
+var agent_deployment_utils_js_1 = require("./agent-deployment-utils.js");
+Object.defineProperty(exports, "didToSlug", { enumerable: true, get: function () { return agent_deployment_utils_js_1.didToSlug; } });
+Object.defineProperty(exports, "didToFlyApp", { enumerable: true, get: function () { return agent_deployment_utils_js_1.didToFlyApp; } });
+Object.defineProperty(exports, "nameToFlySlug", { enumerable: true, get: function () { return agent_deployment_utils_js_1.nameToFlySlug; } });

package/node_modules/@kya-os/contracts/dist/agentshield-api/admin-schemas.d.ts

@@ -0,0 +1,49 @@
+/**
+ * AgentShield Admin API Validation Schemas
+ *
+ * Zod schemas for administrative operations in AgentShield.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+import { z } from 'zod';
+/**
+ * Request schema for clearing agent cache
+ */
+export declare const clearCacheRequestSchema: z.ZodObject<{
+    agent_did: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    agent_did: string;
+}, {
+    agent_did: string;
+}>;
+/**
+ * Response schema for clear cache operation
+ */
+export declare const clearCacheResponseSchema: z.ZodObject<{
+    message: z.ZodString;
+    agent_did: z.ZodString;
+    project_id: z.ZodNullable<z.ZodString>;
+    cache_key: z.ZodString;
+    old_cache_key: z.ZodNullable<z.ZodString>;
+    had_value: z.ZodBoolean;
+    had_old_value: z.ZodBoolean;
+    cleared: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    message: string;
+    agent_did: string;
+    project_id: string | null;
+    cache_key: string;
+    old_cache_key: string | null;
+    had_value: boolean;
+    had_old_value: boolean;
+    cleared: boolean;
+}, {
+    message: string;
+    agent_did: string;
+    project_id: string | null;
+    cache_key: string;
+    old_cache_key: string | null;
+    had_value: boolean;
+    had_old_value: boolean;
+    cleared: boolean;
+}>;

package/node_modules/@kya-os/contracts/dist/agentshield-api/admin-schemas.js

@@ -0,0 +1,30 @@
+"use strict";
+/**
+ * AgentShield Admin API Validation Schemas
+ *
+ * Zod schemas for administrative operations in AgentShield.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearCacheResponseSchema = exports.clearCacheRequestSchema = void 0;
+const zod_1 = require("zod");
+/**
+ * Request schema for clearing agent cache
+ */
+exports.clearCacheRequestSchema = zod_1.z.object({
+    agent_did: zod_1.z.string().min(1).describe('The DID of the agent whose cache should be cleared'),
+});
+/**
+ * Response schema for clear cache operation
+ */
+exports.clearCacheResponseSchema = zod_1.z.object({
+    message: zod_1.z.string().describe('Human-readable message about the operation result'),
+    agent_did: zod_1.z.string().describe('The agent DID that was cleared'),
+    project_id: zod_1.z.string().nullable().describe('The project ID if available'),
+    cache_key: zod_1.z.string().describe('The cache key that was cleared'),
+    old_cache_key: zod_1.z.string().nullable().describe('Old cache key that was also cleared (for migration)'),
+    had_value: zod_1.z.boolean().describe('Whether the cache entry existed before clearing'),
+    had_old_value: zod_1.z.boolean().describe('Whether the old cache entry existed before clearing'),
+    cleared: zod_1.z.boolean().describe('Whether the cache was successfully cleared'),
+});

package/node_modules/@kya-os/contracts/dist/agentshield-api/admin-types.d.ts

@@ -0,0 +1,37 @@
+/**
+ * AgentShield Admin API Type Definitions
+ *
+ * TypeScript interfaces for administrative operations in AgentShield.
+ * These types ensure parity between xmcp-i admin endpoints and the AgentShield service.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+/**
+ * Request to clear agent cache
+ * POST /admin/clear-cache
+ */
+export interface ClearCacheRequest {
+    /** The DID of the agent whose cache should be cleared */
+    agent_did: string;
+}
+/**
+ * Response from clear cache operation
+ */
+export interface ClearCacheResponse {
+    /** Human-readable message about the operation result */
+    message: string;
+    /** The agent DID that was cleared */
+    agent_did: string;
+    /** The project ID if available */
+    project_id: string | null;
+    /** The cache key that was cleared */
+    cache_key: string;
+    /** Old cache key that was also cleared (for migration) */
+    old_cache_key: string | null;
+    /** Whether the cache entry existed before clearing */
+    had_value: boolean;
+    /** Whether the old cache entry existed before clearing */
+    had_old_value: boolean;
+    /** Whether the cache was successfully cleared */
+    cleared: boolean;
+}

package/node_modules/@kya-os/contracts/dist/agentshield-api/admin-types.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * AgentShield Admin API Type Definitions
+ *
+ * TypeScript interfaces for administrative operations in AgentShield.
+ * These types ensure parity between xmcp-i admin endpoints and the AgentShield service.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/node_modules/@kya-os/contracts/dist/agentshield-api/endpoints.d.ts

@@ -0,0 +1,53 @@
+/**
+ * AgentShield/Bouncer API Endpoint Constants
+ *
+ * Centralized endpoint definitions to prevent hardcoded URLs
+ * and ensure consistency across all API clients.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+/**
+ * Base path for all AgentShield/Bouncer API endpoints
+ */
+export declare const AGENTSHIELD_API_BASE: "/api/v1/bouncer";
+/**
+ * AgentShield API endpoint paths
+ *
+ * These are relative paths that should be appended to the base API URL.
+ * Example: `${apiUrl}${AGENTSHIELD_ENDPOINTS.PROOFS}`
+ */
+export declare const AGENTSHIELD_ENDPOINTS: {
+    /** Submit proofs in batch */
+    readonly PROOFS: "/api/v1/bouncer/proofs";
+    /** Register a new session with client information */
+    readonly SESSIONS: "/api/v1/bouncer/sessions";
+    /** Verify delegation by agent DID and scopes */
+    readonly DELEGATIONS_VERIFY: "/api/v1/bouncer/delegations/verify";
+    /** Get delegation by ID */
+    readonly DELEGATIONS_GET: (id: string) => `/api/v1/bouncer/delegations/${string}`;
+    /** Create new delegation */
+    readonly DELEGATIONS_CREATE: "/api/v1/bouncer/delegations";
+    /** Revoke delegation */
+    readonly DELEGATIONS_REVOKE: (id: string) => `/api/v1/bouncer/delegations/${string}/revoke`;
+    /** Get server configuration */
+    readonly CONFIG: (projectId: string) => `/api/v1/bouncer/projects/${string}/config`;
+};
+/**
+ * HTTP methods for each endpoint
+ */
+export declare const AGENTSHIELD_METHODS: {
+    readonly PROOFS: "POST";
+    readonly SESSIONS: "POST";
+    readonly DELEGATIONS_VERIFY: "POST";
+    readonly DELEGATIONS_GET: "GET";
+    readonly DELEGATIONS_CREATE: "POST";
+    readonly DELEGATIONS_REVOKE: "POST";
+    readonly CONFIG: "GET";
+};
+/**
+ * Required headers for AgentShield API requests
+ */
+export interface AgentShieldAPIHeaders {
+    'Content-Type': 'application/json';
+    'Authorization': `Bearer ${string}`;
+}

package/node_modules/@kya-os/contracts/dist/agentshield-api/endpoints.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * AgentShield/Bouncer API Endpoint Constants
+ *
+ * Centralized endpoint definitions to prevent hardcoded URLs
+ * and ensure consistency across all API clients.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENTSHIELD_METHODS = exports.AGENTSHIELD_ENDPOINTS = exports.AGENTSHIELD_API_BASE = void 0;
+/**
+ * Base path for all AgentShield/Bouncer API endpoints
+ */
+exports.AGENTSHIELD_API_BASE = '/api/v1/bouncer';
+/**
+ * AgentShield API endpoint paths
+ *
+ * These are relative paths that should be appended to the base API URL.
+ * Example: `${apiUrl}${AGENTSHIELD_ENDPOINTS.PROOFS}`
+ */
+exports.AGENTSHIELD_ENDPOINTS = {
+    /** Submit proofs in batch */
+    PROOFS: `${exports.AGENTSHIELD_API_BASE}/proofs`,
+    /** Register a new session with client information */
+    SESSIONS: `${exports.AGENTSHIELD_API_BASE}/sessions`,
+    /** Verify delegation by agent DID and scopes */
+    DELEGATIONS_VERIFY: `${exports.AGENTSHIELD_API_BASE}/delegations/verify`,
+    /** Get delegation by ID */
+    DELEGATIONS_GET: (id) => `${exports.AGENTSHIELD_API_BASE}/delegations/${id}`,
+    /** Create new delegation */
+    DELEGATIONS_CREATE: `${exports.AGENTSHIELD_API_BASE}/delegations`,
+    /** Revoke delegation */
+    DELEGATIONS_REVOKE: (id) => `${exports.AGENTSHIELD_API_BASE}/delegations/${id}/revoke`,
+    /** Get server configuration */
+    CONFIG: (projectId) => `${exports.AGENTSHIELD_API_BASE}/projects/${projectId}/config`,
+};
+/**
+ * HTTP methods for each endpoint
+ */
+exports.AGENTSHIELD_METHODS = {
+    PROOFS: 'POST',
+    SESSIONS: 'POST',
+    DELEGATIONS_VERIFY: 'POST',
+    DELEGATIONS_GET: 'GET',
+    DELEGATIONS_CREATE: 'POST',
+    DELEGATIONS_REVOKE: 'POST',
+    CONFIG: 'GET',
+};

package/node_modules/@kya-os/contracts/dist/agentshield-api/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * AgentShield/Bouncer API Contracts
+ *
+ * Centralized type definitions, validation schemas, and endpoint constants
+ * for the AgentShield dashboard API integration.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+export type { AgentShieldAPIResponse, AgentShieldAPIErrorResponse, ProofSubmissionRequest, ProofSubmissionResponse, ToolCallContext, ConsentEventContext, BouncerOutcome, VerifyDelegationRequest, VerifyDelegationResponse, VerifyDelegationAPIResponse, DelegationCredential, AgentShieldToolProtection, ToolProtectionConfigResponse, ToolProtectionConfigAPIResponse, CreateDelegationRequest, CreateDelegationResponse, CreateDelegationAPIResponse, RevokeDelegationRequest, RevokeDelegationResponse, RevokeDelegationAPIResponse, SessionClientInfo, SessionClientIdentity, RegisterSessionRequest, RegisterSessionResponse, RegisterSessionAPIResponse, } from "./types.js";
+export { AgentShieldAPIError } from "./types.js";
+export type { AgentShieldAPIHeaders } from "./endpoints.js";
+export type { ClearCacheRequest, ClearCacheResponse } from "./admin-types.js";
+export { agentShieldAPIErrorSchema, agentShieldAPIResponseSchema, proofSubmissionRequestSchema, proofSubmissionResponseSchema, delegationCredentialSchema, verifyDelegationRequestSchema, verifyDelegationResponseSchema, verifyDelegationAPIResponseSchema, agentShieldToolProtectionSchema, toolProtectionConfigResponseSchema, toolProtectionConfigAPIResponseSchema, createDelegationRequestSchema, createDelegationResponseSchema, createDelegationAPIResponseSchema, revokeDelegationRequestSchema, revokeDelegationResponseSchema, revokeDelegationAPIResponseSchema, sessionClientInfoSchema, sessionClientIdentitySchema, registerSessionRequestSchema, registerSessionResponseSchema, registerSessionAPIResponseSchema, } from "./schemas.js";
+export { clearCacheRequestSchema, clearCacheResponseSchema, } from "./admin-schemas.js";
+export { AGENTSHIELD_API_BASE, AGENTSHIELD_ENDPOINTS, AGENTSHIELD_METHODS, } from "./endpoints.js";

package/node_modules/@kya-os/contracts/dist/agentshield-api/index.js

@@ -0,0 +1,46 @@
+"use strict";
+/**
+ * AgentShield/Bouncer API Contracts
+ *
+ * Centralized type definitions, validation schemas, and endpoint constants
+ * for the AgentShield dashboard API integration.
+ *
+ * @package @kya-os/contracts/agentshield-api
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENTSHIELD_METHODS = exports.AGENTSHIELD_ENDPOINTS = exports.AGENTSHIELD_API_BASE = exports.clearCacheResponseSchema = exports.clearCacheRequestSchema = exports.registerSessionAPIResponseSchema = exports.registerSessionResponseSchema = exports.registerSessionRequestSchema = exports.sessionClientIdentitySchema = exports.sessionClientInfoSchema = exports.revokeDelegationAPIResponseSchema = exports.revokeDelegationResponseSchema = exports.revokeDelegationRequestSchema = exports.createDelegationAPIResponseSchema = exports.createDelegationResponseSchema = exports.createDelegationRequestSchema = exports.toolProtectionConfigAPIResponseSchema = exports.toolProtectionConfigResponseSchema = exports.agentShieldToolProtectionSchema = exports.verifyDelegationAPIResponseSchema = exports.verifyDelegationResponseSchema = exports.verifyDelegationRequestSchema = exports.delegationCredentialSchema = exports.proofSubmissionResponseSchema = exports.proofSubmissionRequestSchema = exports.agentShieldAPIResponseSchema = exports.agentShieldAPIErrorSchema = exports.AgentShieldAPIError = void 0;
+var types_js_1 = require("./types.js");
+Object.defineProperty(exports, "AgentShieldAPIError", { enumerable: true, get: function () { return types_js_1.AgentShieldAPIError; } });
+// Schema exports
+var schemas_js_1 = require("./schemas.js");
+Object.defineProperty(exports, "agentShieldAPIErrorSchema", { enumerable: true, get: function () { return schemas_js_1.agentShieldAPIErrorSchema; } });
+Object.defineProperty(exports, "agentShieldAPIResponseSchema", { enumerable: true, get: function () { return schemas_js_1.agentShieldAPIResponseSchema; } });
+Object.defineProperty(exports, "proofSubmissionRequestSchema", { enumerable: true, get: function () { return schemas_js_1.proofSubmissionRequestSchema; } });
+Object.defineProperty(exports, "proofSubmissionResponseSchema", { enumerable: true, get: function () { return schemas_js_1.proofSubmissionResponseSchema; } });
+Object.defineProperty(exports, "delegationCredentialSchema", { enumerable: true, get: function () { return schemas_js_1.delegationCredentialSchema; } });
+Object.defineProperty(exports, "verifyDelegationRequestSchema", { enumerable: true, get: function () { return schemas_js_1.verifyDelegationRequestSchema; } });
+Object.defineProperty(exports, "verifyDelegationResponseSchema", { enumerable: true, get: function () { return schemas_js_1.verifyDelegationResponseSchema; } });
+Object.defineProperty(exports, "verifyDelegationAPIResponseSchema", { enumerable: true, get: function () { return schemas_js_1.verifyDelegationAPIResponseSchema; } });
+Object.defineProperty(exports, "agentShieldToolProtectionSchema", { enumerable: true, get: function () { return schemas_js_1.agentShieldToolProtectionSchema; } });
+Object.defineProperty(exports, "toolProtectionConfigResponseSchema", { enumerable: true, get: function () { return schemas_js_1.toolProtectionConfigResponseSchema; } });
+Object.defineProperty(exports, "toolProtectionConfigAPIResponseSchema", { enumerable: true, get: function () { return schemas_js_1.toolProtectionConfigAPIResponseSchema; } });
+Object.defineProperty(exports, "createDelegationRequestSchema", { enumerable: true, get: function () { return schemas_js_1.createDelegationRequestSchema; } });
+Object.defineProperty(exports, "createDelegationResponseSchema", { enumerable: true, get: function () { return schemas_js_1.createDelegationResponseSchema; } });
+Object.defineProperty(exports, "createDelegationAPIResponseSchema", { enumerable: true, get: function () { return schemas_js_1.createDelegationAPIResponseSchema; } });
+Object.defineProperty(exports, "revokeDelegationRequestSchema", { enumerable: true, get: function () { return schemas_js_1.revokeDelegationRequestSchema; } });
+Object.defineProperty(exports, "revokeDelegationResponseSchema", { enumerable: true, get: function () { return schemas_js_1.revokeDelegationResponseSchema; } });
+Object.defineProperty(exports, "revokeDelegationAPIResponseSchema", { enumerable: true, get: function () { return schemas_js_1.revokeDelegationAPIResponseSchema; } });
+// Session Registration
+Object.defineProperty(exports, "sessionClientInfoSchema", { enumerable: true, get: function () { return schemas_js_1.sessionClientInfoSchema; } });
+Object.defineProperty(exports, "sessionClientIdentitySchema", { enumerable: true, get: function () { return schemas_js_1.sessionClientIdentitySchema; } });
+Object.defineProperty(exports, "registerSessionRequestSchema", { enumerable: true, get: function () { return schemas_js_1.registerSessionRequestSchema; } });
+Object.defineProperty(exports, "registerSessionResponseSchema", { enumerable: true, get: function () { return schemas_js_1.registerSessionResponseSchema; } });
+Object.defineProperty(exports, "registerSessionAPIResponseSchema", { enumerable: true, get: function () { return schemas_js_1.registerSessionAPIResponseSchema; } });
+var admin_schemas_js_1 = require("./admin-schemas.js");
+Object.defineProperty(exports, "clearCacheRequestSchema", { enumerable: true, get: function () { return admin_schemas_js_1.clearCacheRequestSchema; } });
+Object.defineProperty(exports, "clearCacheResponseSchema", { enumerable: true, get: function () { return admin_schemas_js_1.clearCacheResponseSchema; } });
+// Endpoint exports
+var endpoints_js_1 = require("./endpoints.js");
+Object.defineProperty(exports, "AGENTSHIELD_API_BASE", { enumerable: true, get: function () { return endpoints_js_1.AGENTSHIELD_API_BASE; } });
+Object.defineProperty(exports, "AGENTSHIELD_ENDPOINTS", { enumerable: true, get: function () { return endpoints_js_1.AGENTSHIELD_ENDPOINTS; } });
+Object.defineProperty(exports, "AGENTSHIELD_METHODS", { enumerable: true, get: function () { return endpoints_js_1.AGENTSHIELD_METHODS; } });