@kya-os/cli 2.0.3 → 2.1.0

package/node_modules/@kya-os/contracts/dist/config/tool-protection.d.ts

@@ -14,7 +14,31 @@ export type ToolProtectionResponse = BaseToolProtectionResponse;
 /**
  * Tool protection source types
  */
-export type ToolProtectionSourceType = "inline" | "local" | "agentshield" | "kta" | "multi";
+export type ToolProtectionSourceType = "inline" | "local" | "checkpoint" | "agentshield" | "kta" | "multi";
+/**
+ * Where the Checkpoint tool protection source reads from.
+ */
+export interface ToolProtectionCheckpointConfig {
+    /**
+     * Checkpoint API base URL
+     * @example 'https://kya.vouched.id'
+     */
+    apiUrl: string;
+    /**
+     * API key for authentication
+     */
+    apiKey?: string;
+    /**
+     * Project ID (optional, for backward compatibility)
+     * Modern approach uses agent DID
+     */
+    projectId?: string;
+    /**
+     * Cache TTL in milliseconds
+     * @default 300000 (5 minutes)
+     */
+    cacheTtl?: number;
+}
 /**
  * Tool protection source configuration
  * Defines where tool protection settings come from
@@ -36,30 +60,14 @@ export interface ToolProtectionSourceConfig {
      */
     localFile?: string;
     /**
-     * AgentShield configuration
-     * Used when source is 'agentshield'
+     * Checkpoint configuration
+     * Used when source is 'checkpoint' (or its former name, 'agentshield')
      */
-    agentShield?: {
-        /**
-         * AgentShield API base URL
-         * @example 'https://kya.vouched.id'
-         */
-        apiUrl: string;
-        /**
-         * API key for authentication
-         */
-        apiKey?: string;
-        /**
-         * Project ID (optional, for backward compatibility)
-         * Modern approach uses agent DID
-         */
-        projectId?: string;
-        /**
-         * Cache TTL in milliseconds
-         * @default 300000 (5 minutes)
-         */
-        cacheTtl?: number;
-    };
+    checkpoint?: ToolProtectionCheckpointConfig;
+    /**
+     * @deprecated Use `checkpoint`; read only when `checkpoint` is absent.
+     */
+    agentShield?: ToolProtectionCheckpointConfig;
     /**
      * KTA configuration
      * Used when source is 'kta'
@@ -102,7 +110,7 @@ export interface ToolProtectionSourceConfig {
      * Use this for development defaults or project-specific base settings.
      *
      * Precedence order (highest to lowest):
-     * 1. Remote config (AgentShield API) - WINS
+     * 1. Remote config (Checkpoint API) - WINS
      * 2. Local config (this field)
      * 3. Framework defaults
      */
@@ -149,7 +157,7 @@ export interface ToolProtectionServiceConfig {
     cacheTtl?: number;
     /**
      * Local configuration (LOWEST priority after defaults)
-     * Gets OVERRIDDEN by remote config from AgentShield API.
+     * Gets OVERRIDDEN by remote config from Checkpoint API.
      */
     localConfig?: BaseToolProtectionMap;
     /**

package/node_modules/@kya-os/contracts/dist/consent/schemas.d.ts

@@ -487,7 +487,7 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     user_did: z.ZodOptional<z.ZodString>;
     /**
      * Human-readable user identifier from credential authentication (email/username).
-     * Used for display in AgentShield dashboard.
+     * Used for display in Checkpoint dashboard.
      * This comes from the credential provider response (e.g., customer.email from Hardware World).
      * Maps to: user_identifier in delegation metadata
      */
@@ -503,9 +503,9 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     scopes: string[];
     tool: string;
     session_id: string;
+    termsAccepted: boolean;
     agent_did: string;
     project_id: string;
-    termsAccepted: boolean;
     user_did?: string | undefined;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
@@ -521,9 +521,9 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     scopes: string[];
     tool: string;
     session_id: string;
+    termsAccepted: boolean;
     agent_did: string;
     project_id: string;
-    termsAccepted: boolean;
     user_did?: string | undefined;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
@@ -842,9 +842,9 @@ export declare function validateConsentApprovalRequest(request: unknown): z.Safe
     scopes: string[];
     tool: string;
     session_id: string;
+    termsAccepted: boolean;
     agent_did: string;
     project_id: string;
-    termsAccepted: boolean;
     user_did?: string | undefined;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
@@ -860,9 +860,9 @@ export declare function validateConsentApprovalRequest(request: unknown): z.Safe
     scopes: string[];
     tool: string;
     session_id: string;
+    termsAccepted: boolean;
     agent_did: string;
     project_id: string;
-    termsAccepted: boolean;
     user_did?: string | undefined;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;

package/node_modules/@kya-os/contracts/dist/consent/schemas.js

@@ -230,7 +230,7 @@ exports.consentApprovalRequestSchema = zod_1.z.object({
         .optional(),
     /**
      * Human-readable user identifier from credential authentication (email/username).
-     * Used for display in AgentShield dashboard.
+     * Used for display in Checkpoint dashboard.
      * This comes from the credential provider response (e.g., customer.email from Hardware World).
      * Maps to: user_identifier in delegation metadata
      */

package/node_modules/@kya-os/contracts/dist/consent/types.d.ts

@@ -76,7 +76,7 @@ export interface ConsentPageConfig {
     agentDid: string;
     /** Session ID for tracking */
     sessionId: string;
-    /** Project ID from AgentShield */
+    /** Project ID from Checkpoint */
     projectId: string;
     /** Branding configuration */
     branding?: ConsentBranding;
@@ -132,7 +132,7 @@ export interface ConsentApprovalResponse {
 /**
  * Consent Configuration
  *
- * Complete consent configuration fetched from AgentShield or defaults
+ * Complete consent configuration fetched from Checkpoint or defaults
  */
 export interface ConsentConfig {
     /** Branding configuration */

package/node_modules/@kya-os/contracts/dist/dashboard-config/default-config.d.ts

@@ -2,7 +2,9 @@
  * Default Configuration for MCP-I Servers
  *
  * Provides safe, production-ready defaults for new user configurations.
- * Used by AgentShield Dashboard, Scaffolder, and Runtime fallbacks.
+ * Used by the Checkpoint dashboard, the scaffolder, and runtime fallbacks.
+ * It keeps the former 'agentshield' values and `agentShield` key, which every
+ * runtime reads, until runtimes that read 'checkpoint' have replaced them.
  *
  * @package @kya-os/contracts/dashboard-config
  */

package/node_modules/@kya-os/contracts/dist/dashboard-config/default-config.js

@@ -3,7 +3,9 @@
  * Default Configuration for MCP-I Servers
  *
  * Provides safe, production-ready defaults for new user configurations.
- * Used by AgentShield Dashboard, Scaffolder, and Runtime fallbacks.
+ * Used by the Checkpoint dashboard, the scaffolder, and runtime fallbacks.
+ * It keeps the former 'agentshield' values and `agentShield` key, which every
+ * runtime reads, until runtimes that read 'checkpoint' have replaced them.
  *
  * @package @kya-os/contracts/dashboard-config
  */