@kya-os/cli 2.0.3 → 2.1.0

package/node_modules/@kya-os/contracts/dist/dashboard-config/schemas.js

@@ -29,7 +29,8 @@ exports.identityConfigSchema = zod_1.z.object({
 exports.proofingConfigSchema = zod_1.z.object({
     enabled: zod_1.z.boolean(),
     destinations: zod_1.z.array(zod_1.z.object({
-        type: zod_1.z.enum(['agentshield', 'kta', 'custom']),
+        // 'agentshield' is the former name of 'checkpoint'; Checkpoint still sends it.
+        type: zod_1.z.enum(['checkpoint', 'agentshield', 'kta', 'custom']),
         apiUrl: zod_1.z.string().url(),
         apiKey: zod_1.z.string().optional(),
     })),
@@ -43,7 +44,8 @@ exports.proofingConfigSchema = zod_1.z.object({
  * Delegation verifier type schema
  */
 const delegationVerifierTypeSchema = zod_1.z.enum([
-    'agentshield',
+    'checkpoint',
+    'agentshield', // former name of 'checkpoint'
     'kta',
     'memory',
     'cloudflare-kv',
@@ -73,7 +75,12 @@ exports.delegationConfigSchema = zod_1.z.object({
  * Tool protection configuration schema
  */
 exports.toolProtectionConfigSchema = zod_1.z.object({
-    source: zod_1.z.enum(['agentshield', 'inline', 'file']),
+    source: zod_1.z.enum(['checkpoint', 'agentshield', 'inline', 'file']),
+    checkpoint: zod_1.z.object({
+        apiUrl: zod_1.z.string().url(),
+        cacheTtl: zod_1.z.number().int().positive(),
+    }).optional(),
+    // Former name of `checkpoint`; Checkpoint still sends this key.
     agentShield: zod_1.z.object({
         apiUrl: zod_1.z.string().url(),
         cacheTtl: zod_1.z.number().int().positive(),

package/node_modules/@kya-os/contracts/dist/dashboard-config/types.d.ts

@@ -1,8 +1,8 @@
 /**
  * Dashboard Configuration Types
  *
- * Type definitions for AgentShield dashboard server configuration management API.
- * These types ensure parity between xmcp-i and AgentShield dashboard implementations.
+ * Type definitions for the Checkpoint dashboard's server configuration management API.
+ * These types keep the MCP-I runtimes and the Checkpoint dashboard in parity.
  *
  * @package @kya-os/contracts/dashboard-config
  */
@@ -13,7 +13,7 @@ import type { PolicyConfig } from '../policy/index.js';
  * MCP-I Server Configuration (Dashboard View Model)
  *
  * This is a flattened, UI-friendly representation of server configuration
- * used by the AgentShield dashboard for configuration management.
+ * used by the Checkpoint dashboard for configuration management.
  *
  * This type differs from MCPIConfig in that it:
  * - Includes platform-specific details
@@ -53,10 +53,11 @@ export interface MCPIServerConfig {
         enabled: boolean;
         /**
          * Proof destinations
-         * Where proofs are sent (AgentShield, KTA, etc.)
+         * Where proofs are sent (Checkpoint, KTA, etc.). `'agentshield'` is the
+         * former name of `'checkpoint'`, still sent by Checkpoint.
          */
         destinations: Array<{
-            type: 'agentshield' | 'kta' | 'custom';
+            type: 'checkpoint' | 'agentshield' | 'kta' | 'custom';
             apiUrl: string;
             apiKey?: string;
         }>;
@@ -101,13 +102,22 @@ export interface MCPIServerConfig {
     toolProtection: {
         /**
          * Source of tool protection config
-         * 'agentshield' = Fetched from AgentShield API (dashboard-controlled)
+         * 'checkpoint' = Fetched from the Checkpoint API (dashboard-controlled);
+         *   'agentshield' is its former name, still sent by Checkpoint
          * 'inline' = Defined in code/config file
          * 'file' = Loaded from external file
          */
-        source: 'agentshield' | 'inline' | 'file';
+        source: 'checkpoint' | 'agentshield' | 'inline' | 'file';
         /**
-         * AgentShield API settings (if source is 'agentshield')
+         * Checkpoint API settings (if source is 'checkpoint')
+         */
+        checkpoint?: {
+            apiUrl: string;
+            cacheTtl: number;
+        };
+        /**
+         * @deprecated Former name of `checkpoint`, still sent by Checkpoint; read
+         * `checkpoint` first.
          */
         agentShield?: {
             apiUrl: string;
@@ -233,7 +243,7 @@ export interface MCPIServerConfig {
         lastUpdated: string;
         /**
          * Configuration source
-         * 'dashboard' = Managed via AgentShield dashboard
+         * 'dashboard' = Managed via the Checkpoint dashboard
          * 'code' = Defined in code (mcpi-runtime-config.ts)
          * 'mixed' = Partially managed via dashboard
          */

package/node_modules/@kya-os/contracts/dist/dashboard-config/types.js

@@ -2,8 +2,8 @@
 /**
  * Dashboard Configuration Types
  *
- * Type definitions for AgentShield dashboard server configuration management API.
- * These types ensure parity between xmcp-i and AgentShield dashboard implementations.
+ * Type definitions for the Checkpoint dashboard's server configuration management API.
+ * These types keep the MCP-I runtimes and the Checkpoint dashboard in parity.
  *
  * @package @kya-os/contracts/dashboard-config
  */

package/node_modules/@kya-os/contracts/dist/delegation/schemas.d.ts

@@ -4682,7 +4682,7 @@ export declare const DELEGATION_CREDENTIAL_CONTEXT: "https://schema.modelcontext
  * W3C VCs, with the delegation data embedded in the credentialSubject.
  *
  * Phase 7 Update: Added userDid, userIdentifier, sessionId, and scopes
- * to support Agent Shield VC-JWT tokens and MCP session tracking.
+ * to support Checkpoint VC-JWT tokens and MCP session tracking.
  */
 export declare const DelegationCredentialSubjectSchema: z.ZodObject<{
     /** Subject DID (delegatee) */
@@ -4699,11 +4699,11 @@ export declare const DelegationCredentialSubjectSchema: z.ZodObject<{
          * DID of the user who granted the delegation.
          *
          * This is the authorizing user's identity. In simple cases, this equals
-         * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+         * issuerDid. In delegated scenarios (e.g., Checkpoint issuing on behalf
          * of a user), userDid identifies the actual user who consented.
          *
-         * Required by Agent Shield API for user-scoped delegations.
-         * @see delegationCredentialSchema in agentshield-api/schemas.ts
+         * Required by Checkpoint API for user-scoped delegations.
+         * @see delegationCredentialSchema in checkpoint-api/schemas.ts
          */
         userDid: z.ZodOptional<z.ZodString>;
         /**
@@ -5452,11 +5452,11 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
              * DID of the user who granted the delegation.
              *
              * This is the authorizing user's identity. In simple cases, this equals
-             * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+             * issuerDid. In delegated scenarios (e.g., Checkpoint issuing on behalf
              * of a user), userDid identifies the actual user who consented.
              *
-             * Required by Agent Shield API for user-scoped delegations.
-             * @see delegationCredentialSchema in agentshield-api/schemas.ts
+             * Required by Checkpoint API for user-scoped delegations.
+             * @see delegationCredentialSchema in checkpoint-api/schemas.ts
              */
             userDid: z.ZodOptional<z.ZodString>;
             /**
@@ -6216,11 +6216,11 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
              * DID of the user who granted the delegation.
              *
              * This is the authorizing user's identity. In simple cases, this equals
-             * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+             * issuerDid. In delegated scenarios (e.g., Checkpoint issuing on behalf
              * of a user), userDid identifies the actual user who consented.
              *
-             * Required by Agent Shield API for user-scoped delegations.
-             * @see delegationCredentialSchema in agentshield-api/schemas.ts
+             * Required by Checkpoint API for user-scoped delegations.
+             * @see delegationCredentialSchema in checkpoint-api/schemas.ts
              */
             userDid: z.ZodOptional<z.ZodString>;
             /**
@@ -6980,11 +6980,11 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
              * DID of the user who granted the delegation.
              *
              * This is the authorizing user's identity. In simple cases, this equals
-             * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+             * issuerDid. In delegated scenarios (e.g., Checkpoint issuing on behalf
              * of a user), userDid identifies the actual user who consented.
              *
-             * Required by Agent Shield API for user-scoped delegations.
-             * @see delegationCredentialSchema in agentshield-api/schemas.ts
+             * Required by Checkpoint API for user-scoped delegations.
+             * @see delegationCredentialSchema in checkpoint-api/schemas.ts
              */
             userDid: z.ZodOptional<z.ZodString>;
             /**
@@ -7752,11 +7752,11 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
              * DID of the user who granted the delegation.
              *
              * This is the authorizing user's identity. In simple cases, this equals
-             * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+             * issuerDid. In delegated scenarios (e.g., Checkpoint issuing on behalf
              * of a user), userDid identifies the actual user who consented.
              *
-             * Required by Agent Shield API for user-scoped delegations.
-             * @see delegationCredentialSchema in agentshield-api/schemas.ts
+             * Required by Checkpoint API for user-scoped delegations.
+             * @see delegationCredentialSchema in checkpoint-api/schemas.ts
              */
             userDid: z.ZodOptional<z.ZodString>;
             /**
@@ -8516,11 +8516,11 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
              * DID of the user who granted the delegation.
              *
              * This is the authorizing user's identity. In simple cases, this equals
-             * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+             * issuerDid. In delegated scenarios (e.g., Checkpoint issuing on behalf
              * of a user), userDid identifies the actual user who consented.
              *
-             * Required by Agent Shield API for user-scoped delegations.
-             * @see delegationCredentialSchema in agentshield-api/schemas.ts
+             * Required by Checkpoint API for user-scoped delegations.
+             * @see delegationCredentialSchema in checkpoint-api/schemas.ts
              */
             userDid: z.ZodOptional<z.ZodString>;
             /**

package/node_modules/@kya-os/contracts/dist/delegation/schemas.js

@@ -324,7 +324,7 @@ exports.DELEGATION_CREDENTIAL_CONTEXT = 'https://schema.modelcontextprotocol-ide
  * W3C VCs, with the delegation data embedded in the credentialSubject.
  *
  * Phase 7 Update: Added userDid, userIdentifier, sessionId, and scopes
- * to support Agent Shield VC-JWT tokens and MCP session tracking.
+ * to support Checkpoint VC-JWT tokens and MCP session tracking.
  */
 exports.DelegationCredentialSubjectSchema = zod_1.z.object({
     /** Subject DID (delegatee) */
@@ -341,11 +341,11 @@ exports.DelegationCredentialSubjectSchema = zod_1.z.object({
          * DID of the user who granted the delegation.
          *
          * This is the authorizing user's identity. In simple cases, this equals
-         * issuerDid. In delegated scenarios (e.g., AgentShield issuing on behalf
+         * issuerDid. In delegated scenarios (e.g., Checkpoint issuing on behalf
          * of a user), userDid identifies the actual user who consented.
          *
-         * Required by Agent Shield API for user-scoped delegations.
-         * @see delegationCredentialSchema in agentshield-api/schemas.ts
+         * Required by Checkpoint API for user-scoped delegations.
+         * @see delegationCredentialSchema in checkpoint-api/schemas.ts
          */
         userDid: zod_1.z.string().optional(),
         /**

package/node_modules/@kya-os/contracts/dist/deploy/index.d.ts

@@ -2,7 +2,7 @@
  * One-Click Deployment Contracts
  *
  * Centralized type definitions and validation schemas for the
- * AgentShield One-Click Deployment feature.
+ * Checkpoint One-Click Deployment feature.
  *
  * @package @kya-os/contracts/deploy
  *

package/node_modules/@kya-os/contracts/dist/deploy/index.js

@@ -3,7 +3,7 @@
  * One-Click Deployment Contracts
  *
  * Centralized type definitions and validation schemas for the
- * AgentShield One-Click Deployment feature.
+ * Checkpoint One-Click Deployment feature.
  *
  * @package @kya-os/contracts/deploy
  *

package/node_modules/@kya-os/contracts/dist/deploy/schemas.d.ts

@@ -1,7 +1,7 @@
 /**
  * One-Click Deployment Zod Validation Schemas
  *
- * Runtime validation schemas for the AgentShield One-Click Deployment API.
+ * Runtime validation schemas for the Checkpoint One-Click Deployment API.
  * These schemas ensure request/response validation at API boundaries.
  *
  * @package @kya-os/contracts/deploy
@@ -839,22 +839,22 @@ export declare const scaffolderOptionsSchema: z.ZodObject<{
     projectName: z.ZodString;
     template: z.ZodEnum<["blank", "ecommerce", "hardware-world", "mix-station"]>;
     platform: z.ZodEnum<["cloudflare", "vercel"]>;
-    agentShieldProjectId: z.ZodOptional<z.ZodString>;
-    agentShieldApiKey: z.ZodOptional<z.ZodString>;
+    checkpointProjectId: z.ZodOptional<z.ZodString>;
+    checkpointApiKey: z.ZodOptional<z.ZodString>;
     skipIdentity: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     projectName: string;
     platform: "cloudflare" | "vercel";
     template: "blank" | "ecommerce" | "hardware-world" | "mix-station";
-    agentShieldProjectId?: string | undefined;
-    agentShieldApiKey?: string | undefined;
+    checkpointProjectId?: string | undefined;
+    checkpointApiKey?: string | undefined;
     skipIdentity?: boolean | undefined;
 }, {
     projectName: string;
     platform: "cloudflare" | "vercel";
     template: "blank" | "ecommerce" | "hardware-world" | "mix-station";
-    agentShieldProjectId?: string | undefined;
-    agentShieldApiKey?: string | undefined;
+    checkpointProjectId?: string | undefined;
+    checkpointApiKey?: string | undefined;
     skipIdentity?: boolean | undefined;
 }>;
 /**

package/node_modules/@kya-os/contracts/dist/deploy/schemas.js

@@ -2,7 +2,7 @@
 /**
  * One-Click Deployment Zod Validation Schemas
  *
- * Runtime validation schemas for the AgentShield One-Click Deployment API.
+ * Runtime validation schemas for the Checkpoint One-Click Deployment API.
  * These schemas ensure request/response validation at API boundaries.
  *
  * @package @kya-os/contracts/deploy
@@ -231,8 +231,8 @@ exports.scaffolderOptionsSchema = zod_1.z.object({
     projectName: zod_1.z.string().min(1).max(100),
     template: exports.templateTypeSchema,
     platform: exports.deployPlatformSchema,
-    agentShieldProjectId: zod_1.z.string().optional(),
-    agentShieldApiKey: zod_1.z.string().optional(),
+    checkpointProjectId: zod_1.z.string().optional(),
+    checkpointApiKey: zod_1.z.string().optional(),
     skipIdentity: zod_1.z.boolean().optional(),
 });
 /**

package/node_modules/@kya-os/contracts/dist/deploy/types.d.ts

@@ -1,12 +1,12 @@
 /**
  * One-Click Deployment API Type Definitions
  *
- * TypeScript interfaces for the AgentShield One-Click Deployment feature.
+ * TypeScript interfaces for the Checkpoint One-Click Deployment feature.
  * Enables users to deploy MCP-I agents to Cloudflare Workers with a single click.
  *
  * @package @kya-os/contracts/deploy
  */
-import type { AgentShieldAPIResponse } from "../agentshield-api/types.js";
+import type { CheckpointAPIResponse } from "../checkpoint-api/types.js";
 /**
  * Supported deployment templates
  * - blank: Minimal MCP-I server with a greet tool
@@ -116,7 +116,7 @@ export interface DeployToGitHubRequest {
     description?: string;
 }
 /**
- * AgentShield project information created during deployment
+ * Checkpoint project information created during deployment
  */
 export interface DeployedProject {
     id: string;
@@ -132,7 +132,7 @@ export interface DeployToGitHubData {
     repoUrl: string;
     /** Full repository name (e.g., "user/my-mcp-agent") */
     repoFullName: string;
-    /** AgentShield project (auto-created) */
+    /** Checkpoint project (auto-created) */
     project: DeployedProject;
     /** Cloudflare Deploy Button URL */
     deployUrl: string;
@@ -205,8 +205,8 @@ export interface ScaffolderOptions {
     projectName: string;
     template: TemplateType;
     platform: DeployPlatformType;
-    agentShieldProjectId?: string;
-    agentShieldApiKey?: string;
+    checkpointProjectId?: string;
+    checkpointApiKey?: string;
     skipIdentity?: boolean;
 }
 /**
@@ -249,8 +249,8 @@ export interface DeploymentProgress {
 /**
  * Wrapped GitHub status response
  */
-export type GitHubStatusAPIResponse = AgentShieldAPIResponse<GitHubStatusResponse["data"]>;
+export type GitHubStatusAPIResponse = CheckpointAPIResponse<GitHubStatusResponse["data"]>;
 /**
  * Wrapped deploy response
  */
-export type DeployToGitHubAPIResponse = AgentShieldAPIResponse<DeployToGitHubData>;
+export type DeployToGitHubAPIResponse = CheckpointAPIResponse<DeployToGitHubData>;

package/node_modules/@kya-os/contracts/dist/deploy/types.js

@@ -2,7 +2,7 @@
 /**
  * One-Click Deployment API Type Definitions
  *
- * TypeScript interfaces for the AgentShield One-Click Deployment feature.
+ * TypeScript interfaces for the Checkpoint One-Click Deployment feature.
  * Enables users to deploy MCP-I agents to Cloudflare Workers with a single click.
  *
  * @package @kya-os/contracts/deploy

package/node_modules/@kya-os/contracts/dist/handshake/schemas.d.ts

@@ -9,7 +9,7 @@ import { z } from "zod";
  * Phase 5: Anonymous Sessions Until OAuth
  *
  * - 'anonymous': No userDid assigned yet (session started without OAuth)
- * - 'authenticated': userDid assigned via OAuth → AgentShield identity resolution
+ * - 'authenticated': userDid assigned via OAuth → Checkpoint identity resolution
  */
 export declare const SessionIdentityStateSchema: z.ZodEnum<["anonymous", "authenticated"]>;
 export type SessionIdentityState = z.infer<typeof SessionIdentityStateSchema>;

package/node_modules/@kya-os/contracts/dist/handshake/schemas.js

@@ -22,7 +22,7 @@ const oauthIdentitySchema = zod_1.z.object({
  * Phase 5: Anonymous Sessions Until OAuth
  *
  * - 'anonymous': No userDid assigned yet (session started without OAuth)
- * - 'authenticated': userDid assigned via OAuth → AgentShield identity resolution
+ * - 'authenticated': userDid assigned via OAuth → Checkpoint identity resolution
  */
 exports.SessionIdentityStateSchema = zod_1.z.enum(["anonymous", "authenticated"]);
 const MCPClientCapabilitiesSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());

package/node_modules/@kya-os/contracts/dist/identity/schemas.d.ts

@@ -2,7 +2,7 @@
  * Identity Resolution Schemas
  *
  * Types and schemas for OAuth identity → persistent user DID resolution.
- * Used by xmcp-i to call AgentShield's identity resolution endpoint.
+ * Used by xmcp-i to call Checkpoint's identity resolution endpoint.
  *
  * Part of Phase 5: Identity Resolution Integration
  *

package/node_modules/@kya-os/contracts/dist/identity/schemas.js

@@ -3,7 +3,7 @@
  * Identity Resolution Schemas
  *
  * Types and schemas for OAuth identity → persistent user DID resolution.
- * Used by xmcp-i to call AgentShield's identity resolution endpoint.
+ * Used by xmcp-i to call Checkpoint's identity resolution endpoint.
  *
  * Part of Phase 5: Identity Resolution Integration
  *

package/node_modules/@kya-os/contracts/dist/index.js

@@ -54,7 +54,7 @@ exports.SUPPORTED_XMCP_I_VERSION = "^1.0.0";
 // import { ... } from '@kya-os/contracts/runtime'
 // import { ... } from '@kya-os/contracts/tlkrc'
 // import { ... } from '@kya-os/contracts/env'
-// import { ... } from '@kya-os/contracts/agentshield-api'
+// import { ... } from '@kya-os/contracts/checkpoint-api'
 // import { ... } from '@kya-os/contracts/tool-protection'
 // import { ... } from '@kya-os/contracts/well-known'
 // import { ... } from '@kya-os/contracts/identity'  // Phase 5: Identity resolution

package/node_modules/@kya-os/contracts/dist/molti/schemas.d.ts

@@ -41,23 +41,23 @@ export declare const moltiDeployConfigSchema: z.ZodObject<{
     projectName: z.ZodString;
     agentName: z.ZodOptional<z.ZodString>;
     agentDescription: z.ZodOptional<z.ZodString>;
-    agentShieldProjectId: z.ZodOptional<z.ZodString>;
-    agentShieldApiKey: z.ZodOptional<z.ZodString>;
+    checkpointProjectId: z.ZodOptional<z.ZodString>;
+    checkpointApiKey: z.ZodOptional<z.ZodString>;
     instanceType: z.ZodOptional<z.ZodEnum<["lite", "basic", "standard-1", "standard-2", "standard-3", "standard-4"]>>;
     enableReputation: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     projectName: string;
     agentName?: string | undefined;
-    agentShieldProjectId?: string | undefined;
-    agentShieldApiKey?: string | undefined;
+    checkpointProjectId?: string | undefined;
+    checkpointApiKey?: string | undefined;
     agentDescription?: string | undefined;
     instanceType?: "basic" | "lite" | "standard-1" | "standard-2" | "standard-3" | "standard-4" | undefined;
     enableReputation?: boolean | undefined;
 }, {
     projectName: string;
     agentName?: string | undefined;
-    agentShieldProjectId?: string | undefined;
-    agentShieldApiKey?: string | undefined;
+    checkpointProjectId?: string | undefined;
+    checkpointApiKey?: string | undefined;
     agentDescription?: string | undefined;
     instanceType?: "basic" | "lite" | "standard-1" | "standard-2" | "standard-3" | "standard-4" | undefined;
     enableReputation?: boolean | undefined;

package/node_modules/@kya-os/contracts/dist/molti/schemas.js

@@ -69,8 +69,8 @@ exports.moltiDeployConfigSchema = zod_1.z.object({
     projectName: projectNameSchema,
     agentName: zod_1.z.string().max(255).optional(),
     agentDescription: zod_1.z.string().max(2000).optional(),
-    agentShieldProjectId: zod_1.z.string().optional(),
-    agentShieldApiKey: zod_1.z.string().optional(),
+    checkpointProjectId: zod_1.z.string().optional(),
+    checkpointApiKey: zod_1.z.string().optional(),
     instanceType: exports.moltiInstanceTypeSchema.optional(),
     enableReputation: zod_1.z.boolean().optional(),
 });

package/node_modules/@kya-os/contracts/dist/molti/types.d.ts

@@ -37,17 +37,17 @@ export interface MoltiDeployConfig {
     agentName?: string;
     /** Agent description */
     agentDescription?: string;
-    /** AgentShield project ID for monitoring */
-    agentShieldProjectId?: string;
-    /** AgentShield API key (stored as secret) */
-    agentShieldApiKey?: string;
+    /** Checkpoint project ID for monitoring */
+    checkpointProjectId?: string;
+    /** Checkpoint API key (stored as secret) */
+    checkpointApiKey?: string;
     /** Container instance type */
     instanceType?: MoltiInstanceType;
     /** Enable KTA reputation tracking */
     enableReputation?: boolean;
 }
 /**
- * Request to start a Molti deployment via agent-shield
+ * Request to start a Molti deployment via checkpoint
  * POST /api/internal/deploy/molti/start
  */
 export interface MoltiDeployRequest {
@@ -57,9 +57,9 @@ export interface MoltiDeployRequest {
     agentName?: string;
     /** Agent description */
     agentDescription?: string;
-    /** Organization ID in AgentShield */
+    /** Organization ID in Checkpoint */
     organizationId: string;
-    /** Existing AgentShield project ID (if linking to existing) */
+    /** Existing Checkpoint project ID (if linking to existing) */
     existingProjectId?: string;
     /** Container instance type */
     instanceType?: MoltiInstanceType;
@@ -116,9 +116,9 @@ export interface MoltiDeployResult {
     repoUrl: string;
     /** Repository full name (owner/name) */
     repoFullName: string;
-    /** AgentShield project ID */
+    /** Checkpoint project ID */
     projectId: string;
-    /** AgentShield project friendly ID */
+    /** Checkpoint project friendly ID */
     projectFriendlyId: string;
     /** KTA claim URL (if reputation enabled) */
     ktaClaimUrl?: string;

package/node_modules/@kya-os/contracts/dist/molti/types.js

@@ -14,7 +14,7 @@ exports.MOLTI_DEPLOY_STEP_NAMES = void 0;
  */
 exports.MOLTI_DEPLOY_STEP_NAMES = {
     github_verify: "Verifying GitHub connection",
-    project_create: "Creating AgentShield project",
+    project_create: "Creating Checkpoint project",
     api_key_create: "Generating API key",
     kta_register: "Registering with KTA",
     scaffold: "Scaffolding Moltworker project",

package/node_modules/@kya-os/contracts/dist/policy/schemas.d.ts

@@ -2,7 +2,7 @@
  * Policy Configuration Schemas
  *
  * Zod schemas for agent detection policy configuration.
- * These schemas define how MCP-I servers and AgentShield enforce
+ * These schemas define how MCP-I servers and Checkpoint enforce
  * access control based on detected agent characteristics.
  *
  * @module @kya-os/contracts/policy

package/node_modules/@kya-os/contracts/dist/policy/schemas.js

@@ -3,7 +3,7 @@
  * Policy Configuration Schemas
  *
  * Zod schemas for agent detection policy configuration.
- * These schemas define how MCP-I servers and AgentShield enforce
+ * These schemas define how MCP-I servers and Checkpoint enforce
  * access control based on detected agent characteristics.
  *
  * @module @kya-os/contracts/policy

package/node_modules/@kya-os/contracts/dist/proof/detached-proof.d.ts

@@ -209,7 +209,7 @@ export declare const JWS_ALGORITHM = "EdDSA";
 export declare const HASH_ALGORITHM = "sha256";
 export declare const AUDIT_VERSION = "audit.v1";
 /**
- * Tool call context for AgentShield dashboard integration
+ * Tool call context for Checkpoint dashboard integration
  * Provides plaintext tool execution data alongside cryptographic proofs
  */
 export declare const ToolCallContextSchema: z.ZodObject<{
@@ -232,7 +232,7 @@ export declare const ToolCallContextSchema: z.ZodObject<{
     result?: unknown;
 }>;
 /**
- * Proof submission context for AgentShield API
+ * Proof submission context for Checkpoint API
  * Includes tool calls and optional MCP server URL for tool discovery
  */
 export declare const ProofSubmissionContextSchema: z.ZodObject<{
@@ -276,7 +276,7 @@ export declare const ProofSubmissionContextSchema: z.ZodObject<{
     mcpServerUrl?: string | undefined;
 }>;
 /**
- * Complete proof submission request to AgentShield
+ * Complete proof submission request to Checkpoint
  */
 export declare const ProofSubmissionRequestSchema: z.ZodObject<{
     session_id: z.ZodString;

package/node_modules/@kya-os/contracts/dist/proof/detached-proof.js

@@ -84,7 +84,7 @@ exports.JWS_ALGORITHM = "EdDSA";
 exports.HASH_ALGORITHM = "sha256";
 exports.AUDIT_VERSION = "audit.v1";
 /**
- * Tool call context for AgentShield dashboard integration
+ * Tool call context for Checkpoint dashboard integration
  * Provides plaintext tool execution data alongside cryptographic proofs
  */
 exports.ToolCallContextSchema = zod_1.z.object({
@@ -95,7 +95,7 @@ exports.ToolCallContextSchema = zod_1.z.object({
     userId: zod_1.z.string().optional(),
 });
 /**
- * Proof submission context for AgentShield API
+ * Proof submission context for Checkpoint API
  * Includes tool calls and optional MCP server URL for tool discovery
  */
 exports.ProofSubmissionContextSchema = zod_1.z.object({
@@ -103,7 +103,7 @@ exports.ProofSubmissionContextSchema = zod_1.z.object({
     mcpServerUrl: zod_1.z.string().url().optional(),
 });
 /**
- * Complete proof submission request to AgentShield
+ * Complete proof submission request to Checkpoint
  */
 exports.ProofSubmissionRequestSchema = zod_1.z.object({
     session_id: zod_1.z.string().min(1),

package/node_modules/@kya-os/contracts/dist/skills/schemas.d.ts

@@ -79,8 +79,8 @@ export declare const SkillManifestSchema: z.ZodObject<{
     version: string;
     tools: string[];
     description: string;
-    requiredScopes: string[];
     instructions: string;
+    requiredScopes: string[];
 }, {
     name: string;
     version: string;

package/node_modules/@kya-os/contracts/dist/vault/schemas.d.ts

@@ -2,7 +2,7 @@
  * Vault API Schemas
  *
  * Shared Zod schemas for the per-user API key vault.
- * SSOT consumed by agent-shield (API routes) and xmcp-i (VaultResolver runtime client).
+ * SSOT consumed by checkpoint (API routes) and xmcp-i (VaultResolver runtime client).
  *
  * @module @kya-os/contracts/vault
  */

package/node_modules/@kya-os/contracts/dist/vault/schemas.js

@@ -3,7 +3,7 @@
  * Vault API Schemas
  *
  * Shared Zod schemas for the per-user API key vault.
- * SSOT consumed by agent-shield (API routes) and xmcp-i (VaultResolver runtime client).
+ * SSOT consumed by checkpoint (API routes) and xmcp-i (VaultResolver runtime client).
  *
  * @module @kya-os/contracts/vault
  */