@kya-os/cli 2.0.3 → 2.1.0

package/node_modules/@kya-os/contracts/dist/workbench/mailbox.d.ts

@@ -4,18 +4,22 @@ export declare const TaskStandingCapabilitySchema: z.ZodEnum<["task.execute", "m
 /** Fixed allocation per call, not a provider price estimate or a guaranteed billing ceiling. */
 export declare const TaskModelPolicySchema: z.ZodObject<{
     provider: z.ZodLiteral<"anthropic">;
+    /** The organization's own model credential that pays for these calls (`model-credentials`). */
+    credentialId: z.ZodString;
     models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
     maxOutputTokens: z.ZodNumber;
     maxRequestBytes: z.ZodNumber;
     reservedCostMicrousd: z.ZodNumber;
 }, "strict", z.ZodTypeAny, {
     provider: "anthropic";
+    credentialId: string;
     models: string[];
     maxOutputTokens: number;
     maxRequestBytes: number;
     reservedCostMicrousd: number;
 }, {
     provider: "anthropic";
+    credentialId: string;
     models: string[];
     maxOutputTokens: number;
     maxRequestBytes: number;
@@ -185,6 +189,9 @@ export declare const TaskModelReceiptSchema: z.ZodObject<{
     requestDigest: z.ZodString;
     provider: z.ZodLiteral<"anthropic">;
     model: z.ZodString;
+    /** The admitted policy's credential, and the fingerprint of its key at call time. */
+    credentialId: z.ZodString;
+    credentialFingerprint: z.ZodString;
     reservedCostMicrousd: z.ZodNumber;
     usage: z.ZodNullable<z.ZodObject<{
         newInputTokens: z.ZodNullable<z.ZodNumber>;
@@ -223,6 +230,7 @@ export declare const TaskModelReceiptSchema: z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     code: "MODEL_STARTED" | "MODEL_COMPLETED" | "MODEL_OUTCOME_UNKNOWN";
     provider: "anthropic";
+    credentialId: string;
     model: string;
     requestStartedAtMs: number | null;
     usage: {
@@ -241,6 +249,7 @@ export declare const TaskModelReceiptSchema: z.ZodObject<{
     schema: "kya.task.model-receipt.v1";
     admissionDigest: string;
     requestDigest: string;
+    credentialFingerprint: string;
     durationMs: number | null;
     costBasis: "unknown";
     billingVerified: false;
@@ -248,6 +257,7 @@ export declare const TaskModelReceiptSchema: z.ZodObject<{
 }, {
     code: "MODEL_STARTED" | "MODEL_COMPLETED" | "MODEL_OUTCOME_UNKNOWN";
     provider: "anthropic";
+    credentialId: string;
     model: string;
     requestStartedAtMs: number | null;
     usage: {
@@ -266,6 +276,7 @@ export declare const TaskModelReceiptSchema: z.ZodObject<{
     schema: "kya.task.model-receipt.v1";
     admissionDigest: string;
     requestDigest: string;
+    credentialFingerprint: string;
     durationMs: number | null;
     costBasis: "unknown";
     billingVerified: false;
@@ -340,18 +351,22 @@ export declare const LinearInstallationWorkflowSchema: z.ZodEffects<z.ZodObject<
     }>>;
     modelPolicy: z.ZodOptional<z.ZodObject<{
         provider: z.ZodLiteral<"anthropic">;
+        /** The organization's own model credential that pays for these calls (`model-credentials`). */
+        credentialId: z.ZodString;
         models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
         maxOutputTokens: z.ZodNumber;
         maxRequestBytes: z.ZodNumber;
         reservedCostMicrousd: z.ZodNumber;
     }, "strict", z.ZodTypeAny, {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
         reservedCostMicrousd: number;
     }, {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -377,6 +392,7 @@ export declare const LinearInstallationWorkflowSchema: z.ZodEffects<z.ZodObject<
     } | undefined;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -402,6 +418,7 @@ export declare const LinearInstallationWorkflowSchema: z.ZodEffects<z.ZodObject<
     } | undefined;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -427,6 +444,7 @@ export declare const LinearInstallationWorkflowSchema: z.ZodEffects<z.ZodObject<
     } | undefined;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -452,6 +470,7 @@ export declare const LinearInstallationWorkflowSchema: z.ZodEffects<z.ZodObject<
     } | undefined;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -508,18 +527,22 @@ export declare const ConfigureLinearInstallationSchema: z.ZodObject<{
         }>>;
         modelPolicy: z.ZodOptional<z.ZodObject<{
             provider: z.ZodLiteral<"anthropic">;
+            /** The organization's own model credential that pays for these calls (`model-credentials`). */
+            credentialId: z.ZodString;
             models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
             maxOutputTokens: z.ZodNumber;
             maxRequestBytes: z.ZodNumber;
             reservedCostMicrousd: z.ZodNumber;
         }, "strict", z.ZodTypeAny, {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
             reservedCostMicrousd: number;
         }, {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -545,6 +568,7 @@ export declare const ConfigureLinearInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -570,6 +594,7 @@ export declare const ConfigureLinearInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -595,6 +620,7 @@ export declare const ConfigureLinearInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -620,6 +646,7 @@ export declare const ConfigureLinearInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -655,6 +682,7 @@ export declare const ConfigureLinearInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -689,6 +717,7 @@ export declare const ConfigureLinearInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1423,18 +1452,22 @@ export declare const ConfigureTaskSourceInstallationSchema: z.ZodObject<{
         }>>;
         modelPolicy: z.ZodOptional<z.ZodObject<{
             provider: z.ZodLiteral<"anthropic">;
+            /** The organization's own model credential that pays for these calls (`model-credentials`). */
+            credentialId: z.ZodString;
             models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
             maxOutputTokens: z.ZodNumber;
             maxRequestBytes: z.ZodNumber;
             reservedCostMicrousd: z.ZodNumber;
         }, "strict", z.ZodTypeAny, {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
             reservedCostMicrousd: number;
         }, {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1460,6 +1493,7 @@ export declare const ConfigureTaskSourceInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1485,6 +1519,7 @@ export declare const ConfigureTaskSourceInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1510,6 +1545,7 @@ export declare const ConfigureTaskSourceInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1535,6 +1571,7 @@ export declare const ConfigureTaskSourceInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1584,6 +1621,7 @@ export declare const ConfigureTaskSourceInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1633,6 +1671,7 @@ export declare const ConfigureTaskSourceInstallationSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1713,18 +1752,22 @@ export declare const TaskSourceIntentSchema: z.ZodObject<{
         }>>;
         modelPolicy: z.ZodOptional<z.ZodObject<{
             provider: z.ZodLiteral<"anthropic">;
+            /** The organization's own model credential that pays for these calls (`model-credentials`). */
+            credentialId: z.ZodString;
             models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
             maxOutputTokens: z.ZodNumber;
             maxRequestBytes: z.ZodNumber;
             reservedCostMicrousd: z.ZodNumber;
         }, "strict", z.ZodTypeAny, {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
             reservedCostMicrousd: number;
         }, {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1750,6 +1793,7 @@ export declare const TaskSourceIntentSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1775,6 +1819,7 @@ export declare const TaskSourceIntentSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1800,6 +1845,7 @@ export declare const TaskSourceIntentSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1825,6 +1871,7 @@ export declare const TaskSourceIntentSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1871,6 +1918,7 @@ export declare const TaskSourceIntentSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -1918,6 +1966,7 @@ export declare const TaskSourceIntentSchema: z.ZodObject<{
         } | undefined;
         modelPolicy?: {
             provider: "anthropic";
+            credentialId: string;
             models: string[];
             maxOutputTokens: number;
             maxRequestBytes: number;
@@ -2057,18 +2106,22 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             }>>;
             modelPolicy: z.ZodOptional<z.ZodObject<{
                 provider: z.ZodLiteral<"anthropic">;
+                /** The organization's own model credential that pays for these calls (`model-credentials`). */
+                credentialId: z.ZodString;
                 models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
                 maxOutputTokens: z.ZodNumber;
                 maxRequestBytes: z.ZodNumber;
                 reservedCostMicrousd: z.ZodNumber;
             }, "strict", z.ZodTypeAny, {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
                 reservedCostMicrousd: number;
             }, {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2094,6 +2147,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2119,6 +2173,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2144,6 +2199,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2169,6 +2225,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2215,6 +2272,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2262,6 +2320,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2315,6 +2374,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2368,6 +2428,7 @@ export declare const TaskMailboxClaimSchema: z.ZodObject<{
             } | undefined;
             modelPolicy?: {
                 provider: "anthropic";
+                credentialId: string;
                 models: string[];
                 maxOutputTokens: number;
                 maxRequestBytes: number;
@@ -2638,18 +2699,22 @@ export declare const TaskStandingAdmissionRequestSchema: z.ZodEffects<z.ZodObjec
     }>;
     modelPolicy: z.ZodOptional<z.ZodObject<{
         provider: z.ZodLiteral<"anthropic">;
+        /** The organization's own model credential that pays for these calls (`model-credentials`). */
+        credentialId: z.ZodString;
         models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
         maxOutputTokens: z.ZodNumber;
         maxRequestBytes: z.ZodNumber;
         reservedCostMicrousd: z.ZodNumber;
     }, "strict", z.ZodTypeAny, {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
         reservedCostMicrousd: number;
     }, {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2682,6 +2747,7 @@ export declare const TaskStandingAdmissionRequestSchema: z.ZodEffects<z.ZodObjec
     };
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2707,6 +2773,7 @@ export declare const TaskStandingAdmissionRequestSchema: z.ZodEffects<z.ZodObjec
     };
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2732,6 +2799,7 @@ export declare const TaskStandingAdmissionRequestSchema: z.ZodEffects<z.ZodObjec
     };
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2757,6 +2825,7 @@ export declare const TaskStandingAdmissionRequestSchema: z.ZodEffects<z.ZodObjec
     };
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2785,18 +2854,22 @@ export declare const TaskStandingAdmissionSchema: z.ZodEffects<z.ZodObject<Omit<
     }>;
     modelPolicy: z.ZodOptional<z.ZodObject<{
         provider: z.ZodLiteral<"anthropic">;
+        /** The organization's own model credential that pays for these calls (`model-credentials`). */
+        credentialId: z.ZodString;
         models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
         maxOutputTokens: z.ZodNumber;
         maxRequestBytes: z.ZodNumber;
         reservedCostMicrousd: z.ZodNumber;
     }, "strict", z.ZodTypeAny, {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
         reservedCostMicrousd: number;
     }, {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2855,6 +2928,7 @@ export declare const TaskStandingAdmissionSchema: z.ZodEffects<z.ZodObject<Omit<
     credentialExport: false;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2892,6 +2966,7 @@ export declare const TaskStandingAdmissionSchema: z.ZodEffects<z.ZodObject<Omit<
     credentialExport: false;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2929,6 +3004,7 @@ export declare const TaskStandingAdmissionSchema: z.ZodEffects<z.ZodObject<Omit<
     credentialExport: false;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;
@@ -2966,6 +3042,7 @@ export declare const TaskStandingAdmissionSchema: z.ZodEffects<z.ZodObject<Omit<
     credentialExport: false;
     modelPolicy?: {
         provider: "anthropic";
+        credentialId: string;
         models: string[];
         maxOutputTokens: number;
         maxRequestBytes: number;

package/node_modules/@kya-os/contracts/dist/workbench/mailbox.js

@@ -27,10 +27,14 @@ exports.TaskStandingCapabilitySchema = zod_1.z.enum([
     'github.pull_request.draft',
 ]);
 const TaskModelIdSchema = zod_1.z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/);
+/** `sha256:` and the first 16 hex digits of the SHA-256 of a model key's bytes (C12). */
+const ModelCredentialFingerprintSchema = zod_1.z.string().regex(/^sha256:[a-f0-9]{16}$/);
 /** Fixed allocation per call, not a provider price estimate or a guaranteed billing ceiling. */
 exports.TaskModelPolicySchema = zod_1.z
     .object({
     provider: zod_1.z.literal('anthropic'),
+    /** The organization's own model credential that pays for these calls (`model-credentials`). */
+    credentialId: zod_1.z.string().uuid(),
     models: zod_1.z
         .array(TaskModelIdSchema)
         .min(1)
@@ -89,6 +93,9 @@ exports.TaskModelReceiptSchema = zod_1.z
     requestDigest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/),
     provider: zod_1.z.literal('anthropic'),
     model: TaskModelIdSchema,
+    /** The admitted policy's credential, and the fingerprint of its key at call time. */
+    credentialId: zod_1.z.string().uuid(),
+    credentialFingerprint: ModelCredentialFingerprintSchema,
     reservedCostMicrousd: zod_1.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
     usage: exports.TaskModelUsageSchema.nullable(),
     outputDigest: zod_1.z

package/node_modules/@kya-os/contracts/dist/workbench/review.d.ts

@@ -8,6 +8,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
         taskId: z.ZodString;
         revision: z.ZodNumber;
         objective: z.ZodString;
+        instructions: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
         repository: z.ZodObject<{
             repositoryId: z.ZodString;
             path: z.ZodString;
@@ -100,6 +101,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     }, {
         taskId: string;
@@ -131,6 +133,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     }>, {
         taskId: string;
@@ -162,6 +165,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     }, {
         taskId: string;
@@ -193,6 +197,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     }>;
     manifestDigest: z.ZodString;
@@ -648,6 +653,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     };
     runnerId: string;
@@ -760,6 +766,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     };
     runnerId: string;
@@ -872,6 +879,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     };
     runnerId: string;
@@ -984,6 +992,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             inputDigest: string;
             operationId: string;
         } | undefined;
+        instructions?: string | undefined;
         dependencyBinding?: string | undefined;
     };
     runnerId: string;

package/node_modules/@kya-os/contracts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.12.4",
+  "version": "1.13.0",
   "description": "Shared contracts, types, and schemas for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -17,6 +17,10 @@
       "types": "./dist/delegation/index.d.ts",
       "default": "./dist/delegation/index.js"
     },
+    "./checkpoint-api": {
+      "types": "./dist/checkpoint-api/index.d.ts",
+      "default": "./dist/checkpoint-api/index.js"
+    },
     "./agentshield-api": {
       "types": "./dist/agentshield-api/index.d.ts",
       "default": "./dist/agentshield-api/index.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/cli",
-  "version": "2.0.3",
+  "version": "2.1.0",
   "description": "CLI for KYA-OS setup and management",
   "keywords": [
     "cli",
@@ -46,7 +46,7 @@
     "test:coverage": "vitest --coverage --run"
   },
   "dependencies": {
-    "@kya-os/contracts": "1.12.4",
+    "@kya-os/contracts": "1.13.0",
     "@kya-os/mcp": "1.15.0",
     "@kya-os/mcp-i": "^1.12.0",
     "didwebvh-ts": "2.8.0",
@@ -63,9 +63,9 @@
     "node": ">=20.19.0"
   },
   "optionalDependencies": {
-    "@kya-os/cli-darwin-arm64": "2.0.3",
-    "@kya-os/cli-darwin-x64": "2.0.3",
-    "@kya-os/cli-linux-arm64-gnu": "2.0.3",
-    "@kya-os/cli-linux-x64-gnu": "2.0.3"
+    "@kya-os/cli-darwin-arm64": "2.1.0",
+    "@kya-os/cli-darwin-x64": "2.1.0",
+    "@kya-os/cli-linux-arm64-gnu": "2.1.0",
+    "@kya-os/cli-linux-x64-gnu": "2.1.0"
   }
 }

package/node_modules/@kya-os/contracts/dist/agentshield-api/admin-types.js

@@ -1,10 +0,0 @@
-"use strict";
-/**
- * AgentShield Admin API Type Definitions
- *
- * TypeScript interfaces for administrative operations in AgentShield.
- * These types ensure parity between xmcp-i admin endpoints and the AgentShield service.
- *
- * @package @kya-os/contracts/agentshield-api
- */
-Object.defineProperty(exports, "__esModule", { value: true });