@kya-os/contracts 1.9.0 → 1.9.1

package/dist/proof.d.ts

@@ -40,31 +40,31 @@ export declare const ProofMetaSchema: z.ZodObject<{
     delegationRef: z.ZodOptional<z.ZodString>;
     clientDid: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
+    did: string;
+    kid: string;
     nonce: string;
     audience: string;
     sessionId: string;
-    did: string;
-    kid: string;
+    ts: number;
     requestHash: string;
     responseHash: string;
-    ts: number;
     clientDid?: string | undefined;
     delegationRef?: string | undefined;
-    scopeId?: string | undefined;
     outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+    scopeId?: string | undefined;
 }, {
+    did: string;
+    kid: string;
     nonce: string;
     audience: string;
     sessionId: string;
-    did: string;
-    kid: string;
+    ts: number;
     requestHash: string;
     responseHash: string;
-    ts: number;
     clientDid?: string | undefined;
     delegationRef?: string | undefined;
-    scopeId?: string | undefined;
     outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+    scopeId?: string | undefined;
 }>;
 export declare const DetachedProofSchema: z.ZodObject<{
     jws: z.ZodString;
@@ -82,63 +82,63 @@ export declare const DetachedProofSchema: z.ZodObject<{
         delegationRef: z.ZodOptional<z.ZodString>;
         clientDid: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
+        did: string;
+        kid: string;
         nonce: string;
         audience: string;
         sessionId: string;
-        did: string;
-        kid: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
-        ts: number;
         clientDid?: string | undefined;
         delegationRef?: string | undefined;
-        scopeId?: string | undefined;
         outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+        scopeId?: string | undefined;
     }, {
+        did: string;
+        kid: string;
         nonce: string;
         audience: string;
         sessionId: string;
-        did: string;
-        kid: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
-        ts: number;
         clientDid?: string | undefined;
         delegationRef?: string | undefined;
-        scopeId?: string | undefined;
         outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+        scopeId?: string | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     jws: string;
     meta: {
+        did: string;
+        kid: string;
         nonce: string;
         audience: string;
         sessionId: string;
-        did: string;
-        kid: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
-        ts: number;
         clientDid?: string | undefined;
         delegationRef?: string | undefined;
-        scopeId?: string | undefined;
         outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+        scopeId?: string | undefined;
     };
 }, {
     jws: string;
     meta: {
+        did: string;
+        kid: string;
         nonce: string;
         audience: string;
         sessionId: string;
-        did: string;
-        kid: string;
+        ts: number;
         requestHash: string;
         responseHash: string;
-        ts: number;
         clientDid?: string | undefined;
         delegationRef?: string | undefined;
-        scopeId?: string | undefined;
         outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+        scopeId?: string | undefined;
     };
 }>;
 export declare const CanonicalHashesSchema: z.ZodObject<{
@@ -164,25 +164,25 @@ export declare const AuditRecordSchema: z.ZodObject<{
     scope: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     version: "audit.v1";
-    audience: string;
     did: string;
     kid: string;
-    session: string;
-    verified: "yes" | "no";
+    audience: string;
     ts: number;
+    session: string;
     reqHash: string;
     resHash: string;
+    verified: "yes" | "no";
     scope: string;
 }, {
     version: "audit.v1";
-    audience: string;
     did: string;
     kid: string;
-    session: string;
-    verified: "yes" | "no";
+    audience: string;
     ts: number;
+    session: string;
     reqHash: string;
     resHash: string;
+    verified: "yes" | "no";
     scope: string;
 }>;
 export type ProofMeta = z.infer<typeof ProofMetaSchema>;
@@ -206,14 +206,14 @@ export declare const ToolCallContextSchema: z.ZodObject<{
     scopeId: string;
     tool: string;
     args: Record<string, unknown>;
-    result?: unknown;
     userId?: string | undefined;
+    result?: unknown;
 }, {
     scopeId: string;
     tool: string;
     args: Record<string, unknown>;
-    result?: unknown;
     userId?: string | undefined;
+    result?: unknown;
 }>;
 /**
  * Proof submission context for AgentShield API
@@ -230,14 +230,14 @@ export declare const ProofSubmissionContextSchema: z.ZodObject<{
         scopeId: string;
         tool: string;
         args: Record<string, unknown>;
-        result?: unknown;
         userId?: string | undefined;
+        result?: unknown;
     }, {
         scopeId: string;
         tool: string;
         args: Record<string, unknown>;
-        result?: unknown;
         userId?: string | undefined;
+        result?: unknown;
     }>, "many">;
     mcpServerUrl: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
@@ -245,8 +245,8 @@ export declare const ProofSubmissionContextSchema: z.ZodObject<{
         scopeId: string;
         tool: string;
         args: Record<string, unknown>;
-        result?: unknown;
         userId?: string | undefined;
+        result?: unknown;
     }[];
     mcpServerUrl?: string | undefined;
 }, {
@@ -254,8 +254,8 @@ export declare const ProofSubmissionContextSchema: z.ZodObject<{
         scopeId: string;
         tool: string;
         args: Record<string, unknown>;
-        result?: unknown;
         userId?: string | undefined;
+        result?: unknown;
     }[];
     mcpServerUrl?: string | undefined;
 }>;
@@ -281,63 +281,63 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
             delegationRef: z.ZodOptional<z.ZodString>;
             clientDid: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
+            did: string;
+            kid: string;
             nonce: string;
             audience: string;
             sessionId: string;
-            did: string;
-            kid: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
-            ts: number;
             clientDid?: string | undefined;
             delegationRef?: string | undefined;
-            scopeId?: string | undefined;
             outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+            scopeId?: string | undefined;
         }, {
+            did: string;
+            kid: string;
             nonce: string;
             audience: string;
             sessionId: string;
-            did: string;
-            kid: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
-            ts: number;
             clientDid?: string | undefined;
             delegationRef?: string | undefined;
-            scopeId?: string | undefined;
             outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+            scopeId?: string | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
         jws: string;
         meta: {
+            did: string;
+            kid: string;
             nonce: string;
             audience: string;
             sessionId: string;
-            did: string;
-            kid: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
-            ts: number;
             clientDid?: string | undefined;
             delegationRef?: string | undefined;
-            scopeId?: string | undefined;
             outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+            scopeId?: string | undefined;
         };
     }, {
         jws: string;
         meta: {
+            did: string;
+            kid: string;
             nonce: string;
             audience: string;
             sessionId: string;
-            did: string;
-            kid: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
-            ts: number;
             clientDid?: string | undefined;
             delegationRef?: string | undefined;
-            scopeId?: string | undefined;
             outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+            scopeId?: string | undefined;
         };
     }>, "many">;
     context: z.ZodOptional<z.ZodObject<{
@@ -351,14 +351,14 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
             scopeId: string;
             tool: string;
             args: Record<string, unknown>;
-            result?: unknown;
             userId?: string | undefined;
+            result?: unknown;
         }, {
             scopeId: string;
             tool: string;
             args: Record<string, unknown>;
-            result?: unknown;
             userId?: string | undefined;
+            result?: unknown;
         }>, "many">;
         mcpServerUrl: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
@@ -366,8 +366,8 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
             scopeId: string;
             tool: string;
             args: Record<string, unknown>;
-            result?: unknown;
             userId?: string | undefined;
+            result?: unknown;
         }[];
         mcpServerUrl?: string | undefined;
     }, {
@@ -375,8 +375,8 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
             scopeId: string;
             tool: string;
             args: Record<string, unknown>;
-            result?: unknown;
             userId?: string | undefined;
+            result?: unknown;
         }[];
         mcpServerUrl?: string | undefined;
     }>>;
@@ -385,18 +385,18 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
     proofs: {
         jws: string;
         meta: {
+            did: string;
+            kid: string;
             nonce: string;
             audience: string;
             sessionId: string;
-            did: string;
-            kid: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
-            ts: number;
             clientDid?: string | undefined;
             delegationRef?: string | undefined;
-            scopeId?: string | undefined;
             outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+            scopeId?: string | undefined;
         };
     }[];
     delegation_id?: string | null | undefined;
@@ -405,8 +405,8 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
             scopeId: string;
             tool: string;
             args: Record<string, unknown>;
-            result?: unknown;
             userId?: string | undefined;
+            result?: unknown;
         }[];
         mcpServerUrl?: string | undefined;
     } | undefined;
@@ -415,18 +415,18 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
     proofs: {
         jws: string;
         meta: {
+            did: string;
+            kid: string;
             nonce: string;
             audience: string;
             sessionId: string;
-            did: string;
-            kid: string;
+            ts: number;
             requestHash: string;
             responseHash: string;
-            ts: number;
             clientDid?: string | undefined;
             delegationRef?: string | undefined;
-            scopeId?: string | undefined;
             outcome?: "allowed" | "denied" | "step_up_required" | "needs_authorization" | undefined;
+            scopeId?: string | undefined;
         };
     }[];
     delegation_id?: string | null | undefined;
@@ -435,8 +435,8 @@ export declare const ProofSubmissionRequestSchema: z.ZodObject<{
             scopeId: string;
             tool: string;
             args: Record<string, unknown>;
-            result?: unknown;
             userId?: string | undefined;
+            result?: unknown;
         }[];
         mcpServerUrl?: string | undefined;
     } | undefined;

package/dist/registry.d.ts

@@ -340,4 +340,3 @@ export declare const DEFAULT_STORAGE_MODE: StorageMode;
 export declare const STORAGE_MODE_ENV_VAR = "MCPI_STORAGE_MODE";
 export declare const RECEIPT_SCHEMA_ID = "https://schema.modelcontextprotocol-identity.io/xmcp-i/registry/receipt.v1.0.0.json";
 export declare const CONTENT_HASH_REGEX: RegExp;
-//# sourceMappingURL=registry.d.ts.map

package/dist/registry.js

@@ -116,4 +116,3 @@ exports.STORAGE_MODE_ENV_VAR = "MCPI_STORAGE_MODE";
 // Receipt schema constants
 exports.RECEIPT_SCHEMA_ID = "https://schema.modelcontextprotocol-identity.io/xmcp-i/registry/receipt.v1.0.0.json";
 exports.CONTENT_HASH_REGEX = /^sha256:[a-f0-9]{64}$/;
-//# sourceMappingURL=registry.js.map

package/dist/reputation/api.d.ts

@@ -2881,4 +2881,3 @@ export declare const DEFAULT_REPUTATION_THRESHOLD: 76;
  * Provisioned by Know That AI team
  */
 export declare const BUILT_IN_REPUTATION_API_KEY: "Dn/qCC/0udWcGpdnt+IzA5GpWl9JF2g/avuBxlzB";
-//# sourceMappingURL=api.d.ts.map

package/dist/reputation/api.js

@@ -415,4 +415,3 @@ exports.DEFAULT_REPUTATION_THRESHOLD = 76;
  * Provisioned by Know That AI team
  */
 exports.BUILT_IN_REPUTATION_API_KEY = "Dn/qCC/0udWcGpdnt+IzA5GpWl9JF2g/avuBxlzB";
-//# sourceMappingURL=api.js.map

package/dist/reputation/constants.d.ts

@@ -240,4 +240,3 @@ export declare const REPUTATION_CONTRACTS_VERSION: "1.0.0";
  * Reputation algorithm version
  */
 export declare const REPUTATION_ALGORITHM_VERSION: "1.0.0-bayesian";
-//# sourceMappingURL=constants.d.ts.map

package/dist/reputation/constants.js

@@ -257,4 +257,3 @@ exports.REPUTATION_CONTRACTS_VERSION = "1.0.0";
  * Reputation algorithm version
  */
 exports.REPUTATION_ALGORITHM_VERSION = "1.0.0-bayesian";
-//# sourceMappingURL=constants.js.map

package/dist/reputation/credentials.d.ts

@@ -1491,4 +1491,3 @@ export declare const DEFAULT_REPUTATION_CREDENTIAL_VALIDITY_MS: number;
  * Recommended maximum age for reputation scores (24 hours)
  */
 export declare const RECOMMENDED_REPUTATION_FRESHNESS_MS: number;
-//# sourceMappingURL=credentials.d.ts.map

package/dist/reputation/credentials.js

@@ -300,4 +300,3 @@ exports.DEFAULT_REPUTATION_CREDENTIAL_VALIDITY_MS = 7 * 24 * 60 * 60 * 1000;
  * Recommended maximum age for reputation scores (24 hours)
  */
 exports.RECOMMENDED_REPUTATION_FRESHNESS_MS = 24 * 60 * 60 * 1000;
-//# sourceMappingURL=credentials.js.map

package/dist/reputation/index.d.ts

@@ -16,6 +16,6 @@
  */
 export * from "./schemas.js";
 export * from "./api.js";
+export * from "./interactions.js";
 export * from "./credentials.js";
 export * from "./constants.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/reputation/index.js

@@ -34,8 +34,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./schemas.js"), exports);
 // API schemas
 __exportStar(require("./api.js"), exports);
+// Per-tool-call interaction attestation request (xmcp-i#413)
+__exportStar(require("./interactions.js"), exports);
 // Credential schemas (W3C VC)
 __exportStar(require("./credentials.js"), exports);
 // Constants and configuration
 __exportStar(require("./constants.js"), exports);
-//# sourceMappingURL=index.js.map

package/dist/reputation/interactions.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Interaction Report Request Contract
+ *
+ * The per-tool-call attestation body that identity-aware runtimes POST to
+ * KTA's `POST /api/v1/agents/{did}/interactions` endpoint (xmcp-i#413). KTA
+ * verifies the embedded JWS against the agent's registered public key and
+ * folds the outcome into the Bayesian reputation engine.
+ *
+ * WHY this lives in @kya-os/contracts: per the repo's API-parity rule, the
+ * wire shape of any cross-service POST must be a shared, Zod-validated
+ * contract — never inlined at the call site. The producer here is
+ * `@kya-os/compute`'s attestation reporter; the consumer is the KTA route.
+ *
+ * PARITY CAVEAT: KTA's receiving schema lives in a different repository
+ * (Know-That-Ai/know-that-ai → `src/app/api/v1/agents/[did]/interactions/`)
+ * and cannot be imported or validated from here. This schema mirrors the body
+ * shape already accepted in production (the existing attestation flow), and
+ * MUST be kept in lock-step with that route when either side changes.
+ *
+ * Related Spec: MCP-I §5 (Reputation)
+ */
+import { z } from "zod";
+/**
+ * Interaction classification. Open-ended on the wire (KTA may accept more
+ * types over time), but the per-tool-call attestation path emits exactly
+ * `"scope_executed"`. Modeled as a string with that documented default rather
+ * than a closed enum so adding a new KTA-side type does not require a
+ * contracts bump on the producer before the receiver is ready.
+ */
+export declare const INTERACTION_TYPE_SCOPE_EXECUTED: "scope_executed";
+/**
+ * Coarse success/failure outcome KTA folds into the reputation score. The
+ * compute reporter collapses its finer 4-value status (success/error/denied/
+ * timeout) onto this two-value axis — anything that is not an unambiguous
+ * success counts as a failure for reputation purposes.
+ */
+export declare const InteractionOutcomeSchema: z.ZodEnum<["success", "failure"]>;
+export type InteractionOutcome = z.infer<typeof InteractionOutcomeSchema>;
+/**
+ * Evidentiary context carried alongside the signed attestation. `client_did`
+ * is optional because the agent may receive calls from un-attested clients
+ * during the rollout window; the attestation still has value without it.
+ */
+export declare const InteractionContextSchema: z.ZodObject<{
+    /** MCP session id from the originating tools/call. May be empty for headless flows. */
+    session_id: z.ZodString;
+    /** Calling client's DID, when known. Omitted (not null) when un-attested. */
+    client_did: z.ZodOptional<z.ZodString>;
+    /** Compact JWS attestation of the tool call, signed by the agent's key. */
+    attestation_jws: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    session_id: string;
+    attestation_jws: string;
+    client_did?: string | undefined;
+}, {
+    session_id: string;
+    attestation_jws: string;
+    client_did?: string | undefined;
+}>;
+export type InteractionContext = z.infer<typeof InteractionContextSchema>;
+/**
+ * Interaction Report Request Schema
+ *
+ * Fire-and-forget body POSTed per tool call. Authenticated by the
+ * `x-api-key` header (not part of the body); idempotency is the caller's
+ * responsibility via `idempotency_key`.
+ */
+export declare const InteractionReportRequestSchema: z.ZodObject<{
+    /** Interaction classification — `"scope_executed"` for tool-call attestations. */
+    interaction_type: z.ZodString;
+    /** Reputation-facing outcome. */
+    outcome: z.ZodEnum<["success", "failure"]>;
+    /** Authorized scopes for the call, when a delegation context supplies them. */
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** ISO 8601 timestamp of the call, set when the attestation is signed. */
+    timestamp: z.ZodString;
+    /** Evidentiary context including the signed attestation. */
+    context: z.ZodObject<{
+        /** MCP session id from the originating tools/call. May be empty for headless flows. */
+        session_id: z.ZodString;
+        /** Calling client's DID, when known. Omitted (not null) when un-attested. */
+        client_did: z.ZodOptional<z.ZodString>;
+        /** Compact JWS attestation of the tool call, signed by the agent's key. */
+        attestation_jws: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        session_id: string;
+        attestation_jws: string;
+        client_did?: string | undefined;
+    }, {
+        session_id: string;
+        attestation_jws: string;
+        client_did?: string | undefined;
+    }>;
+    /** Per-call key so a retried POST of the same call is deduped by KTA. */
+    idempotency_key: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    timestamp: string;
+    outcome: "success" | "failure";
+    context: {
+        session_id: string;
+        attestation_jws: string;
+        client_did?: string | undefined;
+    };
+    interaction_type: string;
+    idempotency_key: string;
+    scopes?: string[] | undefined;
+}, {
+    timestamp: string;
+    outcome: "success" | "failure";
+    context: {
+        session_id: string;
+        attestation_jws: string;
+        client_did?: string | undefined;
+    };
+    interaction_type: string;
+    idempotency_key: string;
+    scopes?: string[] | undefined;
+}>;
+export type InteractionReportRequest = z.infer<typeof InteractionReportRequestSchema>;
+/**
+ * Validate an interaction report request. Mirrors the `validate*` helpers in
+ * `./api.ts` so call sites can branch on `.success` without importing zod.
+ */
+export declare function validateInteractionReportRequest(data: unknown): z.SafeParseReturnType<{
+    timestamp: string;
+    outcome: "success" | "failure";
+    context: {
+        session_id: string;
+        attestation_jws: string;
+        client_did?: string | undefined;
+    };
+    interaction_type: string;
+    idempotency_key: string;
+    scopes?: string[] | undefined;
+}, {
+    timestamp: string;
+    outcome: "success" | "failure";
+    context: {
+        session_id: string;
+        attestation_jws: string;
+        client_did?: string | undefined;
+    };
+    interaction_type: string;
+    idempotency_key: string;
+    scopes?: string[] | undefined;
+}>;

package/dist/reputation/interactions.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * Interaction Report Request Contract
+ *
+ * The per-tool-call attestation body that identity-aware runtimes POST to
+ * KTA's `POST /api/v1/agents/{did}/interactions` endpoint (xmcp-i#413). KTA
+ * verifies the embedded JWS against the agent's registered public key and
+ * folds the outcome into the Bayesian reputation engine.
+ *
+ * WHY this lives in @kya-os/contracts: per the repo's API-parity rule, the
+ * wire shape of any cross-service POST must be a shared, Zod-validated
+ * contract — never inlined at the call site. The producer here is
+ * `@kya-os/compute`'s attestation reporter; the consumer is the KTA route.
+ *
+ * PARITY CAVEAT: KTA's receiving schema lives in a different repository
+ * (Know-That-Ai/know-that-ai → `src/app/api/v1/agents/[did]/interactions/`)
+ * and cannot be imported or validated from here. This schema mirrors the body
+ * shape already accepted in production (the existing attestation flow), and
+ * MUST be kept in lock-step with that route when either side changes.
+ *
+ * Related Spec: MCP-I §5 (Reputation)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InteractionReportRequestSchema = exports.InteractionContextSchema = exports.InteractionOutcomeSchema = exports.INTERACTION_TYPE_SCOPE_EXECUTED = void 0;
+exports.validateInteractionReportRequest = validateInteractionReportRequest;
+const zod_1 = require("zod");
+/**
+ * Interaction classification. Open-ended on the wire (KTA may accept more
+ * types over time), but the per-tool-call attestation path emits exactly
+ * `"scope_executed"`. Modeled as a string with that documented default rather
+ * than a closed enum so adding a new KTA-side type does not require a
+ * contracts bump on the producer before the receiver is ready.
+ */
+exports.INTERACTION_TYPE_SCOPE_EXECUTED = "scope_executed";
+/**
+ * Coarse success/failure outcome KTA folds into the reputation score. The
+ * compute reporter collapses its finer 4-value status (success/error/denied/
+ * timeout) onto this two-value axis — anything that is not an unambiguous
+ * success counts as a failure for reputation purposes.
+ */
+exports.InteractionOutcomeSchema = zod_1.z.enum(["success", "failure"]);
+/**
+ * Evidentiary context carried alongside the signed attestation. `client_did`
+ * is optional because the agent may receive calls from un-attested clients
+ * during the rollout window; the attestation still has value without it.
+ */
+exports.InteractionContextSchema = zod_1.z.object({
+    /** MCP session id from the originating tools/call. May be empty for headless flows. */
+    session_id: zod_1.z.string(),
+    /** Calling client's DID, when known. Omitted (not null) when un-attested. */
+    client_did: zod_1.z.string().optional(),
+    /** Compact JWS attestation of the tool call, signed by the agent's key. */
+    attestation_jws: zod_1.z.string(),
+});
+/**
+ * Interaction Report Request Schema
+ *
+ * Fire-and-forget body POSTed per tool call. Authenticated by the
+ * `x-api-key` header (not part of the body); idempotency is the caller's
+ * responsibility via `idempotency_key`.
+ */
+exports.InteractionReportRequestSchema = zod_1.z.object({
+    /** Interaction classification — `"scope_executed"` for tool-call attestations. */
+    interaction_type: zod_1.z.string(),
+    /** Reputation-facing outcome. */
+    outcome: exports.InteractionOutcomeSchema,
+    /** Authorized scopes for the call, when a delegation context supplies them. */
+    scopes: zod_1.z.array(zod_1.z.string()).optional(),
+    /** ISO 8601 timestamp of the call, set when the attestation is signed. */
+    timestamp: zod_1.z.string(),
+    /** Evidentiary context including the signed attestation. */
+    context: exports.InteractionContextSchema,
+    /** Per-call key so a retried POST of the same call is deduped by KTA. */
+    idempotency_key: zod_1.z.string(),
+});
+/**
+ * Validate an interaction report request. Mirrors the `validate*` helpers in
+ * `./api.ts` so call sites can branch on `.success` without importing zod.
+ */
+function validateInteractionReportRequest(data) {
+    return exports.InteractionReportRequestSchema.safeParse(data);
+}