@kya-os/mcp-i-cloudflare 1.13.0 → 1.13.2

package/dist/services/kya-os-events.service.d.ts

@@ -0,0 +1,131 @@
+/**
+ * KYA-OS Activity Events Emitter (Cloudflare Workers Implementation)
+ *
+ * Emits SPEC-EVENTS v0.1 audit events to a KYA-OS events sink (Checkpoint's
+ * `POST /api/v1/kya-os/events`), which fans them out into the activity feed.
+ *
+ * This is the activity-surface counterpart to the proof batch queue. The two
+ * are DELIBERATELY separate surfaces:
+ * - Proofs (`/api/v1/bouncer/proofs`) are cryptographic action receipts.
+ * - Activity events (`/api/v1/kya-os/events`) are the human-readable feed that
+ *   powers the dashboard `/activity` view and per-deployment activity.
+ *
+ * Both share the same AgentShield credentials (`AGENTSHIELD_API_URL` +
+ * `AGENTSHIELD_API_KEY`) and the same generic {@link BatchQueue} engine:
+ * fire-and-forget, auto-flush at batch size, cron-driven flush across requests.
+ *
+ * Tool arguments and results NEVER appear in an event.
+ */
+import { type BatchDestination } from "./batch-queue";
+/** The SPEC-EVENTS schema version this emitter produces. */
+export declare const SPEC_EVENTS_VERSION = "0.1";
+/** Self-identification forwarded to the sink's `source.sdk` block. */
+export declare const KYA_OS_EVENTS_SDK_NAME = "mcp-i-cloudflare";
+/**
+ * A `tool.invoked` event (SPEC-EVENTS v0.1). Mirrors
+ * `toolInvokedEventSchema` in Checkpoint's `lib/api/schemas/kya-os-events.ts`.
+ */
+export interface ToolInvokedEvent {
+    specVersion: string;
+    ts: string;
+    /** The emitting server. `serverDid` is REQUIRED on every event. */
+    source: {
+        serverDid: string;
+        sdk?: {
+            name: string;
+            version?: string;
+        };
+    };
+    session?: {
+        id: string;
+        agent?: {
+            did?: string;
+        };
+    };
+    type: "tool.invoked";
+    tool: {
+        name: string;
+        capability?: string;
+    };
+    verdict: "pass" | "fail";
+    /** Only when verdict=fail. */
+    error?: {
+        excerpt: string;
+    };
+}
+/** Union of the event types this emitter can produce (extensible). */
+export type KyaOsEvent = ToolInvokedEvent;
+/**
+ * KYA-OS events sink destination.
+ *
+ * POSTs a `{ events: [...] }` batch (1-100) to the sink with Bearer auth.
+ */
+export declare class KyaOsEventsDestination implements BatchDestination<KyaOsEvent> {
+    name: string;
+    private apiUrl;
+    private apiKey;
+    constructor(apiUrl: string, apiKey: string);
+    submit(events: KyaOsEvent[]): Promise<void>;
+}
+/**
+ * Input to {@link KyaOsEventsEmitter.emitToolInvoked}. Purposefully small: the
+ * caller (the proof/tool-call seam) already holds all of this.
+ */
+export interface ToolInvokedInput {
+    /** The emitting server's own DID (proof `meta.did`). REQUIRED. */
+    serverDid: string;
+    /** MCP session id, when known. */
+    sessionId?: string;
+    /** Verified calling-agent DID (holder-of-key), when known. */
+    agentDid?: string;
+    /** The dispatched tool name. REQUIRED. */
+    toolName: string;
+    /** Optional capability string for the tool. */
+    capability?: string;
+    /** Whether the dispatch succeeded. `false` => verdict "fail". */
+    success?: boolean;
+    /** Short failure excerpt (only forwarded when `success === false`). */
+    errorExcerpt?: string;
+    /** Injectable timestamp for deterministic tests; defaults to now. */
+    ts?: string;
+}
+export interface KyaOsEventsEmitterOptions {
+    maxBatchSize?: number;
+    maxRetries?: number;
+    debug?: boolean;
+    /** Emitting SDK version, forwarded as `source.sdk.version` when set. */
+    sdkVersion?: string;
+}
+/**
+ * Batches and submits KYA-OS activity events.
+ *
+ * Lifecycle mirrors the proof service: `emitToolInvoked` enqueues (auto-flush
+ * at batch size), and `flush()` is called from the scheduled (cron) handler to
+ * drain across requests.
+ */
+export declare class KyaOsEventsEmitter {
+    private queue;
+    private sdkVersion?;
+    constructor(apiUrl: string, apiKey: string, options?: KyaOsEventsEmitterOptions);
+    /** Build the `source.sdk` block (name always; version when configured). */
+    private sdk;
+    /**
+     * Construct and enqueue a `tool.invoked` event.
+     *
+     * A `serverDid` or `toolName` that is empty is dropped (the sink requires
+     * both), so a malformed call can never poison a batch.
+     */
+    emitToolInvoked(input: ToolInvokedInput): void;
+    /** Drain the queue and retry any pending batches (cron-driven). */
+    flush(): Promise<void>;
+    /** Flush remaining events and stop accepting new ones. */
+    close(): Promise<void>;
+    /** Queue statistics (for diagnostics/tests). */
+    getStats(): {
+        queued: number;
+        submitted: number;
+        failed: number;
+        batchesSubmitted: number;
+    };
+}
+//# sourceMappingURL=kya-os-events.service.d.ts.map

package/dist/services/kya-os-events.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kya-os-events.service.d.ts","sourceRoot":"","sources":["../../src/services/kya-os-events.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAElE,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAQzD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1C,CAAC;IACF,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1B,CAAC;IACF,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,8BAA8B;IAC9B,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAED,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAE1C;;;;GAIG;AACH,qBAAa,sBAAuB,YAAW,gBAAgB,CAAC,UAAU,CAAC;IACzE,IAAI,SAAiB;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAKpC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAuBlD;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,UAAU,CAAC,CAAS;gBAG1B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,yBAA8B;IAazC,2EAA2E;IAC3E,OAAO,CAAC,GAAG;IAMX;;;;;OAKG;IACH,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAiC9C,mEAAmE;IAC7D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,0DAA0D;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,gDAAgD;IAChD,QAAQ;;;;;;CAGT"}

package/dist/services/kya-os-events.service.js

@@ -0,0 +1,135 @@
+/**
+ * KYA-OS Activity Events Emitter (Cloudflare Workers Implementation)
+ *
+ * Emits SPEC-EVENTS v0.1 audit events to a KYA-OS events sink (Checkpoint's
+ * `POST /api/v1/kya-os/events`), which fans them out into the activity feed.
+ *
+ * This is the activity-surface counterpart to the proof batch queue. The two
+ * are DELIBERATELY separate surfaces:
+ * - Proofs (`/api/v1/bouncer/proofs`) are cryptographic action receipts.
+ * - Activity events (`/api/v1/kya-os/events`) are the human-readable feed that
+ *   powers the dashboard `/activity` view and per-deployment activity.
+ *
+ * Both share the same AgentShield credentials (`AGENTSHIELD_API_URL` +
+ * `AGENTSHIELD_API_KEY`) and the same generic {@link BatchQueue} engine:
+ * fire-and-forget, auto-flush at batch size, cron-driven flush across requests.
+ *
+ * Tool arguments and results NEVER appear in an event.
+ */
+import { BatchQueue } from "./batch-queue";
+/** The SPEC-EVENTS schema version this emitter produces. */
+export const SPEC_EVENTS_VERSION = "0.1";
+/** Self-identification forwarded to the sink's `source.sdk` block. */
+export const KYA_OS_EVENTS_SDK_NAME = "mcp-i-cloudflare";
+/** The sink path appended to the AgentShield API base URL. */
+const EVENTS_PATH = "/api/v1/kya-os/events";
+/** Max characters retained from a failure excerpt (sink caps at 200). */
+const MAX_ERROR_EXCERPT = 200;
+/**
+ * KYA-OS events sink destination.
+ *
+ * POSTs a `{ events: [...] }` batch (1-100) to the sink with Bearer auth.
+ */
+export class KyaOsEventsDestination {
+    name = "KyaOsEvents";
+    apiUrl;
+    apiKey;
+    constructor(apiUrl, apiKey) {
+        this.apiUrl = apiUrl.replace(/\/$/, "");
+        this.apiKey = apiKey;
+    }
+    async submit(events) {
+        if (events.length === 0) {
+            return;
+        }
+        const response = await fetch(`${this.apiUrl}${EVENTS_PATH}`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${this.apiKey}`,
+            },
+            body: JSON.stringify({ events }),
+        });
+        if (!response.ok) {
+            const errorBody = await response
+                .text()
+                .catch(() => "Unable to read error body");
+            throw new Error(`KYA-OS events submission failed: ${response.status} ${response.statusText}\n${errorBody}`);
+        }
+    }
+}
+/**
+ * Batches and submits KYA-OS activity events.
+ *
+ * Lifecycle mirrors the proof service: `emitToolInvoked` enqueues (auto-flush
+ * at batch size), and `flush()` is called from the scheduled (cron) handler to
+ * drain across requests.
+ */
+export class KyaOsEventsEmitter {
+    queue;
+    sdkVersion;
+    constructor(apiUrl, apiKey, options = {}) {
+        this.sdkVersion = options.sdkVersion;
+        this.queue = new BatchQueue({
+            destinations: [new KyaOsEventsDestination(apiUrl, apiKey)],
+            maxBatchSize: options.maxBatchSize ?? 10,
+            maxRetries: options.maxRetries ?? 3,
+            debug: options.debug ?? false,
+            logPrefix: "KyaOsEventsEmitter",
+            noun: "event",
+        });
+    }
+    /** Build the `source.sdk` block (name always; version when configured). */
+    sdk() {
+        return this.sdkVersion
+            ? { name: KYA_OS_EVENTS_SDK_NAME, version: this.sdkVersion }
+            : { name: KYA_OS_EVENTS_SDK_NAME };
+    }
+    /**
+     * Construct and enqueue a `tool.invoked` event.
+     *
+     * A `serverDid` or `toolName` that is empty is dropped (the sink requires
+     * both), so a malformed call can never poison a batch.
+     */
+    emitToolInvoked(input) {
+        if (!input.serverDid || !input.toolName) {
+            return;
+        }
+        const failed = input.success === false;
+        const event = {
+            specVersion: SPEC_EVENTS_VERSION,
+            ts: input.ts ?? new Date().toISOString(),
+            source: { serverDid: input.serverDid, sdk: this.sdk() },
+            type: "tool.invoked",
+            tool: {
+                name: input.toolName,
+                ...(input.capability ? { capability: input.capability } : {}),
+            },
+            verdict: failed ? "fail" : "pass",
+        };
+        if (input.sessionId) {
+            event.session = {
+                id: input.sessionId,
+                ...(input.agentDid ? { agent: { did: input.agentDid } } : {}),
+            };
+        }
+        if (failed && input.errorExcerpt) {
+            event.error = { excerpt: input.errorExcerpt.slice(0, MAX_ERROR_EXCERPT) };
+        }
+        this.queue.enqueue(event);
+    }
+    /** Drain the queue and retry any pending batches (cron-driven). */
+    async flush() {
+        await this.queue.flush();
+        await this.queue.retryPending();
+    }
+    /** Flush remaining events and stop accepting new ones. */
+    async close() {
+        await this.queue.close();
+    }
+    /** Queue statistics (for diagnostics/tests). */
+    getStats() {
+        return this.queue.getStats();
+    }
+}
+//# sourceMappingURL=kya-os-events.service.js.map

package/dist/services/kya-os-events.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kya-os-events.service.js","sourceRoot":"","sources":["../../src/services/kya-os-events.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAyB,MAAM,eAAe,CAAC;AAElE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD,8DAA8D;AAC9D,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,GAAG,CAAC;AA4B9B;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACjC,IAAI,GAAG,aAAa,CAAC;IACb,MAAM,CAAS;IACf,MAAM,CAAS;IAEvB,YAAY,MAAc,EAAE,MAAc;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;aACvC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ;iBAC7B,IAAI,EAAE;iBACN,KAAK,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAiCD;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACrB,KAAK,CAAyB;IAC9B,UAAU,CAAU;IAE5B,YACE,MAAc,EACd,MAAc,EACd,UAAqC,EAAE;QAEvC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,UAAU,CAAa;YACtC,YAAY,EAAE,CAAC,IAAI,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1D,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;YACxC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;YACnC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;YAC7B,SAAS,EAAE,oBAAoB;YAC/B,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IACnE,GAAG;QACT,OAAO,IAAI,CAAC,UAAU;YACpB,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,KAAuB;QACrC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC;QAEvC,MAAM,KAAK,GAAqB;YAC9B,WAAW,EAAE,mBAAmB;YAChC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;YACvD,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE;gBACJ,IAAI,EAAE,KAAK,CAAC,QAAQ;gBACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D;YACD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;SAClC,CAAC;QAEF,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,OAAO,GAAG;gBACd,EAAE,EAAE,KAAK,CAAC,SAAS;gBACnB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACjC,KAAK,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,gDAAgD;IAChD,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/dist/services/proof-batch-queue.d.ts

@@ -1,11 +1,10 @@
 /**
  * Proof Batch Queue (Cloudflare Workers Implementation)
  *
- * Platform-agnostic proof batching for Cloudflare Workers.
- * Copied from @kya-os/mcp-i to avoid pulling in @swc/core dependency.
- *
- * Collects proofs in memory and submits them in batches to AgentShield.
- * This prevents blocking tool execution while ensuring proofs are eventually submitted.
+ * Proof-typed view over the generic {@link BatchQueue}. Collects proofs in
+ * memory and submits them in batches to AgentShield, without blocking tool
+ * execution. All batching/retry/flush semantics live in `batch-queue.ts`;
+ * this module only adds the proof-specific destination wire format.
  *
  * Performance:
  * - Batch size: 10 proofs (configurable)
@@ -18,17 +17,13 @@
  * - Failed proofs logged and dropped after max retries
  */
 import type { DetachedProof } from "@kya-os/contracts/proof";
+import { BatchQueue, type BatchDestination, type BatchQueueConfig } from "./batch-queue";
 /**
- * Proof submission destination
+ * Proof submission destination.
  */
-export interface ProofDestination {
-    /** Destination name (for logging) */
-    name: string;
-    /** Submit batch of proofs */
-    submit(proofs: DetachedProof[]): Promise<void>;
-}
+export type ProofDestination = BatchDestination<DetachedProof>;
 /**
- * AgentShield proof submission destination
+ * AgentShield proof submission destination.
  *
  * Submits proofs to AgentShield's /api/v1/bouncer/proofs endpoint
  * with proper authentication and session grouping.
@@ -41,64 +36,17 @@ export declare class AgentShieldProofDestination implements ProofDestination {
     submit(proofs: DetachedProof[]): Promise<void>;
 }
 /**
- * Proof batch queue configuration
+ * Proof batch queue configuration.
  */
-export interface ProofBatchQueueConfig {
-    /** Destinations to submit proofs to */
-    destinations: ProofDestination[];
-    /** Maximum batch size before auto-flush */
-    maxBatchSize?: number;
-    /** Flush interval in milliseconds (not used in Cloudflare Workers - rely on cron) */
-    flushIntervalMs?: number;
-    /** Maximum retry attempts for failed batches */
-    maxRetries?: number;
-    /** Enable debug logging */
-    debug?: boolean;
-}
+export type ProofBatchQueueConfig = Omit<BatchQueueConfig<DetachedProof>, "logPrefix" | "noun">;
 /**
- * Proof Batch Queue
- *
- * Collects proofs and submits them in batches to multiple destinations.
+ * Proof Batch Queue.
  *
- * Note: In Cloudflare Workers, timers don't persist across requests,
- * so automatic flush timers are disabled. Use manual flush() calls via cron jobs.
+ * A {@link BatchQueue} specialized for {@link DetachedProof}s. Preserves the
+ * historical public surface (constructor config, `enqueue`, `flush`,
+ * `retryPending`, `close`, `getStats`) and log wording (`[ProofBatchQueue]`).
  */
-export declare class ProofBatchQueue {
-    private queue;
-    private pendingBatches;
-    private config;
-    private closed;
-    private stats;
+export declare class ProofBatchQueue extends BatchQueue<DetachedProof> {
     constructor(config: ProofBatchQueueConfig);
-    /**
-     * Add proof to queue
-     */
-    enqueue(proof: DetachedProof): void;
-    /**
-     * Flush queue immediately (submit all queued proofs)
-     */
-    flush(): Promise<void>;
-    /**
-     * Submit batch to destination (with retries)
-     */
-    private submitBatch;
-    /**
-     * Retry pending batches that are ready
-     * Called by cron job or manually
-     */
-    retryPending(): Promise<void>;
-    /**
-     * Close queue and flush remaining proofs
-     */
-    close(): Promise<void>;
-    /**
-     * Get queue statistics
-     */
-    getStats(): {
-        queued: number;
-        submitted: number;
-        failed: number;
-        batchesSubmitted: number;
-    };
 }
 //# sourceMappingURL=proof-batch-queue.d.ts.map

package/dist/services/proof-batch-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof-batch-queue.d.ts","sourceRoot":"","sources":["../../src/services/proof-batch-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IAEb,6BAA6B;IAC7B,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED;;;;;GAKG;AACH,qBAAa,2BAA4B,YAAW,gBAAgB;IAClE,IAAI,SAAiB;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAKpC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAmCrD;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,uCAAuC;IACvC,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qFAAqF;IACrF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AASD;;;;;;;GAOG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,MAAM,CAAS;IAGvB,OAAO,CAAC,KAAK,CAKX;gBAEU,MAAM,EAAE,qBAAqB;IAazC;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAqBnC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB5B;;OAEG;YACW,WAAW;IA4CzB;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBnC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B;;OAEG;IACH,QAAQ;;;;;;CAGT"}
+{"version":3,"file":"proof-batch-queue.d.ts","sourceRoot":"","sources":["../../src/services/proof-batch-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACL,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAEvB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,qBAAa,2BAA4B,YAAW,gBAAgB;IAClE,IAAI,SAAiB;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAKpC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAmCrD;AAED;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,gBAAgB,CAAC,aAAa,CAAC,EAC/B,WAAW,GAAG,MAAM,CACrB,CAAC;AAEF;;;;;;GAMG;AACH,qBAAa,eAAgB,SAAQ,UAAU,CAAC,aAAa,CAAC;gBAChD,MAAM,EAAE,qBAAqB;CAG1C"}

package/dist/services/proof-batch-queue.js

@@ -1,11 +1,10 @@
 /**
  * Proof Batch Queue (Cloudflare Workers Implementation)
  *
- * Platform-agnostic proof batching for Cloudflare Workers.
- * Copied from @kya-os/mcp-i to avoid pulling in @swc/core dependency.
- *
- * Collects proofs in memory and submits them in batches to AgentShield.
- * This prevents blocking tool execution while ensuring proofs are eventually submitted.
+ * Proof-typed view over the generic {@link BatchQueue}. Collects proofs in
+ * memory and submits them in batches to AgentShield, without blocking tool
+ * execution. All batching/retry/flush semantics live in `batch-queue.ts`;
+ * this module only adds the proof-specific destination wire format.
  *
  * Performance:
  * - Batch size: 10 proofs (configurable)
@@ -17,8 +16,9 @@
  * - Max retries: 5
  * - Failed proofs logged and dropped after max retries
  */
+import { BatchQueue, } from "./batch-queue";
 /**
- * AgentShield proof submission destination
+ * AgentShield proof submission destination.
  *
  * Submits proofs to AgentShield's /api/v1/bouncer/proofs endpoint
  * with proper authentication and session grouping.
@@ -62,150 +62,15 @@ export class AgentShieldProofDestination {
     }
 }
 /**
- * Proof Batch Queue
- *
- * Collects proofs and submits them in batches to multiple destinations.
+ * Proof Batch Queue.
  *
- * Note: In Cloudflare Workers, timers don't persist across requests,
- * so automatic flush timers are disabled. Use manual flush() calls via cron jobs.
+ * A {@link BatchQueue} specialized for {@link DetachedProof}s. Preserves the
+ * historical public surface (constructor config, `enqueue`, `flush`,
+ * `retryPending`, `close`, `getStats`) and log wording (`[ProofBatchQueue]`).
  */
-export class ProofBatchQueue {
-    queue = [];
-    pendingBatches = [];
-    config;
-    closed = false;
-    // Stats
-    stats = {
-        queued: 0,
-        submitted: 0,
-        failed: 0,
-        batchesSubmitted: 0,
-    };
+export class ProofBatchQueue extends BatchQueue {
     constructor(config) {
-        this.config = {
-            destinations: config.destinations,
-            maxBatchSize: config.maxBatchSize || 10,
-            flushIntervalMs: config.flushIntervalMs || 5000,
-            maxRetries: config.maxRetries || 5,
-            debug: config.debug || false,
-        };
-        // Note: Timers are disabled in Cloudflare Workers
-        // Flush must be called manually via cron jobs
-    }
-    /**
-     * Add proof to queue
-     */
-    enqueue(proof) {
-        if (this.closed) {
-            console.warn("[ProofBatchQueue] Queue is closed, dropping proof");
-            return;
-        }
-        this.queue.push(proof);
-        this.stats.queued++;
-        if (this.config.debug) {
-            console.error(`[ProofBatchQueue] Enqueued proof (queue size: ${this.queue.length})`);
-        }
-        // Flush immediately if batch size reached (Cloudflare Workers compatible)
-        if (this.queue.length >= this.config.maxBatchSize) {
-            this.flush();
-        }
-    }
-    /**
-     * Flush queue immediately (submit all queued proofs)
-     */
-    async flush() {
-        if (this.queue.length === 0) {
-            return;
-        }
-        const proofs = this.queue.splice(0, this.config.maxBatchSize);
-        if (this.config.debug) {
-            console.error(`[ProofBatchQueue] Flushing ${proofs.length} proofs to ${this.config.destinations.length} destinations`);
-        }
-        // Submit to all destinations
-        for (const destination of this.config.destinations) {
-            const batch = {
-                proofs: [...proofs], // Copy proofs for each destination
-                destination,
-                retryCount: 0,
-            };
-            this.submitBatch(batch); // Fire-and-forget
-        }
-    }
-    /**
-     * Submit batch to destination (with retries)
-     */
-    async submitBatch(batch) {
-        try {
-            await batch.destination.submit(batch.proofs);
-            this.stats.submitted += batch.proofs.length;
-            this.stats.batchesSubmitted++;
-            if (this.config.debug) {
-                console.error(`[ProofBatchQueue] Successfully submitted ${batch.proofs.length} proofs to ${batch.destination.name}`);
-            }
-        }
-        catch (error) {
-            console.error(`[ProofBatchQueue] Failed to submit to ${batch.destination.name}:`, error);
-            // Retry with exponential backoff
-            if (batch.retryCount < this.config.maxRetries) {
-                batch.retryCount++;
-                const backoffMs = Math.min(1000 * Math.pow(2, batch.retryCount - 1), 16000);
-                batch.nextRetryAt = Date.now() + backoffMs;
-                this.pendingBatches.push(batch);
-                if (this.config.debug) {
-                    console.error(`[ProofBatchQueue] Scheduling retry ${batch.retryCount}/${this.config.maxRetries} in ${backoffMs}ms`);
-                }
-            }
-            else {
-                // Max retries exceeded, drop batch
-                this.stats.failed += batch.proofs.length;
-                console.error(`[ProofBatchQueue] Max retries exceeded for ${batch.destination.name}, dropping ${batch.proofs.length} proofs`);
-            }
-        }
-    }
-    /**
-     * Retry pending batches that are ready
-     * Called by cron job or manually
-     */
-    async retryPending() {
-        const now = Date.now();
-        const retryBatches = this.pendingBatches.filter((batch) => batch.nextRetryAt && batch.nextRetryAt <= now);
-        if (retryBatches.length > 0) {
-            // Remove from pending
-            this.pendingBatches = this.pendingBatches.filter((batch) => !retryBatches.includes(batch));
-            // Retry each batch
-            for (const batch of retryBatches) {
-                this.submitBatch(batch); // Fire-and-forget
-            }
-        }
-    }
-    /**
-     * Close queue and flush remaining proofs
-     */
-    async close() {
-        if (this.closed) {
-            return;
-        }
-        this.closed = true;
-        // Flush remaining proofs
-        if (this.queue.length > 0) {
-            await this.flush();
-        }
-        // Wait for pending batches (with timeout)
-        const timeout = 5000; // 5 seconds
-        const startTime = Date.now();
-        while (this.pendingBatches.length > 0 && Date.now() - startTime < timeout) {
-            await this.retryPending();
-            await new Promise((resolve) => setTimeout(resolve, 100));
-        }
-        if (this.pendingBatches.length > 0) {
-            console.warn(`[ProofBatchQueue] Closing with ${this.pendingBatches.length} pending batches (timed out)`);
-        }
-    }
-    /**
-     * Get queue statistics
-     */
-    getStats() {
-        return { ...this.stats };
+        super({ ...config, logPrefix: "ProofBatchQueue", noun: "proof" });
     }
 }
 //# sourceMappingURL=proof-batch-queue.js.map

package/dist/services/proof-batch-queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"proof-batch-queue.js","sourceRoot":"","sources":["../../src/services/proof-batch-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAeH;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IACtC,IAAI,GAAG,aAAa,CAAC;IACb,MAAM,CAAS;IACf,MAAM,CAAS;IAEvB,YAAY,MAAc,EAAE,MAAc;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,SAAS,CAAC;QAE1D,uEAAuE;QACvE,MAAM,WAAW,GAAG;YAClB,aAAa,EAAE,IAAI,EAAE,6CAA6C;YAClE,UAAU,EAAE,SAAS,EAAE,wDAAwD;YAC/E,MAAM,EAAE,MAAM;SACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,wBAAwB,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB;aAC/D;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,+CAA+C;YAC/C,MAAM,SAAS,GAAG,MAAM,QAAQ;iBAC7B,IAAI,EAAE;iBACN,KAAK,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAyBD;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAClB,KAAK,GAAoB,EAAE,CAAC;IAC5B,cAAc,GAAiB,EAAE,CAAC;IAClC,MAAM,CAAkC;IACxC,MAAM,GAAG,KAAK,CAAC;IAEvB,QAAQ;IACA,KAAK,GAAG;QACd,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,CAAC;QACT,gBAAgB,EAAE,CAAC;KACpB,CAAC;IAEF,YAAY,MAA6B;QACvC,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;YAC/C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;SAC7B,CAAC;QAEF,kDAAkD;QAClD,8CAA8C;IAChD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAAoB;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAEpB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CACX,iDAAiD,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CACtE,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE9D,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CACX,8BAA8B,MAAM,CAAC,MAAM,cAAc,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,eAAe,CACxG,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,KAAK,GAAe;gBACxB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,mCAAmC;gBACxD,WAAW;gBACX,UAAU,EAAE,CAAC;aACd,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB;QAC7C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,KAAiB;QACzC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAE7C,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAE9B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CACX,4CAA4C,KAAK,CAAC,MAAM,CAAC,MAAM,cAAc,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CACtG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,yCAAyC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,EAClE,KAAK,CACN,CAAC;YAEF,iCAAiC;YACjC,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC9C,KAAK,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EACxC,KAAK,CACN,CAAC;gBACF,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAE3C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAEhC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,KAAK,CACX,sCAAsC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,OAAO,SAAS,IAAI,CACrG,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,mCAAmC;gBACnC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACzC,OAAO,CAAC,KAAK,CACX,8CAA8C,KAAK,CAAC,WAAW,CAAC,IAAI,cAAc,KAAK,CAAC,MAAM,CAAC,MAAM,SAAS,CAC/G,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,IAAI,GAAG,CACzD,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,sBAAsB;YACtB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CACzC,CAAC;YAEF,mBAAmB;YACnB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAEnB,yBAAyB;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,YAAY;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YAC1E,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CACV,kCAAkC,IAAI,CAAC,cAAc,CAAC,MAAM,8BAA8B,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"proof-batch-queue.js","sourceRoot":"","sources":["../../src/services/proof-batch-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EACL,UAAU,GAGX,MAAM,eAAe,CAAC;AAOvB;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IACtC,IAAI,GAAG,aAAa,CAAC;IACb,MAAM,CAAS;IACf,MAAM,CAAS;IAEvB,YAAY,MAAc,EAAE,MAAc;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,SAAS,CAAC;QAE1D,uEAAuE;QACvE,MAAM,WAAW,GAAG;YAClB,aAAa,EAAE,IAAI,EAAE,6CAA6C;YAClE,UAAU,EAAE,SAAS,EAAE,wDAAwD;YAC/E,MAAM,EAAE,MAAM;SACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,wBAAwB,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB;aAC/D;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,+CAA+C;YAC/C,MAAM,SAAS,GAAG,MAAM,QAAQ;iBAC7B,IAAI,EAAE;iBACN,KAAK,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAUD;;;;;;GAMG;AACH,MAAM,OAAO,eAAgB,SAAQ,UAAyB;IAC5D,YAAY,MAA6B;QACvC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/services/proof.service.d.ts

@@ -27,6 +27,13 @@ export declare class ProofService {
     private config;
     private runtime?;
     private batchQueue?;
+    /**
+     * Emits SPEC-EVENTS `tool.invoked` activity events to the KYA-OS events sink
+     * (the dashboard `/activity` feed). Separate surface from proofs; shares the
+     * same AgentShield credentials. Absent when no valid AgentShield destination
+     * is configured.
+     */
+    private eventsEmitter?;
     private firstProofSubmitted;
     constructor(config: CloudflareRuntimeConfig, runtime?: CloudflareRuntime);
     /**

package/dist/services/proof.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAQrE,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAGF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAEnC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAuCD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC,OAAO,CAAC,mBAAmB,CAAS;gBAExB,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAmHxE;;;;;;;;;OASG;IACG,WAAW,CACf,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC;IAqDhB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IA8C9B;;OAEG;YACW,iBAAiB;IA0T/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ7B"}
+{"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AASrE,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAGF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAEnC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAuCD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC,CAAqB;IAC3C,OAAO,CAAC,mBAAmB,CAAS;gBAExB,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAqIxE;;;;;;;;;OASG;IACG,WAAW,CACf,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC;IAkEhB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IA8C9B;;OAEG;YACW,iBAAiB;IA0T/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAY7B"}