@kya-os/mcp 1.10.1 → 1.12.0

package/dist/audit/schemas.d.ts

@@ -0,0 +1,1145 @@
+import { z } from 'zod';
+import type { AuditBundleManifestCoreV1, AuditCheckpointCoreV1, AuditEntryCoreV1, AuditProducerEventCoreV1, AuditRecorderReceiptCoreV1, AuditObservationReceiptV1, AuditReplayBundleV1, AuditVerificationPolicyV1, SignedAuditEntryV1, SignedAuditCheckpointV1 } from './types.js';
+export declare const AUDIT_EVENT_SCHEMA_ID: "https://schema.kya-os.org/v1/protocol/audit/event/v1.0.0";
+export declare const AUDIT_ENTRY_SCHEMA_ID: "https://schema.kya-os.org/v1/protocol/audit/entry/v1.0.0";
+export declare const AUDIT_RECEIPT_SCHEMA_ID: "https://schema.kya-os.org/v1/protocol/audit/receipt/v1.0.0";
+export declare const AUDIT_INTEGRITY_SUITE: "KYA-AUDIT-JCS-SHA256-JWS-2026";
+export declare const AUDIT_CHECKPOINT_SCHEMA_ID: "https://schema.kya-os.org/v1/protocol/audit/checkpoint/v1.0.0";
+export declare const AUDIT_CHECKPOINT_INTEGRITY_SUITE: "KYA-AUDIT-RFC9162-SHA256-JWS-2026";
+export declare const AUDIT_BUNDLE_MANIFEST_SCHEMA_ID: "https://schema.kya-os.org/v1/protocol/audit/bundle-manifest/v1.0.0";
+export declare const AUDIT_BUNDLE_INTEGRITY_SUITE: "KYA-AUDIT-BUNDLE-JCS-SHA256-JWS-2026";
+export declare const decimalStringSchema: z.ZodString;
+export declare const digestSchema: z.ZodString;
+export declare const signerRefSchema: z.ZodObject<{
+    did: z.ZodString;
+    kid: z.ZodString;
+    alg: z.ZodEnum<{
+        EdDSA: "EdDSA";
+        ES256: "ES256";
+    }>;
+}, z.core.$strict>;
+export declare const evidenceRefSchema: z.ZodType;
+export declare const partyRefSchema: z.ZodType;
+export declare const auditProducerEventSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/event/v1.0.0">;
+    eventId: z.ZodString;
+    eventType: z.ZodEnum<{
+        "session.established": "session.established";
+        "session.rejected": "session.rejected";
+        "session.expired": "session.expired";
+        "session.replay_rejected": "session.replay_rejected";
+        "tool.call.started": "tool.call.started";
+        "tool.call.completed": "tool.call.completed";
+        "tool.call.failed": "tool.call.failed";
+        "tool.call.denied": "tool.call.denied";
+        "tool.call.challenged": "tool.call.challenged";
+        "proof.generated": "proof.generated";
+        "proof.verified": "proof.verified";
+        "proof.rejected": "proof.rejected";
+        "delegation.issued": "delegation.issued";
+        "delegation.verified": "delegation.verified";
+        "delegation.rejected": "delegation.rejected";
+        "delegation.revoked": "delegation.revoked";
+        "delegation.cascade_revoked": "delegation.cascade_revoked";
+        "delegation.outbound_attached": "delegation.outbound_attached";
+        "authorization.evaluated": "authorization.evaluated";
+        "authorization.approved": "authorization.approved";
+        "authorization.denied": "authorization.denied";
+        "authorization.step_up_required": "authorization.step_up_required";
+        "grant.used": "grant.used";
+        "consent.requested": "consent.requested";
+        "consent.approved": "consent.approved";
+        "consent.denied": "consent.denied";
+        "credential.required": "credential.required";
+        "credential.verified": "credential.verified";
+        "credential.failed": "credential.failed";
+        "key.rotated": "key.rotated";
+        "policy.changed": "policy.changed";
+        "configuration.changed": "configuration.changed";
+        "integrity_suite.transitioned": "integrity_suite.transitioned";
+        "ledger.epoch.started": "ledger.epoch.started";
+        "ledger.epoch.transitioned": "ledger.epoch.transitioned";
+        "checkpoint.created": "checkpoint.created";
+        "checkpoint.anchored": "checkpoint.anchored";
+        "checkpoint.anchor_failed": "checkpoint.anchor_failed";
+        "evidence.disposed": "evidence.disposed";
+        "projection.reconciled": "projection.reconciled";
+        "audit.source_high_water": "audit.source_high_water";
+        "audit.accessed": "audit.accessed";
+        "audit.exported": "audit.exported";
+        "legal_hold.applied": "legal_hold.applied";
+        "retention.executed": "retention.executed";
+    }>;
+    eventVersion: z.ZodLiteral<"1.0.0">;
+    binding: z.ZodString;
+    occurredAt: z.ZodNumber;
+    tenantRef: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    source: z.ZodObject<{
+        producer: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+        sourceId: z.ZodString;
+        sourceSequence: z.ZodOptional<z.ZodString>;
+        previousSourceEventDigest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    causationId: z.ZodOptional<z.ZodString>;
+    trace: z.ZodOptional<z.ZodObject<{
+        traceId: z.ZodOptional<z.ZodString>;
+        spanId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    session: z.ZodOptional<z.ZodObject<{
+        ref: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+        handshakeNonceCommitment: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    actor: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    responsibleParty: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    resource: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    action: z.ZodObject<{
+        category: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        detailRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    }, z.core.$strict>;
+    outcome: z.ZodEnum<{
+        denied: "denied";
+        unknown: "unknown";
+        failed: "failed";
+        challenged: "challenged";
+        succeeded: "succeeded";
+    }>;
+    reason: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        detailRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    }, z.core.$strict>>;
+    authorization: z.ZodOptional<z.ZodObject<{
+        source: z.ZodEnum<{
+            delegation: "delegation";
+            anonymous: "anonymous";
+            grant: "grant";
+            policy: "policy";
+        }>;
+        decision: z.ZodEnum<{
+            needs_authorization: "needs_authorization";
+            allowed: "allowed";
+            denied: "denied";
+            step_up_required: "step_up_required";
+        }>;
+        scopeId: z.ZodOptional<z.ZodString>;
+        delegationRef: z.ZodOptional<z.ZodString>;
+        delegationCredentialDigest: z.ZodOptional<z.ZodString>;
+        delegationChainDigests: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        statusEvidence: z.ZodOptional<z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+        grantRef: z.ZodOptional<z.ZodString>;
+        policyId: z.ZodOptional<z.ZodString>;
+        policyVersion: z.ZodOptional<z.ZodString>;
+        policyDigest: z.ZodOptional<z.ZodString>;
+        verificationCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    proof: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    evidence: z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    details: z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
+        family: z.ZodLiteral<"session">;
+        phase: z.ZodEnum<{
+            expired: "expired";
+            established: "established";
+            rejected: "rejected";
+            replay_rejected: "replay_rejected";
+        }>;
+        reasonCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"tool">;
+        phase: z.ZodEnum<{
+            denied: "denied";
+            started: "started";
+            completed: "completed";
+            failed: "failed";
+            challenged: "challenged";
+        }>;
+        attempt: z.ZodString;
+        idempotencyRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"proof">;
+        phase: z.ZodEnum<{
+            rejected: "rejected";
+            generated: "generated";
+            verified: "verified";
+        }>;
+        proofDigest: z.ZodOptional<z.ZodString>;
+        verificationCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"delegation">;
+        phase: z.ZodEnum<{
+            revoked: "revoked";
+            rejected: "rejected";
+            verified: "verified";
+            issued: "issued";
+            cascade_revoked: "cascade_revoked";
+            outbound_attached: "outbound_attached";
+        }>;
+        delegationRef: z.ZodString;
+        parentRef: z.ZodOptional<z.ZodString>;
+        statusEvidence: z.ZodOptional<z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"authorization">;
+        phase: z.ZodEnum<{
+            denied: "denied";
+            step_up_required: "step_up_required";
+            evaluated: "evaluated";
+            approved: "approved";
+            grant_used: "grant_used";
+        }>;
+        policyDigest: z.ZodOptional<z.ZodString>;
+        grantRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"consent">;
+        phase: z.ZodEnum<{
+            denied: "denied";
+            approved: "approved";
+            requested: "requested";
+            credential_required: "credential_required";
+            credential_verified: "credential_verified";
+            credential_failed: "credential_failed";
+        }>;
+        consentRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"key">;
+        phase: z.ZodEnum<{
+            rotated: "rotated";
+            policy_changed: "policy_changed";
+            configuration_changed: "configuration_changed";
+            integrity_suite_transitioned: "integrity_suite_transitioned";
+        }>;
+        previousSigner: z.ZodOptional<z.ZodObject<{
+            did: z.ZodString;
+            kid: z.ZodString;
+            alg: z.ZodEnum<{
+                EdDSA: "EdDSA";
+                ES256: "ES256";
+            }>;
+        }, z.core.$strict>>;
+        nextSigner: z.ZodOptional<z.ZodObject<{
+            did: z.ZodString;
+            kid: z.ZodString;
+            alg: z.ZodEnum<{
+                EdDSA: "EdDSA";
+                ES256: "ES256";
+            }>;
+        }, z.core.$strict>>;
+        configurationDigest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"ledger">;
+        phase: z.ZodEnum<{
+            epoch_started: "epoch_started";
+            epoch_transitioned: "epoch_transitioned";
+            checkpoint_created: "checkpoint_created";
+            checkpoint_anchored: "checkpoint_anchored";
+            checkpoint_anchor_failed: "checkpoint_anchor_failed";
+            evidence_disposed: "evidence_disposed";
+            projection_reconciled: "projection_reconciled";
+        }>;
+        checkpointDigest: z.ZodOptional<z.ZodString>;
+        previousEpochId: z.ZodOptional<z.ZodString>;
+        previousTerminalCheckpointDigest: z.ZodOptional<z.ZodString>;
+        successorEpochIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        targetEvidenceRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        family: z.ZodLiteral<"administration">;
+        phase: z.ZodEnum<{
+            source_high_water: "source_high_water";
+            accessed: "accessed";
+            exported: "exported";
+            legal_hold_applied: "legal_hold_applied";
+            retention_executed: "retention_executed";
+        }>;
+        purpose: z.ZodOptional<z.ZodString>;
+        sourceSequence: z.ZodOptional<z.ZodString>;
+        selectionDigest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "family">;
+    privacy: z.ZodObject<{
+        classification: z.ZodEnum<{
+            public: "public";
+            internal: "internal";
+            confidential: "confidential";
+            restricted: "restricted";
+        }>;
+        retentionClass: z.ZodString;
+        legalHold: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const auditEntryCoreSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/entry/v1.0.0">;
+    ledgerId: z.ZodString;
+    ledgerEpochId: z.ZodString;
+    sequence: z.ZodString;
+    previousEntryDigest: z.ZodNullable<z.ZodString>;
+    recordedAt: z.ZodNumber;
+    recorder: z.ZodObject<{
+        did: z.ZodString;
+        kid: z.ZodString;
+        alg: z.ZodEnum<{
+            EdDSA: "EdDSA";
+            ES256: "ES256";
+        }>;
+    }, z.core.$strict>;
+    eventDigest: z.ZodString;
+    event: z.ZodObject<{
+        schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/event/v1.0.0">;
+        eventId: z.ZodString;
+        eventType: z.ZodEnum<{
+            "session.established": "session.established";
+            "session.rejected": "session.rejected";
+            "session.expired": "session.expired";
+            "session.replay_rejected": "session.replay_rejected";
+            "tool.call.started": "tool.call.started";
+            "tool.call.completed": "tool.call.completed";
+            "tool.call.failed": "tool.call.failed";
+            "tool.call.denied": "tool.call.denied";
+            "tool.call.challenged": "tool.call.challenged";
+            "proof.generated": "proof.generated";
+            "proof.verified": "proof.verified";
+            "proof.rejected": "proof.rejected";
+            "delegation.issued": "delegation.issued";
+            "delegation.verified": "delegation.verified";
+            "delegation.rejected": "delegation.rejected";
+            "delegation.revoked": "delegation.revoked";
+            "delegation.cascade_revoked": "delegation.cascade_revoked";
+            "delegation.outbound_attached": "delegation.outbound_attached";
+            "authorization.evaluated": "authorization.evaluated";
+            "authorization.approved": "authorization.approved";
+            "authorization.denied": "authorization.denied";
+            "authorization.step_up_required": "authorization.step_up_required";
+            "grant.used": "grant.used";
+            "consent.requested": "consent.requested";
+            "consent.approved": "consent.approved";
+            "consent.denied": "consent.denied";
+            "credential.required": "credential.required";
+            "credential.verified": "credential.verified";
+            "credential.failed": "credential.failed";
+            "key.rotated": "key.rotated";
+            "policy.changed": "policy.changed";
+            "configuration.changed": "configuration.changed";
+            "integrity_suite.transitioned": "integrity_suite.transitioned";
+            "ledger.epoch.started": "ledger.epoch.started";
+            "ledger.epoch.transitioned": "ledger.epoch.transitioned";
+            "checkpoint.created": "checkpoint.created";
+            "checkpoint.anchored": "checkpoint.anchored";
+            "checkpoint.anchor_failed": "checkpoint.anchor_failed";
+            "evidence.disposed": "evidence.disposed";
+            "projection.reconciled": "projection.reconciled";
+            "audit.source_high_water": "audit.source_high_water";
+            "audit.accessed": "audit.accessed";
+            "audit.exported": "audit.exported";
+            "legal_hold.applied": "legal_hold.applied";
+            "retention.executed": "retention.executed";
+        }>;
+        eventVersion: z.ZodLiteral<"1.0.0">;
+        binding: z.ZodString;
+        occurredAt: z.ZodNumber;
+        tenantRef: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+        source: z.ZodObject<{
+            producer: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+            sourceId: z.ZodString;
+            sourceSequence: z.ZodOptional<z.ZodString>;
+            previousSourceEventDigest: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        correlationId: z.ZodOptional<z.ZodString>;
+        causationId: z.ZodOptional<z.ZodString>;
+        trace: z.ZodOptional<z.ZodObject<{
+            traceId: z.ZodOptional<z.ZodString>;
+            spanId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        session: z.ZodOptional<z.ZodObject<{
+            ref: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+            handshakeNonceCommitment: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        actor: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        responsibleParty: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        resource: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        action: z.ZodObject<{
+            category: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            detailRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        }, z.core.$strict>;
+        outcome: z.ZodEnum<{
+            denied: "denied";
+            unknown: "unknown";
+            failed: "failed";
+            challenged: "challenged";
+            succeeded: "succeeded";
+        }>;
+        reason: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            detailRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        }, z.core.$strict>>;
+        authorization: z.ZodOptional<z.ZodObject<{
+            source: z.ZodEnum<{
+                delegation: "delegation";
+                anonymous: "anonymous";
+                grant: "grant";
+                policy: "policy";
+            }>;
+            decision: z.ZodEnum<{
+                needs_authorization: "needs_authorization";
+                allowed: "allowed";
+                denied: "denied";
+                step_up_required: "step_up_required";
+            }>;
+            scopeId: z.ZodOptional<z.ZodString>;
+            delegationRef: z.ZodOptional<z.ZodString>;
+            delegationCredentialDigest: z.ZodOptional<z.ZodString>;
+            delegationChainDigests: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            statusEvidence: z.ZodOptional<z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+            grantRef: z.ZodOptional<z.ZodString>;
+            policyId: z.ZodOptional<z.ZodString>;
+            policyVersion: z.ZodOptional<z.ZodString>;
+            policyDigest: z.ZodOptional<z.ZodString>;
+            verificationCode: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        proof: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        evidence: z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        details: z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
+            family: z.ZodLiteral<"session">;
+            phase: z.ZodEnum<{
+                expired: "expired";
+                established: "established";
+                rejected: "rejected";
+                replay_rejected: "replay_rejected";
+            }>;
+            reasonCode: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"tool">;
+            phase: z.ZodEnum<{
+                denied: "denied";
+                started: "started";
+                completed: "completed";
+                failed: "failed";
+                challenged: "challenged";
+            }>;
+            attempt: z.ZodString;
+            idempotencyRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"proof">;
+            phase: z.ZodEnum<{
+                rejected: "rejected";
+                generated: "generated";
+                verified: "verified";
+            }>;
+            proofDigest: z.ZodOptional<z.ZodString>;
+            verificationCode: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"delegation">;
+            phase: z.ZodEnum<{
+                revoked: "revoked";
+                rejected: "rejected";
+                verified: "verified";
+                issued: "issued";
+                cascade_revoked: "cascade_revoked";
+                outbound_attached: "outbound_attached";
+            }>;
+            delegationRef: z.ZodString;
+            parentRef: z.ZodOptional<z.ZodString>;
+            statusEvidence: z.ZodOptional<z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"authorization">;
+            phase: z.ZodEnum<{
+                denied: "denied";
+                step_up_required: "step_up_required";
+                evaluated: "evaluated";
+                approved: "approved";
+                grant_used: "grant_used";
+            }>;
+            policyDigest: z.ZodOptional<z.ZodString>;
+            grantRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"consent">;
+            phase: z.ZodEnum<{
+                denied: "denied";
+                approved: "approved";
+                requested: "requested";
+                credential_required: "credential_required";
+                credential_verified: "credential_verified";
+                credential_failed: "credential_failed";
+            }>;
+            consentRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"key">;
+            phase: z.ZodEnum<{
+                rotated: "rotated";
+                policy_changed: "policy_changed";
+                configuration_changed: "configuration_changed";
+                integrity_suite_transitioned: "integrity_suite_transitioned";
+            }>;
+            previousSigner: z.ZodOptional<z.ZodObject<{
+                did: z.ZodString;
+                kid: z.ZodString;
+                alg: z.ZodEnum<{
+                    EdDSA: "EdDSA";
+                    ES256: "ES256";
+                }>;
+            }, z.core.$strict>>;
+            nextSigner: z.ZodOptional<z.ZodObject<{
+                did: z.ZodString;
+                kid: z.ZodString;
+                alg: z.ZodEnum<{
+                    EdDSA: "EdDSA";
+                    ES256: "ES256";
+                }>;
+            }, z.core.$strict>>;
+            configurationDigest: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"ledger">;
+            phase: z.ZodEnum<{
+                epoch_started: "epoch_started";
+                epoch_transitioned: "epoch_transitioned";
+                checkpoint_created: "checkpoint_created";
+                checkpoint_anchored: "checkpoint_anchored";
+                checkpoint_anchor_failed: "checkpoint_anchor_failed";
+                evidence_disposed: "evidence_disposed";
+                projection_reconciled: "projection_reconciled";
+            }>;
+            checkpointDigest: z.ZodOptional<z.ZodString>;
+            previousEpochId: z.ZodOptional<z.ZodString>;
+            previousTerminalCheckpointDigest: z.ZodOptional<z.ZodString>;
+            successorEpochIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            targetEvidenceRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        }, z.core.$strict>, z.ZodObject<{
+            family: z.ZodLiteral<"administration">;
+            phase: z.ZodEnum<{
+                source_high_water: "source_high_water";
+                accessed: "accessed";
+                exported: "exported";
+                legal_hold_applied: "legal_hold_applied";
+                retention_executed: "retention_executed";
+            }>;
+            purpose: z.ZodOptional<z.ZodString>;
+            sourceSequence: z.ZodOptional<z.ZodString>;
+            selectionDigest: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "family">;
+        privacy: z.ZodObject<{
+            classification: z.ZodEnum<{
+                public: "public";
+                internal: "internal";
+                confidential: "confidential";
+                restricted: "restricted";
+            }>;
+            retentionClass: z.ZodString;
+            legalHold: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    evidenceManifestDigest: z.ZodString;
+    integritySuite: z.ZodLiteral<"KYA-AUDIT-JCS-SHA256-JWS-2026">;
+}, z.core.$strict>;
+export declare const auditRecorderReceiptCoreSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/receipt/v1.0.0">;
+    ledgerId: z.ZodString;
+    ledgerEpochId: z.ZodString;
+    sequence: z.ZodString;
+    eventId: z.ZodString;
+    entryDigest: z.ZodString;
+    previousEntryDigest: z.ZodNullable<z.ZodString>;
+    recordedAt: z.ZodNumber;
+    recorder: z.ZodObject<{
+        did: z.ZodString;
+        kid: z.ZodString;
+        alg: z.ZodEnum<{
+            EdDSA: "EdDSA";
+            ES256: "ES256";
+        }>;
+    }, z.core.$strict>;
+    integritySuite: z.ZodLiteral<"KYA-AUDIT-JCS-SHA256-JWS-2026">;
+}, z.core.$strict>;
+export declare const auditCheckpointCoreSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/checkpoint/v1.0.0">;
+    checkpointId: z.ZodString;
+    ledgerId: z.ZodString;
+    ledgerEpochId: z.ZodString;
+    treeSize: z.ZodString;
+    firstSequence: z.ZodString;
+    lastSequence: z.ZodString;
+    rootDigest: z.ZodString;
+    headEntryDigest: z.ZodString;
+    previousCheckpointDigest: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodNumber;
+    issuer: z.ZodObject<{
+        did: z.ZodString;
+        kid: z.ZodString;
+        alg: z.ZodEnum<{
+            EdDSA: "EdDSA";
+            ES256: "ES256";
+        }>;
+    }, z.core.$strict>;
+    integritySuite: z.ZodLiteral<"KYA-AUDIT-RFC9162-SHA256-JWS-2026">;
+}, z.core.$strict>;
+export declare const signedAuditCheckpointSchema: z.ZodObject<{
+    core: z.ZodObject<{
+        schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/checkpoint/v1.0.0">;
+        checkpointId: z.ZodString;
+        ledgerId: z.ZodString;
+        ledgerEpochId: z.ZodString;
+        treeSize: z.ZodString;
+        firstSequence: z.ZodString;
+        lastSequence: z.ZodString;
+        rootDigest: z.ZodString;
+        headEntryDigest: z.ZodString;
+        previousCheckpointDigest: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        issuer: z.ZodObject<{
+            did: z.ZodString;
+            kid: z.ZodString;
+            alg: z.ZodEnum<{
+                EdDSA: "EdDSA";
+                ES256: "ES256";
+            }>;
+        }, z.core.$strict>;
+        integritySuite: z.ZodLiteral<"KYA-AUDIT-RFC9162-SHA256-JWS-2026">;
+    }, z.core.$strict>;
+    checkpointDigest: z.ZodString;
+    jws: z.ZodString;
+}, z.core.$strict>;
+export declare const signedAuditEntrySchema: z.ZodObject<{
+    core: z.ZodObject<{
+        schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/entry/v1.0.0">;
+        ledgerId: z.ZodString;
+        ledgerEpochId: z.ZodString;
+        sequence: z.ZodString;
+        previousEntryDigest: z.ZodNullable<z.ZodString>;
+        recordedAt: z.ZodNumber;
+        recorder: z.ZodObject<{
+            did: z.ZodString;
+            kid: z.ZodString;
+            alg: z.ZodEnum<{
+                EdDSA: "EdDSA";
+                ES256: "ES256";
+            }>;
+        }, z.core.$strict>;
+        eventDigest: z.ZodString;
+        event: z.ZodObject<{
+            schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/event/v1.0.0">;
+            eventId: z.ZodString;
+            eventType: z.ZodEnum<{
+                "session.established": "session.established";
+                "session.rejected": "session.rejected";
+                "session.expired": "session.expired";
+                "session.replay_rejected": "session.replay_rejected";
+                "tool.call.started": "tool.call.started";
+                "tool.call.completed": "tool.call.completed";
+                "tool.call.failed": "tool.call.failed";
+                "tool.call.denied": "tool.call.denied";
+                "tool.call.challenged": "tool.call.challenged";
+                "proof.generated": "proof.generated";
+                "proof.verified": "proof.verified";
+                "proof.rejected": "proof.rejected";
+                "delegation.issued": "delegation.issued";
+                "delegation.verified": "delegation.verified";
+                "delegation.rejected": "delegation.rejected";
+                "delegation.revoked": "delegation.revoked";
+                "delegation.cascade_revoked": "delegation.cascade_revoked";
+                "delegation.outbound_attached": "delegation.outbound_attached";
+                "authorization.evaluated": "authorization.evaluated";
+                "authorization.approved": "authorization.approved";
+                "authorization.denied": "authorization.denied";
+                "authorization.step_up_required": "authorization.step_up_required";
+                "grant.used": "grant.used";
+                "consent.requested": "consent.requested";
+                "consent.approved": "consent.approved";
+                "consent.denied": "consent.denied";
+                "credential.required": "credential.required";
+                "credential.verified": "credential.verified";
+                "credential.failed": "credential.failed";
+                "key.rotated": "key.rotated";
+                "policy.changed": "policy.changed";
+                "configuration.changed": "configuration.changed";
+                "integrity_suite.transitioned": "integrity_suite.transitioned";
+                "ledger.epoch.started": "ledger.epoch.started";
+                "ledger.epoch.transitioned": "ledger.epoch.transitioned";
+                "checkpoint.created": "checkpoint.created";
+                "checkpoint.anchored": "checkpoint.anchored";
+                "checkpoint.anchor_failed": "checkpoint.anchor_failed";
+                "evidence.disposed": "evidence.disposed";
+                "projection.reconciled": "projection.reconciled";
+                "audit.source_high_water": "audit.source_high_water";
+                "audit.accessed": "audit.accessed";
+                "audit.exported": "audit.exported";
+                "legal_hold.applied": "legal_hold.applied";
+                "retention.executed": "retention.executed";
+            }>;
+            eventVersion: z.ZodLiteral<"1.0.0">;
+            binding: z.ZodString;
+            occurredAt: z.ZodNumber;
+            tenantRef: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+            source: z.ZodObject<{
+                producer: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+                sourceId: z.ZodString;
+                sourceSequence: z.ZodOptional<z.ZodString>;
+                previousSourceEventDigest: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            correlationId: z.ZodOptional<z.ZodString>;
+            causationId: z.ZodOptional<z.ZodString>;
+            trace: z.ZodOptional<z.ZodObject<{
+                traceId: z.ZodOptional<z.ZodString>;
+                spanId: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            session: z.ZodOptional<z.ZodObject<{
+                ref: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+                handshakeNonceCommitment: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            actor: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            responsibleParty: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            resource: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            action: z.ZodObject<{
+                category: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                detailRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            }, z.core.$strict>;
+            outcome: z.ZodEnum<{
+                denied: "denied";
+                unknown: "unknown";
+                failed: "failed";
+                challenged: "challenged";
+                succeeded: "succeeded";
+            }>;
+            reason: z.ZodOptional<z.ZodObject<{
+                code: z.ZodString;
+                detailRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            }, z.core.$strict>>;
+            authorization: z.ZodOptional<z.ZodObject<{
+                source: z.ZodEnum<{
+                    delegation: "delegation";
+                    anonymous: "anonymous";
+                    grant: "grant";
+                    policy: "policy";
+                }>;
+                decision: z.ZodEnum<{
+                    needs_authorization: "needs_authorization";
+                    allowed: "allowed";
+                    denied: "denied";
+                    step_up_required: "step_up_required";
+                }>;
+                scopeId: z.ZodOptional<z.ZodString>;
+                delegationRef: z.ZodOptional<z.ZodString>;
+                delegationCredentialDigest: z.ZodOptional<z.ZodString>;
+                delegationChainDigests: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                statusEvidence: z.ZodOptional<z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+                grantRef: z.ZodOptional<z.ZodString>;
+                policyId: z.ZodOptional<z.ZodString>;
+                policyVersion: z.ZodOptional<z.ZodString>;
+                policyDigest: z.ZodOptional<z.ZodString>;
+                verificationCode: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            proof: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            evidence: z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            details: z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
+                family: z.ZodLiteral<"session">;
+                phase: z.ZodEnum<{
+                    expired: "expired";
+                    established: "established";
+                    rejected: "rejected";
+                    replay_rejected: "replay_rejected";
+                }>;
+                reasonCode: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"tool">;
+                phase: z.ZodEnum<{
+                    denied: "denied";
+                    started: "started";
+                    completed: "completed";
+                    failed: "failed";
+                    challenged: "challenged";
+                }>;
+                attempt: z.ZodString;
+                idempotencyRef: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"proof">;
+                phase: z.ZodEnum<{
+                    rejected: "rejected";
+                    generated: "generated";
+                    verified: "verified";
+                }>;
+                proofDigest: z.ZodOptional<z.ZodString>;
+                verificationCode: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"delegation">;
+                phase: z.ZodEnum<{
+                    revoked: "revoked";
+                    rejected: "rejected";
+                    verified: "verified";
+                    issued: "issued";
+                    cascade_revoked: "cascade_revoked";
+                    outbound_attached: "outbound_attached";
+                }>;
+                delegationRef: z.ZodString;
+                parentRef: z.ZodOptional<z.ZodString>;
+                statusEvidence: z.ZodOptional<z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"authorization">;
+                phase: z.ZodEnum<{
+                    denied: "denied";
+                    step_up_required: "step_up_required";
+                    evaluated: "evaluated";
+                    approved: "approved";
+                    grant_used: "grant_used";
+                }>;
+                policyDigest: z.ZodOptional<z.ZodString>;
+                grantRef: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"consent">;
+                phase: z.ZodEnum<{
+                    denied: "denied";
+                    approved: "approved";
+                    requested: "requested";
+                    credential_required: "credential_required";
+                    credential_verified: "credential_verified";
+                    credential_failed: "credential_failed";
+                }>;
+                consentRef: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"key">;
+                phase: z.ZodEnum<{
+                    rotated: "rotated";
+                    policy_changed: "policy_changed";
+                    configuration_changed: "configuration_changed";
+                    integrity_suite_transitioned: "integrity_suite_transitioned";
+                }>;
+                previousSigner: z.ZodOptional<z.ZodObject<{
+                    did: z.ZodString;
+                    kid: z.ZodString;
+                    alg: z.ZodEnum<{
+                        EdDSA: "EdDSA";
+                        ES256: "ES256";
+                    }>;
+                }, z.core.$strict>>;
+                nextSigner: z.ZodOptional<z.ZodObject<{
+                    did: z.ZodString;
+                    kid: z.ZodString;
+                    alg: z.ZodEnum<{
+                        EdDSA: "EdDSA";
+                        ES256: "ES256";
+                    }>;
+                }, z.core.$strict>>;
+                configurationDigest: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"ledger">;
+                phase: z.ZodEnum<{
+                    epoch_started: "epoch_started";
+                    epoch_transitioned: "epoch_transitioned";
+                    checkpoint_created: "checkpoint_created";
+                    checkpoint_anchored: "checkpoint_anchored";
+                    checkpoint_anchor_failed: "checkpoint_anchor_failed";
+                    evidence_disposed: "evidence_disposed";
+                    projection_reconciled: "projection_reconciled";
+                }>;
+                checkpointDigest: z.ZodOptional<z.ZodString>;
+                previousEpochId: z.ZodOptional<z.ZodString>;
+                previousTerminalCheckpointDigest: z.ZodOptional<z.ZodString>;
+                successorEpochIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                targetEvidenceRef: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+            }, z.core.$strict>, z.ZodObject<{
+                family: z.ZodLiteral<"administration">;
+                phase: z.ZodEnum<{
+                    source_high_water: "source_high_water";
+                    accessed: "accessed";
+                    exported: "exported";
+                    legal_hold_applied: "legal_hold_applied";
+                    retention_executed: "retention_executed";
+                }>;
+                purpose: z.ZodOptional<z.ZodString>;
+                sourceSequence: z.ZodOptional<z.ZodString>;
+                selectionDigest: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>], "family">;
+            privacy: z.ZodObject<{
+                classification: z.ZodEnum<{
+                    public: "public";
+                    internal: "internal";
+                    confidential: "confidential";
+                    restricted: "restricted";
+                }>;
+                retentionClass: z.ZodString;
+                legalHold: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        evidenceManifestDigest: z.ZodString;
+        integritySuite: z.ZodLiteral<"KYA-AUDIT-JCS-SHA256-JWS-2026">;
+    }, z.core.$strict>;
+    eventDigest: z.ZodString;
+    entryDigest: z.ZodString;
+    recorderReceipt: z.ZodObject<{
+        core: z.ZodObject<{
+            schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/receipt/v1.0.0">;
+            ledgerId: z.ZodString;
+            ledgerEpochId: z.ZodString;
+            sequence: z.ZodString;
+            eventId: z.ZodString;
+            entryDigest: z.ZodString;
+            previousEntryDigest: z.ZodNullable<z.ZodString>;
+            recordedAt: z.ZodNumber;
+            recorder: z.ZodObject<{
+                did: z.ZodString;
+                kid: z.ZodString;
+                alg: z.ZodEnum<{
+                    EdDSA: "EdDSA";
+                    ES256: "ES256";
+                }>;
+            }, z.core.$strict>;
+            integritySuite: z.ZodLiteral<"KYA-AUDIT-JCS-SHA256-JWS-2026">;
+        }, z.core.$strict>;
+        jws: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const auditObservationReceiptSchema: z.ZodObject<{
+    core: z.ZodObject<{
+        schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/observation/v1.0.0">;
+        observerId: z.ZodString;
+        observer: z.ZodObject<{
+            did: z.ZodString;
+            kid: z.ZodString;
+            alg: z.ZodEnum<{
+                EdDSA: "EdDSA";
+                ES256: "ES256";
+            }>;
+        }, z.core.$strict>;
+        ledgerId: z.ZodString;
+        ledgerEpochId: z.ZodString;
+        checkpointDigest: z.ZodString;
+        treeSize: z.ZodString;
+        observedAt: z.ZodNumber;
+        previousObservationDigest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    observationDigest: z.ZodString;
+    jws: z.ZodString;
+}, z.core.$strict>;
+export declare const auditAnchorReceiptSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/anchor-receipt/v1.0.0">;
+    kind: z.ZodEnum<{
+        worm: "worm";
+        rfc3161: "rfc3161";
+        scitt: "scitt";
+    }>;
+    providerId: z.ZodString;
+    checkpointDigest: z.ZodString;
+    issuedAt: z.ZodNumber;
+    receiptData: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const auditMerkleInclusionProofSchema: z.ZodObject<{
+    leafIndex: z.ZodString;
+    treeSize: z.ZodString;
+    auditPath: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const auditMerkleConsistencyProofSchema: z.ZodObject<{
+    oldTreeSize: z.ZodString;
+    newTreeSize: z.ZodString;
+    auditPath: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const auditBundleInclusionProofSchema: z.ZodObject<{
+    ledgerId: z.ZodString;
+    ledgerEpochId: z.ZodString;
+    sequence: z.ZodString;
+    entryDigest: z.ZodString;
+    checkpointDigest: z.ZodString;
+    proof: z.ZodObject<{
+        leafIndex: z.ZodString;
+        treeSize: z.ZodString;
+        auditPath: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const auditBundleConsistencyProofSchema: z.ZodObject<{
+    ledgerId: z.ZodString;
+    ledgerEpochId: z.ZodString;
+    oldCheckpointDigest: z.ZodString;
+    newCheckpointDigest: z.ZodString;
+    proof: z.ZodObject<{
+        oldTreeSize: z.ZodString;
+        newTreeSize: z.ZodString;
+        auditPath: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const auditBundleManifestCoreSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/bundle-manifest/v1.0.0">;
+    bundleId: z.ZodString;
+    formatVersion: z.ZodLiteral<"1.0.0">;
+    selections: z.ZodArray<z.ZodObject<{
+        ledgerId: z.ZodString;
+        ledgerEpochId: z.ZodString;
+        firstSequence: z.ZodString;
+        lastSequence: z.ZodString;
+        expectedHeadDigest: z.ZodString;
+        checkpointTreeSizes: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    exporter: z.ZodObject<{
+        did: z.ZodString;
+        kid: z.ZodString;
+        alg: z.ZodEnum<{
+            EdDSA: "EdDSA";
+            ES256: "ES256";
+        }>;
+    }, z.core.$strict>;
+    purpose: z.ZodString;
+    exportedAt: z.ZodNumber;
+    verificationPolicyDigest: z.ZodString;
+    inventory: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        mediaType: z.ZodString;
+        disposition: z.ZodEnum<{
+            included: "included";
+            redacted: "redacted";
+            disposed: "disposed";
+            unavailable: "unavailable";
+            policy_excluded: "policy_excluded";
+        }>;
+        digest: z.ZodOptional<z.ZodString>;
+        size: z.ZodOptional<z.ZodString>;
+        reasonCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    integritySuite: z.ZodLiteral<"KYA-AUDIT-BUNDLE-JCS-SHA256-JWS-2026">;
+}, z.core.$strict>;
+export declare const auditReplayBundleSchema: z.ZodObject<{
+    manifest: z.ZodObject<{
+        core: z.ZodObject<{
+            schema: z.ZodLiteral<"https://schema.kya-os.org/v1/protocol/audit/bundle-manifest/v1.0.0">;
+            bundleId: z.ZodString;
+            formatVersion: z.ZodLiteral<"1.0.0">;
+            selections: z.ZodArray<z.ZodObject<{
+                ledgerId: z.ZodString;
+                ledgerEpochId: z.ZodString;
+                firstSequence: z.ZodString;
+                lastSequence: z.ZodString;
+                expectedHeadDigest: z.ZodString;
+                checkpointTreeSizes: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>>;
+            exporter: z.ZodObject<{
+                did: z.ZodString;
+                kid: z.ZodString;
+                alg: z.ZodEnum<{
+                    EdDSA: "EdDSA";
+                    ES256: "ES256";
+                }>;
+            }, z.core.$strict>;
+            purpose: z.ZodString;
+            exportedAt: z.ZodNumber;
+            verificationPolicyDigest: z.ZodString;
+            inventory: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                mediaType: z.ZodString;
+                disposition: z.ZodEnum<{
+                    included: "included";
+                    redacted: "redacted";
+                    disposed: "disposed";
+                    unavailable: "unavailable";
+                    policy_excluded: "policy_excluded";
+                }>;
+                digest: z.ZodOptional<z.ZodString>;
+                size: z.ZodOptional<z.ZodString>;
+                reasonCode: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            integritySuite: z.ZodLiteral<"KYA-AUDIT-BUNDLE-JCS-SHA256-JWS-2026">;
+        }, z.core.$strict>;
+        manifestDigest: z.ZodString;
+        jws: z.ZodString;
+    }, z.core.$strict>;
+    components: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        mediaType: z.ZodString;
+        disposition: z.ZodEnum<{
+            included: "included";
+            redacted: "redacted";
+            disposed: "disposed";
+            unavailable: "unavailable";
+            policy_excluded: "policy_excluded";
+        }>;
+        digest: z.ZodOptional<z.ZodString>;
+        size: z.ZodOptional<z.ZodString>;
+        reasonCode: z.ZodOptional<z.ZodString>;
+        content: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const auditVerificationPolicySchema: z.ZodObject<{
+    policyId: z.ZodString;
+    trustedLedgerEpochs: z.ZodArray<z.ZodObject<{
+        ledgerId: z.ZodString;
+        ledgerEpochId: z.ZodString;
+        recorderKeys: z.ZodArray<z.ZodObject<{
+            signer: z.ZodObject<{
+                did: z.ZodString;
+                kid: z.ZodString;
+                alg: z.ZodEnum<{
+                    EdDSA: "EdDSA";
+                    ES256: "ES256";
+                }>;
+            }, z.core.$strict>;
+            validFrom: z.ZodOptional<z.ZodNumber>;
+            validUntil: z.ZodOptional<z.ZodNumber>;
+            validFromCheckpoint: z.ZodOptional<z.ZodString>;
+            validUntilCheckpoint: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        validFromCheckpoint: z.ZodOptional<z.ZodString>;
+        validUntilCheckpoint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    trustedObservers: z.ZodArray<z.ZodObject<{
+        signer: z.ZodObject<{
+            did: z.ZodString;
+            kid: z.ZodString;
+            alg: z.ZodEnum<{
+                EdDSA: "EdDSA";
+                ES256: "ES256";
+            }>;
+        }, z.core.$strict>;
+        validFrom: z.ZodOptional<z.ZodNumber>;
+        validUntil: z.ZodOptional<z.ZodNumber>;
+        validFromCheckpoint: z.ZodOptional<z.ZodString>;
+        validUntilCheckpoint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    trustedSupportingAnchors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            worm: "worm";
+            rfc3161: "rfc3161";
+            scitt: "scitt";
+        }>;
+        providerId: z.ZodString;
+        validFrom: z.ZodOptional<z.ZodNumber>;
+        validUntil: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>;
+    authorizedExporters: z.ZodArray<z.ZodObject<{
+        signerKeys: z.ZodArray<z.ZodObject<{
+            signer: z.ZodObject<{
+                did: z.ZodString;
+                kid: z.ZodString;
+                alg: z.ZodEnum<{
+                    EdDSA: "EdDSA";
+                    ES256: "ES256";
+                }>;
+            }, z.core.$strict>;
+            validFrom: z.ZodOptional<z.ZodNumber>;
+            validUntil: z.ZodOptional<z.ZodNumber>;
+            validFromCheckpoint: z.ZodOptional<z.ZodString>;
+            validUntilCheckpoint: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        allowedLedgerIds: z.ZodArray<z.ZodString>;
+        allowedPurposes: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    acceptedIntegritySuites: z.ZodArray<z.ZodString>;
+    acceptedAlgorithms: z.ZodArray<z.ZodEnum<{
+        EdDSA: "EdDSA";
+        ES256: "ES256";
+    }>>;
+    keyRevocationMode: z.ZodEnum<{
+        as_observed: "as_observed";
+        current: "current";
+        both: "both";
+    }>;
+    requiredCheckpointFreshnessMs: z.ZodOptional<z.ZodNumber>;
+    requiredAuditProfile: z.ZodOptional<z.ZodEnum<{
+        "AAP-0": "AAP-0";
+        "AAP-1": "AAP-1";
+        "AAP-2": "AAP-2";
+        "AAP-3": "AAP-3";
+        "AAP-4": "AAP-4";
+    }>>;
+}, z.core.$strict>;
+export declare function parseAuditProducerEvent(input: unknown): AuditProducerEventCoreV1;
+export declare function parseAuditEntryCore(input: unknown): AuditEntryCoreV1;
+export declare function parseSignedAuditEntry(input: unknown): SignedAuditEntryV1;
+export declare function parseAuditRecorderReceiptCore(input: unknown): AuditRecorderReceiptCoreV1;
+export declare function parseAuditCheckpointCore(input: unknown): AuditCheckpointCoreV1;
+export declare function parseSignedAuditCheckpoint(input: unknown): SignedAuditCheckpointV1;
+export declare function parseAuditObservationReceipt(input: unknown): AuditObservationReceiptV1;
+export declare function parseAuditBundleManifestCore(input: unknown): AuditBundleManifestCoreV1;
+export declare function parseAuditReplayBundle(input: unknown): AuditReplayBundleV1;
+export declare function parseAuditVerificationPolicy(input: unknown): AuditVerificationPolicyV1;
+//# sourceMappingURL=schemas.d.ts.map