@odingard/guardian-sdk 0.0.0-stage → 0.2.0

package/dist-dts/contracts/agent-state.d.ts

@@ -0,0 +1,386 @@
+import { z } from "zod";
+/**
+ * WO-016 — parameter + projection contracts for the internal "guardian"
+ * provider: delegation (agent.spawn/delegate/terminate), memory governance
+ * (memory.*), identity/security mutations, and runtime/model/configure
+ * changes. Everything is a canonical envelope over generic primitives —
+ * no kernel branches (GUA-UNIVERSAL-001, K15).
+ */
+export declare const GUARDIAN_PROVIDER = "guardian";
+export declare const GUARDIAN_PROFILE = "guardian-agent-v1";
+export declare const GUARDIAN_RESOURCE_TYPE = "guardian-agent";
+/** Memory key namespaces the agent can never write. Authority only ever
+ * lives in grants/writs — `authority.*` keys would pretend otherwise, so
+ * binding rejects them outright (prompt-injection-via-memory → DENY). */
+export declare const MEMORY_RESERVED_PREFIX = "authority.";
+/** Entries the human marks as authority-affecting; only memory.modify
+ * (ask-posture) may touch them — never memory.write/delete/share. */
+export declare const MEMORY_GOVERNED_PREFIX = "governed.";
+/** Narrowing fields a delegated edge may carry — the same monetary shape
+ * human-facing grants accept (mirrors control-plane grant constraints). */
+export declare const DelegatedConstraintsSchema: z.ZodObject<{
+    maxValueCents: z.ZodOptional<z.ZodNumber>;
+    askAboveValueCents: z.ZodOptional<z.ZodNumber>;
+    merchantAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    categoryAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    recurrence: z.ZodOptional<z.ZodEnum<{
+        never: "never";
+        allowed: "allowed";
+    }>>;
+    budgetIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "BudgetId", "out">>>;
+}, z.core.$strict>;
+export type DelegatedConstraints = z.infer<typeof DelegatedConstraintsSchema>;
+declare const DelegatedEdgeSchema: z.ZodObject<{
+    targetConnectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    mode: z.ZodEnum<{
+        allow: "allow";
+        ask: "ask";
+    }>;
+    actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    constraints: z.ZodOptional<z.ZodObject<{
+        maxValueCents: z.ZodOptional<z.ZodNumber>;
+        askAboveValueCents: z.ZodOptional<z.ZodNumber>;
+        merchantAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        categoryAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        recurrence: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            allowed: "allowed";
+        }>>;
+        budgetIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "BudgetId", "out">>>;
+    }, z.core.$strict>>;
+    expiresAtEpochMs: z.ZodNumber;
+    taskId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const AgentSpawnParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.spawn.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    name: z.ZodString;
+    runtime: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type AgentSpawnParametersV1 = z.infer<typeof AgentSpawnParametersV1Schema>;
+export declare const AgentDelegateParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.delegate.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    childAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    delegations: z.ZodArray<z.ZodObject<{
+        targetConnectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        mode: z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+        }>;
+        actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        constraints: z.ZodOptional<z.ZodObject<{
+            maxValueCents: z.ZodOptional<z.ZodNumber>;
+            askAboveValueCents: z.ZodOptional<z.ZodNumber>;
+            merchantAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            categoryAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            recurrence: z.ZodOptional<z.ZodEnum<{
+                never: "never";
+                allowed: "allowed";
+            }>>;
+            budgetIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "BudgetId", "out">>>;
+        }, z.core.$strict>>;
+        expiresAtEpochMs: z.ZodNumber;
+        taskId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type AgentDelegateParametersV1 = z.infer<typeof AgentDelegateParametersV1Schema>;
+export type DelegatedEdgeV1 = z.infer<typeof DelegatedEdgeSchema>;
+export declare const AgentTerminateParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.terminate.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    childAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type AgentTerminateParametersV1 = z.infer<typeof AgentTerminateParametersV1Schema>;
+export declare const MemoryReadParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.memory.read.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    key: z.ZodString;
+}, z.core.$strict>;
+export type MemoryReadParametersV1 = z.infer<typeof MemoryReadParametersV1Schema>;
+export declare const MemoryWriteParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.memory.write.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    key: z.ZodString;
+    content: z.ZodString;
+}, z.core.$strict>;
+export type MemoryWriteParametersV1 = z.infer<typeof MemoryWriteParametersV1Schema>;
+export declare const MemoryModifyParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.memory.modify.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    key: z.ZodString;
+    content: z.ZodString;
+}, z.core.$strict>;
+export type MemoryModifyParametersV1 = z.infer<typeof MemoryModifyParametersV1Schema>;
+export declare const MemoryDeleteParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.memory.delete.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    key: z.ZodString;
+}, z.core.$strict>;
+export type MemoryDeleteParametersV1 = z.infer<typeof MemoryDeleteParametersV1Schema>;
+export declare const MemoryShareParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.memory.share.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    key: z.ZodString;
+    audience: z.ZodEnum<{
+        principal: "principal";
+    }>;
+}, z.core.$strict>;
+export type MemoryShareParametersV1 = z.infer<typeof MemoryShareParametersV1Schema>;
+export declare const PasswordChangeParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.password.change.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    rotationId: z.ZodString;
+}, z.core.$strict>;
+export type PasswordChangeParametersV1 = z.infer<typeof PasswordChangeParametersV1Schema>;
+export declare const MfaChangeParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.mfa.change.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    mode: z.ZodEnum<{
+        enable: "enable";
+        disable: "disable";
+        rotate: "rotate";
+    }>;
+}, z.core.$strict>;
+export type MfaChangeParametersV1 = z.infer<typeof MfaChangeParametersV1Schema>;
+export declare const RecoveryChangeParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.recovery.change.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    channel: z.ZodEnum<{
+        none: "none";
+        email: "email";
+    }>;
+}, z.core.$strict>;
+export type RecoveryChangeParametersV1 = z.infer<typeof RecoveryChangeParametersV1Schema>;
+export declare const TrustedDeviceAddParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.trusted_device.add.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    deviceFingerprint: z.ZodString;
+    label: z.ZodString;
+}, z.core.$strict>;
+export type TrustedDeviceAddParametersV1 = z.infer<typeof TrustedDeviceAddParametersV1Schema>;
+export declare const ApiKeyCreateParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.api_key.create.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    label: z.ZodString;
+    scopes: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type ApiKeyCreateParametersV1 = z.infer<typeof ApiKeyCreateParametersV1Schema>;
+export declare const RuntimeChangeParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.runtime.change.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    runtime: z.ZodString;
+}, z.core.$strict>;
+export type RuntimeChangeParametersV1 = z.infer<typeof RuntimeChangeParametersV1Schema>;
+export declare const ModelChangeParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.model.change.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    model: z.ZodString;
+}, z.core.$strict>;
+export type ModelChangeParametersV1 = z.infer<typeof ModelChangeParametersV1Schema>;
+export declare const AgentConfigureParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.configure.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    key: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strict>;
+export type AgentConfigureParametersV1 = z.infer<typeof AgentConfigureParametersV1Schema>;
+export declare const AgentMessageParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.message.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    toAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    payload: z.ZodString;
+}, z.core.$strict>;
+export type AgentMessageParametersV1 = z.infer<typeof AgentMessageParametersV1Schema>;
+export declare const AgentShareContextParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.share_context.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    toAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    contextRef: z.ZodString;
+}, z.core.$strict>;
+export type AgentShareContextParametersV1 = z.infer<typeof AgentShareContextParametersV1Schema>;
+export declare const AgentShareMemoryParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.share_memory.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    toAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    memoryRef: z.ZodString;
+}, z.core.$strict>;
+export type AgentShareMemoryParametersV1 = z.infer<typeof AgentShareMemoryParametersV1Schema>;
+export declare const AgentTransferTaskParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.transfer_task.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    toAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    taskId: z.core.$ZodBranded<z.ZodString, "TaskId", "out">;
+}, z.core.$strict>;
+export type AgentTransferTaskParametersV1 = z.infer<typeof AgentTransferTaskParametersV1Schema>;
+export declare const AgentTransferCapabilityParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.agent.transfer_capability.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    toAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    capabilityRef: z.ZodObject<{
+        capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type AgentTransferCapabilityParametersV1 = z.infer<typeof AgentTransferCapabilityParametersV1Schema>;
+export declare const AGENT_STATE_PARAMETERS_KINDS: {
+    readonly "agent.spawn": "odingard.guardian.agent.spawn.v1";
+    readonly "agent.delegate": "odingard.guardian.agent.delegate.v1";
+    readonly "agent.terminate": "odingard.guardian.agent.terminate.v1";
+    readonly "agent.message": "odingard.guardian.agent.message.v1";
+    readonly "agent.share_context": "odingard.guardian.agent.share_context.v1";
+    readonly "agent.share_memory": "odingard.guardian.agent.share_memory.v1";
+    readonly "agent.transfer_task": "odingard.guardian.agent.transfer_task.v1";
+    readonly "agent.transfer_capability": "odingard.guardian.agent.transfer_capability.v1";
+    readonly "memory.read": "odingard.guardian.memory.read.v1";
+    readonly "memory.write": "odingard.guardian.memory.write.v1";
+    readonly "memory.modify": "odingard.guardian.memory.modify.v1";
+    readonly "memory.delete": "odingard.guardian.memory.delete.v1";
+    readonly "memory.share": "odingard.guardian.memory.share.v1";
+    readonly "password.change": "odingard.guardian.password.change.v1";
+    readonly "mfa.change": "odingard.guardian.mfa.change.v1";
+    readonly "recovery.change": "odingard.guardian.recovery.change.v1";
+    readonly "trusted_device.add": "odingard.guardian.trusted_device.add.v1";
+    readonly "api_key.create": "odingard.guardian.api_key.create.v1";
+    readonly "runtime.change": "odingard.guardian.runtime.change.v1";
+    readonly "model.change": "odingard.guardian.model.change.v1";
+    readonly "agent.configure": "odingard.guardian.agent.configure.v1";
+};
+export type AgentStateActionId = keyof typeof AGENT_STATE_PARAMETERS_KINDS;
+/** Schema registry used by the adapter's parse + the connector's codec. */
+export declare const AGENT_STATE_PARAMETER_SCHEMAS: {
+    readonly "agent.spawn": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.agent.spawn.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        name: z.ZodString;
+        runtime: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    readonly "agent.delegate": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.agent.delegate.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        childAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        delegations: z.ZodArray<z.ZodObject<{
+            targetConnectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+            mode: z.ZodEnum<{
+                allow: "allow";
+                ask: "ask";
+            }>;
+            actions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            constraints: z.ZodOptional<z.ZodObject<{
+                maxValueCents: z.ZodOptional<z.ZodNumber>;
+                askAboveValueCents: z.ZodOptional<z.ZodNumber>;
+                merchantAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                categoryAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                recurrence: z.ZodOptional<z.ZodEnum<{
+                    never: "never";
+                    allowed: "allowed";
+                }>>;
+                budgetIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "BudgetId", "out">>>;
+            }, z.core.$strict>>;
+            expiresAtEpochMs: z.ZodNumber;
+            taskId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    readonly "agent.terminate": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.agent.terminate.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        childAgentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    readonly "memory.read": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.memory.read.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        key: z.ZodString;
+    }, z.core.$strict>;
+    readonly "memory.write": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.memory.write.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        key: z.ZodString;
+        content: z.ZodString;
+    }, z.core.$strict>;
+    readonly "memory.modify": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.memory.modify.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        key: z.ZodString;
+        content: z.ZodString;
+    }, z.core.$strict>;
+    readonly "memory.delete": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.memory.delete.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        key: z.ZodString;
+    }, z.core.$strict>;
+    readonly "memory.share": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.memory.share.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        key: z.ZodString;
+        audience: z.ZodEnum<{
+            principal: "principal";
+        }>;
+    }, z.core.$strict>;
+    readonly "password.change": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.password.change.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        rotationId: z.ZodString;
+    }, z.core.$strict>;
+    readonly "mfa.change": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.mfa.change.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        mode: z.ZodEnum<{
+            enable: "enable";
+            disable: "disable";
+            rotate: "rotate";
+        }>;
+    }, z.core.$strict>;
+    readonly "recovery.change": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.recovery.change.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        channel: z.ZodEnum<{
+            none: "none";
+            email: "email";
+        }>;
+    }, z.core.$strict>;
+    readonly "trusted_device.add": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.trusted_device.add.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        deviceFingerprint: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strict>;
+    readonly "api_key.create": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.api_key.create.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        label: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    readonly "runtime.change": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.runtime.change.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        runtime: z.ZodString;
+    }, z.core.$strict>;
+    readonly "model.change": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.model.change.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        model: z.ZodString;
+    }, z.core.$strict>;
+    readonly "agent.configure": z.ZodObject<{
+        schema: z.ZodLiteral<"odingard.guardian.agent.configure.v1">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        key: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>;
+};
+/**
+ * WO-025: the subset of agent-state actions wired into the adapter's
+ * parse/commit path (the agent-to-agent actions are registered + governed
+ * at the gateway but not wired here).
+ */
+export type AgentStateWiredActionId = keyof typeof AGENT_STATE_PARAMETER_SCHEMAS;
+/** Canonical verification projection: digest-bound action + material facts. */
+export declare function agentStateProjection(action: AgentStateActionId, params: {
+    connectionId: string;
+} & Record<string, unknown>): unknown;
+/** Deterministic plan digest for the adapter's bounded plan store. */
+export declare function agentStateCallDigest(action: AgentStateActionId, params: unknown): string;
+export {};

package/dist-dts/contracts/api.d.ts

@@ -0,0 +1,78 @@
+import { z } from "zod";
+export declare const ApiRequestMethodSchema: z.ZodEnum<{
+    GET: "GET";
+    HEAD: "HEAD";
+    POST: "POST";
+    PUT: "PUT";
+    PATCH: "PATCH";
+    DELETE: "DELETE";
+}>;
+export type ApiRequestMethod = z.infer<typeof ApiRequestMethodSchema>;
+export declare const API_REQUEST_BODY_MAX_LENGTH = 16384;
+export declare const API_REQUEST_MAX_HEADERS = 32;
+export declare const API_RESPONSE_BODY_CAPTURE_MAX_BYTES: number;
+export declare const API_RESPONSE_BODY_PREVIEW_MAX_LENGTH = 256;
+export declare const API_ENDPOINT_ALLOWLIST_MAX_ENTRIES = 64;
+export declare function isSafeApiHeaderValue(value: string): boolean;
+/**
+ * Canonicalizes an https request URL. Returns null when the URL is not a
+ * plain https absolute URL (userinfo, fragments, non-default ports left
+ * unnormalized are rejected or normalized here). Query parameters are
+ * sorted so two submissions of the same request canonicalize identically.
+ */
+export declare function canonicalizeApiRequestUrl(value: string): string | null;
+export declare const ApiRequestUrlSchema: z.ZodString;
+export declare const ApiRequestHeaderSchema: z.ZodObject<{
+    name: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strict>;
+export declare const ApiRequestParametersV1Schema: z.ZodObject<{
+    schema: z.ZodLiteral<"odingard.guardian.api.request.v1">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    method: z.ZodEnum<{
+        GET: "GET";
+        HEAD: "HEAD";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+    }>;
+    url: z.ZodString;
+    headers: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>>;
+    body: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ApiRequestParametersV1 = z.infer<typeof ApiRequestParametersV1Schema>;
+export declare function apiVerificationProjection(input: ApiRequestParametersV1): Readonly<{
+    domain: "odingard.guardian.api-projection.v1";
+    connectionId: string & z.core.$brand<"ConnectionId">;
+    method: "GET" | "HEAD" | "POST" | "PUT" | "PATCH" | "DELETE";
+    url: string;
+    headersDigest: string;
+    bodyDigest: string | null;
+    idempotencyKey: string | null;
+}>;
+/**
+ * api.request has a single verification level: the envelope and the content
+ * projection are the same canonical request. The post-commit envelope digest
+ * therefore equals the projection digest.
+ */
+export declare function apiEnvelopeProjection(input: ApiRequestParametersV1): Readonly<{
+    domain: "odingard.guardian.api-projection.v1";
+    connectionId: string & z.core.$brand<"ConnectionId">;
+    method: "GET" | "HEAD" | "POST" | "PUT" | "PATCH" | "DELETE";
+    url: string;
+    headersDigest: string;
+    bodyDigest: string | null;
+    idempotencyKey: string | null;
+}>;
+export declare function isSafeAllowlistEntry(value: string): boolean;
+/**
+ * Fail-closed allowlist match: the request URL must equal an allowlist entry
+ * or extend it at a path boundary. Entries are canonical https URL prefixes
+ * such as "https://api.github.com/repos/odingard/".
+ */
+export declare function apiEndpointWithinAllowlist(canonicalUrl: string, allowlist: readonly string[]): boolean;