@shield-agent/kya 0.12.0 → 0.13.0

package/.mcp.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/README.md

@@ -165,7 +165,7 @@ MCP Registry entry: `server.json` plus package `mcpName` `io.github.The-Pixel-Bo
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "http://127.0.0.1:8090",
         "KYA_API_KEY": "${KYA_API_KEY}",
@@ -186,13 +186,26 @@ npx @shield-agent/kya reject --id <approval-id>
 
 `wrap` evaluates and may open a pending ticket. It never executes the side effect. `invoke` asks the live plane to authorize after Allow or APPROVED. It does not run the write on this machine. The TUI (`dash`) can `a`/`x` decide only after `y` confirm with a JWT (`sk_*` refused).
 
+## In-process SDK shims
+
+Agents built on LangGraph.js, the Vercel AI SDK, Mastra, OpenAI Agents TS, or the Claude Agent SDK can route tool calls through the same evaluate path without a gateway:
+
+```ts
+import { governed, governLangGraphTool, KyaDeniedError } from "@shield-agent/kya/sdk";
+
+const run = governed({ toolId: "write_file", server: "filesystem", fn: myWrite });
+await run({ path: "out.txt", content: "hi" }); // throws KyaDeniedError on DENY
+```
+
+Offline evaluate by default (no network, no hosted plane); an explicit config honors the live plane. `governA2aSend` gates in-process agent-to-agent sends. Python frameworks (LangGraph, CrewAI, Pydantic AI, ADK, AutoGen, smolagents) use the `shield-kya` shim (`sdks/kya-python/`), which delegates to the local kya CLI. Support matrix and recipes: `docs/sdk-integrations.md`; runnable scripts: `examples/sdk/`.
+
 ## Claude connector
 
 **Desktop / Claude Code (local stdio):**
 
 ```bash
 # Prefer a preinstalled package (no registry auto-install):
-npx --no-install @shield-agent/kya@0.12.0 serve-mcp --stdio
+npx --no-install @shield-agent/kya@0.13.0 serve-mcp --stdio
 # Or after npm i -g / local install:
 kya serve-mcp --stdio
 ```
@@ -203,7 +216,7 @@ Copy `claude/claude_desktop_config.example.json` into Claude Desktop MCP setting
 
 ## OpenAI (Codex / Responses)
 
-**Codex CLI / IDE:** copy `openai/codex.config.example.toml` into `~/.codex/config.toml`. Local stdio uses `npx --no-install @shield-agent/kya@0.12.0 serve-mcp --stdio`. Hosted Codex uses `url = "https://shield-agent.com/mcp"` with `bearer_token_env_var = "KYA_API_KEY"`.
+**Codex CLI / IDE:** copy `openai/codex.config.example.toml` into `~/.codex/config.toml`. Local stdio uses `npx --no-install @shield-agent/kya@0.13.0 serve-mcp --stdio`. Hosted Codex uses `url = "https://shield-agent.com/mcp"` with `bearer_token_env_var = "KYA_API_KEY"`.
 
 **Responses API:** see `openai/responses-mcp.example.json` (`server_url` + `Authorization: Bearer <KYA_API_KEY>`).
 
@@ -307,6 +320,7 @@ pnpm build
 - [OTLP metrics (OSS + hosted)](docs/otlp.md)
 - [OWASP MCP governance map](docs/owasp-mcp-governance.md)
 - [kya certify — Agent Trust Baseline gap reports](docs/certify.md)
+- [SDK & framework integrations (in-process shims)](docs/sdk-integrations.md)
 - [Hosted operator SSO / SCIM (not in OSS CLI)](docs/hosted-operator-sso.md)
 - See also `LIMITATIONS.md` in this repo
 

package/amp/settings.example.json

@@ -2,7 +2,7 @@
   "amp.mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/claude/claude_desktop_config.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/cline/cline_mcp_settings.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/copilot/mcp-config.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/dist/gate/binary.js

@@ -99,7 +99,7 @@ export async function ensureGateBinary(deps = {}) {
     try {
         const [tgzRes, sumRes] = [await fetchFn(base), await fetchFn(`${base}.sha256`)];
         if (!tgzRes.ok || !sumRes.ok) {
-            throw new KyaError(`gateway artifact ${name} not available (HTTP ${!tgzRes.ok ? tgzRes.status : sumRes.status}) — run the repack workflow first or check the release tag gate-v${GATE_VERSION}`, "GATE_DOWNLOAD_FAILED");
+            throw new KyaError(`gateway artifact ${name} not available (HTTP ${!tgzRes.ok ? tgzRes.status : sumRes.status}) — gateway binaries are published by the kya release pipeline (see legal/THIRD-PARTY.md); check the release tag gate-v${GATE_VERSION}`, "GATE_DOWNLOAD_FAILED");
         }
         const tgz = Buffer.from(await tgzRes.arrayBuffer());
         const expected = parseSha256File(await sumRes.text());

package/dist/gate/binary.js.map

@@ -1 +1 @@
-{"version":3,"file":"binary.js","sourceRoot":"","sources":["../../src/gate/binary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AAEpC,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACnF,CAAC;AAOD,MAAM,UAAU,mBAAmB,CACjC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,EAAE,GACN,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,MAAM,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAChB,wBAAwB,QAAQ,IAAI,IAAI,qDAAqD,EAC7F,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,CAAe;IAC/D,OAAO,YAAY,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,CAAe;IAC9D,OAAO,sBAAsB,YAAY,4BAA4B,OAAO,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAe;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,EAAE,yBAAyB,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AASD,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvD,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;YAC5C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;YACxD,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;AAChE,CAAC;AAYD,SAAS,cAAc,CAAC,SAAiB,EAAE,OAAe;IACxD,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACnG,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAyB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,CAAC,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GACX,IAAI,CAAC,OAAO;QACZ,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,QAAQ,CAChB,oBAAoB,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,oEAAoE,YAAY,EAAE,EAC5K,sBAAsB,CACvB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,QAAQ,CAChB,gDAAgD,QAAQ,SAAS,MAAM,yBAAyB,EAChG,wBAAwB,CACzB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAClC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,QAAQ,CAChB,oBAAoB,IAAI,sDAAsD,EAC9E,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QAC/D,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,OAAO;YAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtD,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}
+{"version":3,"file":"binary.js","sourceRoot":"","sources":["../../src/gate/binary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AAEpC,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACnF,CAAC;AAOD,MAAM,UAAU,mBAAmB,CACjC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,EAAE,GACN,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,MAAM,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAChB,wBAAwB,QAAQ,IAAI,IAAI,qDAAqD,EAC7F,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,CAAe;IAC/D,OAAO,YAAY,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,CAAe;IAC9D,OAAO,sBAAsB,YAAY,4BAA4B,OAAO,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAe;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,EAAE,yBAAyB,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AASD,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvD,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;YAC5C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;YACxD,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;AAChE,CAAC;AAYD,SAAS,cAAc,CAAC,SAAiB,EAAE,OAAe;IACxD,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACnG,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAyB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,CAAC,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GACX,IAAI,CAAC,OAAO;QACZ,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,QAAQ,CAChB,oBAAoB,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,0HAA0H,YAAY,EAAE,EAClO,sBAAsB,CACvB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,QAAQ,CAChB,gDAAgD,QAAQ,SAAS,MAAM,yBAAyB,EAChG,wBAAwB,CACzB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAClC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,QAAQ,CAChB,oBAAoB,IAAI,sDAAsD,EAC9E,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QAC/D,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,OAAO;YAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtD,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/sdk/a2a.d.ts

@@ -0,0 +1,27 @@
+/**
+ * In-process boundary check for agent-to-agent sends (ADK / BeeAI / CrewAI
+ * style frameworks): evaluate `a2a__<peerId>__<action>` before the caller
+ * performs the send. `a2a` is a registry-unknown server, so offline evaluate
+ * lands on the safe REQUIRE_APPROVE/UNKNOWN path unless the action is
+ * declared irreversible. Fleet-level A2A governance (mTLS identity, org
+ * policy between runtimes) is the kya gateway's job — this is the
+ * single-process complement.
+ */
+import type { ResolvedConfig } from "../config.js";
+export interface GovernA2aSendOptions {
+    readonly peerId: string;
+    readonly peerUrl?: string;
+    readonly action: string;
+    /** Short human description of the payload — trail summary only, never the body. */
+    readonly payloadSummary?: string;
+    readonly irreversible?: boolean;
+    readonly config?: ResolvedConfig;
+}
+export interface A2aGateResult {
+    /** true for ALLOW and observed REQUIRE_APPROVE; false for DENY/unknown. */
+    readonly allow: boolean;
+    readonly verdict: string;
+    readonly reasonCode: string;
+}
+export declare function governA2aSend(options: GovernA2aSendOptions): Promise<A2aGateResult>;
+//# sourceMappingURL=a2a.d.ts.map

package/dist/sdk/a2a.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a.d.ts","sourceRoot":"","sources":["../../src/sdk/a2a.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAInD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAoBxB"}

package/dist/sdk/a2a.js

@@ -0,0 +1,33 @@
+/**
+ * In-process boundary check for agent-to-agent sends (ADK / BeeAI / CrewAI
+ * style frameworks): evaluate `a2a__<peerId>__<action>` before the caller
+ * performs the send. `a2a` is a registry-unknown server, so offline evaluate
+ * lands on the safe REQUIRE_APPROVE/UNKNOWN path unless the action is
+ * declared irreversible. Fleet-level A2A governance (mTLS identity, org
+ * policy between runtimes) is the kya gateway's job — this is the
+ * single-process complement.
+ */
+import { runEvalTool } from "../commands/eval-tool.js";
+import { recordSdkTrail, resolveSdkConfig } from "./govern.js";
+export async function governA2aSend(options) {
+    const toolId = `a2a__${options.peerId.trim()}__${options.action.trim()}`;
+    const config = resolveSdkConfig(options.config);
+    const args = {
+        peer: options.peerId,
+        ...(options.peerUrl ? { url: options.peerUrl } : {}),
+        ...(options.payloadSummary ? { note: options.payloadSummary } : {}),
+    };
+    const evalResult = await runEvalTool(config, {
+        toolId,
+        args,
+        irreversible: options.irreversible,
+    });
+    recordSdkTrail(config, evalResult, args);
+    const verdict = (evalResult.response.verdict ?? "").toUpperCase();
+    return {
+        allow: verdict === "ALLOW" || verdict === "REQUIRE_APPROVE",
+        verdict: verdict || "DENY",
+        reasonCode: evalResult.response.reasonCode ?? "",
+    };
+}
+//# sourceMappingURL=a2a.js.map

package/dist/sdk/a2a.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a.js","sourceRoot":"","sources":["../../src/sdk/a2a.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAmB/D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B;IAE7B,MAAM,MAAM,GAAG,QAAQ,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,OAAO,CAAC,MAAM;QACpB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE;QAC3C,MAAM;QACN,IAAI;QACJ,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IACH,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClE,OAAO;QACL,KAAK,EAAE,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,iBAAiB;QAC3D,OAAO,EAAE,OAAO,IAAI,MAAM;QAC1B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE;KACjD,CAAC;AACJ,CAAC"}

package/dist/sdk/adapters/claude-agent.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Anthropic Agent SDK tool adapter. Structural only — no
+ * @anthropic-ai/claude-agent-sdk import. Matches the
+ * `{ name, description, inputSchema, handler }` in-process tool shape where
+ * handler receives parsed args plus SDK extras; returns the same shape with
+ * a governed handler.
+ */
+import { type GovernanceOptions } from "../govern.js";
+export interface ClaudeAgentToolLike<TArgs = unknown, TResult = unknown> {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: unknown;
+    readonly handler: (args: TArgs, extra?: unknown) => Promise<TResult> | TResult;
+}
+export declare function governClaudeAgentTool<TArgs, TResult>(tool: ClaudeAgentToolLike<TArgs, TResult>, options?: GovernanceOptions): ClaudeAgentToolLike<TArgs, TResult>;
+//# sourceMappingURL=claude-agent.d.ts.map

package/dist/sdk/adapters/claude-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-agent.d.ts","sourceRoot":"","sources":["../../../src/sdk/adapters/claude-agent.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEvE,MAAM,WAAW,mBAAmB,CAAC,KAAK,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAChF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAClD,IAAI,EAAE,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,EACzC,OAAO,GAAE,iBAAsB,GAC9B,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAcrC"}

package/dist/sdk/adapters/claude-agent.js

@@ -0,0 +1,24 @@
+/**
+ * Anthropic Agent SDK tool adapter. Structural only — no
+ * @anthropic-ai/claude-agent-sdk import. Matches the
+ * `{ name, description, inputSchema, handler }` in-process tool shape where
+ * handler receives parsed args plus SDK extras; returns the same shape with
+ * a governed handler.
+ */
+import { createGateCheck } from "../govern.js";
+export function governClaudeAgentTool(tool, options = {}) {
+    const check = createGateCheck({
+        toolId: tool.name,
+        server: options.server,
+        irreversible: options.irreversible,
+        config: options.config,
+    });
+    return {
+        ...tool,
+        handler: async (args, extra) => {
+            await check(args);
+            return tool.handler(args, extra);
+        },
+    };
+}
+//# sourceMappingURL=claude-agent.js.map

package/dist/sdk/adapters/claude-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-agent.js","sourceRoot":"","sources":["../../../src/sdk/adapters/claude-agent.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAA0B,MAAM,cAAc,CAAC;AASvE,MAAM,UAAU,qBAAqB,CACnC,IAAyC,EACzC,UAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,KAAK,EAAE,IAAW,EAAE,KAAe,EAAoB,EAAE;YAChE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sdk/adapters/langgraph.d.ts

@@ -0,0 +1,14 @@
+/**
+ * LangGraph.js-style tool adapter. Structural only — no @langgraph imports.
+ * Matches the `{ name, description, schema, func }` tool shape; returns the
+ * same shape with a governed func.
+ */
+import { type GovernanceOptions } from "../govern.js";
+export interface LangGraphToolLike<TArgs = unknown, TResult = unknown> {
+    readonly name: string;
+    readonly description: string;
+    readonly schema: unknown;
+    readonly func: (args: TArgs) => Promise<TResult> | TResult;
+}
+export declare function governLangGraphTool<TArgs, TResult>(tool: LangGraphToolLike<TArgs, TResult>, options?: GovernanceOptions): LangGraphToolLike<TArgs, TResult>;
+//# sourceMappingURL=langgraph.d.ts.map

package/dist/sdk/adapters/langgraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"langgraph.d.ts","sourceRoot":"","sources":["../../../src/sdk/adapters/langgraph.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAY,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEhE,MAAM,WAAW,iBAAiB,CAAC,KAAK,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC5D;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAChD,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,EACvC,OAAO,GAAE,iBAAsB,GAC9B,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAWnC"}

package/dist/sdk/adapters/langgraph.js

@@ -0,0 +1,19 @@
+/**
+ * LangGraph.js-style tool adapter. Structural only — no @langgraph imports.
+ * Matches the `{ name, description, schema, func }` tool shape; returns the
+ * same shape with a governed func.
+ */
+import { governed } from "../govern.js";
+export function governLangGraphTool(tool, options = {}) {
+    return {
+        ...tool,
+        func: governed({
+            toolId: tool.name,
+            server: options.server,
+            irreversible: options.irreversible,
+            config: options.config,
+            fn: tool.func,
+        }),
+    };
+}
+//# sourceMappingURL=langgraph.js.map

package/dist/sdk/adapters/langgraph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"langgraph.js","sourceRoot":"","sources":["../../../src/sdk/adapters/langgraph.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAA0B,MAAM,cAAc,CAAC;AAShE,MAAM,UAAU,mBAAmB,CACjC,IAAuC,EACvC,UAA6B,EAAE;IAE/B,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,QAAQ,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,IAAI;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,EAAE,EAAE,IAAI,CAAC,IAAI;SACd,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/sdk/adapters/mastra.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Mastra-style tool adapter. Structural only — no @mastra imports. Matches
+ * the `{ id, description, inputSchema, execute }` tool shape; returns the
+ * same shape with a governed execute.
+ */
+import { type GovernanceOptions } from "../govern.js";
+export interface MastraToolLike<TArgs = unknown, TResult = unknown> {
+    readonly id: string;
+    readonly description: string;
+    readonly inputSchema: unknown;
+    readonly execute: (args: TArgs) => Promise<TResult> | TResult;
+}
+export declare function governMastraTool<TArgs, TResult>(tool: MastraToolLike<TArgs, TResult>, options?: GovernanceOptions): MastraToolLike<TArgs, TResult>;
+//# sourceMappingURL=mastra.d.ts.map

package/dist/sdk/adapters/mastra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mastra.d.ts","sourceRoot":"","sources":["../../../src/sdk/adapters/mastra.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAY,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEhE,MAAM,WAAW,cAAc,CAAC,KAAK,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IAChE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC/D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAC7C,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EACpC,OAAO,GAAE,iBAAsB,GAC9B,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAWhC"}

package/dist/sdk/adapters/mastra.js

@@ -0,0 +1,19 @@
+/**
+ * Mastra-style tool adapter. Structural only — no @mastra imports. Matches
+ * the `{ id, description, inputSchema, execute }` tool shape; returns the
+ * same shape with a governed execute.
+ */
+import { governed } from "../govern.js";
+export function governMastraTool(tool, options = {}) {
+    return {
+        ...tool,
+        execute: governed({
+            toolId: tool.id,
+            server: options.server,
+            irreversible: options.irreversible,
+            config: options.config,
+            fn: tool.execute,
+        }),
+    };
+}
+//# sourceMappingURL=mastra.js.map

package/dist/sdk/adapters/mastra.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mastra.js","sourceRoot":"","sources":["../../../src/sdk/adapters/mastra.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAA0B,MAAM,cAAc,CAAC;AAShE,MAAM,UAAU,gBAAgB,CAC9B,IAAoC,EACpC,UAA6B,EAAE;IAE/B,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,QAAQ,CAAC;YAChB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,EAAE,EAAE,IAAI,CAAC,OAAO;SACjB,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/sdk/adapters/openai-agents.d.ts

@@ -0,0 +1,17 @@
+/**
+ * OpenAI Agents TS function-tool adapter. Structural only — no
+ * @openai/agents import. Matches the `{ name, description, parameters,
+ * invoke }` function-tool shape where invoke receives the run context and a
+ * JSON string input; returns the same shape with a governed invoke. The
+ * parsed input is what gets evaluated; the original string is what the tool
+ * receives.
+ */
+import { type GovernanceOptions } from "../govern.js";
+export interface OpenAiAgentsToolLike<TResult = unknown> {
+    readonly name: string;
+    readonly description: string;
+    readonly parameters: unknown;
+    readonly invoke: (runContext: unknown, input: string) => Promise<TResult> | TResult;
+}
+export declare function governOpenAiAgentsTool<TResult>(tool: OpenAiAgentsToolLike<TResult>, options?: GovernanceOptions): OpenAiAgentsToolLike<TResult>;
+//# sourceMappingURL=openai-agents.d.ts.map

package/dist/sdk/adapters/openai-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-agents.d.ts","sourceRoot":"","sources":["../../../src/sdk/adapters/openai-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEvE,MAAM,WAAW,oBAAoB,CAAC,OAAO,GAAG,OAAO;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACrF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAC5C,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,EACnC,OAAO,GAAE,iBAAsB,GAC9B,oBAAoB,CAAC,OAAO,CAAC,CAoB/B"}

package/dist/sdk/adapters/openai-agents.js

@@ -0,0 +1,32 @@
+/**
+ * OpenAI Agents TS function-tool adapter. Structural only — no
+ * @openai/agents import. Matches the `{ name, description, parameters,
+ * invoke }` function-tool shape where invoke receives the run context and a
+ * JSON string input; returns the same shape with a governed invoke. The
+ * parsed input is what gets evaluated; the original string is what the tool
+ * receives.
+ */
+import { createGateCheck } from "../govern.js";
+export function governOpenAiAgentsTool(tool, options = {}) {
+    const check = createGateCheck({
+        toolId: tool.name,
+        server: options.server,
+        irreversible: options.irreversible,
+        config: options.config,
+    });
+    return {
+        ...tool,
+        invoke: async (runContext, input) => {
+            let args = input;
+            try {
+                args = JSON.parse(input);
+            }
+            catch {
+                /* evaluate the raw string when input is not JSON */
+            }
+            await check(args);
+            return tool.invoke(runContext, input);
+        },
+    };
+}
+//# sourceMappingURL=openai-agents.js.map

package/dist/sdk/adapters/openai-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-agents.js","sourceRoot":"","sources":["../../../src/sdk/adapters/openai-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAA0B,MAAM,cAAc,CAAC;AASvE,MAAM,UAAU,sBAAsB,CACpC,IAAmC,EACnC,UAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,KAAK,EAAE,UAAmB,EAAE,KAAa,EAAoB,EAAE;YACrE,IAAI,IAAI,GAAY,KAAK,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sdk/adapters/vercel-ai.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Vercel AI SDK tool adapter. Structural only — no `ai` import. Matches the
+ * `{ description, parameters, execute }` tool shape; returns the same shape
+ * with a governed execute. AI SDK tools are keyed by name in the tools
+ * record, so the name is an explicit adapter option.
+ */
+import { type GovernanceOptions } from "../govern.js";
+export interface VercelAiToolLike<TArgs = unknown, TResult = unknown> {
+    readonly description?: string;
+    readonly parameters: unknown;
+    readonly execute: (args: TArgs) => Promise<TResult> | TResult;
+}
+export interface GovernVercelAiOptions extends GovernanceOptions {
+    /** Tool name — the key this definition is registered under. */
+    readonly name: string;
+}
+export declare function governVercelAiTool<TArgs, TResult>(tool: VercelAiToolLike<TArgs, TResult>, options: GovernVercelAiOptions): VercelAiToolLike<TArgs, TResult>;
+//# sourceMappingURL=vercel-ai.d.ts.map

package/dist/sdk/adapters/vercel-ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-ai.d.ts","sourceRoot":"","sources":["../../../src/sdk/adapters/vercel-ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAY,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEhE,MAAM,WAAW,gBAAgB,CAAC,KAAK,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC/D;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAC/C,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EACtC,OAAO,EAAE,qBAAqB,GAC7B,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAWlC"}

package/dist/sdk/adapters/vercel-ai.js

@@ -0,0 +1,20 @@
+/**
+ * Vercel AI SDK tool adapter. Structural only — no `ai` import. Matches the
+ * `{ description, parameters, execute }` tool shape; returns the same shape
+ * with a governed execute. AI SDK tools are keyed by name in the tools
+ * record, so the name is an explicit adapter option.
+ */
+import { governed } from "../govern.js";
+export function governVercelAiTool(tool, options) {
+    return {
+        ...tool,
+        execute: governed({
+            toolId: options.name,
+            server: options.server,
+            irreversible: options.irreversible,
+            config: options.config,
+            fn: tool.execute,
+        }),
+    };
+}
+//# sourceMappingURL=vercel-ai.js.map

package/dist/sdk/adapters/vercel-ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-ai.js","sourceRoot":"","sources":["../../../src/sdk/adapters/vercel-ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAA0B,MAAM,cAAc,CAAC;AAahE,MAAM,UAAU,kBAAkB,CAChC,IAAsC,EACtC,OAA8B;IAE9B,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,QAAQ,CAAC;YAChB,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,EAAE,EAAE,IAAI,CAAC,OAAO;SACjB,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/sdk/govern.d.ts

@@ -0,0 +1,52 @@
+/**
+ * In-process governance shim: evaluate a tool call through the same path
+ * `kya wrap` uses (offline sample evaluate by default — no network, no hosted
+ * plane required), record the trail event, then ALLOW/REQUIRE_APPROVE run the
+ * function while DENY throws KyaDeniedError without running it.
+ *
+ * Importing this module starts nothing: config resolves lazily on first call.
+ *
+ * Deliberate coupling: the trail write is fail-closed — a governance shim
+ * where the audit record cannot be written does not run the action.
+ */
+import type { ResolvedConfig } from "../config.js";
+import { KyaError } from "../errors.js";
+import { type EvalToolResult } from "../commands/eval-tool.js";
+export declare class KyaDeniedError extends KyaError {
+    readonly verdict: string;
+    readonly reasonCode: string;
+    readonly toolId: string;
+    constructor(input: {
+        verdict: string;
+        reasonCode: string;
+        toolId: string;
+    });
+}
+export interface GovernanceOptions {
+    /** MCP server id; toolId becomes `<server>__<toolId>` so the taxonomy lights up. */
+    readonly server?: string;
+    readonly irreversible?: boolean;
+    /** Explicit config (hosted plane honored). Default: lazy offline resolve. */
+    readonly config?: ResolvedConfig;
+}
+export interface GovernedOptions<TArgs, TResult> extends GovernanceOptions {
+    readonly toolId: string;
+    readonly fn: (args: TArgs) => Promise<TResult> | TResult;
+}
+/** `<server>__<name>` when a server is given, else the bare name. */
+export declare function deriveSdkToolId(name: string, server?: string): string;
+export declare function resolveSdkConfig(config?: ResolvedConfig): ResolvedConfig;
+/** Trail parity with wrap: verdict/mode/reasonCode + change fields when derivable. */
+export declare function recordSdkTrail(config: ResolvedConfig, evalResult: EvalToolResult, args: unknown, env?: NodeJS.ProcessEnv): void;
+export interface GateCheckOptions extends GovernanceOptions {
+    readonly toolId: string;
+}
+/**
+ * The evaluate + trail half of governed(), constructed once per wrapped tool
+ * so the lazy config cache hits across calls. Adapters whose execution path
+ * closes over per-call context use this directly and invoke the framework
+ * callable themselves after the check passes.
+ */
+export declare function createGateCheck(options: GateCheckOptions): (args: unknown) => Promise<void>;
+export declare function governed<TArgs, TResult>(options: GovernedOptions<TArgs, TResult>): (args: TArgs) => Promise<TResult>;
+//# sourceMappingURL=govern.d.ts.map

package/dist/sdk/govern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"govern.d.ts","sourceRoot":"","sources":["../../src/sdk/govern.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAI5E,qBAAa,cAAe,SAAQ,QAAQ;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAW3E;AAED,MAAM,WAAW,iBAAiB;IAChC,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,eAAe,CAAC,KAAK,EAAE,OAAO,CAAE,SAAQ,iBAAiB;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC1D;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAIrE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,cAAc,CAExE;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,cAAc,EAC1B,IAAI,EAAE,OAAO,EACb,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,IAAI,CAuBN;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,gBAAgB,GACxB,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAqBlC;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EACrC,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,GACvC,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CAMnC"}

package/dist/sdk/govern.js

@@ -0,0 +1,95 @@
+/**
+ * In-process governance shim: evaluate a tool call through the same path
+ * `kya wrap` uses (offline sample evaluate by default — no network, no hosted
+ * plane required), record the trail event, then ALLOW/REQUIRE_APPROVE run the
+ * function while DENY throws KyaDeniedError without running it.
+ *
+ * Importing this module starts nothing: config resolves lazily on first call.
+ *
+ * Deliberate coupling: the trail write is fail-closed — a governance shim
+ * where the audit record cannot be written does not run the action.
+ */
+import { resolveConfig } from "../config.js";
+import { KyaError } from "../errors.js";
+import { runEvalTool } from "../commands/eval-tool.js";
+import { appendTrail, defaultSessionId } from "../trail.js";
+import { deriveWireChangeFields } from "../diff-preview.js";
+export class KyaDeniedError extends KyaError {
+    verdict;
+    reasonCode;
+    toolId;
+    constructor(input) {
+        super(`kya ${input.verdict}: ${input.toolId} (${input.reasonCode || "no reason"}) — function not executed`, "KYA_DENIED", 1);
+        this.name = "KyaDeniedError";
+        this.verdict = input.verdict;
+        this.reasonCode = input.reasonCode;
+        this.toolId = input.toolId;
+    }
+}
+/** `<server>__<name>` when a server is given, else the bare name. */
+export function deriveSdkToolId(name, server) {
+    const n = name.trim();
+    const s = server?.trim();
+    return s ? `${s}__${n}` : n;
+}
+export function resolveSdkConfig(config) {
+    return config ?? resolveConfig({ offline: true, allowMissingApiKey: true });
+}
+/** Trail parity with wrap: verdict/mode/reasonCode + change fields when derivable. */
+export function recordSdkTrail(config, evalResult, args, env = process.env) {
+    const reason = evalResult.response.reasonCode ?? "";
+    const toolId = evalResult.response.toolId ?? "";
+    const mode = evalResult.offline || config.offline ? "offline" : "observe";
+    const fields = deriveWireChangeFields(toolId, args, env);
+    appendTrail(config.cwd, {
+        ts: new Date().toISOString(),
+        sessionId: defaultSessionId(env),
+        host: config.host,
+        toolId,
+        verdict: evalResult.response.verdict,
+        reasonCode: reason,
+        mode,
+        neverEvent: reason === "NEVER_EVENT",
+        argsHash: evalResult.argsHash,
+        ...(fields?.summary ? { summary: fields.summary } : {}),
+        ...(fields?.diffPreview ? { diffPreview: fields.diffPreview } : {}),
+        ...(fields?.targetPath ? { targetPath: fields.targetPath } : {}),
+    }, env);
+}
+/**
+ * The evaluate + trail half of governed(), constructed once per wrapped tool
+ * so the lazy config cache hits across calls. Adapters whose execution path
+ * closes over per-call context use this directly and invoke the framework
+ * callable themselves after the check passes.
+ */
+export function createGateCheck(options) {
+    const toolId = deriveSdkToolId(options.toolId, options.server);
+    let cached = options.config;
+    return async (args) => {
+        if (!cached)
+            cached = resolveSdkConfig();
+        const evalResult = await runEvalTool(cached, {
+            toolId,
+            args,
+            irreversible: options.irreversible,
+        });
+        recordSdkTrail(cached, evalResult, args);
+        const verdict = (evalResult.response.verdict ?? "").toUpperCase();
+        if (verdict === "ALLOW" || verdict === "REQUIRE_APPROVE") {
+            return;
+        }
+        throw new KyaDeniedError({
+            verdict: verdict || "DENY",
+            reasonCode: evalResult.response.reasonCode ?? "",
+            toolId: evalResult.response.toolId ?? toolId,
+        });
+    };
+}
+export function governed(options) {
+    const check = createGateCheck(options);
+    return async (args) => {
+        await check(args);
+        return options.fn(args);
+    };
+}
+//# sourceMappingURL=govern.js.map

package/dist/sdk/govern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"govern.js","sourceRoot":"","sources":["../../src/sdk/govern.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,WAAW,EAAuB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,OAAO,cAAe,SAAQ,QAAQ;IACjC,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,MAAM,CAAS;IAExB,YAAY,KAA8D;QACxE,KAAK,CACH,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,IAAI,WAAW,2BAA2B,EACpG,YAAY,EACZ,CAAC,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;CACF;AAeD,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAe;IAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;IACzB,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,OAAO,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAC5B,MAAsB,EACtB,UAA0B,EAC1B,IAAa,EACb,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,WAAW,CACT,MAAM,CAAC,GAAG,EACV;QACE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM;QACN,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO;QACpC,UAAU,EAAE,MAAM;QAClB,IAAI;QACJ,UAAU,EAAE,MAAM,KAAK,aAAa;QACpC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,EACD,GAAG,CACJ,CAAC;AACJ,CAAC;AAMD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAyB;IAEzB,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5B,OAAO,KAAK,EAAE,IAAa,EAAiB,EAAE;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE;YAC3C,MAAM;YACN,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,cAAc,CAAC;YACvB,OAAO,EAAE,OAAO,IAAI,MAAM;YAC1B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE;YAChD,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM;SAC7C,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,OAAwC;IAExC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,KAAK,EAAE,IAAW,EAAoB,EAAE;QAC7C,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC;AACJ,CAAC"}

package/dist/sdk/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @shield-agent/kya/sdk — in-process governance shims for agent frameworks.
+ * Importing this surface starts no daemons, telemetry, or network clients;
+ * evaluation defaults to the offline sample path.
+ */
+export { governed, deriveSdkToolId, KyaDeniedError, type GovernedOptions, type GovernanceOptions, } from "./govern.js";
+export { governA2aSend, type GovernA2aSendOptions, type A2aGateResult, } from "./a2a.js";
+export { governLangGraphTool, type LangGraphToolLike } from "./adapters/langgraph.js";
+export { governVercelAiTool, type VercelAiToolLike, type GovernVercelAiOptions, } from "./adapters/vercel-ai.js";
+export { governMastraTool, type MastraToolLike } from "./adapters/mastra.js";
+export { governOpenAiAgentsTool, type OpenAiAgentsToolLike, } from "./adapters/openai-agents.js";
+export { governClaudeAgentTool, type ClaudeAgentToolLike, } from "./adapters/claude-agent.js";
+export type { ResolvedConfig } from "../config.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/sdk/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,KAAK,oBAAoB,EACzB,KAAK,aAAa,GACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EACL,sBAAsB,EACtB,KAAK,oBAAoB,GAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,GACzB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/sdk/index.js

@@ -0,0 +1,13 @@
+/**
+ * @shield-agent/kya/sdk — in-process governance shims for agent frameworks.
+ * Importing this surface starts no daemons, telemetry, or network clients;
+ * evaluation defaults to the offline sample path.
+ */
+export { governed, deriveSdkToolId, KyaDeniedError, } from "./govern.js";
+export { governA2aSend, } from "./a2a.js";
+export { governLangGraphTool } from "./adapters/langgraph.js";
+export { governVercelAiTool, } from "./adapters/vercel-ai.js";
+export { governMastraTool } from "./adapters/mastra.js";
+export { governOpenAiAgentsTool, } from "./adapters/openai-agents.js";
+export { governClaudeAgentTool, } from "./adapters/claude-agent.js";
+//# sourceMappingURL=index.js.map

package/dist/sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,GAGf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,GAGd,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAA0B,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,kBAAkB,GAGnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAuB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EACL,sBAAsB,GAEvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,qBAAqB,GAEtB,MAAM,4BAA4B,CAAC"}

package/droid/README.md

@@ -1,6 +1,6 @@
 # Droid (Factory) + Shield KYA
 
-Preferred path is Droid's own CLI: `droid mcp add shield-kya "npx --no-install @shield-agent/kya@0.12.0 serve-mcp --stdio" --env KYA_BASE_URL=https://shield-agent.com --env KYA_API_KEY=$KYA_API_KEY --env KYA_HOST=ide`.
+Preferred path is Droid's own CLI: `droid mcp add shield-kya "npx --no-install @shield-agent/kya@0.13.0 serve-mcp --stdio" --env KYA_BASE_URL=https://shield-agent.com --env KYA_API_KEY=$KYA_API_KEY --env KYA_HOST=ide`.
 
 `mcp.example.json` shows the expected on-disk shape (`~/.factory/mcp.json`) — **schema not yet verified against a live Droid install**; treat as a starting point and prefer `droid mcp add`.
 

package/droid/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/gemini/settings.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/grok/README.md

@@ -40,7 +40,7 @@ chat = client.chat.create(
 There is no grok.com stdio path. For a local agent host use the same stdio launch as Claude:
 
 ```bash
-npx --no-install @shield-agent/kya@0.12.0 serve-mcp --stdio
+npx --no-install @shield-agent/kya@0.13.0 serve-mcp --stdio
 ```
 
 Env: `KYA_BASE_URL`, `KYA_API_KEY`, `KYA_HOST`. Codex and Gemini example configs in this package show the full snippets.

package/kilo/kilo.example.json

@@ -2,7 +2,7 @@
   "mcp": {
     "shield-kya": {
       "type": "local",
-      "command": ["npx", "--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "command": ["npx", "--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "enabled": true,
       "environment": {
         "KYA_BASE_URL": "https://shield-agent.com",

package/kimi/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/kiro/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "shield-kya",
   "display_name": "Shield KYA",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Know Your Agent MCP gate: ALLOW / DENY / REQUIRE_APPROVE. Sole PEP is Shield.",
   "long_description": "Local Claude Desktop extension that runs the packaged `dist/cli.js serve-mcp --stdio` against your Shield control plane (local or https://shield-agent.com). Tools evaluate policy, ingest session risk, and open Hold tickets. They never execute irreversible side effects.",
   "author": {

package/mastracode/mcp.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/mcp.json

@@ -3,7 +3,7 @@
     "shield-kya": {
       "description": "Know Your Agent local MCP gate: wrap-before-write, named-agent registry, Hold/Clear.",
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "${KYA_BASE_URL}",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/openai/codex.config.example.toml

@@ -11,7 +11,7 @@
 # --- Local stdio (OSS) ---
 [mcp_servers.shield-kya]
 command = "npx"
-args = ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"]
+args = ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"]
 startup_timeout_sec = 20
 env_vars = ["KYA_BASE_URL", "KYA_API_KEY", "KYA_HOST", "KYA_AGENT_ID"]
 

package/opencode/opencode.example.json

@@ -2,7 +2,7 @@
   "mcp": {
     "shield-kya": {
       "type": "local",
-      "command": ["npx", "--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "command": ["npx", "--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "enabled": true,
       "environment": {
         "KYA_BASE_URL": "https://shield-agent.com",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shield-agent/kya",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Audit trail & traceability for AI agents — local MCP gate (Allow/Review/Deny), live receipt dashboard, trust-baseline certification.",
   "license": "MIT",
   "type": "module",
@@ -16,6 +16,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./sdk": {
+      "types": "./dist/sdk/index.d.ts",
+      "import": "./dist/sdk/index.js"
     }
   },
   "files": [

package/qwen/settings.example.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "shield-kya": {
       "command": "npx",
-      "args": ["--no-install", "@shield-agent/kya@0.12.0", "serve-mcp", "--stdio"],
+      "args": ["--no-install", "@shield-agent/kya@0.13.0", "serve-mcp", "--stdio"],
       "env": {
         "KYA_BASE_URL": "https://shield-agent.com",
         "KYA_API_KEY": "${KYA_API_KEY}",

package/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/The-Pixel-Boys/shield-kya",
     "source": "github"
   },
-  "version": "0.12.0",
+  "version": "0.13.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@shield-agent/kya",
-      "version": "0.12.0",
+      "version": "0.13.0",
       "transport": {
         "type": "stdio"
       },