@shield-agent/kya 0.22.0 → 0.23.0

package/dist/dash/dash.js

@@ -191,7 +191,7 @@ async function loadCases(client) {
         if (!Array.isArray(rows)) {
             return [
                 "Cases list is not available on this plane.",
-                "Use the web console /app/kya/cases (observational — not a PEP).",
+                "Use the web console /app/kya/cases (observational - not a PEP).",
             ];
         }
         return casesBody(rows);
@@ -199,7 +199,7 @@ async function loadCases(client) {
     catch {
         return [
             "GET /api/v1/kya/cases is not on this plane yet.",
-            "Use the web console /app/kya/cases. Observational only — does not approve submit.",
+            "Use the web console /app/kya/cases. Observational only - does not approve submit.",
         ];
     }
 }
@@ -220,7 +220,7 @@ async function loadEdge(client) {
         return { error: "edge status unavailable" };
     }
 }
-/** Offline sample used by tests — production PEP is HTTP. */
+/** Offline sample used by tests - production PEP is HTTP. */
 export function offlinePolicyPair() {
     return {
         deny: evaluateOffline({

package/dist/dash/entitlement.d.ts

@@ -25,7 +25,7 @@ export interface ResolveEntitlementInput {
     readonly now?: Date;
     readonly licensePublicKeyPem?: string;
 }
-/** Placeholder verify key — real issuers replace via KYA_LICENSE_PUBKEY. */
+/** Placeholder verify key - real issuers replace via KYA_LICENSE_PUBKEY. */
 export declare const DEFAULT_LICENSE_PUBKEY_PEM = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA//////////////////////////////////////////8=\n-----END PUBLIC KEY-----\n";
 export declare function isEnterprisePane(pane: string): pane is EnterprisePane;
 export declare function paneAllowed(ent: Entitlement, pane: DashPane): boolean;

package/dist/dash/entitlement.js

@@ -16,7 +16,7 @@ export const FREE_PANES = [
     "mcp",
     "sandbox",
 ];
-/** Placeholder verify key — real issuers replace via KYA_LICENSE_PUBKEY. */
+/** Placeholder verify key - real issuers replace via KYA_LICENSE_PUBKEY. */
 export const DEFAULT_LICENSE_PUBKEY_PEM = `-----BEGIN PUBLIC KEY-----
 MCowBQYDK2VwAyEA//////////////////////////////////////////8=
 -----END PUBLIC KEY-----

package/dist/dash/render.js

@@ -42,7 +42,7 @@ export function enterpriseNavLine(ent, active) {
             .map((p) => (p === active ? `[${p.toUpperCase()}]` : p))
             .join("  ")}`);
     }
-    return clip("ent:  (hidden on FREE — set KYA_DASH_PLAN=enterprise to unlock)");
+    return clip("ent:  (hidden on FREE - set KYA_DASH_PLAN=enterprise to unlock)");
 }
 export function lockedPane(pane) {
     return [
@@ -91,7 +91,7 @@ export function assertNoSecrets(text, extra) {
         /\bsession=[^\s;&"']{8,}/i,
         /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,
         /-----END [A-Z0-9 ]*PRIVATE KEY-----/i,
-        // Keyword assignments require a realistically long value — short benign
+        // Keyword assignments require a realistically long value - short benign
         // mentions ("refreshed token: ab12cd34") must not DoS every render.
         /\b(password|passwd|secret|token|api[_-]?key)\s*[:=]\s*(?!\[redacted\])[^\s#"']{16,}/i,
         /\bxox[baprs]-[A-Za-z0-9-]{10,}/i,

package/dist/dash/screens/enterprise.js

@@ -5,12 +5,12 @@ export function dashboardBody(k) {
         "",
         ...table(["kpi", "value"], [
             ["pending approvals", String(k.pendingApprovals)],
-            ["agents registered", Number.isFinite(k.agentCount) ? String(k.agentCount) : "—"],
-            ["observed sessions", String(k.sessionCount ?? "—")],
-            ["high-risk sessions", String(k.highRiskSessions ?? "—")],
-            ["policy denies", String(k.policyDeny ?? "—")],
-            ["approve required", String(k.approveRequired ?? "—")],
-            ["approve granted", String(k.approveGranted ?? "—")],
+            ["agents registered", Number.isFinite(k.agentCount) ? String(k.agentCount) : "-"],
+            ["observed sessions", String(k.sessionCount ?? "-")],
+            ["high-risk sessions", String(k.highRiskSessions ?? "-")],
+            ["policy denies", String(k.policyDeny ?? "-")],
+            ["approve required", String(k.approveRequired ?? "-")],
+            ["approve granted", String(k.approveGranted ?? "-")],
         ]),
         "",
         "Actions that change production still wait for a person.",
@@ -18,7 +18,7 @@ export function dashboardBody(k) {
 }
 export function casesBody(rows) {
     return [
-        "Evidence & cases (optional disputes pack). Observational — does not approve submit.",
+        "Evidence & cases (optional disputes pack). Observational - does not approve submit.",
         "",
         ...table(["id", "status", "amount"], rows.map((c) => [c.id, c.status ?? "", c.amount ?? ""])),
     ];
@@ -32,14 +32,14 @@ export function metricsBody(m) {
 }
 export function edgeBody(flags) {
     return [
-        "Edge / Gatekeeper (read-only). Complement — not a second PEP.",
+        "Edge / Gatekeeper (read-only). Complement - not a second PEP.",
         "",
         ...table(["flag", "value"], Object.entries(flags).map(([k, v]) => [k, String(v)])),
     ];
 }
 export function settingsBody(lines) {
     return [
-        "Settings (licensed). Team / SSO / keys / billing — same surfaces as the web console.",
+        "Settings (licensed). Team / SSO / keys / billing - same surfaces as the web console.",
         "",
         ...(lines.length ? lines : ["Connect a plane to load tenant settings."]),
     ];

package/dist/dash/screens/free.js

@@ -10,7 +10,7 @@ export function homeBody(input) {
         `offline      ${input.offline ? "yes (sample tools, not production PEP)" : "no"}`,
         `api key      ${input.hasApiKey ? "set" : "empty (fail-closed on live panes)"}`,
         `plane        ${input.offline ? "offline" : input.baseUrl}`,
-        `agentId      ${input.agentId ?? "(none — kya register-agent)"}`,
+        `agentId      ${input.agentId ?? "(none - kya register-agent)"}`,
         "",
         "2 policy (e force-eval / w wrap)   3 agents (k kill, confirm y)",
         "4 approvals (i invoke)             5 sessions (b/R shrink, confirm y)",
@@ -34,7 +34,7 @@ export function policyOfflineBody() {
         env: { host: "ide" },
     });
     return [
-        "Policy playground (offline sample — not the production PEP).",
+        "Policy playground (offline sample - not the production PEP).",
         "Sole PEP in production is Shield HTTP evaluate.",
         "",
         ...table(["tool", "verdict", "reason"], [
@@ -84,7 +84,7 @@ export function agentsLiveBody(rows, cursor = 0) {
 export function sandboxBody(input) {
     const lines = [
         "Sandbox (opt-in Firecracker wrap). Not MCP. Never auto-exec.",
-        `KYA_SANDBOX   ${input.backend || "(unset — set mock|firecracker)"}`,
+        `KYA_SANDBOX   ${input.backend || "(unset - set mock|firecracker)"}`,
         "Spawn/exec go through evaluate first. DENY / Hold block side effects.",
         "",
     ];
@@ -137,7 +137,7 @@ export function sessionsLiveBody(rows, cursor = 0) {
 }
 export function orrBody(summary) {
     return [
-        "ORR board (reporting only — not a second PEP).",
+        "ORR board (reporting only - not a second PEP).",
         "Scanners are evidence. Sole PEP remains Shield KYA.",
         "",
         summary
@@ -152,7 +152,7 @@ export function mcpBody(input) {
         "  kya serve-mcp --port 13920",
         "  tools: kya.policy_evaluate | kya.session_ingest | kya.request_approval",
         `host         ${input.host}`,
-        `api key      ${input.hasApiKey ? "set" : "empty — serve-mcp will fail-closed"}`,
+        `api key      ${input.hasApiKey ? "set" : "empty - serve-mcp will fail-closed"}`,
         "Dash will not start the server (it would steal this TTY).",
     ];
 }

package/dist/diff-preview.d.ts

@@ -18,7 +18,7 @@ export interface WireChangeFields {
 }
 /**
  * The three change fields the hosted plane persists on the tool event.
- * Undefined when opted out or when nothing safe/useful was derivable —
+ * Undefined when opted out or when nothing safe/useful was derivable -
  * evaluate still happens, the fields are simply omitted from the body.
  */
 export declare function deriveWireChangeFields(toolId: string, args?: unknown, env?: NodeJS.ProcessEnv): WireChangeFields | undefined;

package/dist/diff-preview.js

@@ -1,6 +1,6 @@
 /**
  * Clipped, redacted change preview for the activity receipt.
- * Never persists full patches — hard caps + redaction only.
+ * Never persists full patches - hard caps + redaction only.
  */
 import { deriveTargetPath, deriveTrailSummary, redactTrailText } from "./trail-summary.js";
 import { assertNoSecrets } from "./dash/render.js";
@@ -203,7 +203,7 @@ export function sendPreviewsEnabled(env = process.env) {
 }
 /**
  * The three change fields the hosted plane persists on the tool event.
- * Undefined when opted out or when nothing safe/useful was derivable —
+ * Undefined when opted out or when nothing safe/useful was derivable -
  * evaluate still happens, the fields are simply omitted from the body.
  */
 export function deriveWireChangeFields(toolId, args, env = process.env) {

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-/** Fail-closed CLI / client errors — never silent allow-all. */
+/** Fail-closed CLI / client errors - never silent allow-all. */
 export declare class KyaError extends Error {
     readonly code: string;
     readonly exitCode: number;

package/dist/errors.js

@@ -1,4 +1,4 @@
-/** Fail-closed CLI / client errors — never silent allow-all. */
+/** Fail-closed CLI / client errors - never silent allow-all. */
 export class KyaError extends Error {
     code;
     exitCode;

package/dist/fs-atomic.d.ts

@@ -2,7 +2,7 @@
  * Crash-safe write: tmp file in the same directory, then rename onto the
  * target (atomic on POSIX and win32 within one volume). A mid-write crash
  * leaves the original config intact; the tmp file is removed best-effort.
- * An existing target's file mode is carried over — a rename would otherwise
+ * An existing target's file mode is carried over - a rename would otherwise
  * turn a 0600 config into the umask default.
  */
 export declare function atomicWriteSync(target: string, content: string): void;

package/dist/fs-atomic.js

@@ -7,7 +7,7 @@ import { chmodSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs"
  * Crash-safe write: tmp file in the same directory, then rename onto the
  * target (atomic on POSIX and win32 within one volume). A mid-write crash
  * leaves the original config intact; the tmp file is removed best-effort.
- * An existing target's file mode is carried over — a rename would otherwise
+ * An existing target's file mode is carried over - a rename would otherwise
  * turn a 0600 config into the umask default.
  */
 export function atomicWriteSync(target, content) {
@@ -18,7 +18,7 @@ export function atomicWriteSync(target, content) {
             mode = statSync(target).mode;
         }
         catch {
-            /* new file — keep default mode */
+            /* new file - keep default mode */
         }
         writeFileSync(tmp, content, "utf8");
         if (mode !== undefined) {

package/dist/gate/binary.js

@@ -25,7 +25,7 @@ export function resolveGatePlatform(platform = process.platform, arch = process.
     const os = platform === "darwin" ? "darwin" : platform === "win32" ? "windows" : platform === "linux" ? "linux" : undefined;
     const a = arch === "x64" ? "amd64" : arch === "arm64" ? "arm64" : undefined;
     if (!os || !a) {
-        throw new KyaError(`no gateway build for ${platform}/${arch} — supported: linux, darwin, windows × amd64, arm64`, "GATE_UNSUPPORTED_PLATFORM");
+        throw new KyaError(`no gateway build for ${platform}/${arch} - supported: linux, darwin, windows × amd64, arm64`, "GATE_UNSUPPORTED_PLATFORM");
     }
     return { os, arch: a };
 }
@@ -99,20 +99,20 @@ export async function ensureGateBinary(deps = {}) {
     try {
         const [tgzRes, sumRes] = [await fetchFn(base), await fetchFn(`${base}.sha256`)];
         if (!tgzRes.ok || !sumRes.ok) {
-            throw new KyaError(`gateway artifact ${name} not available (HTTP ${!tgzRes.ok ? tgzRes.status : sumRes.status}) — gateway binaries are published by the kya release pipeline (see legal/THIRD-PARTY.md); check the release tag gate-v${GATE_VERSION}`, "GATE_DOWNLOAD_FAILED");
+            throw new KyaError(`gateway artifact ${name} not available (HTTP ${!tgzRes.ok ? tgzRes.status : sumRes.status}) - gateway binaries are published by the kya release pipeline (see legal/THIRD-PARTY.md); check the release tag gate-v${GATE_VERSION}`, "GATE_DOWNLOAD_FAILED");
         }
         const tgz = Buffer.from(await tgzRes.arrayBuffer());
         const expected = parseSha256File(await sumRes.text());
         const actual = sha256Hex(tgz);
         if (actual !== expected) {
-            throw new KyaError(`gateway artifact checksum mismatch (expected ${expected}, got ${actual}) — refusing to install`, "GATE_CHECKSUM_MISMATCH");
+            throw new KyaError(`gateway artifact checksum mismatch (expected ${expected}, got ${actual}) - refusing to install`, "GATE_CHECKSUM_MISMATCH");
         }
         const tgzPath = join(stage, name);
         writeFileSync(tgzPath, tgz);
         (deps.extract ?? defaultExtract)(tgzPath, stage);
         const extracted = join(stage, platform === "win32" ? "kya-gate.exe" : "kya-gate");
         if (!existsSync(extracted)) {
-            throw new KyaError(`gateway artifact ${name} did not contain a kya-gate binary — corrupt repack?`, "GATE_ARTIFACT_INVALID");
+            throw new KyaError(`gateway artifact ${name} did not contain a kya-gate binary - corrupt repack?`, "GATE_ARTIFACT_INVALID");
         }
         // Atomic install: stage beside the target, then rename over it.
         const tmpTarget = join(binDir, `.kya-gate.${process.pid}.tmp`);

package/dist/gate/config-gen.d.ts

@@ -7,7 +7,7 @@ export declare const LOOPBACK_RULE = "cidr(\"127.0.0.0/8\").containsIP(source.ad
 export declare function denyPatternsFor(serverId: string): readonly string[];
 /**
  * Whether an unmatched tool on this server is allowed: the registry
- * defaultTier — READ and WRITE both map to allow (WRITE is observed, not
+ * defaultTier - READ and WRITE both map to allow (WRITE is observed, not
  * blocked); an ADMIN default would deny. Unknown servers allow (local
  * observe gateway), subject to the destructive deny.
  */

package/dist/gate/config-gen.js

@@ -1,7 +1,7 @@
 /**
  * Generate the gateway YAML from `.kya/gateways.json` + the MCP server
  * registry tiers. The CEL authorization rules are always derived from the
- * registry — never hand-written:
+ * registry - never hand-written:
  *
  *   - destructive names (drop|truncate|purge|transfer, word-boundary anchored
  *     so `dropdown_select` is untouched) are denied for every server, and
@@ -9,7 +9,7 @@
  *     "allow … AND NOT matches(deny)");
  *   - the server's ADMIN-tier registry patterns join the deny set;
  *   - everything else on the target is allowed: READ → allow, WRITE → allow
- *     (observe mode — allowed calls are audited, not blocked), and unmatched
+ *     (observe mode - allowed calls are audited, not blocked), and unmatched
  *     tools follow the server's defaultTier, which for every registered
  *     server resolves to one of those two allows;
  *   - unknown servers get the destructive-name deny only.
@@ -18,8 +18,8 @@
  * denies the call (and filters it from tools/list).
  *
  * Listener hardening: the binary binds UNSPECIFIED with no config knob, so
- * exposure is cut at L4 — a frontend networkAuthorization allowlist permits
- * only loopback sources (127.0.0.0/8, ::1) — and the stats/readiness/admin
+ * exposure is cut at L4 - a frontend networkAuthorization allowlist permits
+ * only loopback sources (127.0.0.0/8, ::1) - and the stats/readiness/admin
  * listeners are turned off entirely. Logging is pinned to warn so module
  * noise (and upstream build strings) stays out of gate.log.
  */
@@ -35,7 +35,7 @@ export function denyPatternsFor(serverId) {
 }
 /**
  * Whether an unmatched tool on this server is allowed: the registry
- * defaultTier — READ and WRITE both map to allow (WRITE is observed, not
+ * defaultTier - READ and WRITE both map to allow (WRITE is observed, not
  * blocked); an ADMIN default would deny. Unknown servers allow (local
  * observe gateway), subject to the destructive deny.
  */
@@ -50,7 +50,7 @@ export function celAllowRule(server) {
     const target = `mcp.tool.target == ${celString(server.id)}`;
     const deny = denyPatternsFor(server.id).join("|");
     if (!unmatchedAllowed(server.id)) {
-        // ADMIN defaultTier: only explicitly non-denied, non-admin tools may run —
+        // ADMIN defaultTier: only explicitly non-denied, non-admin tools may run -
         // allow nothing unmatched (no registered server has this today).
         return `${target} && false`;
     }
@@ -102,7 +102,7 @@ function targetYaml(server) {
  */
 export function generateGatewayYaml(config) {
     const lines = [
-        "# Generated by kya gate — regenerate with `kya gate run` (do not edit).",
+        "# Generated by kya gate - regenerate with `kya gate run` (do not edit).",
         "config:",
         '  statsAddr: "off"',
         '  readinessAddr: "off"',

package/dist/gate/config.d.ts

@@ -20,7 +20,7 @@ export interface GatewaysConfig {
     /**
      * Gateway behavior when a target fails to initialize: failOpen serves the
      * healthy targets (default, better local UX); failClosed takes the whole
-     * gateway down (strict — a silently missing server is impossible).
+     * gateway down (strict - a silently missing server is impossible).
      */
     readonly failureMode: GateFailureMode;
     readonly servers: readonly GatewayServer[];
@@ -33,7 +33,7 @@ export declare function validateGateways(raw: unknown): GatewaysConfig;
 export declare function readGateways(env?: NodeJS.ProcessEnv): GatewaysConfig;
 /**
  * Scaffold `.kya/gateways.json`: an empty active `servers` list plus the
- * `recipes` catalog — move a recipe object into `servers` and fill its
+ * `recipes` catalog - move a recipe object into `servers` and fill its
  * placeholders to enable it. Idempotent: an existing file is left alone.
  */
 export declare function scaffoldGateways(env?: NodeJS.ProcessEnv): {

package/dist/gate/config.js

@@ -1,5 +1,5 @@
 /**
- * `.kya/gateways.json` — the upstream MCP servers the local kya gateway
+ * `.kya/gateways.json` - the upstream MCP servers the local kya gateway
  * federates. Strict JSON (hand-editable, merge-safe); `kya gate init` seeds
  * it with a `recipes` catalog of ready-to-move entries for the well-known
  * servers from the MCP server registry.
@@ -77,7 +77,7 @@ function parseServer(raw, index) {
     }
     if (transport === "http" && env) {
         // The gateway's http targets have no env concept; auth travels as headers.
-        throw new UsageError(`${where}: transport "http" does not support "env" — use "headers" (e.g. {"authorization": "Bearer …"})`);
+        throw new UsageError(`${where}: transport "http" does not support "env" - use "headers" (e.g. {"authorization": "Bearer …"})`);
     }
     if (transport === "stdio" && headers) {
         throw new UsageError(`${where}: "headers" only applies to transport "http"`);
@@ -157,13 +157,13 @@ export function readGateways(env = process.env) {
         raw = JSON.parse(readFileSync(path, "utf8"));
     }
     catch {
-        throw new UsageError(`${path} is not valid JSON — fix it by hand, then re-run kya gate run`);
+        throw new UsageError(`${path} is not valid JSON - fix it by hand, then re-run kya gate run`);
     }
     return persistInstanceId(path, raw, randomUUID());
 }
 const RECIPES = [
     { id: "playwright", transport: "stdio", cmd: ["npx", "-y", "@playwright/mcp@latest"], note: "Browser automation" },
-    { id: "github", transport: "http", url: "https://api.githubcopilot.com/mcp/", headers: { authorization: "Bearer <github-pat>" }, note: "GitHub (remote; auth travels as a header — the gateway's http targets have no env)" },
+    { id: "github", transport: "http", url: "https://api.githubcopilot.com/mcp/", headers: { authorization: "Bearer <github-pat>" }, note: "GitHub (remote; auth travels as a header - the gateway's http targets have no env)" },
     { id: "slack", transport: "stdio", cmd: ["npx", "-y", "@modelcontextprotocol/server-slack"], env: { SLACK_BOT_TOKEN: "<xoxb-…>", SLACK_TEAM_ID: "<T…>" }, note: "Slack workspace" },
     { id: "postgresql", transport: "stdio", cmd: ["npx", "-y", "@modelcontextprotocol/server-postgres", "postgresql://localhost/mydb"], note: "PostgreSQL (pass the connection string as the last arg)" },
     { id: "filesystem", transport: "stdio", cmd: ["npx", "-y", "@modelcontextprotocol/server-filesystem", "."], note: "Local filesystem (scope = last args)" },
@@ -185,7 +185,7 @@ const RECIPES = [
 ];
 /**
  * Scaffold `.kya/gateways.json`: an empty active `servers` list plus the
- * `recipes` catalog — move a recipe object into `servers` and fill its
+ * `recipes` catalog - move a recipe object into `servers` and fill its
  * placeholders to enable it. Idempotent: an existing file is left alone.
  */
 export function scaffoldGateways(env = process.env) {
@@ -196,7 +196,7 @@ export function scaffoldGateways(env = process.env) {
     const doc = {
         port: GATE_DEFAULT_PORT,
         // failOpen: one broken target never takes the gateway down (a missing
-        // server then fails silently — its tools just vanish). failClosed is the
+        // server then fails silently - its tools just vanish). failClosed is the
         // strict choice: any broken target stops the whole gateway.
         failureMode: "failOpen",
         instanceId: randomUUID(),

package/dist/gate/daemon.js

@@ -40,7 +40,7 @@ export function readGateState(env = process.env) {
         }
     }
     catch {
-        /* corrupt state — treat as absent */
+        /* corrupt state - treat as absent */
     }
     return undefined;
 }

package/dist/gate/discover.d.ts

@@ -29,7 +29,7 @@ export interface GateImportResult {
 /**
  * Merge discovered candidates into gateways.json `servers`. Hand-configured
  * entries and other top-level keys (recipes) are preserved; ids already
- * present are skipped — an already-imported entry only unions new source
+ * present are skipped - an already-imported entry only unions new source
  * hosts into its `importedFrom`, a hand-configured entry is left byte-identical.
  */
 export declare function importGateCandidates(candidates: readonly GateCandidate[], env?: NodeJS.ProcessEnv): GateImportResult;
@@ -42,7 +42,7 @@ export interface HostEntryRemoval {
 /**
  * Remove the given server ids from a host's user-level config, after copying
  * the full original under <global .kya>/backups. Only the listed ids are
- * touched — shield-kya entries and every other setting survive. Returns
+ * touched - shield-kya entries and every other setting survive. Returns
  * undefined (and writes nothing) when the file is missing, unparseable, or
  * carries none of the ids.
  */

package/dist/gate/discover.js

@@ -114,7 +114,7 @@ function tomlStringArray(body, key) {
             return v;
     }
     catch {
-        /* single-quoted TOML strings etc. — no args */
+        /* single-quoted TOML strings etc. - no args */
     }
     return undefined;
 }
@@ -191,7 +191,7 @@ export function discoverGateServers(home) {
                     : candidatesFromJson(text, spec.rootKey);
         }
         catch {
-            continue; // unparseable host config — skip the host, keep the rest
+            continue; // unparseable host config - skip the host, keep the rest
         }
         for (const [rawKey, core] of entries) {
             const id = sanitizeServerId(rawKey);
@@ -212,7 +212,7 @@ export function discoverGateServers(home) {
 /**
  * Merge discovered candidates into gateways.json `servers`. Hand-configured
  * entries and other top-level keys (recipes) are preserved; ids already
- * present are skipped — an already-imported entry only unions new source
+ * present are skipped - an already-imported entry only unions new source
  * hosts into its `importedFrom`, a hand-configured entry is left byte-identical.
  */
 export function importGateCandidates(candidates, env = process.env) {
@@ -226,15 +226,15 @@ export function importGateCandidates(candidates, env = process.env) {
             parsed = JSON.parse(readFileSync(path, "utf8"));
         }
         catch {
-            throw new UsageError(`${path} is not valid JSON — fix it by hand, then re-run kya start`);
+            throw new UsageError(`${path} is not valid JSON - fix it by hand, then re-run kya start`);
         }
         if (!isPlainObject(parsed)) {
-            throw new UsageError(`${path} must be a JSON object — fix it by hand, then re-run kya start`);
+            throw new UsageError(`${path} must be a JSON object - fix it by hand, then re-run kya start`);
         }
         raw = parsed;
     }
     if (raw["servers"] !== undefined && !Array.isArray(raw["servers"])) {
-        throw new UsageError(`${path}: "servers" must be an array — fix it by hand, then re-run kya start`);
+        throw new UsageError(`${path}: "servers" must be an array - fix it by hand, then re-run kya start`);
     }
     const servers = Array.isArray(raw["servers"]) ? [...raw["servers"]] : [];
     const imported = [];
@@ -320,7 +320,7 @@ function removeTomlTables(text, ids) {
 /**
  * Remove the given server ids from a host's user-level config, after copying
  * the full original under <global .kya>/backups. Only the listed ids are
- * touched — shield-kya entries and every other setting survive. Returns
+ * touched - shield-kya entries and every other setting survive. Returns
  * undefined (and writes nothing) when the file is missing, unparseable, or
  * carries none of the ids.
  */

package/dist/gate/hosted-sync.js

@@ -132,7 +132,7 @@ export function triggerHostedSyncFromEnv(input) {
         });
     }
     catch {
-        /* best-effort — sync must never break gate commands */
+        /* best-effort - sync must never break gate commands */
     }
 }
 //# sourceMappingURL=hosted-sync.js.map

package/dist/gate/otlp-decode.d.ts

@@ -1,8 +1,8 @@
 /**
- * Minimal OTLP wire decode for ExportTraceServiceRequest — protobuf (OTLP/HTTP
+ * Minimal OTLP wire decode for ExportTraceServiceRequest - protobuf (OTLP/HTTP
  * default) and OTLP/JSON. Only the fields the gate consumes are read (span
  * name, string/int/bool attributes, status); every other field is skipped by
- * wire type. Tool arguments are never extracted — the whitelist lives in
+ * wire type. Tool arguments are never extracted - the whitelist lives in
  * otlp-receiver.ts.
  */
 export interface DecodedSpan {

package/dist/gate/otlp-decode.js

@@ -1,8 +1,8 @@
 /**
- * Minimal OTLP wire decode for ExportTraceServiceRequest — protobuf (OTLP/HTTP
+ * Minimal OTLP wire decode for ExportTraceServiceRequest - protobuf (OTLP/HTTP
  * default) and OTLP/JSON. Only the fields the gate consumes are read (span
  * name, string/int/bool attributes, status); every other field is skipped by
- * wire type. Tool arguments are never extracted — the whitelist lives in
+ * wire type. Tool arguments are never extracted - the whitelist lives in
  * otlp-receiver.ts.
  */
 const WIRE_VARINT = 0;

package/dist/gate/otlp-receiver.d.ts

@@ -28,7 +28,7 @@ export interface OtlpReceiverOptions {
 }
 /**
  * Accept OTLP trace exports on 127.0.0.1 and append tools/call spans to the
- * trail. Malformed payloads get a 400 and are dropped — the receiver never
+ * trail. Malformed payloads get a 400 and are dropped - the receiver never
  * dies on bad input (the gateway keeps exporting).
  */
 export declare function startOtlpReceiver(opts: OtlpReceiverOptions): Promise<OtlpReceiver>;

package/dist/gate/otlp-receiver.js

@@ -8,7 +8,7 @@
  * name, session id). Tool arguments are never extracted, and the persisted
  * fields pass through the secret scanner before hitting the trail.
  *
- * Known limitation: the receiver is unauthenticated — any local process can
+ * Known limitation: the receiver is unauthenticated - any local process can
  * POST spans and inject trail events. That is the same trust boundary as the
  * user-writable trail file itself (any local process can append to
  * ~/.kya/trail.jsonl), so no new privilege is granted; remote injection is
@@ -25,7 +25,7 @@ const TWIN_TTL_MS = 30_000;
 // refused as `-32602 Unknown tool` over HTTP 400; the span carries ERROR
 // status and an "Unknown tool" error message. Downstream API denials (a
 // tool's own 403/"forbidden" result) are NOT policy denials and must not
-// match this signal — they classify as TOOL_ERROR.
+// match this signal - they classify as TOOL_ERROR.
 const DENIAL_SIGNAL = /\bunknown tool\b/i;
 function attr(span, key) {
     const v = span.attributes[key];
@@ -88,7 +88,7 @@ function readBody(req) {
 }
 /**
  * Accept OTLP trace exports on 127.0.0.1 and append tools/call spans to the
- * trail. Malformed payloads get a 400 and are dropped — the receiver never
+ * trail. Malformed payloads get a 400 and are dropped - the receiver never
  * dies on bad input (the gateway keeps exporting).
  */
 export async function startOtlpReceiver(opts) {

package/dist/host-reload.js

@@ -1,15 +1,15 @@
 /**
- * Per-host MCP reload behavior — researched against official docs, 2026-09.
+ * Per-host MCP reload behavior - researched against official docs, 2026-09.
  * The blanket "restart your host" instruction was wrong for most hosts: many
  * watch their config file (or offer an in-session reload) and pick up a new
  * server with no restart at all. Messaging in `connect` / `start` is built
  * from this table, and docs/hosts/<id>.md pages mirror it.
  *
  * Classes:
- *   auto    — new server is picked up in the running host (file watcher or
+ *   auto    - new server is picked up in the running host (file watcher or
  *             in-session refresh; detail says which)
- *   session — loads in the next session/conversation; app stays open
- *   restart — process must be relaunched (resumeTip preserves context if any)
+ *   session - loads in the next session/conversation; app stays open
+ *   restart - process must be relaunched (resumeTip preserves context if any)
  */
 import { execFileSync } from "node:child_process";
 export const HOST_RELOAD = {
@@ -22,7 +22,7 @@ export const HOST_RELOAD = {
     kiro: {
         id: "kiro",
         reload: "auto",
-        detail: "Kiro hot-reloads mcp.json on save — only the new server starts",
+        detail: "Kiro hot-reloads mcp.json on save - only the new server starts",
         processNames: ["kiro", "kiro-cli"],
     },
     qwen: {
@@ -64,7 +64,7 @@ export const HOST_RELOAD = {
     kimi: {
         id: "kimi",
         reload: "session",
-        detail: "Kimi Code registers MCP servers at session start — a new session is enough",
+        detail: "Kimi Code registers MCP servers at session start - a new session is enough",
         processNames: ["kimi"],
     },
     claude: {
@@ -141,15 +141,15 @@ export function hostRunning(info, procs) {
 export function reloadMessage(info, label, running) {
     switch (info.reload) {
         case "auto":
-            return `No restart needed — ${info.detail}.`;
+            return `No restart needed - ${info.detail}.`;
         case "session":
             return running
-                ? `${label} is running — start a new session to load shield-kya (${info.detail}). No app restart.`
-                : `shield-kya loads in your next ${label} session — no restart needed.`;
+                ? `${label} is running - start a new session to load shield-kya (${info.detail}). No app restart.`
+                : `shield-kya loads in your next ${label} session - no restart needed.`;
         case "restart":
             return running
-                ? `${label} is running — relaunch it to load shield-kya (${info.detail}${info.resumeTip ? `; ${info.resumeTip}` : ""}).`
-                : `shield-kya loads when you next start ${label} — it is not running, so nothing to restart.`;
+                ? `${label} is running - relaunch it to load shield-kya (${info.detail}${info.resumeTip ? `; ${info.resumeTip}` : ""}).`
+                : `shield-kya loads when you next start ${label} - it is not running, so nothing to restart.`;
     }
 }
 //# sourceMappingURL=host-reload.js.map

package/dist/host-tools.d.ts

@@ -3,6 +3,6 @@
  * Advisory only: production authorization stays with the control plane.
  */
 export type HostToolTier = "READ" | "WRITE" | "SHELL";
-/** Lookup is case-insensitive; only `__`-qualified names (mcp__*, server__tool) stay unknown — a bare `read_file` from an MCP filesystem server still matches READ, which is deliberate: reads are reads in this advisory vocabulary. */
+/** Lookup is case-insensitive; only `__`-qualified names (mcp__*, server__tool) stay unknown - a bare `read_file` from an MCP filesystem server still matches READ, which is deliberate: reads are reads in this advisory vocabulary. */
 export declare function findHostToolTier(toolId: string): HostToolTier | undefined;
 //# sourceMappingURL=host-tools.d.ts.map

package/dist/host-tools.js

@@ -13,7 +13,7 @@ const HOST_TOOLS = {
     // shell / exec
     bash: "SHELL", run_terminal_command: "SHELL",
 };
-/** Lookup is case-insensitive; only `__`-qualified names (mcp__*, server__tool) stay unknown — a bare `read_file` from an MCP filesystem server still matches READ, which is deliberate: reads are reads in this advisory vocabulary. */
+/** Lookup is case-insensitive; only `__`-qualified names (mcp__*, server__tool) stay unknown - a bare `read_file` from an MCP filesystem server still matches READ, which is deliberate: reads are reads in this advisory vocabulary. */
 export function findHostToolTier(toolId) {
     const id = toolId.trim().toLowerCase();
     if (!id || id.includes("__"))