kavachos 0.3.0 → 0.4.1

package/dist/standards/index.d.ts

@@ -0,0 +1,139 @@
+/**
+ * IETF agentic JWT claim name constants.
+ *
+ * Sources:
+ *   - draft-goswami-agentic-jwt-00
+ *   - draft-liu-agent-operation-authorization-01
+ *
+ * These constants are off by default. Set `emitAgenticJwtClaims: true` in
+ * KavachConfig to include them in issued tokens.
+ */
+/**
+ * Operational mode of an agent within a delegation chain.
+ *
+ * - `autonomous`  — no human-in-the-loop; the agent acts on its own behalf.
+ * - `delegated`   — the agent is acting under explicit delegation from another principal.
+ * - `supervised`  — the agent acts autonomously but requires human approval for sensitive ops.
+ */
+type AgentType = "autonomous" | "delegated" | "supervised";
+/**
+ * Trust tier band assigned at token issuance, derived from the numeric trust
+ * score. Matches the five-level model in KavachOS trust scoring.
+ *
+ * Mapping (inclusive lower bound):
+ *   score 0–19  → "unverified"
+ *   score 20–39 → "low"
+ *   score 40–59 → "standard"
+ *   score 60–79 → "elevated"
+ *   score 80+   → "high"
+ */
+type TrustTier = "unverified" | "low" | "standard" | "elevated" | "high";
+/**
+ * Registered claim names for agentic JWTs.
+ *
+ * All names are string literals so they can be used directly as JWT payload
+ * keys. Consuming code should index into issued token payloads using these
+ * constants rather than raw string literals.
+ */
+declare const AGENTIC_JWT_CLAIMS: {
+    /**
+     * Stable identifier of the agent making the call.
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.1
+     */
+    readonly AGENT_ID: "agent_id";
+    /**
+     * Operational mode of the agent: `autonomous`, `delegated`, or `supervised`.
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.2
+     */
+    readonly AGENT_TYPE: "agent_type";
+    /**
+     * Subject principal the agent is acting on behalf of (human user or upstream agent).
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.3
+     */
+    readonly ON_BEHALF_OF: "on_behalf_of";
+    /**
+     * Actor claim per RFC 8693. Identifies the current actor in an
+     * impersonation or delegation chain.
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.4
+     * @see RFC 8693
+     */
+    readonly ACT: "act";
+    /**
+     * Authorized future actors for delegation chains (RFC 8693 `may_act`).
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.5
+     * @see RFC 8693
+     */
+    readonly MAY_ACT: "may_act";
+    /**
+     * Trust score band at token issuance (e.g. `standard`, `elevated`).
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.6
+     */
+    readonly TRUST_TIER: "trust_tier";
+    /**
+     * Correlation id for tracing this token back to an entry in the audit log.
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.7
+     */
+    readonly AUDIT_REF: "audit_ref";
+    /**
+     * Per-tool budget or rate constraints encoded as a structured object.
+     *
+     * @see draft-goswami-agentic-jwt-00 §3.8
+     */
+    readonly TOOL_CONSTRAINTS: "tool_constraints";
+    /**
+     * Workload Identity Token (WIT). Present only when three-layer cryptographic
+     * binding is active (draft-liu §4.2). Absent in standard issuance paths.
+     *
+     * @see draft-liu-agent-operation-authorization-01 §4.2
+     * TODO(v3): populate from WIT issuance when three-layer binding is implemented.
+     */
+    readonly WORKLOAD_BINDING: "wit";
+    /**
+     * The scoped operation this token authorizes (e.g. `read:documents`).
+     *
+     * @see draft-liu-agent-operation-authorization-01 §4.3
+     */
+    readonly OPERATION: "operation";
+};
+/**
+ * Optional shape of agentic JWT claims within a token payload.
+ *
+ * All fields are optional because they are only emitted when
+ * `emitAgenticJwtClaims` is enabled and the relevant context is available
+ * on the issuance path.
+ */
+interface AgenticJwtClaims {
+    /** Stable agent identifier. */
+    agent_id?: string;
+    /** Operational mode of the agent. */
+    agent_type?: AgentType;
+    /** Principal the agent is acting for. */
+    on_behalf_of?: string;
+    /** RFC 8693 actor claim (current actor in a delegation chain). */
+    act?: Record<string, unknown>;
+    /** RFC 8693 may_act claim (authorized future actors). */
+    may_act?: Record<string, unknown>;
+    /** Trust tier band at issuance time. */
+    trust_tier?: TrustTier;
+    /** Audit log correlation id. */
+    audit_ref?: string;
+    /** Per-tool budget or rate constraints. */
+    tool_constraints?: Record<string, unknown>;
+    /**
+     * Workload Identity Token.
+     * Absent unless three-layer binding is active.
+     * TODO(v3): populate when draft-liu three-layer binding is implemented.
+     */
+    wit?: string;
+    /** Scoped operation this token authorizes. */
+    operation?: string;
+}
+
+export { AGENTIC_JWT_CLAIMS, type AgentType, type AgenticJwtClaims, type TrustTier };

package/dist/standards/index.js

@@ -0,0 +1,72 @@
+// src/standards/claims.ts
+var AGENTIC_JWT_CLAIMS = {
+  /**
+   * Stable identifier of the agent making the call.
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.1
+   */
+  AGENT_ID: "agent_id",
+  /**
+   * Operational mode of the agent: `autonomous`, `delegated`, or `supervised`.
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.2
+   */
+  AGENT_TYPE: "agent_type",
+  /**
+   * Subject principal the agent is acting on behalf of (human user or upstream agent).
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.3
+   */
+  ON_BEHALF_OF: "on_behalf_of",
+  /**
+   * Actor claim per RFC 8693. Identifies the current actor in an
+   * impersonation or delegation chain.
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.4
+   * @see RFC 8693
+   */
+  ACT: "act",
+  /**
+   * Authorized future actors for delegation chains (RFC 8693 `may_act`).
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.5
+   * @see RFC 8693
+   */
+  MAY_ACT: "may_act",
+  /**
+   * Trust score band at token issuance (e.g. `standard`, `elevated`).
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.6
+   */
+  TRUST_TIER: "trust_tier",
+  /**
+   * Correlation id for tracing this token back to an entry in the audit log.
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.7
+   */
+  AUDIT_REF: "audit_ref",
+  /**
+   * Per-tool budget or rate constraints encoded as a structured object.
+   *
+   * @see draft-goswami-agentic-jwt-00 §3.8
+   */
+  TOOL_CONSTRAINTS: "tool_constraints",
+  /**
+   * Workload Identity Token (WIT). Present only when three-layer cryptographic
+   * binding is active (draft-liu §4.2). Absent in standard issuance paths.
+   *
+   * @see draft-liu-agent-operation-authorization-01 §4.2
+   * TODO(v3): populate from WIT issuance when three-layer binding is implemented.
+   */
+  WORKLOAD_BINDING: "wit",
+  /**
+   * The scoped operation this token authorizes (e.g. `read:documents`).
+   *
+   * @see draft-liu-agent-operation-authorization-01 §4.3
+   */
+  OPERATION: "operation"
+};
+
+export { AGENTIC_JWT_CLAIMS };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/standards/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/standards/claims.ts"],"names":[],"mappings":";AAgDO,IAAM,kBAAA,GAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMjC,QAAA,EAAU,UAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOV,UAAA,EAAY,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOZ,YAAA,EAAc,cAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASd,GAAA,EAAK,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQL,OAAA,EAAS,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOT,UAAA,EAAY,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOZ,SAAA,EAAW,WAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOX,gBAAA,EAAkB,kBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASlB,gBAAA,EAAkB,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOlB,SAAA,EAAW;AACZ","file":"index.js","sourcesContent":["/**\n * IETF agentic JWT claim name constants.\n *\n * Sources:\n *   - draft-goswami-agentic-jwt-00\n *   - draft-liu-agent-operation-authorization-01\n *\n * These constants are off by default. Set `emitAgenticJwtClaims: true` in\n * KavachConfig to include them in issued tokens.\n */\n\n// ---------------------------------------------------------------------------\n// Named types\n// ---------------------------------------------------------------------------\n\n/**\n * Operational mode of an agent within a delegation chain.\n *\n * - `autonomous`  — no human-in-the-loop; the agent acts on its own behalf.\n * - `delegated`   — the agent is acting under explicit delegation from another principal.\n * - `supervised`  — the agent acts autonomously but requires human approval for sensitive ops.\n */\nexport type AgentType = \"autonomous\" | \"delegated\" | \"supervised\";\n\n/**\n * Trust tier band assigned at token issuance, derived from the numeric trust\n * score. Matches the five-level model in KavachOS trust scoring.\n *\n * Mapping (inclusive lower bound):\n *   score 0–19  → \"unverified\"\n *   score 20–39 → \"low\"\n *   score 40–59 → \"standard\"\n *   score 60–79 → \"elevated\"\n *   score 80+   → \"high\"\n */\nexport type TrustTier = \"unverified\" | \"low\" | \"standard\" | \"elevated\" | \"high\";\n\n// ---------------------------------------------------------------------------\n// Claim name constants\n// ---------------------------------------------------------------------------\n\n/**\n * Registered claim names for agentic JWTs.\n *\n * All names are string literals so they can be used directly as JWT payload\n * keys. Consuming code should index into issued token payloads using these\n * constants rather than raw string literals.\n */\nexport const AGENTIC_JWT_CLAIMS = {\n\t/**\n\t * Stable identifier of the agent making the call.\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.1\n\t */\n\tAGENT_ID: \"agent_id\",\n\n\t/**\n\t * Operational mode of the agent: `autonomous`, `delegated`, or `supervised`.\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.2\n\t */\n\tAGENT_TYPE: \"agent_type\",\n\n\t/**\n\t * Subject principal the agent is acting on behalf of (human user or upstream agent).\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.3\n\t */\n\tON_BEHALF_OF: \"on_behalf_of\",\n\n\t/**\n\t * Actor claim per RFC 8693. Identifies the current actor in an\n\t * impersonation or delegation chain.\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.4\n\t * @see RFC 8693\n\t */\n\tACT: \"act\",\n\n\t/**\n\t * Authorized future actors for delegation chains (RFC 8693 `may_act`).\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.5\n\t * @see RFC 8693\n\t */\n\tMAY_ACT: \"may_act\",\n\n\t/**\n\t * Trust score band at token issuance (e.g. `standard`, `elevated`).\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.6\n\t */\n\tTRUST_TIER: \"trust_tier\",\n\n\t/**\n\t * Correlation id for tracing this token back to an entry in the audit log.\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.7\n\t */\n\tAUDIT_REF: \"audit_ref\",\n\n\t/**\n\t * Per-tool budget or rate constraints encoded as a structured object.\n\t *\n\t * @see draft-goswami-agentic-jwt-00 §3.8\n\t */\n\tTOOL_CONSTRAINTS: \"tool_constraints\",\n\n\t/**\n\t * Workload Identity Token (WIT). Present only when three-layer cryptographic\n\t * binding is active (draft-liu §4.2). Absent in standard issuance paths.\n\t *\n\t * @see draft-liu-agent-operation-authorization-01 §4.2\n\t * TODO(v3): populate from WIT issuance when three-layer binding is implemented.\n\t */\n\tWORKLOAD_BINDING: \"wit\",\n\n\t/**\n\t * The scoped operation this token authorizes (e.g. `read:documents`).\n\t *\n\t * @see draft-liu-agent-operation-authorization-01 §4.3\n\t */\n\tOPERATION: \"operation\",\n} as const;\n\n// ---------------------------------------------------------------------------\n// Payload shape\n// ---------------------------------------------------------------------------\n\n/**\n * Optional shape of agentic JWT claims within a token payload.\n *\n * All fields are optional because they are only emitted when\n * `emitAgenticJwtClaims` is enabled and the relevant context is available\n * on the issuance path.\n */\nexport interface AgenticJwtClaims {\n\t/** Stable agent identifier. */\n\tagent_id?: string;\n\t/** Operational mode of the agent. */\n\tagent_type?: AgentType;\n\t/** Principal the agent is acting for. */\n\ton_behalf_of?: string;\n\t/** RFC 8693 actor claim (current actor in a delegation chain). */\n\tact?: Record<string, unknown>;\n\t/** RFC 8693 may_act claim (authorized future actors). */\n\tmay_act?: Record<string, unknown>;\n\t/** Trust tier band at issuance time. */\n\ttrust_tier?: TrustTier;\n\t/** Audit log correlation id. */\n\taudit_ref?: string;\n\t/** Per-tool budget or rate constraints. */\n\ttool_constraints?: Record<string, unknown>;\n\t/**\n\t * Workload Identity Token.\n\t * Absent unless three-layer binding is active.\n\t * TODO(v3): populate when draft-liu three-layer binding is implemented.\n\t */\n\twit?: string;\n\t/** Scoped operation this token authorizes. */\n\toperation?: string;\n}\n"]}

package/dist/{types-BuHrZcjE.d.ts → types-BiUe9e8u.d.ts}

@@ -54,6 +54,30 @@ interface McpConfig {
     }>;
     /** Custom token claims generator */
     getAdditionalClaims?: (userId: string, scopes: string[]) => Promise<Record<string, unknown>>;
+    /**
+     * Emit IETF agentic JWT claims on issued access tokens.
+     *
+     * When true, any claims returned by `getAgenticContext` are embedded in
+     * the token payload using the registered draft-goswami-agentic-jwt-00 claim
+     * names. Claims with no available context value are omitted. Off by default.
+     *
+     * @default false
+     */
+    emitAgenticJwtClaims?: boolean;
+    /**
+     * Resolve agentic context for a given user at token issuance time.
+     *
+     * Called only when `emitAgenticJwtClaims` is true. Return only the claims
+     * you can populate; absent fields are skipped rather than fabricated.
+     *
+     * TODO(v3): wire this through kavach.ts so the trust module can provide
+     * trust_tier automatically without requiring the caller to implement it.
+     */
+    getAgenticContext?: (userId: string) => Promise<{
+        agentId?: string;
+        agentType?: "autonomous" | "delegated" | "supervised";
+        trustTier?: "unverified" | "low" | "standard" | "elevated" | "high";
+    }>;
 }
 interface McpServerMetadata {
     issuer: string;

package/dist/{types-B02D3kZy.d.ts → types-RJPOU4un.d.ts}

@@ -1,6 +1,6 @@
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 import { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core';
-import { R as Result, f as McpConfig } from './types-BuHrZcjE.js';
+import { R as Result, f as McpConfig } from './types-BiUe9e8u.js';
 import { RedirectConfig } from './redirect/index.js';
 
 declare const users: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
@@ -971,6 +971,25 @@ declare const permissions: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
         }, {}, {
             $type: PermissionConstraintsRow;
         }>;
+        relation: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "relation";
+            tableName: "kavach_permissions";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
         createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
             name: "created_at";
             tableName: "kavach_permissions";
@@ -1403,6 +1422,23 @@ declare const auditLogs: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
         }, {}, {
             length: number | undefined;
         }>;
+        cacheHit: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "cache_hit";
+            tableName: "kavach_audit_logs";
+            dataType: "boolean";
+            columnType: "SQLiteBoolean";
+            data: boolean;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         timestamp: drizzle_orm_sqlite_core.SQLiteColumn<{
             name: "timestamp";
             tableName: "kavach_audit_logs";
@@ -9111,6 +9147,59 @@ interface PluginInitResult {
     context?: Record<string, unknown>;
 }
 
+type PolicyEffect = "permit" | "deny" | "indeterminate";
+interface PolicyDecisionSubject {
+    agentId?: string;
+    userId?: string;
+    orgId?: string;
+}
+interface PolicyEvaluationContext {
+    ip?: string;
+    arguments?: Record<string, unknown>;
+    timestamp?: Date;
+    [key: string]: unknown;
+}
+interface EvaluateInput {
+    subject: PolicyDecisionSubject;
+    action: string;
+    resource: string;
+    context?: PolicyEvaluationContext;
+}
+interface PolicyDecision {
+    allowed: boolean;
+    effect: PolicyEffect;
+    reason: string;
+    matchedPermissionId?: string;
+    matchedRelation?: string;
+    cacheHit: boolean;
+    durationMs: number;
+    auditId?: string;
+}
+interface PolicyCacheStats {
+    hits: number;
+    misses: number;
+    size: number;
+    evictions: number;
+}
+interface InvalidateScope {
+    agentId?: string;
+    userId?: string;
+    resource?: string;
+}
+type PolicyCombineStrategy = "deny-overrides" | "permit-overrides";
+interface PolicyCacheConfig {
+    maxEntries?: number;
+    ttlMs?: number;
+    enabled?: boolean;
+}
+interface PolicyEngineConfig {
+    cache?: PolicyCacheConfig;
+    combineStrategy?: PolicyCombineStrategy;
+    audit?: boolean;
+    /** Sample rate for audit row writes, 0.0 to 1.0. Defaults to 1.0. */
+    auditSampleRate?: number;
+}
+
 /**
  * Session freshness enforcement for KavachOS.
  *
@@ -9332,6 +9421,15 @@ interface KavachConfig {
      * to. Deliveries are fire-and-forget with exponential backoff retries.
      */
     webhooks?: WebhookConfig[];
+    /**
+     * Unified policy engine configuration.
+     *
+     * Controls the LRU cache (max entries, TTL), combining strategy
+     * (deny-overrides vs permit-overrides), audit emission, and audit
+     * sample rate. When omitted, the engine runs with safe defaults:
+     * cache enabled (10,000 entries, 60s TTL), deny-overrides, full audit.
+     */
+    policy?: PolicyEngineConfig;
     /**
      * Redirect chain configuration.
      *
@@ -9347,6 +9445,18 @@ interface KavachConfig {
      * When omitted, defaults to 300 seconds (5 minutes).
      */
     sessionFreshness?: SessionFreshnessConfig;
+    /**
+     * Emit IETF agentic JWT claims on issued tokens.
+     *
+     * When true, tokens issued by the MCP token endpoint and the JWT session
+     * module include additional claims defined in draft-goswami-agentic-jwt-00
+     * and draft-liu-agent-operation-authorization-01, such as `agent_id`,
+     * `agent_type`, and `trust_tier`. Off by default to preserve backward
+     * compatibility with existing token consumers.
+     *
+     * @default false
+     */
+    emitAgenticJwtClaims?: boolean;
 }
 /**
  * The main KavachOS instance returned by createKavach()
@@ -9397,6 +9507,8 @@ interface Permission {
     resource: string;
     actions: string[];
     constraints?: PermissionConstraints;
+    /** Optional ReBAC relation. When set, the policy engine queries the relationship graph. */
+    relation?: string;
 }
 interface PermissionConstraints {
     maxCallsPerHour?: number;
@@ -9521,4 +9633,4 @@ interface TokenValidationResult {
 }
 type McpMiddleware = (request: Request) => Promise<Response | undefined>;
 
-export { type ApprovalConfig as $, type AgentIdentity as A, type SessionFreshnessModule as B, type CreateAgentInput as C, type Database as D, type EmailOtpModule as E, type PhoneAuthModule as F, type CaptchaModule as G, type PluginEndpoint as H, type EndpointContext as I, type KavachPlugin as J, type KavachConfig as K, type SessionConfig as L, type McpServerInput as M, type Session as N, type OrgModule as O, type Permission as P, type AdminConfig as Q, type RequestContext as R, type SignedPayload as S, type TotpModule as T, type UpdateAgentInput as U, type VerificationResult as V, type WebhookModule as W, type AdminUser as X, type AgentConfig as Y, type ApiKey as Z, type ApiKeyManagerConfig as _, type DatabaseConfig as a, createPhoneAuthModule as a$, type ApprovalModule as a0, type AuthAdapter as a1, type CaptchaConfig as a2, type CaptchaVerifyResult as a3, type CreateTokenInput as a4, type D1DatabaseBinding as a5, type EmailOtpConfig as a6, type EmailVerificationConfig as a7, type KavachHooks as a8, type KavachInstance as a9, type TokenValidationResult as aA, type TotpConfig as aB, type TotpSetup as aC, type UsernameAuthConfig as aD, type ValidateTokenResult as aE, type VerificationMethod as aF, agentCards as aG, agentDids as aH, agents as aI, apiKeys as aJ, approvalRequests as aK, auditLogs as aL, budgetPolicies as aM, classifyViolation as aN, createAdminModule as aO, createApiKeyManagerModule as aP, createApprovalModule as aQ, createCaptchaModule as aR, createDatabase as aS, createDatabaseSync as aT, createEmailOtpModule as aU, createEmailVerificationModule as aV, createMagicLinkModule as aW, createOneTimeTokenModule as aX, createOrgModule as aY, createPasskeyModule as aZ, createPasswordResetModule as a_, type MagicLinkConfig as aa, type McpMiddleware as ab, type OidcProvider as ac, type OneTimeTokenConfig as ad, type OneTimeTokenPurpose as ae, type OrgConfig as af, type OrgInvitation as ag, type OrgMember as ah, type OrgRole as ai, type Organization as aj, type PasskeyConfig as ak, type PasskeyCredential as al, type PasswordResetConfig as am, type PermissionConstraints as an, type PhoneAuthConfig as ao, type PluginContext as ap, type PluginInitResult as aq, type RevokeTokensResult as ar, SSO_ERROR as as, type SamlProvider as at, type ServiceEndpoint as au, type SessionFreshnessConfig as av, type SsoAuditEvent as aw, type SsoConfig as ax, type SsoConnection as ay, SsoError as az, type DelegateInput as b, createSessionFreshnessModule as b0, createSessionManager as b1, createSsoModule as b2, createTotpModule as b3, createUsernameAuthModule as b4, delegationChains as b5, emailOtps as b6, magicLinks as b7, mcpServers as b8, oauthAccessTokens as b9, oauthAuthorizationCodes as ba, oauthClients as bb, orgInvitations as bc, orgMembers as bd, orgRoles as be, organizations as bf, passkeyChallenges as bg, passkeyCredentials as bh, permissions as bi, rateLimits as bj, sessions as bk, ssoConnections as bl, tenants as bm, totpRecords as bn, trustScores as bo, users as bp, type WebhookConfig as bq, type WebhookEvent as br, createWebhookModule as bs, type DelegationChain as c, type DidDocument as d, type DidKeyPair as e, type DidWebConfig as f, type AgentDid as g, type AgentFilter as h, type AuthorizeRequest as i, type AuthorizeResult as j, type AuditFilter as k, type AuditEntry as l, type AuditExportOptions as m, type McpServer as n, type ResolvedUser as o, type SessionManager as p, type ApprovalRequest as q, type MagicLinkModule as r, type PasskeyModule as s, type SsoModule as t, type AdminModule as u, type ApiKeyManagerModule as v, type UsernameAuthModule as w, type PasswordResetModule as x, type EmailVerificationModule as y, type OneTimeTokenModule as z };
+export { type AdminUser as $, type AgentIdentity as A, type SessionFreshnessModule as B, type CreateAgentInput as C, type Database as D, type EmailOtpModule as E, type PhoneAuthModule as F, type CaptchaModule as G, type EvaluateInput as H, type PolicyDecision as I, type InvalidateScope as J, type KavachConfig as K, type PolicyCacheStats as L, type McpServerInput as M, type PluginEndpoint as N, type OrgModule as O, type Permission as P, type EndpointContext as Q, type RequestContext as R, type SignedPayload as S, type TotpModule as T, type UpdateAgentInput as U, type VerificationResult as V, type WebhookModule as W, type KavachPlugin as X, type SessionConfig as Y, type Session as Z, type AdminConfig as _, type DatabaseConfig as a, createOneTimeTokenModule as a$, type AgentConfig as a0, type ApiKey as a1, type ApiKeyManagerConfig as a2, type ApprovalConfig as a3, type ApprovalModule as a4, type AuthAdapter as a5, type CaptchaConfig as a6, type CaptchaVerifyResult as a7, type CreateTokenInput as a8, type D1DatabaseBinding as a9, type SsoAuditEvent as aA, type SsoConfig as aB, type SsoConnection as aC, SsoError as aD, type TokenValidationResult as aE, type TotpConfig as aF, type TotpSetup as aG, type UsernameAuthConfig as aH, type ValidateTokenResult as aI, type VerificationMethod as aJ, agentCards as aK, agentDids as aL, agents as aM, apiKeys as aN, approvalRequests as aO, auditLogs as aP, budgetPolicies as aQ, classifyViolation as aR, createAdminModule as aS, createApiKeyManagerModule as aT, createApprovalModule as aU, createCaptchaModule as aV, createDatabase as aW, createDatabaseSync as aX, createEmailOtpModule as aY, createEmailVerificationModule as aZ, createMagicLinkModule as a_, type EmailOtpConfig as aa, type EmailVerificationConfig as ab, type KavachHooks as ac, type KavachInstance as ad, type MagicLinkConfig as ae, type McpMiddleware as af, type OidcProvider as ag, type OneTimeTokenConfig as ah, type OneTimeTokenPurpose as ai, type OrgConfig as aj, type OrgInvitation as ak, type OrgMember as al, type OrgRole as am, type Organization as an, type PasskeyConfig as ao, type PasskeyCredential as ap, type PasswordResetConfig as aq, type PermissionConstraints as ar, type PhoneAuthConfig as as, type PluginContext as at, type PluginInitResult as au, type RevokeTokensResult as av, SSO_ERROR as aw, type SamlProvider as ax, type ServiceEndpoint as ay, type SessionFreshnessConfig as az, type DelegateInput as b, createOrgModule as b0, createPasskeyModule as b1, createPasswordResetModule as b2, createPhoneAuthModule as b3, createSessionFreshnessModule as b4, createSessionManager as b5, createSsoModule as b6, createTotpModule as b7, createUsernameAuthModule as b8, delegationChains as b9, emailOtps as ba, magicLinks as bb, mcpServers as bc, oauthAccessTokens as bd, oauthAuthorizationCodes as be, oauthClients as bf, orgInvitations as bg, orgMembers as bh, orgRoles as bi, organizations as bj, passkeyChallenges as bk, passkeyCredentials as bl, permissions as bm, rateLimits as bn, sessions as bo, ssoConnections as bp, tenants as bq, totpRecords as br, trustScores as bs, users as bt, type WebhookConfig as bu, type WebhookEvent as bv, createWebhookModule as bw, type DelegationChain as c, type DidDocument as d, type DidKeyPair as e, type DidWebConfig as f, type AgentDid as g, type AgentFilter as h, type AuthorizeRequest as i, type AuthorizeResult as j, type AuditFilter as k, type AuditEntry as l, type AuditExportOptions as m, type McpServer as n, type ResolvedUser as o, type SessionManager as p, type ApprovalRequest as q, type MagicLinkModule as r, type PasskeyModule as s, type SsoModule as t, type AdminModule as u, type ApiKeyManagerModule as v, type UsernameAuthModule as w, type PasswordResetModule as x, type EmailVerificationModule as y, type OneTimeTokenModule as z };