@kya-os/contracts 1.5.2-canary.1 → 1.5.2-canary.3

package/dist/agentshield-api/schemas.js

@@ -26,10 +26,12 @@ exports.agentShieldAPIErrorSchema = zod_1.z.object({
 const agentShieldAPIResponseSchema = (dataSchema) => zod_1.z.object({
     success: zod_1.z.boolean(),
     data: dataSchema,
-    metadata: zod_1.z.object({
+    metadata: zod_1.z
+        .object({
         requestId: zod_1.z.string(),
         timestamp: zod_1.z.string(),
-    }).optional(),
+    })
+        .optional(),
 });
 exports.agentShieldAPIResponseSchema = agentShieldAPIResponseSchema;
 // ============================================================================
@@ -50,10 +52,12 @@ exports.proofSubmissionResponseSchema = zod_1.z.object({
     success: zod_1.z.boolean(),
     received: zod_1.z.number().int().min(0),
     processed: zod_1.z.number().int().min(0),
-    errors: zod_1.z.array(zod_1.z.object({
+    errors: zod_1.z
+        .array(zod_1.z.object({
         proofId: zod_1.z.string(),
         error: zod_1.z.string(),
-    })).optional(),
+    }))
+        .optional(),
 });
 // ============================================================================
 // Delegation Verification Schemas
@@ -77,11 +81,13 @@ exports.verifyDelegationRequestSchema = zod_1.z.object({
     agent_did: zod_1.z.string(),
     scopes: zod_1.z.array(zod_1.z.string()).min(1),
     timestamp: zod_1.z.number().int().positive().optional(),
-    client_info: zod_1.z.object({
+    client_info: zod_1.z
+        .object({
         ip_address: zod_1.z.string().ip().optional(),
         origin: zod_1.z.string().url().optional(),
         user_agent: zod_1.z.string().optional(),
-    }).optional(),
+    })
+        .optional(),
 });
 /**
  * Delegation verification response schema
@@ -105,12 +111,14 @@ exports.verifyDelegationAPIResponseSchema = (0, exports.agentShieldAPIResponseSc
  * AgentShield tool protection schema (supports both snake_case and camelCase)
  * This is the API-specific format, not the MCP-I spec schema
  */
-exports.agentShieldToolProtectionSchema = zod_1.z.object({
+exports.agentShieldToolProtectionSchema = zod_1.z
+    .object({
     scopes: zod_1.z.array(zod_1.z.string()),
     requires_delegation: zod_1.z.boolean().optional(),
     requiresDelegation: zod_1.z.boolean().optional(),
     required_scopes: zod_1.z.array(zod_1.z.string()).optional(),
-}).passthrough(); // Allow additional properties
+})
+    .passthrough(); // Allow additional properties
 /**
  * Tool protection config response schema
  */
@@ -129,16 +137,51 @@ exports.toolProtectionConfigAPIResponseSchema = (0, exports.agentShieldAPIRespon
 // ============================================================================
 /**
  * Create delegation request schema
+ *
+ * Note: AgentShield API accepts a simplified format, not the full DelegationRecord.
+ * The API accepts: agent_did, scopes, expires_in_days, expires_at, session_id, project_id, custom_fields
+ *
+ * IMPORTANT: expires_in_days and expires_at are mutually exclusive - use one or the other, not both.
  */
-exports.createDelegationRequestSchema = zod_1.z.object({
-    delegation: index_js_1.DelegationRecordSchema,
+exports.createDelegationRequestSchema = zod_1.z
+    .object({
+    agent_did: zod_1.z.string().min(1),
+    scopes: zod_1.z.array(zod_1.z.string()).min(1),
+    expires_in_days: zod_1.z.number().int().positive().optional(),
+    expires_at: zod_1.z.string().datetime().optional(),
+    session_id: zod_1.z.string().optional(),
+    project_id: zod_1.z.string().uuid().optional(),
+    custom_fields: zod_1.z.record(zod_1.z.unknown()).optional(),
+})
+    .passthrough()
+    .refine((data) => {
+    // expires_in_days and expires_at are mutually exclusive
+    const hasExpiresInDays = data.expires_in_days !== undefined;
+    const hasExpiresAt = data.expires_at !== undefined;
+    return !(hasExpiresInDays && hasExpiresAt);
+}, {
+    message: "expires_in_days and expires_at are mutually exclusive - use one or the other, not both",
+    path: ["expires_in_days", "expires_at"],
 });
 /**
  * Create delegation response schema
+ *
+ * Canonical format returned by POST /api/v1/bouncer/delegations
+ *
+ * IMPORTANT: delegation_token is NOT returned by this endpoint.
+ * delegation_token is only available via OAuth callback flow (/api/v1/bouncer/oauth/callback)
+ * and is passed as a URL parameter, not in the API response body.
  */
 exports.createDelegationResponseSchema = zod_1.z.object({
     delegation_id: zod_1.z.string().uuid(),
-    delegation: index_js_1.DelegationRecordSchema,
+    agent_did: zod_1.z.string().min(1),
+    user_id: zod_1.z.string().optional(),
+    user_identifier: zod_1.z.string().optional(),
+    scopes: zod_1.z.array(zod_1.z.string()),
+    status: zod_1.z.literal("active"),
+    issued_at: zod_1.z.string().datetime(),
+    expires_at: zod_1.z.string().datetime().optional(),
+    created_at: zod_1.z.string().datetime(),
 });
 /**
  * Wrapped creation response schema

package/dist/agentshield-api/types.d.ts

@@ -6,8 +6,8 @@
  *
  * @package @kya-os/contracts/agentshield-api
  */
-import type { DetachedProof } from '../proof.js';
-import type { DelegationRecord } from '../delegation/index.js';
+import type { DetachedProof } from "../proof.js";
+import type { DelegationRecord } from "../delegation/index.js";
 /**
  * Standard AgentShield API response wrapper
  */
@@ -124,16 +124,42 @@ export type ToolProtectionConfigAPIResponse = AgentShieldAPIResponse<ToolProtect
 /**
  * Request body for creating a delegation
  * POST /api/v1/bouncer/delegations
+ *
+ * Note: AgentShield API accepts a simplified format, not the full DelegationRecord.
+ * The API accepts: agent_did, scopes, expires_in_days, expires_at, session_id, project_id, custom_fields
+ *
+ * IMPORTANT: expires_in_days and expires_at are mutually exclusive - use one or the other, not both.
  */
 export interface CreateDelegationRequest {
-    delegation: DelegationRecord;
+    agent_did: string;
+    scopes: string[];
+    /** Number of days until expiration (1-365). Mutually exclusive with expires_at. */
+    expires_in_days?: number;
+    /** ISO 8601 datetime when delegation expires. Mutually exclusive with expires_in_days. */
+    expires_at?: string;
+    session_id?: string;
+    project_id?: string;
+    custom_fields?: Record<string, unknown>;
 }
 /**
  * Response from delegation creation endpoint
+ *
+ * Canonical format returned by POST /api/v1/bouncer/delegations
+ *
+ * IMPORTANT: delegation_token is NOT returned by this endpoint.
+ * delegation_token is only available via OAuth callback flow (/api/v1/bouncer/oauth/callback)
+ * and is passed as a URL parameter, not in the API response body.
  */
 export interface CreateDelegationResponse {
     delegation_id: string;
-    delegation: DelegationRecord;
+    agent_did: string;
+    user_id?: string;
+    user_identifier?: string;
+    scopes: string[];
+    status: "active";
+    issued_at: string;
+    expires_at?: string;
+    created_at: string;
 }
 /**
  * Wrapped creation response
@@ -166,4 +192,3 @@ export declare class AgentShieldAPIError extends Error {
     readonly details?: Record<string, unknown> | undefined;
     constructor(code: string, message: string, details?: Record<string, unknown> | undefined);
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/agentshield-api/types.js

@@ -20,7 +20,7 @@ class AgentShieldAPIError extends Error {
         super(message);
         this.code = code;
         this.details = details;
-        this.name = 'AgentShieldAPIError';
+        this.name = "AgentShieldAPIError";
     }
 }
 exports.AgentShieldAPIError = AgentShieldAPIError;

package/dist/config/builder.js

@@ -35,7 +35,7 @@ function buildBaseConfig(env) {
                     {
                         type: 'agentshield',
                         apiUrl: env.AGENTSHIELD_API_URL || 'https://kya.vouched.id',
-                        apiKey: env.AGENTSHIELD_API_KEY || ''
+                        apiKey: env.AGENTSHIELD_API_KEY
                     }
                 ],
                 maxBatchSize: 10,
@@ -72,4 +72,3 @@ function buildBaseConfig(env) {
     };
     return baseConfig;
 }
-//# sourceMappingURL=builder.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.5.2-canary.1",
+  "version": "1.5.2-canary.3",
   "description": "Shared types and schemas for XMCP-I ecosystem",
   "type": "commonjs",
   "sideEffects": false,