@kya-os/contracts 1.5.2-canary.5 → 1.5.2

package/dist/consent/index.d.ts

@@ -3,4 +3,4 @@
  *
  * Types and schemas for consent page configuration and approval handling
  */
-export { consentBrandingSchema, consentTermsSchema, consentCustomFieldSchema, consentCustomFieldOptionSchema, consentPageConfigSchema, consentApprovalRequestSchema, consentApprovalResponseSchema, consentConfigSchema, validateConsentPageConfig, validateConsentApprovalRequest, validateConsentApprovalResponse, validateConsentConfig, type ConsentBranding, type ConsentTerms, type ConsentCustomField, type ConsentPageConfig, type ConsentApprovalRequest, type ConsentApprovalResponse, type ConsentConfig, } from './schemas.js';
+export { consentBrandingSchema, consentTermsSchema, consentCustomFieldSchema, consentCustomFieldOptionSchema, consentPageConfigSchema, consentApprovalRequestSchema, consentApprovalResponseSchema, consentConfigSchema, oauthIdentitySchema, validateConsentPageConfig, validateConsentApprovalRequest, validateConsentApprovalResponse, validateConsentConfig, type ConsentBranding, type ConsentTerms, type ConsentCustomField, type ConsentPageConfig, type ConsentApprovalRequest, type ConsentApprovalResponse, type ConsentConfig, type OAuthIdentity, } from './schemas.js';

package/dist/consent/index.js

@@ -5,7 +5,7 @@
  * Types and schemas for consent page configuration and approval handling
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateConsentConfig = exports.validateConsentApprovalResponse = exports.validateConsentApprovalRequest = exports.validateConsentPageConfig = exports.consentConfigSchema = exports.consentApprovalResponseSchema = exports.consentApprovalRequestSchema = exports.consentPageConfigSchema = exports.consentCustomFieldOptionSchema = exports.consentCustomFieldSchema = exports.consentTermsSchema = exports.consentBrandingSchema = void 0;
+exports.validateConsentConfig = exports.validateConsentApprovalResponse = exports.validateConsentApprovalRequest = exports.validateConsentPageConfig = exports.oauthIdentitySchema = exports.consentConfigSchema = exports.consentApprovalResponseSchema = exports.consentApprovalRequestSchema = exports.consentPageConfigSchema = exports.consentCustomFieldOptionSchema = exports.consentCustomFieldSchema = exports.consentTermsSchema = exports.consentBrandingSchema = void 0;
 // Export schemas and inferred types (types are derived from schemas)
 var schemas_js_1 = require("./schemas.js");
 Object.defineProperty(exports, "consentBrandingSchema", { enumerable: true, get: function () { return schemas_js_1.consentBrandingSchema; } });
@@ -16,6 +16,7 @@ Object.defineProperty(exports, "consentPageConfigSchema", { enumerable: true, ge
 Object.defineProperty(exports, "consentApprovalRequestSchema", { enumerable: true, get: function () { return schemas_js_1.consentApprovalRequestSchema; } });
 Object.defineProperty(exports, "consentApprovalResponseSchema", { enumerable: true, get: function () { return schemas_js_1.consentApprovalResponseSchema; } });
 Object.defineProperty(exports, "consentConfigSchema", { enumerable: true, get: function () { return schemas_js_1.consentConfigSchema; } });
+Object.defineProperty(exports, "oauthIdentitySchema", { enumerable: true, get: function () { return schemas_js_1.oauthIdentitySchema; } });
 Object.defineProperty(exports, "validateConsentPageConfig", { enumerable: true, get: function () { return schemas_js_1.validateConsentPageConfig; } });
 Object.defineProperty(exports, "validateConsentApprovalRequest", { enumerable: true, get: function () { return schemas_js_1.validateConsentApprovalRequest; } });
 Object.defineProperty(exports, "validateConsentApprovalResponse", { enumerable: true, get: function () { return schemas_js_1.validateConsentApprovalResponse; } });

package/dist/consent/schemas.d.ts

@@ -43,8 +43,8 @@ export declare const consentTermsSchema: z.ZodObject<{
 }, {
     version?: string | undefined;
     url?: string | undefined;
-    required?: boolean | undefined;
     text?: string | undefined;
+    required?: boolean | undefined;
 }>;
 export type ConsentTerms = z.infer<typeof consentTermsSchema>;
 /**
@@ -81,8 +81,8 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     }>, "many">>;
     pattern: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    type: "text" | "textarea" | "checkbox" | "select";
     name: string;
+    type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
     options?: {
@@ -92,8 +92,8 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     placeholder?: string | undefined;
     pattern?: string | undefined;
 }, {
-    type: "text" | "textarea" | "checkbox" | "select";
     name: string;
+    type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
     options?: {
@@ -103,8 +103,8 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     placeholder?: string | undefined;
     pattern?: string | undefined;
 }>, {
-    type: "text" | "textarea" | "checkbox" | "select";
     name: string;
+    type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
     options?: {
@@ -114,8 +114,8 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     placeholder?: string | undefined;
     pattern?: string | undefined;
 }, {
-    type: "text" | "textarea" | "checkbox" | "select";
     name: string;
+    type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
     options?: {
@@ -126,6 +126,42 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     pattern?: string | undefined;
 }>;
 export type ConsentCustomField = z.infer<typeof consentCustomFieldSchema>;
+/**
+ * OAuth Identity Schema
+ *
+ * Represents a user's OAuth provider account information.
+ * Used in Phase 4 to link OAuth accounts to persistent User DIDs.
+ */
+export declare const oauthIdentitySchema: z.ZodObject<{
+    /**
+     * OAuth provider name (e.g., "google", "github", "microsoft")
+     */
+    provider: z.ZodString;
+    /**
+     * OAuth subject identifier (unique user ID from provider)
+     * @example "123456789" (Google), "github-user-id" (GitHub)
+     */
+    subject: z.ZodString;
+    /**
+     * User's email address from OAuth provider (optional)
+     */
+    email: z.ZodOptional<z.ZodString>;
+    /**
+     * User's display name from OAuth provider (optional)
+     */
+    name: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    provider: string;
+    subject: string;
+    name?: string | undefined;
+    email?: string | undefined;
+}, {
+    provider: string;
+    subject: string;
+    name?: string | undefined;
+    email?: string | undefined;
+}>;
+export type OAuthIdentity = z.infer<typeof oauthIdentitySchema>;
 /**
  * Consent Page Config Schema
  */
@@ -165,8 +201,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
     }, {
         version?: string | undefined;
         url?: string | undefined;
-        required?: boolean | undefined;
         text?: string | undefined;
+        required?: boolean | undefined;
     }>>;
     customFields: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodObject<{
         name: z.ZodString;
@@ -186,8 +222,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         }>, "many">>;
         pattern: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -197,8 +233,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -208,8 +244,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }>, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -219,8 +255,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -236,8 +272,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
     agentDid: string;
     sessionId: string;
     tool: string;
-    scopes: string[];
     toolDescription: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -253,8 +289,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         text?: string | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -269,8 +305,8 @@ export declare const consentPageConfigSchema: z.ZodObject<{
     agentDid: string;
     sessionId: string;
     tool: string;
-    scopes: string[];
     toolDescription: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -282,12 +318,12 @@ export declare const consentPageConfigSchema: z.ZodObject<{
     terms?: {
         version?: string | undefined;
         url?: string | undefined;
-        required?: boolean | undefined;
         text?: string | undefined;
+        required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -304,6 +340,10 @@ export type ConsentPageConfig = z.infer<typeof consentPageConfigSchema>;
  * Consent Approval Request Schema
  *
  * Note: Uses snake_case for API compatibility (agent_did, session_id, project_id)
+ *
+ * Phase 4 additions:
+ * - oauth_identity: Optional OAuth provider information for identity linking
+ * - user_did: Optional User DID for persistent identity (if already known)
  */
 export declare const consentApprovalRequestSchema: z.ZodObject<{
     tool: z.ZodString;
@@ -314,24 +354,77 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     termsAccepted: z.ZodBoolean;
     termsVersion: z.ZodOptional<z.ZodString>;
     customFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodBoolean]>>>;
+    /**
+     * OAuth provider identity information (optional)
+     * Used to link OAuth accounts to persistent User DIDs
+     */
+    oauth_identity: z.ZodOptional<z.ZodObject<{
+        /**
+         * OAuth provider name (e.g., "google", "github", "microsoft")
+         */
+        provider: z.ZodString;
+        /**
+         * OAuth subject identifier (unique user ID from provider)
+         * @example "123456789" (Google), "github-user-id" (GitHub)
+         */
+        subject: z.ZodString;
+        /**
+         * User's email address from OAuth provider (optional)
+         */
+        email: z.ZodOptional<z.ZodString>;
+        /**
+         * User's display name from OAuth provider (optional)
+         */
+        name: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        provider: string;
+        subject: string;
+        name?: string | undefined;
+        email?: string | undefined;
+    }, {
+        provider: string;
+        subject: string;
+        name?: string | undefined;
+        email?: string | undefined;
+    }>>;
+    /**
+     * User DID (optional)
+     * If provided, represents the persistent User DID for this user
+     * Format: did:key:... or did:web:...
+     */
+    user_did: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     tool: string;
-    session_id: string;
     scopes: string[];
     agent_did: string;
+    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
+    oauth_identity?: {
+        provider: string;
+        subject: string;
+        name?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    user_did?: string | undefined;
 }, {
     tool: string;
-    session_id: string;
     scopes: string[];
     agent_did: string;
+    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
+    oauth_identity?: {
+        provider: string;
+        subject: string;
+        name?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    user_did?: string | undefined;
 }>;
 export type ConsentApprovalRequest = z.infer<typeof consentApprovalRequestSchema>;
 /**
@@ -345,27 +438,27 @@ export declare const consentApprovalResponseSchema: z.ZodEffects<z.ZodObject<{
     error_code: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     success: boolean;
-    error?: string | undefined;
     delegation_id?: string | undefined;
     delegation_token?: string | undefined;
+    error?: string | undefined;
     error_code?: string | undefined;
 }, {
     success: boolean;
-    error?: string | undefined;
     delegation_id?: string | undefined;
     delegation_token?: string | undefined;
+    error?: string | undefined;
     error_code?: string | undefined;
 }>, {
     success: boolean;
-    error?: string | undefined;
     delegation_id?: string | undefined;
     delegation_token?: string | undefined;
+    error?: string | undefined;
     error_code?: string | undefined;
 }, {
     success: boolean;
-    error?: string | undefined;
     delegation_id?: string | undefined;
     delegation_token?: string | undefined;
+    error?: string | undefined;
     error_code?: string | undefined;
 }>;
 export type ConsentApprovalResponse = z.infer<typeof consentApprovalResponseSchema>;
@@ -402,8 +495,8 @@ export declare const consentConfigSchema: z.ZodObject<{
     }, {
         version?: string | undefined;
         url?: string | undefined;
-        required?: boolean | undefined;
         text?: string | undefined;
+        required?: boolean | undefined;
     }>>;
     customFields: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodObject<{
         name: z.ZodString;
@@ -423,8 +516,8 @@ export declare const consentConfigSchema: z.ZodObject<{
         }>, "many">>;
         pattern: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -434,8 +527,8 @@ export declare const consentConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -445,8 +538,8 @@ export declare const consentConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }>, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -456,8 +549,8 @@ export declare const consentConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -497,8 +590,8 @@ export declare const consentConfigSchema: z.ZodObject<{
         text?: string | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -524,12 +617,12 @@ export declare const consentConfigSchema: z.ZodObject<{
     terms?: {
         version?: string | undefined;
         url?: string | undefined;
-        required?: boolean | undefined;
         text?: string | undefined;
+        required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -560,8 +653,8 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     agentDid: string;
     sessionId: string;
     tool: string;
-    scopes: string[];
     toolDescription: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -573,12 +666,12 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     terms?: {
         version?: string | undefined;
         url?: string | undefined;
-        required?: boolean | undefined;
         text?: string | undefined;
+        required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -593,8 +686,8 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     agentDid: string;
     sessionId: string;
     tool: string;
-    scopes: string[];
     toolDescription: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -610,8 +703,8 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
         text?: string | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -631,22 +724,36 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
  */
 export declare function validateConsentApprovalRequest(request: unknown): z.SafeParseReturnType<{
     tool: string;
-    session_id: string;
     scopes: string[];
     agent_did: string;
+    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
+    oauth_identity?: {
+        provider: string;
+        subject: string;
+        name?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    user_did?: string | undefined;
 }, {
     tool: string;
-    session_id: string;
     scopes: string[];
     agent_did: string;
+    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
+    oauth_identity?: {
+        provider: string;
+        subject: string;
+        name?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    user_did?: string | undefined;
 }>;
 /**
  * Validate a consent approval response
@@ -656,15 +763,15 @@ export declare function validateConsentApprovalRequest(request: unknown): z.Safe
  */
 export declare function validateConsentApprovalResponse(response: unknown): z.SafeParseReturnType<{
     success: boolean;
-    error?: string | undefined;
     delegation_id?: string | undefined;
     delegation_token?: string | undefined;
+    error?: string | undefined;
     error_code?: string | undefined;
 }, {
     success: boolean;
-    error?: string | undefined;
     delegation_id?: string | undefined;
     delegation_token?: string | undefined;
+    error?: string | undefined;
     error_code?: string | undefined;
 }>;
 /**
@@ -683,12 +790,12 @@ export declare function validateConsentConfig(config: unknown): z.SafeParseRetur
     terms?: {
         version?: string | undefined;
         url?: string | undefined;
-        required?: boolean | undefined;
         text?: string | undefined;
+        required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {
@@ -718,8 +825,8 @@ export declare function validateConsentConfig(config: unknown): z.SafeParseRetur
         text?: string | undefined;
     } | undefined;
     customFields?: {
-        type: "text" | "textarea" | "checkbox" | "select";
         name: string;
+        type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
         options?: {

package/dist/consent/schemas.js

@@ -8,7 +8,7 @@
  * Related Spec: MCP-I Phase 0 Implementation Plan
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.consentConfigSchema = exports.consentApprovalResponseSchema = exports.consentApprovalRequestSchema = exports.consentPageConfigSchema = exports.consentCustomFieldSchema = exports.consentCustomFieldOptionSchema = exports.consentTermsSchema = exports.consentBrandingSchema = void 0;
+exports.consentConfigSchema = exports.consentApprovalResponseSchema = exports.consentApprovalRequestSchema = exports.consentPageConfigSchema = exports.oauthIdentitySchema = exports.consentCustomFieldSchema = exports.consentCustomFieldOptionSchema = exports.consentTermsSchema = exports.consentBrandingSchema = void 0;
 exports.validateConsentPageConfig = validateConsentPageConfig;
 exports.validateConsentApprovalRequest = validateConsentApprovalRequest;
 exports.validateConsentApprovalResponse = validateConsentApprovalResponse;
@@ -73,6 +73,40 @@ exports.consentCustomFieldSchema = zod_1.z.object({
 }, {
     message: 'Select fields must have options, and non-select fields must not have options',
 });
+/**
+ * OAuth Identity Schema
+ *
+ * Represents a user's OAuth provider account information.
+ * Used in Phase 4 to link OAuth accounts to persistent User DIDs.
+ */
+exports.oauthIdentitySchema = zod_1.z.object({
+    /**
+     * OAuth provider name (e.g., "google", "github", "microsoft")
+     */
+    provider: zod_1.z.string()
+        .min(1, 'Provider is required')
+        .max(50, 'Provider name must be 50 characters or less'),
+    /**
+     * OAuth subject identifier (unique user ID from provider)
+     * @example "123456789" (Google), "github-user-id" (GitHub)
+     */
+    subject: zod_1.z.string()
+        .min(1, 'Subject is required')
+        .max(255, 'Subject must be 255 characters or less'),
+    /**
+     * User's email address from OAuth provider (optional)
+     */
+    email: zod_1.z.string()
+        .email('Must be a valid email address')
+        .max(255, 'Email must be 255 characters or less')
+        .optional(),
+    /**
+     * User's display name from OAuth provider (optional)
+     */
+    name: zod_1.z.string()
+        .max(255, 'Name must be 255 characters or less')
+        .optional(),
+});
 /**
  * Consent Page Config Schema
  */
@@ -96,6 +130,10 @@ exports.consentPageConfigSchema = zod_1.z.object({
  * Consent Approval Request Schema
  *
  * Note: Uses snake_case for API compatibility (agent_did, session_id, project_id)
+ *
+ * Phase 4 additions:
+ * - oauth_identity: Optional OAuth provider information for identity linking
+ * - user_did: Optional User DID for persistent identity (if already known)
  */
 exports.consentApprovalRequestSchema = zod_1.z.object({
     tool: zod_1.z.string().min(1, 'Tool name is required'),
@@ -104,10 +142,27 @@ exports.consentApprovalRequestSchema = zod_1.z.object({
     session_id: zod_1.z.string().min(1, 'Session ID is required'),
     project_id: zod_1.z.string().min(1, 'Project ID is required'),
     termsAccepted: zod_1.z.boolean(),
-    termsVersion: zod_1.z.string().max(50, 'Terms version must be 50 characters or less').optional(),
+    termsVersion: zod_1.z.string()
+        .max(50, 'Terms version must be 50 characters or less')
+        .optional(),
     customFields: zod_1.z
         .record(zod_1.z.union([zod_1.z.string(), zod_1.z.boolean()]))
         .optional(),
+    // Phase 4: OAuth identity linking
+    /**
+     * OAuth provider identity information (optional)
+     * Used to link OAuth accounts to persistent User DIDs
+     */
+    oauth_identity: exports.oauthIdentitySchema.optional(),
+    /**
+     * User DID (optional)
+     * If provided, represents the persistent User DID for this user
+     * Format: did:key:... or did:web:...
+     */
+    user_did: zod_1.z.string()
+        .regex(/^did:/, 'Must be a valid DID format (starting with did:)')
+        .max(500, 'DID must be 500 characters or less')
+        .optional(),
 });
 /**
  * Consent Approval Response Schema

package/dist/handshake.d.ts

@@ -2,21 +2,126 @@ import { z } from "zod";
 /**
  * Handshake and session management schemas
  */
+declare const MCPClientCapabilitiesSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const MCPClientInfoSchema: z.ZodObject<{
+    name: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    version: z.ZodOptional<z.ZodString>;
+    platform: z.ZodOptional<z.ZodString>;
+    vendor: z.ZodOptional<z.ZodString>;
+    persistentId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    title?: string | undefined;
+    version?: string | undefined;
+    platform?: string | undefined;
+    vendor?: string | undefined;
+    persistentId?: string | undefined;
+}, {
+    name: string;
+    title?: string | undefined;
+    version?: string | undefined;
+    platform?: string | undefined;
+    vendor?: string | undefined;
+    persistentId?: string | undefined;
+}>;
+export declare const MCPClientSessionInfoSchema: z.ZodObject<{
+    name: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    version: z.ZodOptional<z.ZodString>;
+    platform: z.ZodOptional<z.ZodString>;
+    vendor: z.ZodOptional<z.ZodString>;
+    persistentId: z.ZodOptional<z.ZodString>;
+} & {
+    clientId: z.ZodString;
+    protocolVersion: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    clientId: string;
+    title?: string | undefined;
+    version?: string | undefined;
+    platform?: string | undefined;
+    vendor?: string | undefined;
+    persistentId?: string | undefined;
+    protocolVersion?: string | undefined;
+    capabilities?: Record<string, unknown> | undefined;
+}, {
+    name: string;
+    clientId: string;
+    title?: string | undefined;
+    version?: string | undefined;
+    platform?: string | undefined;
+    vendor?: string | undefined;
+    persistentId?: string | undefined;
+    protocolVersion?: string | undefined;
+    capabilities?: Record<string, unknown> | undefined;
+}>;
 export declare const HandshakeRequestSchema: z.ZodObject<{
     nonce: z.ZodString;
     audience: z.ZodString;
     timestamp: z.ZodNumber;
     agentDid: z.ZodOptional<z.ZodString>;
+    clientInfo: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+        version: z.ZodOptional<z.ZodString>;
+        platform: z.ZodOptional<z.ZodString>;
+        vendor: z.ZodOptional<z.ZodString>;
+        persistentId: z.ZodOptional<z.ZodString>;
+    } & {
+        clientId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        clientId?: string | undefined;
+    }, {
+        name: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        clientId?: string | undefined;
+    }>>;
+    clientProtocolVersion: z.ZodOptional<z.ZodString>;
+    clientCapabilities: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
     nonce: string;
     audience: string;
     timestamp: number;
     agentDid?: string | undefined;
+    clientInfo?: {
+        name: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        clientId?: string | undefined;
+    } | undefined;
+    clientProtocolVersion?: string | undefined;
+    clientCapabilities?: Record<string, unknown> | undefined;
 }, {
     nonce: string;
     audience: string;
     timestamp: number;
     agentDid?: string | undefined;
+    clientInfo?: {
+        name: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        clientId?: string | undefined;
+    } | undefined;
+    clientProtocolVersion?: string | undefined;
+    clientCapabilities?: Record<string, unknown> | undefined;
 }>;
 export declare const SessionContextSchema: z.ZodObject<{
     sessionId: z.ZodString;
@@ -30,26 +135,80 @@ export declare const SessionContextSchema: z.ZodObject<{
     serverDid: z.ZodOptional<z.ZodString>;
     clientDid: z.ZodOptional<z.ZodString>;
     userDid: z.ZodOptional<z.ZodString>;
+    clientInfo: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+        version: z.ZodOptional<z.ZodString>;
+        platform: z.ZodOptional<z.ZodString>;
+        vendor: z.ZodOptional<z.ZodString>;
+        persistentId: z.ZodOptional<z.ZodString>;
+    } & {
+        clientId: z.ZodString;
+        protocolVersion: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        clientId: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        protocolVersion?: string | undefined;
+        capabilities?: Record<string, unknown> | undefined;
+    }, {
+        name: string;
+        clientId: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        protocolVersion?: string | undefined;
+        capabilities?: Record<string, unknown> | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
-    createdAt: number;
     nonce: string;
     audience: string;
     timestamp: number;
     sessionId: string;
+    createdAt: number;
     lastActivity: number;
     ttlMinutes: number;
     agentDid?: string | undefined;
+    clientInfo?: {
+        name: string;
+        clientId: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        protocolVersion?: string | undefined;
+        capabilities?: Record<string, unknown> | undefined;
+    } | undefined;
     serverDid?: string | undefined;
     clientDid?: string | undefined;
     userDid?: string | undefined;
 }, {
-    createdAt: number;
     nonce: string;
     audience: string;
     timestamp: number;
     sessionId: string;
+    createdAt: number;
     lastActivity: number;
     agentDid?: string | undefined;
+    clientInfo?: {
+        name: string;
+        clientId: string;
+        title?: string | undefined;
+        version?: string | undefined;
+        platform?: string | undefined;
+        vendor?: string | undefined;
+        persistentId?: string | undefined;
+        protocolVersion?: string | undefined;
+        capabilities?: Record<string, unknown> | undefined;
+    } | undefined;
     ttlMinutes?: number | undefined;
     serverDid?: string | undefined;
     clientDid?: string | undefined;
@@ -65,8 +224,11 @@ export declare const NonceCacheEntrySchema: z.ZodObject<{
     sessionId: string;
     expiresAt: number;
 }>;
+export type MCPClientInfo = z.infer<typeof MCPClientInfoSchema>;
+export type MCPClientSessionInfo = z.infer<typeof MCPClientSessionInfoSchema>;
 export type HandshakeRequest = z.infer<typeof HandshakeRequestSchema>;
 export type SessionContext = z.infer<typeof SessionContextSchema>;
+export type MCPClientCapabilities = z.infer<typeof MCPClientCapabilitiesSchema>;
 export type NonceCacheEntry = z.infer<typeof NonceCacheEntrySchema>;
 /**
  * Nonce cache interface for replay prevention
@@ -170,3 +332,4 @@ export type NonceCacheConfig = z.infer<typeof NonceCacheConfigSchema>;
 export declare const DEFAULT_SESSION_TTL_MINUTES = 30;
 export declare const DEFAULT_TIMESTAMP_SKEW_SECONDS = 120;
 export declare const NONCE_LENGTH_BYTES = 16;
+export {};

package/dist/handshake.js

@@ -1,15 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NONCE_LENGTH_BYTES = exports.DEFAULT_TIMESTAMP_SKEW_SECONDS = exports.DEFAULT_SESSION_TTL_MINUTES = exports.NonceCacheConfigSchema = exports.NonceCacheEntrySchema = exports.SessionContextSchema = exports.HandshakeRequestSchema = void 0;
+exports.NONCE_LENGTH_BYTES = exports.DEFAULT_TIMESTAMP_SKEW_SECONDS = exports.DEFAULT_SESSION_TTL_MINUTES = exports.NonceCacheConfigSchema = exports.NonceCacheEntrySchema = exports.SessionContextSchema = exports.HandshakeRequestSchema = exports.MCPClientSessionInfoSchema = exports.MCPClientInfoSchema = void 0;
 const zod_1 = require("zod");
 /**
  * Handshake and session management schemas
  */
+const MCPClientCapabilitiesSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());
+exports.MCPClientInfoSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1), // e.g., "Claude Desktop"
+    title: zod_1.z.string().optional(), // Human-readable display name
+    version: zod_1.z.string().optional(), // e.g., "1.0.0"
+    platform: zod_1.z.string().optional(), // e.g., "desktop", "web", "mobile"
+    vendor: zod_1.z.string().optional(), // e.g., "Anthropic"
+    persistentId: zod_1.z.string().optional(), // Client-provided stable identifier
+});
+const MCPHandshakeClientInfoSchema = exports.MCPClientInfoSchema.extend({
+    clientId: zod_1.z.string().optional(), // Server-generated identifier (optional in request)
+});
+exports.MCPClientSessionInfoSchema = exports.MCPClientInfoSchema.extend({
+    clientId: zod_1.z.string(), // Generated by server
+    protocolVersion: zod_1.z.string().optional(), // Negotiated protocol version
+    capabilities: MCPClientCapabilitiesSchema.optional(), // Negotiated capabilities snapshot
+});
 exports.HandshakeRequestSchema = zod_1.z.object({
     nonce: zod_1.z.string().min(1),
     audience: zod_1.z.string().min(1),
     timestamp: zod_1.z.number().int().positive(),
     agentDid: zod_1.z.string().startsWith("did:").optional(), // Agent DID for delegation verification
+    clientInfo: MCPHandshakeClientInfoSchema.optional(), // Optional client information from MCP initialize
+    clientProtocolVersion: zod_1.z.string().min(1).optional(), // Protocol version negotiated during initialize
+    clientCapabilities: MCPClientCapabilitiesSchema.optional(), // Client capability advertisement
 });
 exports.SessionContextSchema = zod_1.z.object({
     sessionId: zod_1.z.string().min(1),
@@ -20,9 +40,10 @@ exports.SessionContextSchema = zod_1.z.object({
     lastActivity: zod_1.z.number().int().positive(),
     ttlMinutes: zod_1.z.number().int().positive().default(30),
     agentDid: zod_1.z.string().optional(), // MCP Client/Agent DID (from handshake)
-    serverDid: zod_1.z.string().min(1).optional(), // NEW: MCP-I Server DID (optional for backward compatibility)
+    serverDid: zod_1.z.string().min(1).optional(), // MCP-I Server DID (optional for backward compatibility)
     clientDid: zod_1.z.string().optional(), // Client app DID (if different from agent)
     userDid: zod_1.z.string().optional(), // User DID (delegator)
+    clientInfo: exports.MCPClientSessionInfoSchema.optional(), // MCP client information with negotiated metadata
 });
 exports.NonceCacheEntrySchema = zod_1.z.object({
     sessionId: zod_1.z.string().min(1),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.5.2-canary.5",
+  "version": "1.5.2",
   "description": "Shared types and schemas for XMCP-I ecosystem",
   "type": "commonjs",
   "sideEffects": false,