@kya-os/contracts 1.5.2 → 1.5.3-canary.10

package/dist/agentshield-api/schemas.js

@@ -48,6 +48,32 @@ const toolCallContextSchema = zod_1.z.object({
     scopeId: zod_1.z.string().min(1, "scopeId is required to link context to proof"),
     userIdentifier: zod_1.z.string().optional(),
 });
+/**
+ * Consent Event Context Schema
+ * Represents consent-related events for audit tracking
+ */
+const consentEventContextSchema = zod_1.z.object({
+    eventType: zod_1.z.enum([
+        "consent:page_viewed",
+        "consent:approved",
+        "consent:delegation_created",
+        "consent:credential_required"
+    ]),
+    timestamp: zod_1.z.number().int().positive(),
+    sessionId: zod_1.z.string().min(1),
+    userDid: zod_1.z.string().optional(),
+    agentDid: zod_1.z.string().min(1),
+    targetTools: zod_1.z.array(zod_1.z.string()).min(1), // ALWAYS array
+    scopes: zod_1.z.array(zod_1.z.string()).min(0),
+    delegationId: zod_1.z.string().uuid().optional(),
+    projectId: zod_1.z.string().uuid(),
+    termsAccepted: zod_1.z.boolean().optional(),
+    credentialStatus: zod_1.z.enum(["present", "required", "obtained"]).optional(),
+    oauthIdentity: zod_1.z.object({
+        provider: zod_1.z.string(),
+        identifier: zod_1.z.string(),
+    }).optional(),
+});
 /**
  * Proof submission request schema
  */
@@ -59,6 +85,7 @@ exports.proofSubmissionRequestSchema = zod_1.z.object({
     context: zod_1.z
         .object({
         toolCalls: zod_1.z.array(toolCallContextSchema).optional(),
+        consentEvents: zod_1.z.array(consentEventContextSchema).optional(), // NEW: Consent events for audit tracking
         mcpServerUrl: zod_1.z.string().url().optional(), // MCP server URL for tool discovery
     })
         .optional(),
@@ -172,7 +199,7 @@ exports.toolProtectionConfigAPIResponseSchema = (0, exports.agentShieldAPIRespon
  * Create delegation request schema
  *
  * Note: AgentShield API accepts a simplified format, not the full DelegationRecord.
- * The API accepts: agent_did, scopes, expires_in_days, expires_at, session_id, project_id, custom_fields
+ * The API accepts: agent_did, scopes, expires_in_days, expires_at, session_id, project_id, user_identifier, custom_fields
  *
  * IMPORTANT: expires_in_days and expires_at are mutually exclusive - use one or the other, not both.
  */
@@ -184,6 +211,7 @@ exports.createDelegationRequestSchema = zod_1.z
     expires_at: zod_1.z.string().datetime().optional(),
     session_id: zod_1.z.string().optional(),
     project_id: zod_1.z.string().uuid().optional(),
+    user_identifier: zod_1.z.string().max(200).optional(), // Matches AgentShield's max(200)
     custom_fields: zod_1.z.record(zod_1.z.unknown()).optional(),
 })
     .passthrough()
@@ -211,9 +239,9 @@ exports.createDelegationResponseSchema = zod_1.z.object({
     user_id: zod_1.z.string().optional(),
     user_identifier: zod_1.z.string().optional(),
     scopes: zod_1.z.array(zod_1.z.string()),
-    status: zod_1.z.literal("active"),
+    status: zod_1.z.enum(['active', 'expired', 'revoked']), // Matches AgentShield's actual API behavior
     issued_at: zod_1.z.string().datetime(),
-    expires_at: zod_1.z.string().datetime().optional(),
+    expires_at: zod_1.z.string().datetime().nullable().optional(), // AgentShield allows null values
     created_at: zod_1.z.string().datetime(),
 });
 /**

package/dist/agentshield-api/types.d.ts

@@ -41,6 +41,30 @@ export interface ToolCallContext {
     scopeId: string;
     userIdentifier?: string;
 }
+/**
+ * Consent Event Context
+ *
+ * Represents consent-related events that occur during the consent flow.
+ * These events are logged separately from tool executions and allow
+ * multiple events per session (unlike regular audit logs).
+ */
+export interface ConsentEventContext {
+    eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+    timestamp: number;
+    sessionId: string;
+    userDid?: string;
+    agentDid: string;
+    targetTools: string[];
+    scopes: string[];
+    delegationId?: string;
+    projectId: string;
+    termsAccepted?: boolean;
+    credentialStatus?: "present" | "required" | "obtained";
+    oauthIdentity?: {
+        provider: string;
+        identifier: string;
+    };
+}
 /**
  * Request body for proof submission endpoint
  * POST /api/v1/bouncer/proofs
@@ -55,6 +79,7 @@ export interface ProofSubmissionRequest {
     /** AgentShield extension: Optional context for dashboard enrichment */
     context?: {
         toolCalls?: ToolCallContext[];
+        consentEvents?: ConsentEventContext[];
         mcpServerUrl?: string;
     };
 }
@@ -163,7 +188,7 @@ export type ToolProtectionConfigAPIResponse = AgentShieldAPIResponse<ToolProtect
  * POST /api/v1/bouncer/delegations
  *
  * Note: AgentShield API accepts a simplified format, not the full DelegationRecord.
- * The API accepts: agent_did, scopes, expires_in_days, expires_at, session_id, project_id, custom_fields
+ * The API accepts: agent_did, scopes, expires_in_days, expires_at, session_id, project_id, user_identifier, custom_fields
  *
  * IMPORTANT: expires_in_days and expires_at are mutually exclusive - use one or the other, not both.
  */
@@ -176,6 +201,8 @@ export interface CreateDelegationRequest {
     expires_at?: string;
     session_id?: string;
     project_id?: string;
+    /** User identifier string, max 200 chars, optional */
+    user_identifier?: string;
     custom_fields?: Record<string, unknown>;
 }
 /**
@@ -193,9 +220,9 @@ export interface CreateDelegationResponse {
     user_id?: string;
     user_identifier?: string;
     scopes: string[];
-    status: "active";
+    status: "active" | "expired" | "revoked";
     issued_at: string;
-    expires_at?: string;
+    expires_at?: string | null;
     created_at: string;
 }
 /**

package/dist/consent/schemas.d.ts

@@ -6,7 +6,7 @@
  *
  * Related Spec: MCP-I Phase 0 Implementation Plan
  */
-import { z } from 'zod';
+import { z } from "zod";
 /**
  * Consent Branding Schema
  */
@@ -37,13 +37,13 @@ export declare const consentTermsSchema: z.ZodObject<{
     required: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     required: boolean;
-    version?: string | undefined;
-    url?: string | undefined;
     text?: string | undefined;
-}, {
-    version?: string | undefined;
     url?: string | undefined;
+    version?: string | undefined;
+}, {
     text?: string | undefined;
+    url?: string | undefined;
+    version?: string | undefined;
     required?: boolean | undefined;
 }>;
 export type ConsentTerms = z.infer<typeof consentTermsSchema>;
@@ -81,10 +81,10 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     }>, "many">>;
     pattern: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
+    name: string;
     options?: {
         value: string;
         label: string;
@@ -92,10 +92,10 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     placeholder?: string | undefined;
     pattern?: string | undefined;
 }, {
-    name: string;
     type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
+    name: string;
     options?: {
         value: string;
         label: string;
@@ -103,10 +103,10 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     placeholder?: string | undefined;
     pattern?: string | undefined;
 }>, {
-    name: string;
     type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
+    name: string;
     options?: {
         value: string;
         label: string;
@@ -114,10 +114,10 @@ export declare const consentCustomFieldSchema: z.ZodEffects<z.ZodObject<{
     placeholder?: string | undefined;
     pattern?: string | undefined;
 }, {
-    name: string;
     type: "text" | "textarea" | "checkbox" | "select";
     required: boolean;
     label: string;
+    name: string;
     options?: {
         value: string;
         label: string;
@@ -195,13 +195,13 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         required: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         required: boolean;
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
-    }, {
-        version?: string | undefined;
         url?: string | undefined;
+        version?: string | undefined;
+    }, {
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
         required?: boolean | undefined;
     }>>;
     customFields: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -222,10 +222,10 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         }>, "many">>;
         pattern: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -233,10 +233,10 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -244,10 +244,10 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }>, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -255,10 +255,10 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -269,11 +269,11 @@ export declare const consentPageConfigSchema: z.ZodObject<{
     serverUrl: z.ZodString;
     autoClose: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    agentDid: string;
-    sessionId: string;
     tool: string;
     toolDescription: string;
     scopes: string[];
+    agentDid: string;
+    sessionId: string;
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -284,15 +284,15 @@ export declare const consentPageConfigSchema: z.ZodObject<{
     } | undefined;
     terms?: {
         required: boolean;
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -302,11 +302,11 @@ export declare const consentPageConfigSchema: z.ZodObject<{
     }[] | undefined;
     autoClose?: boolean | undefined;
 }, {
-    agentDid: string;
-    sessionId: string;
     tool: string;
     toolDescription: string;
     scopes: string[];
+    agentDid: string;
+    sessionId: string;
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -316,16 +316,16 @@ export declare const consentPageConfigSchema: z.ZodObject<{
         theme?: "light" | "dark" | "auto" | undefined;
     } | undefined;
     terms?: {
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
         required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -357,8 +357,11 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     /**
      * OAuth provider identity information (optional)
      * Used to link OAuth accounts to persistent User DIDs
+     *
+     * CRITICAL: Uses .nullish() to accept null, undefined, or OAuthIdentity
+     * This matches JSON parsing behavior where missing fields become null
      */
-    oauth_identity: z.ZodOptional<z.ZodObject<{
+    oauth_identity: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         /**
          * OAuth provider name (e.g., "google", "github", "microsoft")
          */
@@ -386,7 +389,7 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
         subject: string;
         name?: string | undefined;
         email?: string | undefined;
-    }>>;
+    }>>>;
     /**
      * User DID (optional)
      * If provided, represents the persistent User DID for this user
@@ -407,7 +410,7 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
         subject: string;
         name?: string | undefined;
         email?: string | undefined;
-    } | undefined;
+    } | null | undefined;
     user_did?: string | undefined;
 }, {
     tool: string;
@@ -423,7 +426,7 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
         subject: string;
         name?: string | undefined;
         email?: string | undefined;
-    } | undefined;
+    } | null | undefined;
     user_did?: string | undefined;
 }>;
 export type ConsentApprovalRequest = z.infer<typeof consentApprovalRequestSchema>;
@@ -489,13 +492,13 @@ export declare const consentConfigSchema: z.ZodObject<{
         required: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         required: boolean;
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
-    }, {
-        version?: string | undefined;
         url?: string | undefined;
+        version?: string | undefined;
+    }, {
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
         required?: boolean | undefined;
     }>>;
     customFields: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -516,10 +519,10 @@ export declare const consentConfigSchema: z.ZodObject<{
         }>, "many">>;
         pattern: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -527,10 +530,10 @@ export declare const consentConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -538,10 +541,10 @@ export declare const consentConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }>, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -549,10 +552,10 @@ export declare const consentConfigSchema: z.ZodObject<{
         placeholder?: string | undefined;
         pattern?: string | undefined;
     }, {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -585,15 +588,15 @@ export declare const consentConfigSchema: z.ZodObject<{
     } | undefined;
     terms?: {
         required: boolean;
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -615,16 +618,16 @@ export declare const consentConfigSchema: z.ZodObject<{
         theme?: "light" | "dark" | "auto" | undefined;
     } | undefined;
     terms?: {
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
         required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -650,11 +653,11 @@ export type ConsentConfig = z.infer<typeof consentConfigSchema>;
  * @returns Validation result
  */
 export declare function validateConsentPageConfig(config: unknown): z.SafeParseReturnType<{
-    agentDid: string;
-    sessionId: string;
     tool: string;
     toolDescription: string;
     scopes: string[];
+    agentDid: string;
+    sessionId: string;
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -664,16 +667,16 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
         theme?: "light" | "dark" | "auto" | undefined;
     } | undefined;
     terms?: {
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
         required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -683,11 +686,11 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     }[] | undefined;
     autoClose?: boolean | undefined;
 }, {
-    agentDid: string;
-    sessionId: string;
     tool: string;
     toolDescription: string;
     scopes: string[];
+    agentDid: string;
+    sessionId: string;
     projectId: string;
     serverUrl: string;
     branding?: {
@@ -698,15 +701,15 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     } | undefined;
     terms?: {
         required: boolean;
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -736,7 +739,7 @@ export declare function validateConsentApprovalRequest(request: unknown): z.Safe
         subject: string;
         name?: string | undefined;
         email?: string | undefined;
-    } | undefined;
+    } | null | undefined;
     user_did?: string | undefined;
 }, {
     tool: string;
@@ -752,7 +755,7 @@ export declare function validateConsentApprovalRequest(request: unknown): z.Safe
         subject: string;
         name?: string | undefined;
         email?: string | undefined;
-    } | undefined;
+    } | null | undefined;
     user_did?: string | undefined;
 }>;
 /**
@@ -788,16 +791,16 @@ export declare function validateConsentConfig(config: unknown): z.SafeParseRetur
         theme?: "light" | "dark" | "auto" | undefined;
     } | undefined;
     terms?: {
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
         required?: boolean | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;
@@ -820,15 +823,15 @@ export declare function validateConsentConfig(config: unknown): z.SafeParseRetur
     } | undefined;
     terms?: {
         required: boolean;
-        version?: string | undefined;
-        url?: string | undefined;
         text?: string | undefined;
+        url?: string | undefined;
+        version?: string | undefined;
     } | undefined;
     customFields?: {
-        name: string;
         type: "text" | "textarea" | "checkbox" | "select";
         required: boolean;
         label: string;
+        name: string;
         options?: {
             value: string;
             label: string;