@kya-os/contracts 1.5.3-canary.4 → 1.5.3-canary.6

package/dist/agentshield-api/index.d.ts

@@ -6,7 +6,7 @@
  *
  * @package @kya-os/contracts/agentshield-api
  */
-export type { AgentShieldAPIResponse, AgentShieldAPIErrorResponse, ProofSubmissionRequest, ProofSubmissionResponse, ToolCallContext, BouncerOutcome, VerifyDelegationRequest, VerifyDelegationResponse, VerifyDelegationAPIResponse, DelegationCredential, AgentShieldToolProtection, ToolProtectionConfigResponse, ToolProtectionConfigAPIResponse, CreateDelegationRequest, CreateDelegationResponse, CreateDelegationAPIResponse, RevokeDelegationRequest, RevokeDelegationResponse, RevokeDelegationAPIResponse, } from "./types.js";
+export type { AgentShieldAPIResponse, AgentShieldAPIErrorResponse, ProofSubmissionRequest, ProofSubmissionResponse, ToolCallContext, ConsentEventContext, BouncerOutcome, VerifyDelegationRequest, VerifyDelegationResponse, VerifyDelegationAPIResponse, DelegationCredential, AgentShieldToolProtection, ToolProtectionConfigResponse, ToolProtectionConfigAPIResponse, CreateDelegationRequest, CreateDelegationResponse, CreateDelegationAPIResponse, RevokeDelegationRequest, RevokeDelegationResponse, RevokeDelegationAPIResponse, } from "./types.js";
 export { AgentShieldAPIError } from "./types.js";
 export type { AgentShieldAPIHeaders } from "./endpoints.js";
 export type { ClearCacheRequest, ClearCacheResponse } from "./admin-types.js";

package/dist/agentshield-api/schemas.d.ts

@@ -33,11 +33,11 @@ export declare const agentShieldAPIResponseSchema: <T extends z.ZodTypeAny>(data
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }, "strip", z.ZodTypeAny, z.objectUtil.addQuestionMarks<z.baseObjectOutputType<{
     success: z.ZodBoolean;
@@ -46,11 +46,11 @@ export declare const agentShieldAPIResponseSchema: <T extends z.ZodTypeAny>(data
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }>, any> extends infer T_1 ? { [k in keyof T_1]: z.objectUtil.addQuestionMarks<z.baseObjectOutputType<{
     success: z.ZodBoolean;
@@ -59,11 +59,11 @@ export declare const agentShieldAPIResponseSchema: <T extends z.ZodTypeAny>(data
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }>, any>[k]; } : never, z.baseObjectInputType<{
     success: z.ZodBoolean;
@@ -72,11 +72,11 @@ export declare const agentShieldAPIResponseSchema: <T extends z.ZodTypeAny>(data
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }> extends infer T_2 ? { [k_1 in keyof T_2]: z.baseObjectInputType<{
     success: z.ZodBoolean;
@@ -85,11 +85,11 @@ export declare const agentShieldAPIResponseSchema: <T extends z.ZodTypeAny>(data
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }>[k_1]; } : never>;
 /**
@@ -115,57 +115,57 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             did: string;
             kid: string;
+            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
-            ts: number;
             requestHash: string;
             responseHash: string;
-            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
+            clientDid?: string | undefined;
         }, {
             did: string;
             kid: string;
+            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
-            ts: number;
             requestHash: string;
             responseHash: string;
-            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
+            clientDid?: string | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
         jws: string;
         meta: {
             did: string;
             kid: string;
+            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
-            ts: number;
             requestHash: string;
             responseHash: string;
-            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
+            clientDid?: string | undefined;
         };
     }, {
         jws: string;
         meta: {
             did: string;
             kid: string;
+            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
-            ts: number;
             requestHash: string;
             responseHash: string;
-            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
+            clientDid?: string | undefined;
         };
     }>, "many">;
     context: z.ZodOptional<z.ZodObject<{
@@ -188,6 +188,61 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             result?: unknown;
             userIdentifier?: string | undefined;
         }>, "many">>;
+        consentEvents: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            eventType: z.ZodEnum<["consent:page_viewed", "consent:approved", "consent:delegation_created", "consent:credential_required"]>;
+            timestamp: z.ZodNumber;
+            sessionId: z.ZodString;
+            userDid: z.ZodOptional<z.ZodString>;
+            agentDid: z.ZodString;
+            targetTools: z.ZodArray<z.ZodString, "many">;
+            scopes: z.ZodArray<z.ZodString, "many">;
+            delegationId: z.ZodOptional<z.ZodString>;
+            projectId: z.ZodString;
+            termsAccepted: z.ZodOptional<z.ZodBoolean>;
+            credentialStatus: z.ZodOptional<z.ZodEnum<["present", "required", "obtained"]>>;
+            oauthIdentity: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                identifier: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                provider: string;
+                identifier: string;
+            }, {
+                provider: string;
+                identifier: string;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            sessionId: string;
+            scopes: string[];
+            timestamp: number;
+            eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+            agentDid: string;
+            targetTools: string[];
+            projectId: string;
+            userDid?: string | undefined;
+            delegationId?: string | undefined;
+            termsAccepted?: boolean | undefined;
+            credentialStatus?: "present" | "required" | "obtained" | undefined;
+            oauthIdentity?: {
+                provider: string;
+                identifier: string;
+            } | undefined;
+        }, {
+            sessionId: string;
+            scopes: string[];
+            timestamp: number;
+            eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+            agentDid: string;
+            targetTools: string[];
+            projectId: string;
+            userDid?: string | undefined;
+            delegationId?: string | undefined;
+            termsAccepted?: boolean | undefined;
+            credentialStatus?: "present" | "required" | "obtained" | undefined;
+            oauthIdentity?: {
+                provider: string;
+                identifier: string;
+            } | undefined;
+        }>, "many">>;
         mcpServerUrl: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         toolCalls?: {
@@ -197,6 +252,23 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             result?: unknown;
             userIdentifier?: string | undefined;
         }[] | undefined;
+        consentEvents?: {
+            sessionId: string;
+            scopes: string[];
+            timestamp: number;
+            eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+            agentDid: string;
+            targetTools: string[];
+            projectId: string;
+            userDid?: string | undefined;
+            delegationId?: string | undefined;
+            termsAccepted?: boolean | undefined;
+            credentialStatus?: "present" | "required" | "obtained" | undefined;
+            oauthIdentity?: {
+                provider: string;
+                identifier: string;
+            } | undefined;
+        }[] | undefined;
         mcpServerUrl?: string | undefined;
     }, {
         toolCalls?: {
@@ -206,6 +278,23 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             result?: unknown;
             userIdentifier?: string | undefined;
         }[] | undefined;
+        consentEvents?: {
+            sessionId: string;
+            scopes: string[];
+            timestamp: number;
+            eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+            agentDid: string;
+            targetTools: string[];
+            projectId: string;
+            userDid?: string | undefined;
+            delegationId?: string | undefined;
+            termsAccepted?: boolean | undefined;
+            credentialStatus?: "present" | "required" | "obtained" | undefined;
+            oauthIdentity?: {
+                provider: string;
+                identifier: string;
+            } | undefined;
+        }[] | undefined;
         mcpServerUrl?: string | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
@@ -215,15 +304,15 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
         meta: {
             did: string;
             kid: string;
+            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
-            ts: number;
             requestHash: string;
             responseHash: string;
-            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
+            clientDid?: string | undefined;
         };
     }[];
     delegation_id?: string | null | undefined;
@@ -235,6 +324,23 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             result?: unknown;
             userIdentifier?: string | undefined;
         }[] | undefined;
+        consentEvents?: {
+            sessionId: string;
+            scopes: string[];
+            timestamp: number;
+            eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+            agentDid: string;
+            targetTools: string[];
+            projectId: string;
+            userDid?: string | undefined;
+            delegationId?: string | undefined;
+            termsAccepted?: boolean | undefined;
+            credentialStatus?: "present" | "required" | "obtained" | undefined;
+            oauthIdentity?: {
+                provider: string;
+                identifier: string;
+            } | undefined;
+        }[] | undefined;
         mcpServerUrl?: string | undefined;
     } | undefined;
 }, {
@@ -244,15 +350,15 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
         meta: {
             did: string;
             kid: string;
+            ts: number;
             nonce: string;
             audience: string;
             sessionId: string;
-            ts: number;
             requestHash: string;
             responseHash: string;
-            clientDid?: string | undefined;
             scopeId?: string | undefined;
             delegationRef?: string | undefined;
+            clientDid?: string | undefined;
         };
     }[];
     delegation_id?: string | null | undefined;
@@ -264,6 +370,23 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             result?: unknown;
             userIdentifier?: string | undefined;
         }[] | undefined;
+        consentEvents?: {
+            sessionId: string;
+            scopes: string[];
+            timestamp: number;
+            eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+            agentDid: string;
+            targetTools: string[];
+            projectId: string;
+            userDid?: string | undefined;
+            delegationId?: string | undefined;
+            termsAccepted?: boolean | undefined;
+            credentialStatus?: "present" | "required" | "obtained" | undefined;
+            oauthIdentity?: {
+                provider: string;
+                identifier: string;
+            } | undefined;
+        }[] | undefined;
         mcpServerUrl?: string | undefined;
     } | undefined;
 }>;
@@ -364,8 +487,8 @@ export declare const delegationCredentialSchema: z.ZodObject<{
  * Delegation verification request schema
  */
 export declare const verifyDelegationRequestSchema: z.ZodObject<{
-    timestamp: z.ZodOptional<z.ZodNumber>;
     scopes: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    timestamp: z.ZodOptional<z.ZodNumber>;
     agent_did: z.ZodString;
     credential_jwt: z.ZodOptional<z.ZodString>;
     delegation_token: z.ZodOptional<z.ZodString>;
@@ -384,8 +507,8 @@ export declare const verifyDelegationRequestSchema: z.ZodObject<{
     }>>;
 }, "strip", z.ZodTypeAny, {
     agent_did: string;
-    timestamp?: number | undefined;
     scopes?: string[] | undefined;
+    timestamp?: number | undefined;
     credential_jwt?: string | undefined;
     delegation_token?: string | undefined;
     client_info?: {
@@ -395,8 +518,8 @@ export declare const verifyDelegationRequestSchema: z.ZodObject<{
     } | undefined;
 }, {
     agent_did: string;
-    timestamp?: number | undefined;
     scopes?: string[] | undefined;
+    timestamp?: number | undefined;
     credential_jwt?: string | undefined;
     delegation_token?: string | undefined;
     client_info?: {
@@ -1689,7 +1812,6 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         details?: Record<string, unknown> | undefined;
     } | undefined;
     delegation_id?: string | undefined;
-    reason?: string | undefined;
     delegation?: z.objectOutputType<{
         id: z.ZodString;
         issuerDid: z.ZodString;
@@ -2110,6 +2232,7 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         user_id?: string | undefined;
         user_identifier?: string | undefined;
     } | undefined;
+    reason?: string | undefined;
 }, {
     valid: boolean;
     error?: {
@@ -2118,7 +2241,6 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         details?: Record<string, unknown> | undefined;
     } | undefined;
     delegation_id?: string | undefined;
-    reason?: string | undefined;
     delegation?: z.objectInputType<{
         id: z.ZodString;
         issuerDid: z.ZodString;
@@ -2539,6 +2661,7 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         user_id?: string | undefined;
         user_identifier?: string | undefined;
     } | undefined;
+    reason?: string | undefined;
 }>;
 /**
  * Wrapped verification response schema
@@ -3826,7 +3949,6 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             details?: Record<string, unknown> | undefined;
         } | undefined;
         delegation_id?: string | undefined;
-        reason?: string | undefined;
         delegation?: z.objectOutputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -4247,6 +4369,7 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             user_id?: string | undefined;
             user_identifier?: string | undefined;
         } | undefined;
+        reason?: string | undefined;
     }, {
         valid: boolean;
         error?: {
@@ -4255,7 +4378,6 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             details?: Record<string, unknown> | undefined;
         } | undefined;
         delegation_id?: string | undefined;
-        reason?: string | undefined;
         delegation?: z.objectInputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -4676,16 +4798,17 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             user_id?: string | undefined;
             user_identifier?: string | undefined;
         } | undefined;
+        reason?: string | undefined;
     }>;
     metadata: z.ZodOptional<z.ZodObject<{
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
     success: boolean;
@@ -4697,7 +4820,6 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             details?: Record<string, unknown> | undefined;
         } | undefined;
         delegation_id?: string | undefined;
-        reason?: string | undefined;
         delegation?: z.objectOutputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -5118,10 +5240,11 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             user_id?: string | undefined;
             user_identifier?: string | undefined;
         } | undefined;
+        reason?: string | undefined;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }, {
     success: boolean;
@@ -5133,7 +5256,6 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             details?: Record<string, unknown> | undefined;
         } | undefined;
         delegation_id?: string | undefined;
-        reason?: string | undefined;
         delegation?: z.objectInputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -5554,10 +5676,11 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             user_id?: string | undefined;
             user_identifier?: string | undefined;
         } | undefined;
+        reason?: string | undefined;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }>;
 /**
@@ -5730,11 +5853,11 @@ export declare const toolProtectionConfigAPIResponseSchema: z.ZodObject<{
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
     success: boolean;
@@ -5756,8 +5879,8 @@ export declare const toolProtectionConfigAPIResponseSchema: z.ZodObject<{
         } | undefined;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }, {
     success: boolean;
@@ -5779,8 +5902,8 @@ export declare const toolProtectionConfigAPIResponseSchema: z.ZodObject<{
         } | undefined;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }>;
 /**
@@ -5853,8 +5976,8 @@ export declare const createDelegationResponseSchema: z.ZodObject<{
     created_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     status: "active";
-    delegation_id: string;
     scopes: string[];
+    delegation_id: string;
     agent_did: string;
     issued_at: string;
     created_at: string;
@@ -5863,8 +5986,8 @@ export declare const createDelegationResponseSchema: z.ZodObject<{
     expires_at?: string | undefined;
 }, {
     status: "active";
-    delegation_id: string;
     scopes: string[];
+    delegation_id: string;
     agent_did: string;
     issued_at: string;
     created_at: string;
@@ -5889,8 +6012,8 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         created_at: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         status: "active";
-        delegation_id: string;
         scopes: string[];
+        delegation_id: string;
         agent_did: string;
         issued_at: string;
         created_at: string;
@@ -5899,8 +6022,8 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         expires_at?: string | undefined;
     }, {
         status: "active";
-        delegation_id: string;
         scopes: string[];
+        delegation_id: string;
         agent_did: string;
         issued_at: string;
         created_at: string;
@@ -5912,18 +6035,18 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
     success: boolean;
     data: {
         status: "active";
-        delegation_id: string;
         scopes: string[];
+        delegation_id: string;
         agent_did: string;
         issued_at: string;
         created_at: string;
@@ -5932,15 +6055,15 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         expires_at?: string | undefined;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }, {
     success: boolean;
     data: {
         status: "active";
-        delegation_id: string;
         scopes: string[];
+        delegation_id: string;
         agent_did: string;
         issued_at: string;
         created_at: string;
@@ -5949,8 +6072,8 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         expires_at?: string | undefined;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }>;
 /**
@@ -5971,12 +6094,12 @@ export declare const revokeDelegationResponseSchema: z.ZodObject<{
     revoked: z.ZodBoolean;
     revoked_at: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
-    delegation_id: string;
     revoked: boolean;
+    delegation_id: string;
     revoked_at: number;
 }, {
-    delegation_id: string;
     revoked: boolean;
+    delegation_id: string;
     revoked_at: number;
 }>;
 /**
@@ -5989,44 +6112,44 @@ export declare const revokeDelegationAPIResponseSchema: z.ZodObject<{
         revoked: z.ZodBoolean;
         revoked_at: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
-        delegation_id: string;
         revoked: boolean;
+        delegation_id: string;
         revoked_at: number;
     }, {
-        delegation_id: string;
         revoked: boolean;
+        delegation_id: string;
         revoked_at: number;
     }>;
     metadata: z.ZodOptional<z.ZodObject<{
         requestId: z.ZodString;
         timestamp: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        timestamp: string;
         requestId: string;
-    }, {
         timestamp: string;
+    }, {
         requestId: string;
+        timestamp: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
     success: boolean;
     data: {
-        delegation_id: string;
         revoked: boolean;
+        delegation_id: string;
         revoked_at: number;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }, {
     success: boolean;
     data: {
-        delegation_id: string;
         revoked: boolean;
+        delegation_id: string;
         revoked_at: number;
     };
     metadata?: {
-        timestamp: string;
         requestId: string;
+        timestamp: string;
     } | undefined;
 }>;

package/dist/agentshield-api/schemas.js

@@ -48,6 +48,32 @@ const toolCallContextSchema = zod_1.z.object({
     scopeId: zod_1.z.string().min(1, "scopeId is required to link context to proof"),
     userIdentifier: zod_1.z.string().optional(),
 });
+/**
+ * Consent Event Context Schema
+ * Represents consent-related events for audit tracking
+ */
+const consentEventContextSchema = zod_1.z.object({
+    eventType: zod_1.z.enum([
+        "consent:page_viewed",
+        "consent:approved",
+        "consent:delegation_created",
+        "consent:credential_required"
+    ]),
+    timestamp: zod_1.z.number().int().positive(),
+    sessionId: zod_1.z.string().min(1),
+    userDid: zod_1.z.string().optional(),
+    agentDid: zod_1.z.string().min(1),
+    targetTools: zod_1.z.array(zod_1.z.string()).min(1), // ALWAYS array
+    scopes: zod_1.z.array(zod_1.z.string()).min(0),
+    delegationId: zod_1.z.string().uuid().optional(),
+    projectId: zod_1.z.string().uuid(),
+    termsAccepted: zod_1.z.boolean().optional(),
+    credentialStatus: zod_1.z.enum(["present", "required", "obtained"]).optional(),
+    oauthIdentity: zod_1.z.object({
+        provider: zod_1.z.string(),
+        identifier: zod_1.z.string(),
+    }).optional(),
+});
 /**
  * Proof submission request schema
  */
@@ -59,6 +85,7 @@ exports.proofSubmissionRequestSchema = zod_1.z.object({
     context: zod_1.z
         .object({
         toolCalls: zod_1.z.array(toolCallContextSchema).optional(),
+        consentEvents: zod_1.z.array(consentEventContextSchema).optional(), // NEW: Consent events for audit tracking
         mcpServerUrl: zod_1.z.string().url().optional(), // MCP server URL for tool discovery
     })
         .optional(),

package/dist/agentshield-api/types.d.ts

@@ -41,6 +41,30 @@ export interface ToolCallContext {
     scopeId: string;
     userIdentifier?: string;
 }
+/**
+ * Consent Event Context
+ *
+ * Represents consent-related events that occur during the consent flow.
+ * These events are logged separately from tool executions and allow
+ * multiple events per session (unlike regular audit logs).
+ */
+export interface ConsentEventContext {
+    eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
+    timestamp: number;
+    sessionId: string;
+    userDid?: string;
+    agentDid: string;
+    targetTools: string[];
+    scopes: string[];
+    delegationId?: string;
+    projectId: string;
+    termsAccepted?: boolean;
+    credentialStatus?: "present" | "required" | "obtained";
+    oauthIdentity?: {
+        provider: string;
+        identifier: string;
+    };
+}
 /**
  * Request body for proof submission endpoint
  * POST /api/v1/bouncer/proofs
@@ -55,6 +79,7 @@ export interface ProofSubmissionRequest {
     /** AgentShield extension: Optional context for dashboard enrichment */
     context?: {
         toolCalls?: ToolCallContext[];
+        consentEvents?: ConsentEventContext[];
         mcpServerUrl?: string;
     };
 }

package/dist/consent/schemas.d.ts

@@ -6,7 +6,7 @@
  *
  * Related Spec: MCP-I Phase 0 Implementation Plan
  */
-import { z } from 'zod';
+import { z } from "zod";
 /**
  * Consent Branding Schema
  */

package/dist/consent/schemas.js

@@ -20,58 +20,79 @@ const zod_1 = require("zod");
 exports.consentBrandingSchema = zod_1.z.object({
     primaryColor: zod_1.z
         .string()
-        .regex(/^#[0-9A-Fa-f]{6}$/, 'Must be a valid hex color (e.g., #0066CC)')
+        .regex(/^#[0-9A-Fa-f]{6}$/, "Must be a valid hex color (e.g., #0066CC)")
         .optional(),
-    logoUrl: zod_1.z.string().url('Must be a valid URL').optional(),
-    companyName: zod_1.z.string().max(100, 'Company name must be 100 characters or less').optional(),
-    theme: zod_1.z.enum(['light', 'dark', 'auto']).optional(),
+    logoUrl: zod_1.z.string().url("Must be a valid URL").optional(),
+    companyName: zod_1.z
+        .string()
+        .max(100, "Company name must be 100 characters or less")
+        .optional(),
+    theme: zod_1.z.enum(["light", "dark", "auto"]).optional(),
 });
 /**
  * Consent Terms Schema
  */
 exports.consentTermsSchema = zod_1.z.object({
-    text: zod_1.z.string().max(10000, 'Terms text must be 10000 characters or less').optional(),
-    url: zod_1.z.string().url('Must be a valid URL').optional(),
-    version: zod_1.z.string().max(50, 'Version must be 50 characters or less').optional(),
+    text: zod_1.z
+        .string()
+        .max(10000, "Terms text must be 10000 characters or less")
+        .optional(),
+    url: zod_1.z.string().url("Must be a valid URL").optional(),
+    version: zod_1.z
+        .string()
+        .max(50, "Version must be 50 characters or less")
+        .optional(),
     required: zod_1.z.boolean().default(true),
 });
 /**
  * Consent Custom Field Option Schema
  */
 exports.consentCustomFieldOptionSchema = zod_1.z.object({
-    value: zod_1.z.string().max(100, 'Option value must be 100 characters or less'),
-    label: zod_1.z.string().max(100, 'Option label must be 100 characters or less'),
+    value: zod_1.z.string().max(100, "Option value must be 100 characters or less"),
+    label: zod_1.z.string().max(100, "Option label must be 100 characters or less"),
 });
 /**
  * Consent Custom Field Schema
  */
-exports.consentCustomFieldSchema = zod_1.z.object({
+exports.consentCustomFieldSchema = zod_1.z
+    .object({
     name: zod_1.z
         .string()
-        .min(1, 'Field name is required')
-        .max(50, 'Field name must be 50 characters or less')
-        .regex(/^[a-zA-Z0-9_]+$/, 'Field name must contain only letters, numbers, and underscores'),
-    label: zod_1.z.string().min(1, 'Field label is required').max(100, 'Field label must be 100 characters or less'),
-    type: zod_1.z.enum(['text', 'textarea', 'checkbox', 'select']),
+        .min(1, "Field name is required")
+        .max(50, "Field name must be 50 characters or less")
+        .regex(/^[a-zA-Z0-9_]+$/, "Field name must contain only letters, numbers, and underscores"),
+    label: zod_1.z
+        .string()
+        .min(1, "Field label is required")
+        .max(100, "Field label must be 100 characters or less"),
+    type: zod_1.z.enum(["text", "textarea", "checkbox", "select"]),
     required: zod_1.z.boolean(),
-    placeholder: zod_1.z.string().max(200, 'Placeholder must be 200 characters or less').optional(),
+    placeholder: zod_1.z
+        .string()
+        .max(200, "Placeholder must be 200 characters or less")
+        .optional(),
     options: zod_1.z
         .array(exports.consentCustomFieldOptionSchema)
-        .min(1, 'Select fields must have at least one option')
+        .min(1, "Select fields must have at least one option")
+        .optional(),
+    pattern: zod_1.z
+        .string()
+        .max(500, "Pattern must be 500 characters or less")
         .optional(),
-    pattern: zod_1.z.string().max(500, 'Pattern must be 500 characters or less').optional(),
-}).refine((data) => {
+})
+    .refine((data) => {
     // Select fields must have options
-    if (data.type === 'select' && (!data.options || data.options.length === 0)) {
+    if (data.type === "select" &&
+        (!data.options || data.options.length === 0)) {
         return false;
     }
     // Non-select fields should not have options
-    if (data.type !== 'select' && data.options) {
+    if (data.type !== "select" && data.options) {
         return false;
     }
     return true;
 }, {
-    message: 'Select fields must have options, and non-select fields must not have options',
+    message: "Select fields must have options, and non-select fields must not have options",
 });
 /**
  * OAuth Identity Schema
@@ -83,47 +104,50 @@ exports.oauthIdentitySchema = zod_1.z.object({
     /**
      * OAuth provider name (e.g., "google", "github", "microsoft")
      */
-    provider: zod_1.z.string()
-        .min(1, 'Provider is required')
-        .max(50, 'Provider name must be 50 characters or less'),
+    provider: zod_1.z
+        .string()
+        .min(1, "Provider is required")
+        .max(50, "Provider name must be 50 characters or less"),
     /**
      * OAuth subject identifier (unique user ID from provider)
      * @example "123456789" (Google), "github-user-id" (GitHub)
      */
-    subject: zod_1.z.string()
-        .min(1, 'Subject is required')
-        .max(255, 'Subject must be 255 characters or less'),
+    subject: zod_1.z
+        .string()
+        .min(1, "Subject is required")
+        .max(255, "Subject must be 255 characters or less"),
     /**
      * User's email address from OAuth provider (optional)
      */
-    email: zod_1.z.string()
-        .email('Must be a valid email address')
-        .max(255, 'Email must be 255 characters or less')
+    email: zod_1.z
+        .string()
+        .email("Must be a valid email address")
+        .max(255, "Email must be 255 characters or less")
         .optional(),
     /**
      * User's display name from OAuth provider (optional)
      */
-    name: zod_1.z.string()
-        .max(255, 'Name must be 255 characters or less')
-        .optional(),
+    name: zod_1.z.string().max(255, "Name must be 255 characters or less").optional(),
 });
 /**
  * Consent Page Config Schema
  */
 exports.consentPageConfigSchema = zod_1.z.object({
-    tool: zod_1.z.string().min(1, 'Tool name is required'),
-    toolDescription: zod_1.z.string().max(500, 'Tool description must be 500 characters or less'),
-    scopes: zod_1.z.array(zod_1.z.string()).min(0, 'Scopes array cannot be negative'),
-    agentDid: zod_1.z.string().min(1, 'Agent DID is required'),
-    sessionId: zod_1.z.string().min(1, 'Session ID is required'),
-    projectId: zod_1.z.string().min(1, 'Project ID is required'),
+    tool: zod_1.z.string().min(1, "Tool name is required"),
+    toolDescription: zod_1.z
+        .string()
+        .max(500, "Tool description must be 500 characters or less"),
+    scopes: zod_1.z.array(zod_1.z.string()).min(0, "Scopes array cannot be negative"),
+    agentDid: zod_1.z.string().min(1, "Agent DID is required"),
+    sessionId: zod_1.z.string().min(1, "Session ID is required"),
+    projectId: zod_1.z.string().min(1, "Project ID is required"),
     branding: exports.consentBrandingSchema.optional(),
     terms: exports.consentTermsSchema.optional(),
     customFields: zod_1.z
         .array(exports.consentCustomFieldSchema)
-        .max(10, 'Maximum 10 custom fields allowed')
+        .max(10, "Maximum 10 custom fields allowed")
         .optional(),
-    serverUrl: zod_1.z.string().url('Server URL must be a valid URL'),
+    serverUrl: zod_1.z.string().url("Server URL must be a valid URL"),
     autoClose: zod_1.z.boolean().optional(),
 });
 /**
@@ -136,18 +160,17 @@ exports.consentPageConfigSchema = zod_1.z.object({
  * - user_did: Optional User DID for persistent identity (if already known)
  */
 exports.consentApprovalRequestSchema = zod_1.z.object({
-    tool: zod_1.z.string().min(1, 'Tool name is required'),
-    scopes: zod_1.z.array(zod_1.z.string()).min(0, 'Scopes array cannot be negative'),
-    agent_did: zod_1.z.string().min(1, 'Agent DID is required'),
-    session_id: zod_1.z.string().min(1, 'Session ID is required'),
-    project_id: zod_1.z.string().min(1, 'Project ID is required'),
+    tool: zod_1.z.string().min(1, "Tool name is required"),
+    scopes: zod_1.z.array(zod_1.z.string()).min(0, "Scopes array cannot be negative"),
+    agent_did: zod_1.z.string().min(1, "Agent DID is required"),
+    session_id: zod_1.z.string().min(1, "Session ID is required"),
+    project_id: zod_1.z.string().min(1, "Project ID is required"),
     termsAccepted: zod_1.z.boolean(),
-    termsVersion: zod_1.z.string()
-        .max(50, 'Terms version must be 50 characters or less')
-        .optional(),
-    customFields: zod_1.z
-        .record(zod_1.z.union([zod_1.z.string(), zod_1.z.boolean()]))
+    termsVersion: zod_1.z
+        .string()
+        .max(50, "Terms version must be 50 characters or less")
         .optional(),
+    customFields: zod_1.z.record(zod_1.z.union([zod_1.z.string(), zod_1.z.boolean()])).optional(),
     // Phase 4: OAuth identity linking
     /**
      * OAuth provider identity information (optional)
@@ -162,21 +185,24 @@ exports.consentApprovalRequestSchema = zod_1.z.object({
      * If provided, represents the persistent User DID for this user
      * Format: did:key:... or did:web:...
      */
-    user_did: zod_1.z.string()
-        .regex(/^did:/, 'Must be a valid DID format (starting with did:)')
-        .max(500, 'DID must be 500 characters or less')
+    user_did: zod_1.z
+        .string()
+        .regex(/^did:/, "Must be a valid DID format (starting with did:)")
+        .max(500, "DID must be 500 characters or less")
         .optional(),
 });
 /**
  * Consent Approval Response Schema
  */
-exports.consentApprovalResponseSchema = zod_1.z.object({
+exports.consentApprovalResponseSchema = zod_1.z
+    .object({
     success: zod_1.z.boolean(),
     delegation_id: zod_1.z.string().min(1).optional(),
     delegation_token: zod_1.z.string().min(1).optional(),
     error: zod_1.z.string().optional(),
     error_code: zod_1.z.string().optional(),
-}).refine((data) => {
+})
+    .refine((data) => {
     // If success is true, must have delegation_id and delegation_token
     if (data.success) {
         return !!data.delegation_id && !!data.delegation_token;
@@ -184,7 +210,7 @@ exports.consentApprovalResponseSchema = zod_1.z.object({
     // If success is false, must have error or error_code
     return !!data.error || !!data.error_code;
 }, {
-    message: 'Successful responses must include delegation_id and delegation_token. Failed responses must include error or error_code',
+    message: "Successful responses must include delegation_id and delegation_token. Failed responses must include error or error_code",
 });
 /**
  * Consent Config Schema
@@ -194,14 +220,21 @@ exports.consentConfigSchema = zod_1.z.object({
     terms: exports.consentTermsSchema.optional(),
     customFields: zod_1.z
         .array(exports.consentCustomFieldSchema)
-        .max(10, 'Maximum 10 custom fields allowed')
+        .max(10, "Maximum 10 custom fields allowed")
         .optional(),
-    ui: zod_1.z.object({
-        theme: zod_1.z.enum(['light', 'dark', 'auto']).optional(),
+    ui: zod_1.z
+        .object({
+        theme: zod_1.z.enum(["light", "dark", "auto"]).optional(),
         popupEnabled: zod_1.z.boolean().optional(),
         autoClose: zod_1.z.boolean().optional(),
-        autoCloseDelay: zod_1.z.number().int().positive().max(60000, 'Auto-close delay must be 60000ms or less').optional(),
-    }).optional(),
+        autoCloseDelay: zod_1.z
+            .number()
+            .int()
+            .positive()
+            .max(60000, "Auto-close delay must be 60000ms or less")
+            .optional(),
+    })
+        .optional(),
 });
 /**
  * Validation Helpers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.5.3-canary.4",
+  "version": "1.5.3-canary.6",
   "description": "Shared types and schemas for XMCP-I ecosystem",
   "type": "commonjs",
   "sideEffects": false,