@kya-os/contracts 1.6.10 → 1.6.12

package/dist/agentshield-api/schemas.d.ts

@@ -5942,9 +5942,8 @@ export declare const createDelegationRequestSchema: z.ZodEffects<z.ZodObject<{
  *
  * Canonical format returned by POST /api/v1/bouncer/delegations
  *
- * IMPORTANT: delegation_token is NOT returned by this endpoint.
- * delegation_token is only available via OAuth callback flow (/api/v1/bouncer/oauth/callback)
- * and is passed as a URL parameter, not in the API response body.
+ * As of AgentShield v2.x, delegation_token (JWT) IS returned for stateless verification.
+ * The JWT enables MCP-I servers to verify delegations without database lookups.
  */
 export declare const createDelegationResponseSchema: z.ZodObject<{
     delegation_id: z.ZodString;
@@ -5956,6 +5955,9 @@ export declare const createDelegationResponseSchema: z.ZodObject<{
     issued_at: z.ZodString;
     expires_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     created_at: z.ZodString;
+    delegation_token: z.ZodOptional<z.ZodString>;
+    token_type: z.ZodOptional<z.ZodString>;
+    expires_in: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     status: "active" | "revoked" | "expired";
     scopes: string[];
@@ -5965,7 +5967,10 @@ export declare const createDelegationResponseSchema: z.ZodObject<{
     created_at: string;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    delegation_token?: string | undefined;
     expires_at?: string | null | undefined;
+    token_type?: string | undefined;
+    expires_in?: number | undefined;
 }, {
     status: "active" | "revoked" | "expired";
     scopes: string[];
@@ -5975,7 +5980,10 @@ export declare const createDelegationResponseSchema: z.ZodObject<{
     created_at: string;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    delegation_token?: string | undefined;
     expires_at?: string | null | undefined;
+    token_type?: string | undefined;
+    expires_in?: number | undefined;
 }>;
 /**
  * Wrapped creation response schema
@@ -5992,6 +6000,9 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         issued_at: z.ZodString;
         expires_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         created_at: z.ZodString;
+        delegation_token: z.ZodOptional<z.ZodString>;
+        token_type: z.ZodOptional<z.ZodString>;
+        expires_in: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         status: "active" | "revoked" | "expired";
         scopes: string[];
@@ -6001,7 +6012,10 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     }, {
         status: "active" | "revoked" | "expired";
         scopes: string[];
@@ -6011,7 +6025,10 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     }>;
     metadata: z.ZodOptional<z.ZodObject<{
         requestId: z.ZodString;
@@ -6034,7 +6051,10 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     };
     metadata?: {
         requestId: string;
@@ -6051,7 +6071,10 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     };
     metadata?: {
         requestId: string;
@@ -6179,6 +6202,7 @@ export declare const sessionClientIdentitySchema: z.ZodObject<{
 export declare const registerSessionRequestSchema: z.ZodObject<{
     session_id: z.ZodString;
     agent_did: z.ZodString;
+    agent_name: z.ZodOptional<z.ZodString>;
     project_id: z.ZodString;
     created_at: z.ZodNumber;
     client_info: z.ZodObject<{
@@ -6227,6 +6251,7 @@ export declare const registerSessionRequestSchema: z.ZodObject<{
         vendor?: string | undefined;
     };
     project_id: string;
+    agent_name?: string | undefined;
     client_identity?: {
         did: string;
         source: "knowthat.ai" | "kta-lookup" | "generated";
@@ -6246,6 +6271,7 @@ export declare const registerSessionRequestSchema: z.ZodObject<{
         vendor?: string | undefined;
     };
     project_id: string;
+    agent_name?: string | undefined;
     client_identity?: {
         did: string;
         source: "knowthat.ai" | "kta-lookup" | "generated";

package/dist/agentshield-api/schemas.js

@@ -232,9 +232,8 @@ exports.createDelegationRequestSchema = zod_1.z
  *
  * Canonical format returned by POST /api/v1/bouncer/delegations
  *
- * IMPORTANT: delegation_token is NOT returned by this endpoint.
- * delegation_token is only available via OAuth callback flow (/api/v1/bouncer/oauth/callback)
- * and is passed as a URL parameter, not in the API response body.
+ * As of AgentShield v2.x, delegation_token (JWT) IS returned for stateless verification.
+ * The JWT enables MCP-I servers to verify delegations without database lookups.
  */
 exports.createDelegationResponseSchema = zod_1.z.object({
     delegation_id: zod_1.z.string().uuid(),
@@ -246,6 +245,10 @@ exports.createDelegationResponseSchema = zod_1.z.object({
     issued_at: zod_1.z.string().datetime(),
     expires_at: zod_1.z.string().datetime().nullable().optional(), // AgentShield allows null values
     created_at: zod_1.z.string().datetime(),
+    // JWT for stateless verification (added in AgentShield v2.x)
+    delegation_token: zod_1.z.string().optional(),
+    token_type: zod_1.z.string().optional(), // "Bearer"
+    expires_in: zod_1.z.number().int().positive().optional(), // Seconds until token expiry
 });
 /**
  * Wrapped creation response schema
@@ -296,6 +299,7 @@ exports.sessionClientIdentitySchema = zod_1.z.object({
 exports.registerSessionRequestSchema = zod_1.z.object({
     session_id: zod_1.z.string().min(1, "Session ID is required"),
     agent_did: zod_1.z.string().min(1, "Agent DID is required"),
+    agent_name: zod_1.z.string().optional(), // Human-readable agent name for dashboard display
     project_id: zod_1.z.string().min(1, "Project ID is required"),
     created_at: zod_1.z.number().int().positive("Created at must be a positive timestamp"),
     client_info: exports.sessionClientInfoSchema,

package/dist/agentshield-api/types.d.ts

@@ -293,6 +293,8 @@ export interface RegisterSessionRequest {
     session_id: string;
     /** Agent's DID */
     agent_did: string;
+    /** Human-readable agent name for dashboard display (optional) */
+    agent_name?: string;
     /** AgentShield project ID */
     project_id: string;
     /** Unix timestamp in milliseconds when session was created */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.6.10",
+  "version": "1.6.12",
   "description": "Shared contracts, types, and schemas for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",