@kya-os/contracts 1.6.12 → 1.6.14

package/dist/agentshield-api/schemas.d.ts

@@ -434,28 +434,57 @@ export declare const proofSubmissionResponseSchema: z.ZodObject<{
  */
 export declare const delegationCredentialSchema: z.ZodObject<{
     agent_did: z.ZodString;
+    user_did: z.ZodString;
     user_id: z.ZodOptional<z.ZodString>;
     user_identifier: z.ZodOptional<z.ZodString>;
     scopes: z.ZodArray<z.ZodString, "many">;
     constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     issued_at: z.ZodNumber;
     created_at: z.ZodNumber;
+    credential_jwt: z.ZodOptional<z.ZodString>;
+    authorization: z.ZodObject<{
+        type: z.ZodEnum<["oauth", "credential", "none"]>;
+        provider: z.ZodOptional<z.ZodString>;
+        credentialType: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "oauth" | "credential" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+    }, {
+        type: "oauth" | "credential" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+    }>;
 }, "strip", z.ZodTypeAny, {
     scopes: string[];
     agent_did: string;
+    user_did: string;
     issued_at: number;
     created_at: number;
+    authorization: {
+        type: "oauth" | "credential" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+    };
     constraints?: Record<string, unknown> | undefined;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    credential_jwt?: string | undefined;
 }, {
     scopes: string[];
     agent_did: string;
+    user_did: string;
     issued_at: number;
     created_at: number;
+    authorization: {
+        type: "oauth" | "credential" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+    };
     constraints?: Record<string, unknown> | undefined;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    credential_jwt?: string | undefined;
 }>;
 /**
  * Delegation verification request schema
@@ -1744,28 +1773,57 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
     delegation_id: z.ZodOptional<z.ZodString>;
     credential: z.ZodOptional<z.ZodObject<{
         agent_did: z.ZodString;
+        user_did: z.ZodString;
         user_id: z.ZodOptional<z.ZodString>;
         user_identifier: z.ZodOptional<z.ZodString>;
         scopes: z.ZodArray<z.ZodString, "many">;
         constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         issued_at: z.ZodNumber;
         created_at: z.ZodNumber;
+        credential_jwt: z.ZodOptional<z.ZodString>;
+        authorization: z.ZodObject<{
+            type: z.ZodEnum<["oauth", "credential", "none"]>;
+            provider: z.ZodOptional<z.ZodString>;
+            credentialType: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            type: "oauth" | "credential" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+        }, {
+            type: "oauth" | "credential" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+        }>;
     }, "strip", z.ZodTypeAny, {
         scopes: string[];
         agent_did: string;
+        user_did: string;
         issued_at: number;
         created_at: number;
+        authorization: {
+            type: "oauth" | "credential" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+        };
         constraints?: Record<string, unknown> | undefined;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        credential_jwt?: string | undefined;
     }, {
         scopes: string[];
         agent_did: string;
+        user_did: string;
         issued_at: number;
         created_at: number;
+        authorization: {
+            type: "oauth" | "credential" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+        };
         constraints?: Record<string, unknown> | undefined;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        credential_jwt?: string | undefined;
     }>>;
     error: z.ZodOptional<z.ZodObject<{
         code: z.ZodString;
@@ -1788,6 +1846,22 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         message: string;
         details?: Record<string, unknown> | undefined;
     } | undefined;
+    credential?: {
+        scopes: string[];
+        agent_did: string;
+        user_did: string;
+        issued_at: number;
+        created_at: number;
+        authorization: {
+            type: "oauth" | "credential" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+        };
+        constraints?: Record<string, unknown> | undefined;
+        user_id?: string | undefined;
+        user_identifier?: string | undefined;
+        credential_jwt?: string | undefined;
+    } | undefined;
     delegation_id?: string | undefined;
     delegation?: z.objectOutputType<{
         id: z.ZodString;
@@ -2200,22 +2274,29 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         revokedReason: z.ZodOptional<z.ZodString>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
+    reason?: string | undefined;
+}, {
+    valid: boolean;
+    error?: {
+        code: string;
+        message: string;
+        details?: Record<string, unknown> | undefined;
+    } | undefined;
     credential?: {
         scopes: string[];
         agent_did: string;
+        user_did: string;
         issued_at: number;
         created_at: number;
+        authorization: {
+            type: "oauth" | "credential" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+        };
         constraints?: Record<string, unknown> | undefined;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
-    } | undefined;
-    reason?: string | undefined;
-}, {
-    valid: boolean;
-    error?: {
-        code: string;
-        message: string;
-        details?: Record<string, unknown> | undefined;
+        credential_jwt?: string | undefined;
     } | undefined;
     delegation_id?: string | undefined;
     delegation?: z.objectInputType<{
@@ -2629,15 +2710,6 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         revokedReason: z.ZodOptional<z.ZodString>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
-    credential?: {
-        scopes: string[];
-        agent_did: string;
-        issued_at: number;
-        created_at: number;
-        constraints?: Record<string, unknown> | undefined;
-        user_id?: string | undefined;
-        user_identifier?: string | undefined;
-    } | undefined;
     reason?: string | undefined;
 }>;
 /**
@@ -3881,28 +3953,57 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
         delegation_id: z.ZodOptional<z.ZodString>;
         credential: z.ZodOptional<z.ZodObject<{
             agent_did: z.ZodString;
+            user_did: z.ZodString;
             user_id: z.ZodOptional<z.ZodString>;
             user_identifier: z.ZodOptional<z.ZodString>;
             scopes: z.ZodArray<z.ZodString, "many">;
             constraints: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             issued_at: z.ZodNumber;
             created_at: z.ZodNumber;
+            credential_jwt: z.ZodOptional<z.ZodString>;
+            authorization: z.ZodObject<{
+                type: z.ZodEnum<["oauth", "credential", "none"]>;
+                provider: z.ZodOptional<z.ZodString>;
+                credentialType: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            }, {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            }>;
         }, "strip", z.ZodTypeAny, {
             scopes: string[];
             agent_did: string;
+            user_did: string;
             issued_at: number;
             created_at: number;
+            authorization: {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            };
             constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            credential_jwt?: string | undefined;
         }, {
             scopes: string[];
             agent_did: string;
+            user_did: string;
             issued_at: number;
             created_at: number;
+            authorization: {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            };
             constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            credential_jwt?: string | undefined;
         }>>;
         error: z.ZodOptional<z.ZodObject<{
             code: z.ZodString;
@@ -3925,6 +4026,22 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             message: string;
             details?: Record<string, unknown> | undefined;
         } | undefined;
+        credential?: {
+            scopes: string[];
+            agent_did: string;
+            user_did: string;
+            issued_at: number;
+            created_at: number;
+            authorization: {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            };
+            constraints?: Record<string, unknown> | undefined;
+            user_id?: string | undefined;
+            user_identifier?: string | undefined;
+            credential_jwt?: string | undefined;
+        } | undefined;
         delegation_id?: string | undefined;
         delegation?: z.objectOutputType<{
             id: z.ZodString;
@@ -4337,22 +4454,29 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             revokedReason: z.ZodOptional<z.ZodString>;
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
+        reason?: string | undefined;
+    }, {
+        valid: boolean;
+        error?: {
+            code: string;
+            message: string;
+            details?: Record<string, unknown> | undefined;
+        } | undefined;
         credential?: {
             scopes: string[];
             agent_did: string;
+            user_did: string;
             issued_at: number;
             created_at: number;
+            authorization: {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            };
             constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
-        } | undefined;
-        reason?: string | undefined;
-    }, {
-        valid: boolean;
-        error?: {
-            code: string;
-            message: string;
-            details?: Record<string, unknown> | undefined;
+            credential_jwt?: string | undefined;
         } | undefined;
         delegation_id?: string | undefined;
         delegation?: z.objectInputType<{
@@ -4766,15 +4890,6 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             revokedReason: z.ZodOptional<z.ZodString>;
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
-        credential?: {
-            scopes: string[];
-            agent_did: string;
-            issued_at: number;
-            created_at: number;
-            constraints?: Record<string, unknown> | undefined;
-            user_id?: string | undefined;
-            user_identifier?: string | undefined;
-        } | undefined;
         reason?: string | undefined;
     }>;
     metadata: z.ZodOptional<z.ZodObject<{
@@ -4796,6 +4911,22 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             message: string;
             details?: Record<string, unknown> | undefined;
         } | undefined;
+        credential?: {
+            scopes: string[];
+            agent_did: string;
+            user_did: string;
+            issued_at: number;
+            created_at: number;
+            authorization: {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            };
+            constraints?: Record<string, unknown> | undefined;
+            user_id?: string | undefined;
+            user_identifier?: string | undefined;
+            credential_jwt?: string | undefined;
+        } | undefined;
         delegation_id?: string | undefined;
         delegation?: z.objectOutputType<{
             id: z.ZodString;
@@ -5208,15 +5339,6 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             revokedReason: z.ZodOptional<z.ZodString>;
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
-        credential?: {
-            scopes: string[];
-            agent_did: string;
-            issued_at: number;
-            created_at: number;
-            constraints?: Record<string, unknown> | undefined;
-            user_id?: string | undefined;
-            user_identifier?: string | undefined;
-        } | undefined;
         reason?: string | undefined;
     };
     metadata?: {
@@ -5232,6 +5354,22 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             message: string;
             details?: Record<string, unknown> | undefined;
         } | undefined;
+        credential?: {
+            scopes: string[];
+            agent_did: string;
+            user_did: string;
+            issued_at: number;
+            created_at: number;
+            authorization: {
+                type: "oauth" | "credential" | "none";
+                provider?: string | undefined;
+                credentialType?: string | undefined;
+            };
+            constraints?: Record<string, unknown> | undefined;
+            user_id?: string | undefined;
+            user_identifier?: string | undefined;
+            credential_jwt?: string | undefined;
+        } | undefined;
         delegation_id?: string | undefined;
         delegation?: z.objectInputType<{
             id: z.ZodString;
@@ -5644,15 +5782,6 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             revokedReason: z.ZodOptional<z.ZodString>;
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
-        credential?: {
-            scopes: string[];
-            agent_did: string;
-            issued_at: number;
-            created_at: number;
-            constraints?: Record<string, unknown> | undefined;
-            user_id?: string | undefined;
-            user_identifier?: string | undefined;
-        } | undefined;
         reason?: string | undefined;
     };
     metadata?: {

package/dist/agentshield-api/schemas.js

@@ -117,12 +117,19 @@ exports.proofSubmissionResponseSchema = zod_1.z.object({
  */
 exports.delegationCredentialSchema = zod_1.z.object({
     agent_did: zod_1.z.string(),
+    user_did: zod_1.z.string().min(1), // REQUIRED: DID of authorizing user
     user_id: zod_1.z.string().optional(),
     user_identifier: zod_1.z.string().optional(),
     scopes: zod_1.z.array(zod_1.z.string()),
     constraints: zod_1.z.record(zod_1.z.unknown()).optional(),
     issued_at: zod_1.z.number().int().positive(),
     created_at: zod_1.z.number().int().positive(),
+    credential_jwt: zod_1.z.string().optional(),
+    authorization: zod_1.z.object({
+        type: zod_1.z.enum(['oauth', 'credential', 'none']),
+        provider: zod_1.z.string().optional(),
+        credentialType: zod_1.z.string().optional(),
+    }),
 });
 /**
  * Delegation verification request schema

package/dist/agentshield-api/types.d.ts

@@ -141,12 +141,19 @@ export interface VerifyDelegationRequest {
  */
 export interface DelegationCredential {
     agent_did: string;
+    user_did: string;
     user_id?: string;
     user_identifier?: string;
     scopes: string[];
     constraints?: Record<string, unknown>;
     issued_at: number;
     created_at: number;
+    credential_jwt?: string;
+    authorization: {
+        type: 'oauth' | 'credential' | 'none';
+        provider?: string;
+        credentialType?: string;
+    };
 }
 /**
  * Response from delegation verification endpoint

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.6.12",
+  "version": "1.6.14",
   "description": "Shared contracts, types, and schemas for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",