@kya-os/contracts 1.6.4 → 1.6.5

package/dist/config/identity.js

@@ -8,8 +8,45 @@
  * @module @kya-os/contracts/config
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuthConfigSchema = exports.OAuthProviderSchema = void 0;
+exports.AuthProviderSchema = exports.OAuth2ProviderConfigSchema = exports.OAuthConfigSchema = exports.OAuthProviderSchema = exports.CredentialProviderConfigSchema = void 0;
 const zod_1 = require("zod");
+/**
+ * Zod schema for CredentialProviderConfig validation
+ */
+exports.CredentialProviderConfigSchema = zod_1.z.object({
+    type: zod_1.z.literal("credential"),
+    displayName: zod_1.z.string().optional(),
+    authEndpoint: zod_1.z.string().url(),
+    requestBodyTemplate: zod_1.z.record(zod_1.z.string()),
+    responseFields: zod_1.z.object({
+        sessionToken: zod_1.z.string(),
+        userId: zod_1.z.string().optional(),
+        userEmail: zod_1.z.string().optional(),
+        userDisplayName: zod_1.z.string().optional(),
+        expiresIn: zod_1.z.string().optional(),
+    }),
+    successCheck: zod_1.z
+        .object({
+        path: zod_1.z.string(),
+        expectedValue: zod_1.z.union([zod_1.z.string(), zod_1.z.boolean(), zod_1.z.number()]),
+    })
+        .optional(),
+    headers: zod_1.z.record(zod_1.z.string()).optional(),
+    tokenUsage: zod_1.z.enum(["cookie", "bearer", "header"]).optional(),
+    tokenHeader: zod_1.z.string().optional(),
+    cookieFormat: zod_1.z.string().optional(),
+    apiHeaders: zod_1.z.record(zod_1.z.string()).optional(),
+    consentOverrides: zod_1.z
+        .object({
+        branding: zod_1.z.record(zod_1.z.unknown()).optional(),
+        formTitle: zod_1.z.string().optional(),
+        formDescription: zod_1.z.string().optional(),
+        identityFieldLabel: zod_1.z.string().optional(),
+        passwordFieldLabel: zod_1.z.string().optional(),
+        submitButtonText: zod_1.z.string().optional(),
+    })
+        .optional(),
+});
 /**
  * Zod schema for OAuthProvider validation
  */
@@ -37,3 +74,33 @@ exports.OAuthConfigSchema = zod_1.z.object({
     providers: zod_1.z.record(zod_1.z.string(), exports.OAuthProviderSchema),
     configuredProvider: zod_1.z.string().nullable().optional(),
 });
+/**
+ * Zod schema for OAuth2ProviderConfig validation
+ */
+exports.OAuth2ProviderConfigSchema = zod_1.z.object({
+    type: zod_1.z.literal("oauth2"),
+    displayName: zod_1.z.string().optional(),
+    clientId: zod_1.z.string().min(1),
+    clientSecret: zod_1.z.string().nullable().optional(),
+    authorizationUrl: zod_1.z.string().url(),
+    tokenUrl: zod_1.z.string().url(),
+    userInfoUrl: zod_1.z.string().url().optional(),
+    supportsPKCE: zod_1.z.boolean(),
+    requiresClientSecret: zod_1.z.boolean(),
+    scopes: zod_1.z.array(zod_1.z.string()).optional(),
+    defaultScopes: zod_1.z.array(zod_1.z.string()).optional(),
+    proxyMode: zod_1.z.boolean().optional(),
+    customParams: zod_1.z.record(zod_1.z.string()).optional(),
+    tokenEndpointAuthMethod: zod_1.z
+        .enum(["client_secret_post", "client_secret_basic"])
+        .optional(),
+    responseType: zod_1.z.string().optional().default("code"),
+    grantType: zod_1.z.string().optional().default("authorization_code"),
+});
+/**
+ * Zod schema for AuthProvider validation (discriminated union)
+ */
+exports.AuthProviderSchema = zod_1.z.discriminatedUnion("type", [
+    exports.OAuth2ProviderConfigSchema,
+    exports.CredentialProviderConfigSchema,
+]);

package/dist/config/index.d.ts

@@ -12,7 +12,7 @@ import type { ProofingConfig } from "./proofing.js";
 import type { DelegationConfig } from "./delegation.js";
 import type { ToolProtectionSourceConfig } from "./tool-protection.js";
 export { MCPIBaseConfig } from "./base.js";
-export { RuntimeIdentityConfig, AgentIdentity, OAuthProvider, OAuthConfig, IdpTokens, } from "./identity.js";
+export { RuntimeIdentityConfig, AgentIdentity, OAuthProvider, OAuthConfig, IdpTokens, AuthProviderType, BaseProviderConfig, CredentialProviderConfig, CredentialProviderConfigSchema, OAuth2ProviderConfig, OAuth2ProviderConfigSchema, AuthProvider, AuthProviderSchema, } from "./identity.js";
 export type { ToolExecutionContext } from "./tool-context.js";
 /**
  * @deprecated Use RuntimeIdentityConfig instead

package/dist/config/index.js

@@ -8,7 +8,12 @@
  * @module @kya-os/contracts/config
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildBaseConfig = void 0;
+exports.buildBaseConfig = exports.AuthProviderSchema = exports.OAuth2ProviderConfigSchema = exports.CredentialProviderConfigSchema = void 0;
+// Identity configuration
+var identity_js_1 = require("./identity.js");
+Object.defineProperty(exports, "CredentialProviderConfigSchema", { enumerable: true, get: function () { return identity_js_1.CredentialProviderConfigSchema; } });
+Object.defineProperty(exports, "OAuth2ProviderConfigSchema", { enumerable: true, get: function () { return identity_js_1.OAuth2ProviderConfigSchema; } });
+Object.defineProperty(exports, "AuthProviderSchema", { enumerable: true, get: function () { return identity_js_1.AuthProviderSchema; } });
 // Configuration builder utilities
 var builder_js_1 = require("./builder.js");
 Object.defineProperty(exports, "buildBaseConfig", { enumerable: true, get: function () { return builder_js_1.buildBaseConfig; } });

package/dist/config/tool-context.d.ts

@@ -14,14 +14,26 @@
  *
  * Enables tools to access IDP tokens for external API calls.
  * Context is only provided when:
- * - Tool requires OAuth (has requiredScopes)
+ * - Tool requires OAuth (has requiredScopes) or credential-based auth
  * - User DID is available
  * - IDP token is successfully resolved
  */
 export interface ToolExecutionContext {
     /** IDP access token for external API calls (e.g., GitHub, Google) */
     idpToken?: string;
-    /** OAuth provider name (e.g., "github", "google") */
+    /**
+     * Pre-built headers for API calls (CRED-003)
+     *
+     * For OAuth providers: typically { Authorization: "Bearer xxx" }
+     * For credential providers: based on tokenUsage configuration
+     * - cookie: { Cookie: "formatted_cookie_string" }
+     * - bearer: { Authorization: "Bearer xxx" }
+     * - header: { [customHeader]: "xxx" }
+     *
+     * Also includes any additional apiHeaders from provider config.
+     */
+    idpHeaders?: Record<string, string>;
+    /** OAuth provider name (e.g., "github", "google") or credential provider */
     provider?: string;
     /** Scopes granted for this token */
     scopes?: string[];

package/dist/consent/schemas.d.ts

@@ -38,13 +38,13 @@ export declare const consentTermsSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     required: boolean;
     version?: string | undefined;
-    text?: string | undefined;
     url?: string | undefined;
+    text?: string | undefined;
 }, {
     version?: string | undefined;
-    text?: string | undefined;
     url?: string | undefined;
     required?: boolean | undefined;
+    text?: string | undefined;
 }>;
 export type ConsentTerms = z.infer<typeof consentTermsSchema>;
 /**
@@ -151,13 +151,13 @@ export declare const oauthIdentitySchema: z.ZodObject<{
      */
     name: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    provider: string;
     subject: string;
+    provider: string;
     name?: string | undefined;
     email?: string | undefined;
 }, {
-    provider: string;
     subject: string;
+    provider: string;
     name?: string | undefined;
     email?: string | undefined;
 }>;
@@ -197,13 +197,13 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         required: boolean;
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
+        text?: string | undefined;
     }, {
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
         required?: boolean | undefined;
+        text?: string | undefined;
     }>>;
     customFields: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodObject<{
         name: z.ZodString;
@@ -280,13 +280,13 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
      */
     oauthUrl: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodLiteral<"">]>>;
 }, "strip", z.ZodTypeAny, {
-    tool: string;
-    toolDescription: string;
-    scopes: string[];
     agentDid: string;
     sessionId: string;
+    tool: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
+    toolDescription: string;
     provider?: string | undefined;
     branding?: {
         primaryColor?: string | undefined;
@@ -297,8 +297,8 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     terms?: {
         required: boolean;
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -316,13 +316,13 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     oauthRequired?: boolean | undefined;
     oauthUrl?: string | undefined;
 }, {
-    tool: string;
-    toolDescription: string;
-    scopes: string[];
     agentDid: string;
     sessionId: string;
+    tool: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
+    toolDescription: string;
     provider?: string | undefined;
     branding?: {
         primaryColor?: string | undefined;
@@ -332,9 +332,9 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     } | undefined;
     terms?: {
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
         required?: boolean | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -352,13 +352,13 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     oauthRequired?: boolean | undefined;
     oauthUrl?: string | undefined;
 }>, {
-    tool: string;
-    toolDescription: string;
-    scopes: string[];
     agentDid: string;
     sessionId: string;
+    tool: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
+    toolDescription: string;
     provider?: string | undefined;
     branding?: {
         primaryColor?: string | undefined;
@@ -369,8 +369,8 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     terms?: {
         required: boolean;
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -388,13 +388,13 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     oauthRequired?: boolean | undefined;
     oauthUrl?: string | undefined;
 }, {
-    tool: string;
-    toolDescription: string;
-    scopes: string[];
     agentDid: string;
     sessionId: string;
+    tool: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
+    toolDescription: string;
     provider?: string | undefined;
     branding?: {
         primaryColor?: string | undefined;
@@ -404,9 +404,9 @@ export declare const consentPageConfigSchema: z.ZodEffects<z.ZodObject<{
     } | undefined;
     terms?: {
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
         required?: boolean | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -469,13 +469,13 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
          */
         name: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        provider: string;
         subject: string;
+        provider: string;
         name?: string | undefined;
         email?: string | undefined;
     }, {
-        provider: string;
         subject: string;
+        provider: string;
         name?: string | undefined;
         email?: string | undefined;
     }>>>;
@@ -487,32 +487,32 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     user_did: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     tool: string;
+    session_id: string;
     scopes: string[];
     agent_did: string;
-    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        provider: string;
         subject: string;
+        provider: string;
         name?: string | undefined;
         email?: string | undefined;
     } | null | undefined;
     user_did?: string | undefined;
 }, {
     tool: string;
+    session_id: string;
     scopes: string[];
     agent_did: string;
-    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        provider: string;
         subject: string;
+        provider: string;
         name?: string | undefined;
         email?: string | undefined;
     } | null | undefined;
@@ -582,13 +582,13 @@ export declare const consentConfigSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         required: boolean;
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
+        text?: string | undefined;
     }, {
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
         required?: boolean | undefined;
+        text?: string | undefined;
     }>>;
     customFields: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodObject<{
         name: z.ZodString;
@@ -678,8 +678,8 @@ export declare const consentConfigSchema: z.ZodObject<{
     terms?: {
         required: boolean;
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -708,9 +708,9 @@ export declare const consentConfigSchema: z.ZodObject<{
     } | undefined;
     terms?: {
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
         required?: boolean | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -742,13 +742,13 @@ export type ConsentConfig = z.infer<typeof consentConfigSchema>;
  * @returns Validation result
  */
 export declare function validateConsentPageConfig(config: unknown): z.SafeParseReturnType<{
-    tool: string;
-    toolDescription: string;
-    scopes: string[];
     agentDid: string;
     sessionId: string;
+    tool: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
+    toolDescription: string;
     provider?: string | undefined;
     branding?: {
         primaryColor?: string | undefined;
@@ -758,9 +758,9 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     } | undefined;
     terms?: {
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
         required?: boolean | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -778,13 +778,13 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     oauthRequired?: boolean | undefined;
     oauthUrl?: string | undefined;
 }, {
-    tool: string;
-    toolDescription: string;
-    scopes: string[];
     agentDid: string;
     sessionId: string;
+    tool: string;
+    scopes: string[];
     projectId: string;
     serverUrl: string;
+    toolDescription: string;
     provider?: string | undefined;
     branding?: {
         primaryColor?: string | undefined;
@@ -795,8 +795,8 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
     terms?: {
         required: boolean;
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -822,32 +822,32 @@ export declare function validateConsentPageConfig(config: unknown): z.SafeParseR
  */
 export declare function validateConsentApprovalRequest(request: unknown): z.SafeParseReturnType<{
     tool: string;
+    session_id: string;
     scopes: string[];
     agent_did: string;
-    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        provider: string;
         subject: string;
+        provider: string;
         name?: string | undefined;
         email?: string | undefined;
     } | null | undefined;
     user_did?: string | undefined;
 }, {
     tool: string;
+    session_id: string;
     scopes: string[];
     agent_did: string;
-    session_id: string;
     project_id: string;
     termsAccepted: boolean;
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        provider: string;
         subject: string;
+        provider: string;
         name?: string | undefined;
         email?: string | undefined;
     } | null | undefined;
@@ -887,9 +887,9 @@ export declare function validateConsentConfig(config: unknown): z.SafeParseRetur
     } | undefined;
     terms?: {
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
         required?: boolean | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";
@@ -919,8 +919,8 @@ export declare function validateConsentConfig(config: unknown): z.SafeParseRetur
     terms?: {
         required: boolean;
         version?: string | undefined;
-        text?: string | undefined;
         url?: string | undefined;
+        text?: string | undefined;
     } | undefined;
     customFields?: {
         type: "text" | "textarea" | "checkbox" | "select";