@kya-os/contracts 1.6.9 → 1.6.11

package/dist/agentshield-api/schemas.d.ts

@@ -185,12 +185,12 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
                 identifier: string;
             }>>;
         }, "strip", z.ZodTypeAny, {
-            sessionId: string;
-            scopes: string[];
             timestamp: number;
+            sessionId: string;
             eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
             agentDid: string;
             targetTools: string[];
+            scopes: string[];
             projectId: string;
             userDid?: string | undefined;
             delegationId?: string | undefined;
@@ -201,12 +201,12 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
                 identifier: string;
             } | undefined;
         }, {
-            sessionId: string;
-            scopes: string[];
             timestamp: number;
+            sessionId: string;
             eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
             agentDid: string;
             targetTools: string[];
+            scopes: string[];
             projectId: string;
             userDid?: string | undefined;
             delegationId?: string | undefined;
@@ -227,12 +227,12 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             userIdentifier?: string | undefined;
         }[] | undefined;
         consentEvents?: {
-            sessionId: string;
-            scopes: string[];
             timestamp: number;
+            sessionId: string;
             eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
             agentDid: string;
             targetTools: string[];
+            scopes: string[];
             projectId: string;
             userDid?: string | undefined;
             delegationId?: string | undefined;
@@ -253,12 +253,12 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             userIdentifier?: string | undefined;
         }[] | undefined;
         consentEvents?: {
-            sessionId: string;
-            scopes: string[];
             timestamp: number;
+            sessionId: string;
             eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
             agentDid: string;
             targetTools: string[];
+            scopes: string[];
             projectId: string;
             userDid?: string | undefined;
             delegationId?: string | undefined;
@@ -299,12 +299,12 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             userIdentifier?: string | undefined;
         }[] | undefined;
         consentEvents?: {
-            sessionId: string;
-            scopes: string[];
             timestamp: number;
+            sessionId: string;
             eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
             agentDid: string;
             targetTools: string[];
+            scopes: string[];
             projectId: string;
             userDid?: string | undefined;
             delegationId?: string | undefined;
@@ -345,12 +345,12 @@ export declare const proofSubmissionRequestSchema: z.ZodObject<{
             userIdentifier?: string | undefined;
         }[] | undefined;
         consentEvents?: {
-            sessionId: string;
-            scopes: string[];
             timestamp: number;
+            sessionId: string;
             eventType: "consent:page_viewed" | "consent:approved" | "consent:delegation_created" | "consent:credential_required";
             agentDid: string;
             targetTools: string[];
+            scopes: string[];
             projectId: string;
             userDid?: string | undefined;
             delegationId?: string | undefined;
@@ -388,19 +388,19 @@ export declare const proofSubmissionResponseSchema: z.ZodObject<{
             details?: Record<string, unknown> | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
+        proof_index: number;
         error: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         };
-        proof_index: number;
     }, {
+        proof_index: number;
         error: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         };
-        proof_index: number;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     success: boolean;
@@ -408,12 +408,12 @@ export declare const proofSubmissionResponseSchema: z.ZodObject<{
     rejected: number;
     outcomes?: Record<string, number> | undefined;
     errors?: {
+        proof_index: number;
         error: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         };
-        proof_index: number;
     }[] | undefined;
 }, {
     success: boolean;
@@ -421,12 +421,12 @@ export declare const proofSubmissionResponseSchema: z.ZodObject<{
     rejected: number;
     outcomes?: Record<string, number> | undefined;
     errors?: {
+        proof_index: number;
         error: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         };
-        proof_index: number;
     }[] | undefined;
 }>;
 /**
@@ -445,24 +445,24 @@ export declare const delegationCredentialSchema: z.ZodObject<{
     agent_did: string;
     issued_at: number;
     created_at: number;
-    constraints?: Record<string, unknown> | undefined;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    constraints?: Record<string, unknown> | undefined;
 }, {
     scopes: string[];
     agent_did: string;
     issued_at: number;
     created_at: number;
-    constraints?: Record<string, unknown> | undefined;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    constraints?: Record<string, unknown> | undefined;
 }>;
 /**
  * Delegation verification request schema
  */
 export declare const verifyDelegationRequestSchema: z.ZodObject<{
-    scopes: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
     timestamp: z.ZodOptional<z.ZodNumber>;
+    scopes: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
     agent_did: z.ZodString;
     user_did: z.ZodOptional<z.ZodString>;
     credential_jwt: z.ZodOptional<z.ZodString>;
@@ -482,8 +482,8 @@ export declare const verifyDelegationRequestSchema: z.ZodObject<{
     }>>;
 }, "strip", z.ZodTypeAny, {
     agent_did: string;
-    scopes?: string[] | undefined;
     timestamp?: number | undefined;
+    scopes?: string[] | undefined;
     user_did?: string | undefined;
     credential_jwt?: string | undefined;
     delegation_token?: string | undefined;
@@ -494,8 +494,8 @@ export declare const verifyDelegationRequestSchema: z.ZodObject<{
     } | undefined;
 }, {
     agent_did: string;
-    scopes?: string[] | undefined;
     timestamp?: number | undefined;
+    scopes?: string[] | undefined;
     user_did?: string | undefined;
     credential_jwt?: string | undefined;
     delegation_token?: string | undefined;
@@ -1755,17 +1755,17 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         agent_did: string;
         issued_at: number;
         created_at: number;
-        constraints?: Record<string, unknown> | undefined;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        constraints?: Record<string, unknown> | undefined;
     }, {
         scopes: string[];
         agent_did: string;
         issued_at: number;
         created_at: number;
-        constraints?: Record<string, unknown> | undefined;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        constraints?: Record<string, unknown> | undefined;
     }>>;
     error: z.ZodOptional<z.ZodObject<{
         code: z.ZodString;
@@ -1783,12 +1783,12 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
     reason: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     valid: boolean;
+    delegation_id?: string | undefined;
     error?: {
         code: string;
         message: string;
         details?: Record<string, unknown> | undefined;
     } | undefined;
-    delegation_id?: string | undefined;
     delegation?: z.objectOutputType<{
         id: z.ZodString;
         issuerDid: z.ZodString;
@@ -2205,19 +2205,19 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         agent_did: string;
         issued_at: number;
         created_at: number;
-        constraints?: Record<string, unknown> | undefined;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        constraints?: Record<string, unknown> | undefined;
     } | undefined;
     reason?: string | undefined;
 }, {
     valid: boolean;
+    delegation_id?: string | undefined;
     error?: {
         code: string;
         message: string;
         details?: Record<string, unknown> | undefined;
     } | undefined;
-    delegation_id?: string | undefined;
     delegation?: z.objectInputType<{
         id: z.ZodString;
         issuerDid: z.ZodString;
@@ -2634,9 +2634,9 @@ export declare const verifyDelegationResponseSchema: z.ZodObject<{
         agent_did: string;
         issued_at: number;
         created_at: number;
-        constraints?: Record<string, unknown> | undefined;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        constraints?: Record<string, unknown> | undefined;
     } | undefined;
     reason?: string | undefined;
 }>;
@@ -3892,17 +3892,17 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             agent_did: string;
             issued_at: number;
             created_at: number;
-            constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            constraints?: Record<string, unknown> | undefined;
         }, {
             scopes: string[];
             agent_did: string;
             issued_at: number;
             created_at: number;
-            constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            constraints?: Record<string, unknown> | undefined;
         }>>;
         error: z.ZodOptional<z.ZodObject<{
             code: z.ZodString;
@@ -3920,12 +3920,12 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
         reason: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         valid: boolean;
+        delegation_id?: string | undefined;
         error?: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         } | undefined;
-        delegation_id?: string | undefined;
         delegation?: z.objectOutputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -4342,19 +4342,19 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             agent_did: string;
             issued_at: number;
             created_at: number;
-            constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            constraints?: Record<string, unknown> | undefined;
         } | undefined;
         reason?: string | undefined;
     }, {
         valid: boolean;
+        delegation_id?: string | undefined;
         error?: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         } | undefined;
-        delegation_id?: string | undefined;
         delegation?: z.objectInputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -4771,9 +4771,9 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             agent_did: string;
             issued_at: number;
             created_at: number;
-            constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            constraints?: Record<string, unknown> | undefined;
         } | undefined;
         reason?: string | undefined;
     }>;
@@ -4791,12 +4791,12 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
     success: boolean;
     data: {
         valid: boolean;
+        delegation_id?: string | undefined;
         error?: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         } | undefined;
-        delegation_id?: string | undefined;
         delegation?: z.objectOutputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -5213,9 +5213,9 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             agent_did: string;
             issued_at: number;
             created_at: number;
-            constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            constraints?: Record<string, unknown> | undefined;
         } | undefined;
         reason?: string | undefined;
     };
@@ -5227,12 +5227,12 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
     success: boolean;
     data: {
         valid: boolean;
+        delegation_id?: string | undefined;
         error?: {
             code: string;
             message: string;
             details?: Record<string, unknown> | undefined;
         } | undefined;
-        delegation_id?: string | undefined;
         delegation?: z.objectInputType<{
             id: z.ZodString;
             issuerDid: z.ZodString;
@@ -5649,9 +5649,9 @@ export declare const verifyDelegationAPIResponseSchema: z.ZodObject<{
             agent_did: string;
             issued_at: number;
             created_at: number;
-            constraints?: Record<string, unknown> | undefined;
             user_id?: string | undefined;
             user_identifier?: string | undefined;
+            constraints?: Record<string, unknown> | undefined;
         } | undefined;
         reason?: string | undefined;
     };
@@ -5942,9 +5942,8 @@ export declare const createDelegationRequestSchema: z.ZodEffects<z.ZodObject<{
  *
  * Canonical format returned by POST /api/v1/bouncer/delegations
  *
- * IMPORTANT: delegation_token is NOT returned by this endpoint.
- * delegation_token is only available via OAuth callback flow (/api/v1/bouncer/oauth/callback)
- * and is passed as a URL parameter, not in the API response body.
+ * As of AgentShield v2.x, delegation_token (JWT) IS returned for stateless verification.
+ * The JWT enables MCP-I servers to verify delegations without database lookups.
  */
 export declare const createDelegationResponseSchema: z.ZodObject<{
     delegation_id: z.ZodString;
@@ -5956,26 +5955,35 @@ export declare const createDelegationResponseSchema: z.ZodObject<{
     issued_at: z.ZodString;
     expires_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     created_at: z.ZodString;
+    delegation_token: z.ZodOptional<z.ZodString>;
+    token_type: z.ZodOptional<z.ZodString>;
+    expires_in: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     status: "active" | "revoked" | "expired";
-    scopes: string[];
     delegation_id: string;
+    scopes: string[];
     agent_did: string;
     issued_at: string;
     created_at: string;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    delegation_token?: string | undefined;
     expires_at?: string | null | undefined;
+    token_type?: string | undefined;
+    expires_in?: number | undefined;
 }, {
     status: "active" | "revoked" | "expired";
-    scopes: string[];
     delegation_id: string;
+    scopes: string[];
     agent_did: string;
     issued_at: string;
     created_at: string;
     user_id?: string | undefined;
     user_identifier?: string | undefined;
+    delegation_token?: string | undefined;
     expires_at?: string | null | undefined;
+    token_type?: string | undefined;
+    expires_in?: number | undefined;
 }>;
 /**
  * Wrapped creation response schema
@@ -5992,26 +6000,35 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
         issued_at: z.ZodString;
         expires_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         created_at: z.ZodString;
+        delegation_token: z.ZodOptional<z.ZodString>;
+        token_type: z.ZodOptional<z.ZodString>;
+        expires_in: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         status: "active" | "revoked" | "expired";
-        scopes: string[];
         delegation_id: string;
+        scopes: string[];
         agent_did: string;
         issued_at: string;
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     }, {
         status: "active" | "revoked" | "expired";
-        scopes: string[];
         delegation_id: string;
+        scopes: string[];
         agent_did: string;
         issued_at: string;
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     }>;
     metadata: z.ZodOptional<z.ZodObject<{
         requestId: z.ZodString;
@@ -6027,14 +6044,17 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
     success: boolean;
     data: {
         status: "active" | "revoked" | "expired";
-        scopes: string[];
         delegation_id: string;
+        scopes: string[];
         agent_did: string;
         issued_at: string;
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     };
     metadata?: {
         requestId: string;
@@ -6044,14 +6064,17 @@ export declare const createDelegationAPIResponseSchema: z.ZodObject<{
     success: boolean;
     data: {
         status: "active" | "revoked" | "expired";
-        scopes: string[];
         delegation_id: string;
+        scopes: string[];
         agent_did: string;
         issued_at: string;
         created_at: string;
         user_id?: string | undefined;
         user_identifier?: string | undefined;
+        delegation_token?: string | undefined;
         expires_at?: string | null | undefined;
+        token_type?: string | undefined;
+        expires_in?: number | undefined;
     };
     metadata?: {
         requestId: string;
@@ -6076,12 +6099,12 @@ export declare const revokeDelegationResponseSchema: z.ZodObject<{
     revoked: z.ZodBoolean;
     revoked_at: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
-    revoked: boolean;
     delegation_id: string;
+    revoked: boolean;
     revoked_at: number;
 }, {
-    revoked: boolean;
     delegation_id: string;
+    revoked: boolean;
     revoked_at: number;
 }>;
 /**
@@ -6094,12 +6117,12 @@ export declare const revokeDelegationAPIResponseSchema: z.ZodObject<{
         revoked: z.ZodBoolean;
         revoked_at: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
-        revoked: boolean;
         delegation_id: string;
+        revoked: boolean;
         revoked_at: number;
     }, {
-        revoked: boolean;
         delegation_id: string;
+        revoked: boolean;
         revoked_at: number;
     }>;
     metadata: z.ZodOptional<z.ZodObject<{
@@ -6115,8 +6138,8 @@ export declare const revokeDelegationAPIResponseSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     success: boolean;
     data: {
-        revoked: boolean;
         delegation_id: string;
+        revoked: boolean;
         revoked_at: number;
     };
     metadata?: {
@@ -6126,8 +6149,8 @@ export declare const revokeDelegationAPIResponseSchema: z.ZodObject<{
 }, {
     success: boolean;
     data: {
-        revoked: boolean;
         delegation_id: string;
+        revoked: boolean;
         revoked_at: number;
     };
     metadata?: {

package/dist/agentshield-api/schemas.js

@@ -232,9 +232,8 @@ exports.createDelegationRequestSchema = zod_1.z
  *
  * Canonical format returned by POST /api/v1/bouncer/delegations
  *
- * IMPORTANT: delegation_token is NOT returned by this endpoint.
- * delegation_token is only available via OAuth callback flow (/api/v1/bouncer/oauth/callback)
- * and is passed as a URL parameter, not in the API response body.
+ * As of AgentShield v2.x, delegation_token (JWT) IS returned for stateless verification.
+ * The JWT enables MCP-I servers to verify delegations without database lookups.
  */
 exports.createDelegationResponseSchema = zod_1.z.object({
     delegation_id: zod_1.z.string().uuid(),
@@ -246,6 +245,10 @@ exports.createDelegationResponseSchema = zod_1.z.object({
     issued_at: zod_1.z.string().datetime(),
     expires_at: zod_1.z.string().datetime().nullable().optional(), // AgentShield allows null values
     created_at: zod_1.z.string().datetime(),
+    // JWT for stateless verification (added in AgentShield v2.x)
+    delegation_token: zod_1.z.string().optional(),
+    token_type: zod_1.z.string().optional(), // "Bearer"
+    expires_in: zod_1.z.number().int().positive().optional(), // Seconds until token expiry
 });
 /**
  * Wrapped creation response schema

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.6.9",
+  "version": "1.6.11",
   "description": "Shared contracts, types, and schemas for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",