npm - @kya-os/contracts - Versions diffs - 1.7.14 → 1.7.16 - Mend

@kya-os/contracts 1.7.14 → 1.7.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/dist/agentshield-api/schemas.d.ts +267 -183
package/dist/agentshield-api/schemas.js +8 -1
package/dist/agentshield-api/types.d.ts +5 -1
package/dist/dashboard-config/schemas.d.ts +2966 -1918
package/dist/delegation/schemas.d.ts +790 -244
package/dist/delegation/schemas.js +68 -3
package/dist/tool-protection/index.d.ts +180 -6
package/dist/tool-protection/index.js +26 -0
package/package.json +1 -1

package/dist/delegation/schemas.d.ts CHANGED Viewed

@@ -1724,12 +1724,15 @@ export declare const DelegationChainEntrySchema: z.ZodObject<{
     /** Status */
     status: z.ZodEnum<["active", "revoked", "expired"]>;
 }, "strip", z.ZodTypeAny, {
+    issuerDid: string;
+    subjectDid: string;
+    vcId: string;
     status: "active" | "revoked" | "expired";
     constraints: {
-        scopes?: string[] | undefined;
-        audience?: string | string[] | undefined;
         notBefore?: number | undefined;
         notAfter?: number | undefined;
+        scopes?: string[] | undefined;
+        audience?: string | string[] | undefined;
         crisp?: z.objectOutputType<{
             budget: z.ZodOptional<z.ZodObject<{
                 unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -1776,18 +1779,18 @@ export declare const DelegationChainEntrySchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
-    issuerDid: string;
-    subjectDid: string;
-    vcId: string;
     delegationId: string;
     depth: number;
 }, {
+    issuerDid: string;
+    subjectDid: string;
+    vcId: string;
     status: "active" | "revoked" | "expired";
     constraints: {
-        scopes?: string[] | undefined;
-        audience?: string | string[] | undefined;
         notBefore?: number | undefined;
         notAfter?: number | undefined;
+        scopes?: string[] | undefined;
+        audience?: string | string[] | undefined;
         crisp?: z.objectInputType<{
             budget: z.ZodOptional<z.ZodObject<{
                 unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -1834,9 +1837,6 @@ export declare const DelegationChainEntrySchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
-    issuerDid: string;
-    subjectDid: string;
-    vcId: string;
     delegationId: string;
     depth: number;
 }>;
@@ -2264,12 +2264,15 @@ export declare const DelegationChainSchema: z.ZodObject<{
         /** Status */
         status: z.ZodEnum<["active", "revoked", "expired"]>;
     }, "strip", z.ZodTypeAny, {
+        issuerDid: string;
+        subjectDid: string;
+        vcId: string;
         status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectOutputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -2316,18 +2319,18 @@ export declare const DelegationChainSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        vcId: string;
         delegationId: string;
         depth: number;
     }, {
+        issuerDid: string;
+        subjectDid: string;
+        vcId: string;
         status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectInputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -2374,9 +2377,6 @@ export declare const DelegationChainSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        vcId: string;
         delegationId: string;
         depth: number;
     }>, "many">;
@@ -2392,12 +2392,15 @@ export declare const DelegationChainSchema: z.ZodObject<{
     rootIssuer: string;
     leafSubject: string;
     chain: {
+        issuerDid: string;
+        subjectDid: string;
+        vcId: string;
         status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectOutputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -2444,9 +2447,6 @@ export declare const DelegationChainSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        vcId: string;
         delegationId: string;
         depth: number;
     }[];
@@ -2457,12 +2457,15 @@ export declare const DelegationChainSchema: z.ZodObject<{
     rootIssuer: string;
     leafSubject: string;
     chain: {
+        issuerDid: string;
+        subjectDid: string;
+        vcId: string;
         status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectInputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -2509,9 +2512,6 @@ export declare const DelegationChainSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        vcId: string;
         delegationId: string;
         depth: number;
     }[];
@@ -2933,11 +2933,13 @@ export declare const DelegationCreationRequestSchema: z.ZodObject<{
     /** Optional VC ID (if not provided, will be created) */
     vcId: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
+    issuerDid: string;
+    subjectDid: string;
     constraints: {
-        scopes?: string[] | undefined;
-        audience?: string | string[] | undefined;
         notBefore?: number | undefined;
         notAfter?: number | undefined;
+        scopes?: string[] | undefined;
+        audience?: string | string[] | undefined;
         crisp?: z.objectOutputType<{
             budget: z.ZodOptional<z.ZodObject<{
                 unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -2984,17 +2986,17 @@ export declare const DelegationCreationRequestSchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
-    issuerDid: string;
-    subjectDid: string;
     controller?: string | undefined;
     vcId?: string | undefined;
     parentId?: string | undefined;
 }, {
+    issuerDid: string;
+    subjectDid: string;
     constraints: {
-        scopes?: string[] | undefined;
-        audience?: string | string[] | undefined;
         notBefore?: number | undefined;
         notAfter?: number | undefined;
+        scopes?: string[] | undefined;
+        audience?: string | string[] | undefined;
         crisp?: z.objectInputType<{
             budget: z.ZodOptional<z.ZodObject<{
                 unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -3041,13 +3043,262 @@ export declare const DelegationCreationRequestSchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
-    issuerDid: string;
-    subjectDid: string;
     controller?: string | undefined;
     vcId?: string | undefined;
     parentId?: string | undefined;
 }>;
 export type DelegationCreationRequest = z.infer<typeof DelegationCreationRequestSchema>;
+/**
+ * Authorization Info Schema
+ *
+ * Captures HOW the user verified their identity during consent.
+ * This is runtime verification metadata, separate from tool requirements.
+ *
+ * Note: This schema describes authorization info in verification results,
+ * not tool protection requirements (which use AuthorizationRequirementSchema).
+ */
+export declare const AuthorizationInfoSchema: z.ZodObject<{
+    /**
+     * The authorization method used during consent
+     *
+     * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+     * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+     * - 'password': Password/credential authentication
+     * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+     * - 'verifiable_credential': W3C Verifiable Credential
+     * - 'mdl': Mobile Driver's License
+     * - 'idv': Identity Verification
+     * - 'webauthn': WebAuthn/Passkey authentication
+     * - 'siwe': Sign-In with Ethereum (EIP-4361)
+     * - 'none': Consent-only (no authentication)
+     */
+    type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+    /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+    provider: z.ZodOptional<z.ZodString>;
+    /** Credential type for verifiable_credential or mdl auth */
+    credentialType: z.ZodOptional<z.ZodString>;
+    /** MDL issuer DID or identifier */
+    issuer: z.ZodOptional<z.ZodString>;
+    /** IDV verification level */
+    verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+    /** WebAuthn Relying Party ID */
+    rpId: z.ZodOptional<z.ZodString>;
+    /** WebAuthn user verification level */
+    userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+    /** SIWE Ethereum chain ID */
+    chainId: z.ZodOptional<z.ZodNumber>;
+    /** SIWE domain */
+    domain: z.ZodOptional<z.ZodString>;
+    /** Timestamp when authorization was verified (milliseconds since epoch) */
+    verifiedAt: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+    provider?: string | undefined;
+    credentialType?: string | undefined;
+    issuer?: string | undefined;
+    verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+    rpId?: string | undefined;
+    userVerification?: "required" | "preferred" | "discouraged" | undefined;
+    chainId?: number | undefined;
+    domain?: string | undefined;
+    verifiedAt?: number | undefined;
+}, {
+    type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+    provider?: string | undefined;
+    credentialType?: string | undefined;
+    issuer?: string | undefined;
+    verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+    rpId?: string | undefined;
+    userVerification?: "required" | "preferred" | "discouraged" | undefined;
+    chainId?: number | undefined;
+    domain?: string | undefined;
+    verifiedAt?: number | undefined;
+}>;
+export type AuthorizationInfo = z.infer<typeof AuthorizationInfoSchema>;
+/**
+ * Delegation Verification Details Schema
+ *
+ * Typed details object for verification results
+ */
+export declare const DelegationVerificationDetailsSchema: z.ZodObject<{
+    /** Authorization info - how identity was verified during consent */
+    authorization: z.ZodOptional<z.ZodObject<{
+        /**
+         * The authorization method used during consent
+         *
+         * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+         * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+         * - 'password': Password/credential authentication
+         * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+         * - 'verifiable_credential': W3C Verifiable Credential
+         * - 'mdl': Mobile Driver's License
+         * - 'idv': Identity Verification
+         * - 'webauthn': WebAuthn/Passkey authentication
+         * - 'siwe': Sign-In with Ethereum (EIP-4361)
+         * - 'none': Consent-only (no authentication)
+         */
+        type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+        /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+        provider: z.ZodOptional<z.ZodString>;
+        /** Credential type for verifiable_credential or mdl auth */
+        credentialType: z.ZodOptional<z.ZodString>;
+        /** MDL issuer DID or identifier */
+        issuer: z.ZodOptional<z.ZodString>;
+        /** IDV verification level */
+        verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+        /** WebAuthn Relying Party ID */
+        rpId: z.ZodOptional<z.ZodString>;
+        /** WebAuthn user verification level */
+        userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+        /** SIWE Ethereum chain ID */
+        chainId: z.ZodOptional<z.ZodNumber>;
+        /** SIWE domain */
+        domain: z.ZodOptional<z.ZodString>;
+        /** Timestamp when authorization was verified (milliseconds since epoch) */
+        verifiedAt: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+        issuer?: string | undefined;
+        verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+        rpId?: string | undefined;
+        userVerification?: "required" | "preferred" | "discouraged" | undefined;
+        chainId?: number | undefined;
+        domain?: string | undefined;
+        verifiedAt?: number | undefined;
+    }, {
+        type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+        issuer?: string | undefined;
+        verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+        rpId?: string | undefined;
+        userVerification?: "required" | "preferred" | "discouraged" | undefined;
+        chainId?: number | undefined;
+        domain?: string | undefined;
+        verifiedAt?: number | undefined;
+    }>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    /** Authorization info - how identity was verified during consent */
+    authorization: z.ZodOptional<z.ZodObject<{
+        /**
+         * The authorization method used during consent
+         *
+         * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+         * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+         * - 'password': Password/credential authentication
+         * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+         * - 'verifiable_credential': W3C Verifiable Credential
+         * - 'mdl': Mobile Driver's License
+         * - 'idv': Identity Verification
+         * - 'webauthn': WebAuthn/Passkey authentication
+         * - 'siwe': Sign-In with Ethereum (EIP-4361)
+         * - 'none': Consent-only (no authentication)
+         */
+        type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+        /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+        provider: z.ZodOptional<z.ZodString>;
+        /** Credential type for verifiable_credential or mdl auth */
+        credentialType: z.ZodOptional<z.ZodString>;
+        /** MDL issuer DID or identifier */
+        issuer: z.ZodOptional<z.ZodString>;
+        /** IDV verification level */
+        verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+        /** WebAuthn Relying Party ID */
+        rpId: z.ZodOptional<z.ZodString>;
+        /** WebAuthn user verification level */
+        userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+        /** SIWE Ethereum chain ID */
+        chainId: z.ZodOptional<z.ZodNumber>;
+        /** SIWE domain */
+        domain: z.ZodOptional<z.ZodString>;
+        /** Timestamp when authorization was verified (milliseconds since epoch) */
+        verifiedAt: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+        issuer?: string | undefined;
+        verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+        rpId?: string | undefined;
+        userVerification?: "required" | "preferred" | "discouraged" | undefined;
+        chainId?: number | undefined;
+        domain?: string | undefined;
+        verifiedAt?: number | undefined;
+    }, {
+        type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+        issuer?: string | undefined;
+        verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+        rpId?: string | undefined;
+        userVerification?: "required" | "preferred" | "discouraged" | undefined;
+        chainId?: number | undefined;
+        domain?: string | undefined;
+        verifiedAt?: number | undefined;
+    }>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    /** Authorization info - how identity was verified during consent */
+    authorization: z.ZodOptional<z.ZodObject<{
+        /**
+         * The authorization method used during consent
+         *
+         * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+         * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+         * - 'password': Password/credential authentication
+         * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+         * - 'verifiable_credential': W3C Verifiable Credential
+         * - 'mdl': Mobile Driver's License
+         * - 'idv': Identity Verification
+         * - 'webauthn': WebAuthn/Passkey authentication
+         * - 'siwe': Sign-In with Ethereum (EIP-4361)
+         * - 'none': Consent-only (no authentication)
+         */
+        type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+        /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+        provider: z.ZodOptional<z.ZodString>;
+        /** Credential type for verifiable_credential or mdl auth */
+        credentialType: z.ZodOptional<z.ZodString>;
+        /** MDL issuer DID or identifier */
+        issuer: z.ZodOptional<z.ZodString>;
+        /** IDV verification level */
+        verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+        /** WebAuthn Relying Party ID */
+        rpId: z.ZodOptional<z.ZodString>;
+        /** WebAuthn user verification level */
+        userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+        /** SIWE Ethereum chain ID */
+        chainId: z.ZodOptional<z.ZodNumber>;
+        /** SIWE domain */
+        domain: z.ZodOptional<z.ZodString>;
+        /** Timestamp when authorization was verified (milliseconds since epoch) */
+        verifiedAt: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+        issuer?: string | undefined;
+        verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+        rpId?: string | undefined;
+        userVerification?: "required" | "preferred" | "discouraged" | undefined;
+        chainId?: number | undefined;
+        domain?: string | undefined;
+        verifiedAt?: number | undefined;
+    }, {
+        type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+        provider?: string | undefined;
+        credentialType?: string | undefined;
+        issuer?: string | undefined;
+        verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+        rpId?: string | undefined;
+        userVerification?: "required" | "preferred" | "discouraged" | undefined;
+        chainId?: number | undefined;
+        domain?: string | undefined;
+        verifiedAt?: number | undefined;
+    }>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type DelegationVerificationDetails = z.infer<typeof DelegationVerificationDetailsSchema>;
 /**
  * Delegation Verification Result
  *
@@ -3068,26 +3319,321 @@ export declare const DelegationVerificationResultSchema: z.ZodObject<{
     chainValid: z.ZodOptional<z.ZodBoolean>;
     /** Timestamp of verification */
     verifiedAt: z.ZodNumber;
-    /** Optional verification details */
-    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    /** Verification details including authorization info */
+    details: z.ZodOptional<z.ZodObject<{
+        /** Authorization info - how identity was verified during consent */
+        authorization: z.ZodOptional<z.ZodObject<{
+            /**
+             * The authorization method used during consent
+             *
+             * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+             * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+             * - 'password': Password/credential authentication
+             * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+             * - 'verifiable_credential': W3C Verifiable Credential
+             * - 'mdl': Mobile Driver's License
+             * - 'idv': Identity Verification
+             * - 'webauthn': WebAuthn/Passkey authentication
+             * - 'siwe': Sign-In with Ethereum (EIP-4361)
+             * - 'none': Consent-only (no authentication)
+             */
+            type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+            /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+            provider: z.ZodOptional<z.ZodString>;
+            /** Credential type for verifiable_credential or mdl auth */
+            credentialType: z.ZodOptional<z.ZodString>;
+            /** MDL issuer DID or identifier */
+            issuer: z.ZodOptional<z.ZodString>;
+            /** IDV verification level */
+            verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+            /** WebAuthn Relying Party ID */
+            rpId: z.ZodOptional<z.ZodString>;
+            /** WebAuthn user verification level */
+            userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+            /** SIWE Ethereum chain ID */
+            chainId: z.ZodOptional<z.ZodNumber>;
+            /** SIWE domain */
+            domain: z.ZodOptional<z.ZodString>;
+            /** Timestamp when authorization was verified (milliseconds since epoch) */
+            verifiedAt: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }>>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        /** Authorization info - how identity was verified during consent */
+        authorization: z.ZodOptional<z.ZodObject<{
+            /**
+             * The authorization method used during consent
+             *
+             * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+             * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+             * - 'password': Password/credential authentication
+             * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+             * - 'verifiable_credential': W3C Verifiable Credential
+             * - 'mdl': Mobile Driver's License
+             * - 'idv': Identity Verification
+             * - 'webauthn': WebAuthn/Passkey authentication
+             * - 'siwe': Sign-In with Ethereum (EIP-4361)
+             * - 'none': Consent-only (no authentication)
+             */
+            type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+            /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+            provider: z.ZodOptional<z.ZodString>;
+            /** Credential type for verifiable_credential or mdl auth */
+            credentialType: z.ZodOptional<z.ZodString>;
+            /** MDL issuer DID or identifier */
+            issuer: z.ZodOptional<z.ZodString>;
+            /** IDV verification level */
+            verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+            /** WebAuthn Relying Party ID */
+            rpId: z.ZodOptional<z.ZodString>;
+            /** WebAuthn user verification level */
+            userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+            /** SIWE Ethereum chain ID */
+            chainId: z.ZodOptional<z.ZodNumber>;
+            /** SIWE domain */
+            domain: z.ZodOptional<z.ZodString>;
+            /** Timestamp when authorization was verified (milliseconds since epoch) */
+            verifiedAt: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }>>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        /** Authorization info - how identity was verified during consent */
+        authorization: z.ZodOptional<z.ZodObject<{
+            /**
+             * The authorization method used during consent
+             *
+             * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+             * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+             * - 'password': Password/credential authentication
+             * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+             * - 'verifiable_credential': W3C Verifiable Credential
+             * - 'mdl': Mobile Driver's License
+             * - 'idv': Identity Verification
+             * - 'webauthn': WebAuthn/Passkey authentication
+             * - 'siwe': Sign-In with Ethereum (EIP-4361)
+             * - 'none': Consent-only (no authentication)
+             */
+            type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+            /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+            provider: z.ZodOptional<z.ZodString>;
+            /** Credential type for verifiable_credential or mdl auth */
+            credentialType: z.ZodOptional<z.ZodString>;
+            /** MDL issuer DID or identifier */
+            issuer: z.ZodOptional<z.ZodString>;
+            /** IDV verification level */
+            verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+            /** WebAuthn Relying Party ID */
+            rpId: z.ZodOptional<z.ZodString>;
+            /** WebAuthn user verification level */
+            userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+            /** SIWE Ethereum chain ID */
+            chainId: z.ZodOptional<z.ZodNumber>;
+            /** SIWE domain */
+            domain: z.ZodOptional<z.ZodString>;
+            /** Timestamp when authorization was verified (milliseconds since epoch) */
+            verifiedAt: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }>>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, "strip", z.ZodTypeAny, {
     valid: boolean;
     status: "active" | "revoked" | "expired";
-    verifiedAt: number;
     delegationId: string;
-    details?: Record<string, any> | undefined;
+    verifiedAt: number;
     reason?: string | undefined;
     credentialValid?: boolean | undefined;
     chainValid?: boolean | undefined;
+    details?: z.objectOutputType<{
+        /** Authorization info - how identity was verified during consent */
+        authorization: z.ZodOptional<z.ZodObject<{
+            /**
+             * The authorization method used during consent
+             *
+             * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+             * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+             * - 'password': Password/credential authentication
+             * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+             * - 'verifiable_credential': W3C Verifiable Credential
+             * - 'mdl': Mobile Driver's License
+             * - 'idv': Identity Verification
+             * - 'webauthn': WebAuthn/Passkey authentication
+             * - 'siwe': Sign-In with Ethereum (EIP-4361)
+             * - 'none': Consent-only (no authentication)
+             */
+            type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+            /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+            provider: z.ZodOptional<z.ZodString>;
+            /** Credential type for verifiable_credential or mdl auth */
+            credentialType: z.ZodOptional<z.ZodString>;
+            /** MDL issuer DID or identifier */
+            issuer: z.ZodOptional<z.ZodString>;
+            /** IDV verification level */
+            verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+            /** WebAuthn Relying Party ID */
+            rpId: z.ZodOptional<z.ZodString>;
+            /** WebAuthn user verification level */
+            userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+            /** SIWE Ethereum chain ID */
+            chainId: z.ZodOptional<z.ZodNumber>;
+            /** SIWE domain */
+            domain: z.ZodOptional<z.ZodString>;
+            /** Timestamp when authorization was verified (milliseconds since epoch) */
+            verifiedAt: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
     valid: boolean;
     status: "active" | "revoked" | "expired";
-    verifiedAt: number;
     delegationId: string;
-    details?: Record<string, any> | undefined;
+    verifiedAt: number;
     reason?: string | undefined;
     credentialValid?: boolean | undefined;
     chainValid?: boolean | undefined;
+    details?: z.objectInputType<{
+        /** Authorization info - how identity was verified during consent */
+        authorization: z.ZodOptional<z.ZodObject<{
+            /**
+             * The authorization method used during consent
+             *
+             * - 'oauth2': OAuth 2.0 provider authentication (canonical)
+             * - 'oauth': Deprecated, use 'oauth2' (will be removed in v2.0.0)
+             * - 'password': Password/credential authentication
+             * - 'credential': Deprecated, use 'verifiable_credential' (will be removed in v2.0.0)
+             * - 'verifiable_credential': W3C Verifiable Credential
+             * - 'mdl': Mobile Driver's License
+             * - 'idv': Identity Verification
+             * - 'webauthn': WebAuthn/Passkey authentication
+             * - 'siwe': Sign-In with Ethereum (EIP-4361)
+             * - 'none': Consent-only (no authentication)
+             */
+            type: z.ZodEnum<["oauth", "oauth2", "password", "credential", "verifiable_credential", "mdl", "idv", "webauthn", "siwe", "none"]>;
+            /** OAuth/Password/IDV provider name (e.g., 'github', 'google', 'credentials') */
+            provider: z.ZodOptional<z.ZodString>;
+            /** Credential type for verifiable_credential or mdl auth */
+            credentialType: z.ZodOptional<z.ZodString>;
+            /** MDL issuer DID or identifier */
+            issuer: z.ZodOptional<z.ZodString>;
+            /** IDV verification level */
+            verificationLevel: z.ZodOptional<z.ZodEnum<["basic", "enhanced", "loa3"]>>;
+            /** WebAuthn Relying Party ID */
+            rpId: z.ZodOptional<z.ZodString>;
+            /** WebAuthn user verification level */
+            userVerification: z.ZodOptional<z.ZodEnum<["required", "preferred", "discouraged"]>>;
+            /** SIWE Ethereum chain ID */
+            chainId: z.ZodOptional<z.ZodNumber>;
+            /** SIWE domain */
+            domain: z.ZodOptional<z.ZodString>;
+            /** Timestamp when authorization was verified (milliseconds since epoch) */
+            verifiedAt: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }, {
+            type: "oauth" | "oauth2" | "password" | "credential" | "verifiable_credential" | "mdl" | "idv" | "webauthn" | "siwe" | "none";
+            provider?: string | undefined;
+            credentialType?: string | undefined;
+            issuer?: string | undefined;
+            verificationLevel?: "basic" | "enhanced" | "loa3" | undefined;
+            rpId?: string | undefined;
+            userVerification?: "required" | "preferred" | "discouraged" | undefined;
+            chainId?: number | undefined;
+            domain?: string | undefined;
+            verifiedAt?: number | undefined;
+        }>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
 }>;
 export type DelegationVerificationResult = z.infer<typeof DelegationVerificationResultSchema>;
 /**
@@ -3958,12 +4504,15 @@ export declare function validateDelegationChain(chain: unknown): z.SafeParseRetu
     rootIssuer: string;
     leafSubject: string;
     chain: {
+        issuerDid: string;
+        subjectDid: string;
+        vcId: string;
         status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectInputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -4010,9 +4559,6 @@ export declare function validateDelegationChain(chain: unknown): z.SafeParseRetu
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        vcId: string;
         delegationId: string;
         depth: number;
     }[];
@@ -4023,12 +4569,15 @@ export declare function validateDelegationChain(chain: unknown): z.SafeParseRetu
     rootIssuer: string;
     leafSubject: string;
     chain: {
+        issuerDid: string;
+        subjectDid: string;
+        vcId: string;
         status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectOutputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -4075,9 +4624,6 @@ export declare function validateDelegationChain(chain: unknown): z.SafeParseRetu
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        vcId: string;
         delegationId: string;
         depth: number;
     }[];
@@ -4555,13 +5101,15 @@ export declare const DelegationCredentialSubjectSchema: z.ZodObject<{
         /** Optional metadata */
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     }, "strip", z.ZodTypeAny, {
-        status: "active" | "revoked" | "expired";
         id: string;
+        issuerDid: string;
+        subjectDid: string;
+        status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectOutputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -4608,19 +5156,19 @@ export declare const DelegationCredentialSubjectSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        metadata?: Record<string, any> | undefined;
-        createdAt?: number | undefined;
         controller?: string | undefined;
         parentId?: string | undefined;
+        createdAt?: number | undefined;
+        metadata?: Record<string, any> | undefined;
     }, {
         id: string;
+        issuerDid: string;
+        subjectDid: string;
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectInputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -4667,23 +5215,24 @@ export declare const DelegationCredentialSubjectSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        status?: "active" | "revoked" | "expired" | undefined;
-        metadata?: Record<string, any> | undefined;
-        createdAt?: number | undefined;
         controller?: string | undefined;
         parentId?: string | undefined;
+        status?: "active" | "revoked" | "expired" | undefined;
+        createdAt?: number | undefined;
+        metadata?: Record<string, any> | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
+    id: string;
     delegation: {
-        status: "active" | "revoked" | "expired";
         id: string;
+        issuerDid: string;
+        subjectDid: string;
+        status: "active" | "revoked" | "expired";
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectOutputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -4730,22 +5279,22 @@ export declare const DelegationCredentialSubjectSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        metadata?: Record<string, any> | undefined;
-        createdAt?: number | undefined;
         controller?: string | undefined;
         parentId?: string | undefined;
+        createdAt?: number | undefined;
+        metadata?: Record<string, any> | undefined;
     };
-    id: string;
 }, {
+    id: string;
     delegation: {
         id: string;
+        issuerDid: string;
+        subjectDid: string;
         constraints: {
-            scopes?: string[] | undefined;
-            audience?: string | string[] | undefined;
             notBefore?: number | undefined;
             notAfter?: number | undefined;
+            scopes?: string[] | undefined;
+            audience?: string | string[] | undefined;
             crisp?: z.objectInputType<{
                 budget: z.ZodOptional<z.ZodObject<{
                     unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -4792,15 +5341,12 @@ export declare const DelegationCredentialSubjectSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
-        issuerDid: string;
-        subjectDid: string;
-        status?: "active" | "revoked" | "expired" | undefined;
-        metadata?: Record<string, any> | undefined;
-        createdAt?: number | undefined;
         controller?: string | undefined;
         parentId?: string | undefined;
+        status?: "active" | "revoked" | "expired" | undefined;
+        createdAt?: number | undefined;
+        metadata?: Record<string, any> | undefined;
     };
-    id: string;
 }>;
 export type DelegationCredentialSubject = z.infer<typeof DelegationCredentialSubjectSchema>;
 /**
@@ -5260,13 +5806,15 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             /** Optional metadata */
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, "strip", z.ZodTypeAny, {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -5313,19 +5861,19 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }, {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -5372,23 +5920,24 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
+        id: string;
         delegation: {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -5435,22 +5984,22 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }, {
+        id: string;
         delegation: {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -5497,15 +6046,12 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }>;
     credentialStatus: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -5514,14 +6060,14 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
         statusListIndex: z.ZodString;
         statusListCredential: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
     }, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
@@ -5976,13 +6522,15 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             /** Optional metadata */
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, "strip", z.ZodTypeAny, {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6029,19 +6577,19 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }, {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6088,23 +6636,24 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
+        id: string;
         delegation: {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6151,22 +6700,22 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }, {
+        id: string;
         delegation: {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6213,15 +6762,12 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }>;
     credentialStatus: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -6230,14 +6776,14 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
         statusListIndex: z.ZodString;
         statusListCredential: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
     }, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
@@ -6692,13 +7238,15 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             /** Optional metadata */
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, "strip", z.ZodTypeAny, {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6745,19 +7293,19 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }, {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6804,23 +7352,24 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
+        id: string;
         delegation: {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6867,22 +7416,22 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }, {
+        id: string;
         delegation: {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -6929,15 +7478,12 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }>;
     credentialStatus: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -6946,14 +7492,14 @@ export declare const DelegationCredentialSchema: z.ZodObject<{
         statusListIndex: z.ZodString;
         statusListCredential: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
     }, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
@@ -7416,13 +7962,15 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             /** Optional metadata */
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, "strip", z.ZodTypeAny, {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -7469,19 +8017,19 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }, {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -7528,23 +8076,24 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
+        id: string;
         delegation: {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -7591,22 +8140,22 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }, {
+        id: string;
         delegation: {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -7653,15 +8202,12 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }>;
     credentialStatus: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -7670,14 +8216,14 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
         statusListIndex: z.ZodString;
         statusListCredential: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
     }, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
@@ -8132,13 +8678,15 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             /** Optional metadata */
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, "strip", z.ZodTypeAny, {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -8185,19 +8733,19 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }, {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -8244,23 +8792,24 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
+        id: string;
         delegation: {
-            status: "active" | "revoked" | "expired";
             id: string;
+            issuerDid: string;
+            subjectDid: string;
+            status: "active" | "revoked" | "expired";
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectOutputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -8307,22 +8856,22 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }, {
+        id: string;
         delegation: {
             id: string;
+            issuerDid: string;
+            subjectDid: string;
             constraints: {
-                scopes?: string[] | undefined;
-                audience?: string | string[] | undefined;
                 notBefore?: number | undefined;
                 notAfter?: number | undefined;
+                scopes?: string[] | undefined;
+                audience?: string | string[] | undefined;
                 crisp?: z.objectInputType<{
                     budget: z.ZodOptional<z.ZodObject<{
                         unit: z.ZodEnum<["USD", "ops", "points"]>;
@@ -8369,15 +8918,12 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
             } & {
                 [k: string]: unknown;
             };
-            issuerDid: string;
-            subjectDid: string;
-            status?: "active" | "revoked" | "expired" | undefined;
-            metadata?: Record<string, any> | undefined;
-            createdAt?: number | undefined;
             controller?: string | undefined;
             parentId?: string | undefined;
+            status?: "active" | "revoked" | "expired" | undefined;
+            createdAt?: number | undefined;
+            metadata?: Record<string, any> | undefined;
         };
-        id: string;
     }>;
     credentialStatus: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -8386,14 +8932,14 @@ export declare function validateDelegationCredential(credential: unknown): z.Saf
         statusListIndex: z.ZodString;
         statusListCredential: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;
     }, {
-        type: "StatusList2021Entry";
         id: string;
+        type: "StatusList2021Entry";
         statusPurpose: "revocation" | "suspension";
         statusListIndex: string;
         statusListCredential: string;