@kya-os/contracts 1.7.17 → 1.7.19

package/dist/audit/index.d.ts

@@ -65,38 +65,38 @@ export declare const AuditContextSchema: z.ZodObject<{
      */
     scopeId: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    identity: {
-        did: string;
-        kid: string;
-    } & {
-        [k: string]: unknown;
-    };
+    requestHash: string;
+    responseHash: string;
     session: {
         audience: string;
         sessionId: string;
     } & {
         [k: string]: unknown;
     };
-    requestHash: string;
-    responseHash: string;
     verified: "yes" | "no";
-    scopeId?: string | undefined;
-}, {
     identity: {
         did: string;
         kid: string;
     } & {
         [k: string]: unknown;
     };
+    scopeId?: string | undefined;
+}, {
+    requestHash: string;
+    responseHash: string;
     session: {
         audience: string;
         sessionId: string;
     } & {
         [k: string]: unknown;
     };
-    requestHash: string;
-    responseHash: string;
     verified: "yes" | "no";
+    identity: {
+        did: string;
+        kid: string;
+    } & {
+        [k: string]: unknown;
+    };
     scopeId?: string | undefined;
 }>;
 export type AuditContext = {
@@ -153,33 +153,33 @@ export declare const AuditEventContextSchema: z.ZodObject<{
      */
     eventData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
-    identity: {
-        did: string;
-        kid: string;
-    } & {
-        [k: string]: unknown;
-    };
     session: {
         audience: string;
         sessionId: string;
     } & {
         [k: string]: unknown;
     };
-    eventType: string;
-    eventData?: Record<string, unknown> | undefined;
-}, {
     identity: {
         did: string;
         kid: string;
     } & {
         [k: string]: unknown;
     };
+    eventType: string;
+    eventData?: Record<string, unknown> | undefined;
+}, {
     session: {
         audience: string;
         sessionId: string;
     } & {
         [k: string]: unknown;
     };
+    identity: {
+        did: string;
+        kid: string;
+    } & {
+        [k: string]: unknown;
+    };
     eventType: string;
     eventData?: Record<string, unknown> | undefined;
 }>;

package/dist/consent/schemas.d.ts

@@ -151,13 +151,13 @@ export declare const oauthIdentitySchema: z.ZodObject<{
      */
     name: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    subject: string;
     provider: string;
+    subject: string;
     email?: string | undefined;
     name?: string | undefined;
 }, {
-    subject: string;
     provider: string;
+    subject: string;
     email?: string | undefined;
     name?: string | undefined;
 }>;
@@ -469,13 +469,13 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
          */
         name: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        subject: string;
         provider: string;
+        subject: string;
         email?: string | undefined;
         name?: string | undefined;
     }, {
-        subject: string;
         provider: string;
+        subject: string;
         email?: string | undefined;
         name?: string | undefined;
     }>>>;
@@ -485,6 +485,20 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
      * Format: did:key:... or did:web:...
      */
     user_did: z.ZodOptional<z.ZodString>;
+    /**
+     * Human-readable user identifier from credential authentication (email/username).
+     * Used for display in AgentShield dashboard.
+     * This comes from the credential provider response (e.g., customer.email from Hardware World).
+     * Maps to: user_identifier in delegation metadata
+     */
+    credential_user_email: z.ZodOptional<z.ZodString>;
+    /**
+     * Provider's internal user ID from credential authentication.
+     * This is the provider-specific identifier (e.g., customer ID 696395 from Hardware World).
+     * Used for business reference and linking to provider systems.
+     * Maps to: user_id in delegation metadata
+     */
+    credential_provider_user_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     scopes: string[];
     tool: string;
@@ -496,11 +510,13 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        subject: string;
         provider: string;
+        subject: string;
         email?: string | undefined;
         name?: string | undefined;
     } | null | undefined;
+    credential_user_email?: string | undefined;
+    credential_provider_user_id?: string | undefined;
 }, {
     scopes: string[];
     tool: string;
@@ -512,11 +528,13 @@ export declare const consentApprovalRequestSchema: z.ZodObject<{
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        subject: string;
         provider: string;
+        subject: string;
         email?: string | undefined;
         name?: string | undefined;
     } | null | undefined;
+    credential_user_email?: string | undefined;
+    credential_provider_user_id?: string | undefined;
 }>;
 export type ConsentApprovalRequest = z.infer<typeof consentApprovalRequestSchema>;
 /**
@@ -831,11 +849,13 @@ export declare function validateConsentApprovalRequest(request: unknown): z.Safe
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        subject: string;
         provider: string;
+        subject: string;
         email?: string | undefined;
         name?: string | undefined;
     } | null | undefined;
+    credential_user_email?: string | undefined;
+    credential_provider_user_id?: string | undefined;
 }, {
     scopes: string[];
     tool: string;
@@ -847,11 +867,13 @@ export declare function validateConsentApprovalRequest(request: unknown): z.Safe
     customFields?: Record<string, string | boolean> | undefined;
     termsVersion?: string | undefined;
     oauth_identity?: {
-        subject: string;
         provider: string;
+        subject: string;
         email?: string | undefined;
         name?: string | undefined;
     } | null | undefined;
+    credential_user_email?: string | undefined;
+    credential_provider_user_id?: string | undefined;
 }>;
 /**
  * Validate a consent approval response

package/dist/consent/schemas.js

@@ -228,6 +228,26 @@ exports.consentApprovalRequestSchema = zod_1.z.object({
         .regex(/^did:/, "Must be a valid DID format (starting with did:)")
         .max(500, "DID must be 500 characters or less")
         .optional(),
+    /**
+     * Human-readable user identifier from credential authentication (email/username).
+     * Used for display in AgentShield dashboard.
+     * This comes from the credential provider response (e.g., customer.email from Hardware World).
+     * Maps to: user_identifier in delegation metadata
+     */
+    credential_user_email: zod_1.z
+        .string()
+        .max(200, "User email must be 200 characters or less")
+        .optional(),
+    /**
+     * Provider's internal user ID from credential authentication.
+     * This is the provider-specific identifier (e.g., customer ID 696395 from Hardware World).
+     * Used for business reference and linking to provider systems.
+     * Maps to: user_id in delegation metadata
+     */
+    credential_provider_user_id: zod_1.z
+        .string()
+        .max(200, "Provider user ID must be 200 characters or less")
+        .optional(),
 });
 /**
  * Consent Approval Response Schema