@kya-os/contracts 1.7.4 → 1.7.7

package/dist/audit/index.d.ts

@@ -72,8 +72,8 @@ export declare const AuditContextSchema: z.ZodObject<{
         [k: string]: unknown;
     };
     session: {
-        audience: string;
         sessionId: string;
+        audience: string;
     } & {
         [k: string]: unknown;
     };
@@ -89,8 +89,8 @@ export declare const AuditContextSchema: z.ZodObject<{
         [k: string]: unknown;
     };
     session: {
-        audience: string;
         sessionId: string;
+        audience: string;
     } & {
         [k: string]: unknown;
     };
@@ -160,8 +160,8 @@ export declare const AuditEventContextSchema: z.ZodObject<{
         [k: string]: unknown;
     };
     session: {
-        audience: string;
         sessionId: string;
+        audience: string;
     } & {
         [k: string]: unknown;
     };
@@ -175,8 +175,8 @@ export declare const AuditEventContextSchema: z.ZodObject<{
         [k: string]: unknown;
     };
     session: {
-        audience: string;
         sessionId: string;
+        audience: string;
     } & {
         [k: string]: unknown;
     };

package/dist/cli.d.ts

@@ -37,11 +37,11 @@ export declare const CLIIdentityFileSchema: z.ZodEffects<z.ZodEffects<z.ZodObjec
         claimUrl: string | null;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    version: "1.0";
     did: string;
     publicKey: string;
     privateKey: string;
     createdAt: string;
+    version: "1.0";
     kta?: {
         registered: boolean;
         registeredAt: string;
@@ -51,11 +51,11 @@ export declare const CLIIdentityFileSchema: z.ZodEffects<z.ZodEffects<z.ZodObjec
     keyId?: string | undefined;
     lastRotated?: string | undefined;
 }, {
-    version: "1.0";
     did: string;
     publicKey: string;
     privateKey: string;
     createdAt: string;
+    version: "1.0";
     kta?: {
         registered: boolean;
         registeredAt: string;
@@ -65,11 +65,11 @@ export declare const CLIIdentityFileSchema: z.ZodEffects<z.ZodEffects<z.ZodObjec
     keyId?: string | undefined;
     lastRotated?: string | undefined;
 }>, {
-    version: "1.0";
     did: string;
     publicKey: string;
     privateKey: string;
     createdAt: string;
+    version: "1.0";
     kta?: {
         registered: boolean;
         registeredAt: string;
@@ -79,11 +79,11 @@ export declare const CLIIdentityFileSchema: z.ZodEffects<z.ZodEffects<z.ZodObjec
     keyId?: string | undefined;
     lastRotated?: string | undefined;
 }, {
-    version: "1.0";
     did: string;
     publicKey: string;
     privateKey: string;
     createdAt: string;
+    version: "1.0";
     kta?: {
         registered: boolean;
         registeredAt: string;
@@ -102,11 +102,11 @@ export declare const CLIIdentityFileSchema: z.ZodEffects<z.ZodEffects<z.ZodObjec
     lastRotated?: string;
     kta?: z.infer<typeof KTARegistrationSchema>;
 }, {
-    version: "1.0";
     did: string;
     publicKey: string;
     privateKey: string;
     createdAt: string;
+    version: "1.0";
     kta?: {
         registered: boolean;
         registeredAt: string;

package/dist/config/identity.d.ts

@@ -298,6 +298,41 @@ export declare const CredentialProviderConfigSchema: z.ZodObject<{
         submitButtonText?: string | undefined;
     } | undefined;
 }>;
+/**
+ * OAuth Provider Secret Metadata
+ *
+ * Metadata for runtime secret resolution from secure storage.
+ * Part of the MCP-I provider-registry model where agents resolve
+ * secrets by name from Cloudflare Worker env bindings.
+ */
+export interface OAuthProviderSecretMetadata {
+    /**
+     * Secret name for client secret in secure storage
+     * Used by agents to resolve the actual secret value at runtime
+     * @example 'KYA_PROD_MYPROJ_GITHUB_CLIENT_SECRET'
+     */
+    clientSecretName?: string;
+    /**
+     * Secret name for client ID in secure storage (optional)
+     * @example 'KYA_PROD_MYPROJ_GITHUB_CLIENT_ID'
+     */
+    clientIdSecretName?: string;
+    /**
+     * Secret name for API key in secure storage (for non-OAuth providers)
+     * @example 'KYA_PROD_MYPROJ_CUSTOM_API_KEY'
+     */
+    apiKeySecretName?: string;
+    /**
+     * Version number of the client secret for rotation tracking
+     * Incremented on each rotation
+     */
+    clientSecretVersion?: number;
+    /**
+     * ISO 8601 timestamp of when the secret was last rotated
+     * @example '2025-12-01T00:00:00Z'
+     */
+    lastRotatedAt?: string;
+}
 /**
  * OAuth Provider Configuration
  *
@@ -332,6 +367,17 @@ export interface OAuthProvider {
     responseType?: string;
     /** OAuth grant type (default: "authorization_code") */
     grantType?: string;
+    /**
+     * Whether provider has a client secret configured
+     * Boolean flag indicating secret availability without exposing the value
+     */
+    hasClientSecret?: boolean;
+    /**
+     * Secret resolution metadata for MCP-I provider-registry model
+     * Contains secret names (not values) for runtime resolution from secure storage
+     * Agents use these names to look up actual secrets from Cloudflare Worker env
+     */
+    metadata?: OAuthProviderSecretMetadata;
 }
 /**
  * OAuth Configuration
@@ -353,6 +399,28 @@ export interface OAuthConfig {
      */
     configuredProvider?: string | null;
 }
+/**
+ * Zod schema for OAuthProviderSecretMetadata validation
+ */
+export declare const OAuthProviderSecretMetadataSchema: z.ZodObject<{
+    clientSecretName: z.ZodOptional<z.ZodString>;
+    clientIdSecretName: z.ZodOptional<z.ZodString>;
+    apiKeySecretName: z.ZodOptional<z.ZodString>;
+    clientSecretVersion: z.ZodOptional<z.ZodNumber>;
+    lastRotatedAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    clientSecretName?: string | undefined;
+    clientIdSecretName?: string | undefined;
+    apiKeySecretName?: string | undefined;
+    clientSecretVersion?: number | undefined;
+    lastRotatedAt?: string | undefined;
+}, {
+    clientSecretName?: string | undefined;
+    clientIdSecretName?: string | undefined;
+    apiKeySecretName?: string | undefined;
+    clientSecretVersion?: number | undefined;
+    lastRotatedAt?: string | undefined;
+}>;
 /**
  * Zod schema for OAuthProvider validation
  */
@@ -371,6 +439,26 @@ export declare const OAuthProviderSchema: z.ZodObject<{
     tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<["client_secret_post", "client_secret_basic"]>>;
     responseType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     grantType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    hasClientSecret: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodObject<{
+        clientSecretName: z.ZodOptional<z.ZodString>;
+        clientIdSecretName: z.ZodOptional<z.ZodString>;
+        apiKeySecretName: z.ZodOptional<z.ZodString>;
+        clientSecretVersion: z.ZodOptional<z.ZodNumber>;
+        lastRotatedAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    }, {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     clientId: string;
     authorizationUrl: string;
@@ -386,6 +474,14 @@ export declare const OAuthProviderSchema: z.ZodObject<{
     proxyMode?: boolean | undefined;
     customParams?: Record<string, string> | undefined;
     tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
+    hasClientSecret?: boolean | undefined;
+    metadata?: {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    } | undefined;
 }, {
     clientId: string;
     authorizationUrl: string;
@@ -401,6 +497,14 @@ export declare const OAuthProviderSchema: z.ZodObject<{
     tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
     responseType?: string | undefined;
     grantType?: string | undefined;
+    hasClientSecret?: boolean | undefined;
+    metadata?: {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    } | undefined;
 }>;
 /**
  * Zod schema for OAuthConfig validation
@@ -421,6 +525,26 @@ export declare const OAuthConfigSchema: z.ZodObject<{
         tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<["client_secret_post", "client_secret_basic"]>>;
         responseType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
         grantType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        hasClientSecret: z.ZodOptional<z.ZodBoolean>;
+        metadata: z.ZodOptional<z.ZodObject<{
+            clientSecretName: z.ZodOptional<z.ZodString>;
+            clientIdSecretName: z.ZodOptional<z.ZodString>;
+            apiKeySecretName: z.ZodOptional<z.ZodString>;
+            clientSecretVersion: z.ZodOptional<z.ZodNumber>;
+            lastRotatedAt: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            clientSecretName?: string | undefined;
+            clientIdSecretName?: string | undefined;
+            apiKeySecretName?: string | undefined;
+            clientSecretVersion?: number | undefined;
+            lastRotatedAt?: string | undefined;
+        }, {
+            clientSecretName?: string | undefined;
+            clientIdSecretName?: string | undefined;
+            apiKeySecretName?: string | undefined;
+            clientSecretVersion?: number | undefined;
+            lastRotatedAt?: string | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         clientId: string;
         authorizationUrl: string;
@@ -436,6 +560,14 @@ export declare const OAuthConfigSchema: z.ZodObject<{
         proxyMode?: boolean | undefined;
         customParams?: Record<string, string> | undefined;
         tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
+        hasClientSecret?: boolean | undefined;
+        metadata?: {
+            clientSecretName?: string | undefined;
+            clientIdSecretName?: string | undefined;
+            apiKeySecretName?: string | undefined;
+            clientSecretVersion?: number | undefined;
+            lastRotatedAt?: string | undefined;
+        } | undefined;
     }, {
         clientId: string;
         authorizationUrl: string;
@@ -451,6 +583,14 @@ export declare const OAuthConfigSchema: z.ZodObject<{
         tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
         responseType?: string | undefined;
         grantType?: string | undefined;
+        hasClientSecret?: boolean | undefined;
+        metadata?: {
+            clientSecretName?: string | undefined;
+            clientIdSecretName?: string | undefined;
+            apiKeySecretName?: string | undefined;
+            clientSecretVersion?: number | undefined;
+            lastRotatedAt?: string | undefined;
+        } | undefined;
     }>>;
     configuredProvider: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
@@ -469,6 +609,14 @@ export declare const OAuthConfigSchema: z.ZodObject<{
         proxyMode?: boolean | undefined;
         customParams?: Record<string, string> | undefined;
         tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
+        hasClientSecret?: boolean | undefined;
+        metadata?: {
+            clientSecretName?: string | undefined;
+            clientIdSecretName?: string | undefined;
+            apiKeySecretName?: string | undefined;
+            clientSecretVersion?: number | undefined;
+            lastRotatedAt?: string | undefined;
+        } | undefined;
     }>;
     configuredProvider?: string | null | undefined;
 }, {
@@ -487,6 +635,14 @@ export declare const OAuthConfigSchema: z.ZodObject<{
         tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
         responseType?: string | undefined;
         grantType?: string | undefined;
+        hasClientSecret?: boolean | undefined;
+        metadata?: {
+            clientSecretName?: string | undefined;
+            clientIdSecretName?: string | undefined;
+            apiKeySecretName?: string | undefined;
+            clientSecretVersion?: number | undefined;
+            lastRotatedAt?: string | undefined;
+        } | undefined;
     }>;
     configuredProvider?: string | null | undefined;
 }>;
@@ -511,6 +667,10 @@ export interface OAuth2ProviderConfig extends BaseProviderConfig {
     tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic";
     responseType?: string;
     grantType?: string;
+    /** Whether provider has a client secret configured */
+    hasClientSecret?: boolean;
+    /** Secret resolution metadata for MCP-I provider-registry model */
+    metadata?: OAuthProviderSecretMetadata;
 }
 /**
  * Zod schema for OAuth2ProviderConfig validation
@@ -532,6 +692,26 @@ export declare const OAuth2ProviderConfigSchema: z.ZodObject<{
     tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<["client_secret_post", "client_secret_basic"]>>;
     responseType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     grantType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    hasClientSecret: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodObject<{
+        clientSecretName: z.ZodOptional<z.ZodString>;
+        clientIdSecretName: z.ZodOptional<z.ZodString>;
+        apiKeySecretName: z.ZodOptional<z.ZodString>;
+        clientSecretVersion: z.ZodOptional<z.ZodNumber>;
+        lastRotatedAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    }, {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     type: "oauth2";
     clientId: string;
@@ -549,6 +729,14 @@ export declare const OAuth2ProviderConfigSchema: z.ZodObject<{
     proxyMode?: boolean | undefined;
     customParams?: Record<string, string> | undefined;
     tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
+    hasClientSecret?: boolean | undefined;
+    metadata?: {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    } | undefined;
 }, {
     type: "oauth2";
     clientId: string;
@@ -566,6 +754,14 @@ export declare const OAuth2ProviderConfigSchema: z.ZodObject<{
     tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
     responseType?: string | undefined;
     grantType?: string | undefined;
+    hasClientSecret?: boolean | undefined;
+    metadata?: {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    } | undefined;
 }>;
 /**
  * Unified Auth Provider Type
@@ -594,6 +790,26 @@ export declare const AuthProviderSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<["client_secret_post", "client_secret_basic"]>>;
     responseType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     grantType: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    hasClientSecret: z.ZodOptional<z.ZodBoolean>;
+    metadata: z.ZodOptional<z.ZodObject<{
+        clientSecretName: z.ZodOptional<z.ZodString>;
+        clientIdSecretName: z.ZodOptional<z.ZodString>;
+        apiKeySecretName: z.ZodOptional<z.ZodString>;
+        clientSecretVersion: z.ZodOptional<z.ZodNumber>;
+        lastRotatedAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    }, {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     type: "oauth2";
     clientId: string;
@@ -611,6 +827,14 @@ export declare const AuthProviderSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     proxyMode?: boolean | undefined;
     customParams?: Record<string, string> | undefined;
     tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
+    hasClientSecret?: boolean | undefined;
+    metadata?: {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    } | undefined;
 }, {
     type: "oauth2";
     clientId: string;
@@ -628,6 +852,14 @@ export declare const AuthProviderSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     tokenEndpointAuthMethod?: "client_secret_post" | "client_secret_basic" | undefined;
     responseType?: string | undefined;
     grantType?: string | undefined;
+    hasClientSecret?: boolean | undefined;
+    metadata?: {
+        clientSecretName?: string | undefined;
+        clientIdSecretName?: string | undefined;
+        apiKeySecretName?: string | undefined;
+        clientSecretVersion?: number | undefined;
+        lastRotatedAt?: string | undefined;
+    } | undefined;
 }>, z.ZodObject<{
     type: z.ZodLiteral<"credential">;
     displayName: z.ZodOptional<z.ZodString>;
@@ -906,27 +1138,27 @@ export declare const AgentIdentitySchema: z.ZodObject<{
     publicKey: string;
     privateKey: string;
     createdAt: string;
+    metadata?: z.objectOutputType<{
+        name: z.ZodOptional<z.ZodString>;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
     kta?: {
         registered: boolean;
         registeredAt: string;
         claimUrl: string | null;
     } | undefined;
-    metadata?: z.objectOutputType<{
-        name: z.ZodOptional<z.ZodString>;
-        version: z.ZodOptional<z.ZodString>;
-    }, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
     did: string;
     publicKey: string;
     privateKey: string;
     createdAt: string;
+    metadata?: z.objectInputType<{
+        name: z.ZodOptional<z.ZodString>;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
     kta?: {
         registered: boolean;
         registeredAt: string;
         claimUrl: string | null;
     } | undefined;
-    metadata?: z.objectInputType<{
-        name: z.ZodOptional<z.ZodString>;
-        version: z.ZodOptional<z.ZodString>;
-    }, z.ZodTypeAny, "passthrough"> | undefined;
 }>;

package/dist/config/identity.js

@@ -8,7 +8,7 @@
  * @module @kya-os/contracts/config
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentIdentitySchema = exports.KTARegistrationSchema = exports.AuthProviderSchema = exports.OAuth2ProviderConfigSchema = exports.OAuthConfigSchema = exports.OAuthProviderSchema = exports.CredentialProviderConfigSchema = void 0;
+exports.AgentIdentitySchema = exports.KTARegistrationSchema = exports.AuthProviderSchema = exports.OAuth2ProviderConfigSchema = exports.OAuthConfigSchema = exports.OAuthProviderSchema = exports.OAuthProviderSecretMetadataSchema = exports.CredentialProviderConfigSchema = void 0;
 const zod_1 = require("zod");
 /**
  * Zod schema for CredentialProviderConfig validation
@@ -48,6 +48,16 @@ exports.CredentialProviderConfigSchema = zod_1.z.object({
     })
         .optional(),
 });
+/**
+ * Zod schema for OAuthProviderSecretMetadata validation
+ */
+exports.OAuthProviderSecretMetadataSchema = zod_1.z.object({
+    clientSecretName: zod_1.z.string().optional(),
+    clientIdSecretName: zod_1.z.string().optional(),
+    apiKeySecretName: zod_1.z.string().optional(),
+    clientSecretVersion: zod_1.z.number().optional(),
+    lastRotatedAt: zod_1.z.string().optional(),
+});
 /**
  * Zod schema for OAuthProvider validation
  */
@@ -69,6 +79,9 @@ exports.OAuthProviderSchema = zod_1.z.object({
         .optional(),
     responseType: zod_1.z.string().optional().default("code"),
     grantType: zod_1.z.string().optional().default("authorization_code"),
+    // MCP-I Provider Registry
+    hasClientSecret: zod_1.z.boolean().optional(),
+    metadata: exports.OAuthProviderSecretMetadataSchema.optional(),
 });
 /**
  * Zod schema for OAuthConfig validation
@@ -99,6 +112,9 @@ exports.OAuth2ProviderConfigSchema = zod_1.z.object({
         .optional(),
     responseType: zod_1.z.string().optional().default("code"),
     grantType: zod_1.z.string().optional().default("authorization_code"),
+    // MCP-I Provider Registry
+    hasClientSecret: zod_1.z.boolean().optional(),
+    metadata: exports.OAuthProviderSecretMetadataSchema.optional(),
 });
 /**
  * Zod schema for AuthProvider validation (discriminated union)

package/dist/config/index.d.ts

@@ -13,7 +13,7 @@ import type { DelegationConfig } from "./delegation.js";
 import type { ToolProtectionSourceConfig } from "./tool-protection.js";
 import type { ClientMessagesConfig } from "./client-messages.js";
 export { MCPIBaseConfig } from "./base.js";
-export { RuntimeIdentityConfig, AgentIdentity, OAuthProvider, OAuthConfig, IdpTokens, AuthProviderType, BaseProviderConfig, CredentialProviderConfig, CredentialProviderConfigSchema, OAuth2ProviderConfig, OAuth2ProviderConfigSchema, AuthProvider, AuthProviderSchema, } from "./identity.js";
+export { RuntimeIdentityConfig, AgentIdentity, OAuthProvider, OAuthConfig, IdpTokens, AuthProviderType, BaseProviderConfig, CredentialProviderConfig, CredentialProviderConfigSchema, OAuth2ProviderConfig, OAuth2ProviderConfigSchema, AuthProvider, AuthProviderSchema, OAuthProviderSecretMetadata, OAuthProviderSecretMetadataSchema, OAuthProviderSchema, OAuthConfigSchema, } from "./identity.js";
 export type { ToolExecutionContext } from "./tool-context.js";
 /**
  * @deprecated Use RuntimeIdentityConfig instead

package/dist/config/index.js

@@ -8,12 +8,15 @@
  * @module @kya-os/contracts/config
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateClientMessagesConfig = exports.validateClientMessageTemplate = exports.isClientMessagesConfig = exports.isClientMessageTemplate = exports.ClientMessagesConfigSchema = exports.ClientMessageTemplateSchema = exports.buildBaseConfig = exports.AuthProviderSchema = exports.OAuth2ProviderConfigSchema = exports.CredentialProviderConfigSchema = void 0;
+exports.validateClientMessagesConfig = exports.validateClientMessageTemplate = exports.isClientMessagesConfig = exports.isClientMessageTemplate = exports.ClientMessagesConfigSchema = exports.ClientMessageTemplateSchema = exports.buildBaseConfig = exports.OAuthConfigSchema = exports.OAuthProviderSchema = exports.OAuthProviderSecretMetadataSchema = exports.AuthProviderSchema = exports.OAuth2ProviderConfigSchema = exports.CredentialProviderConfigSchema = void 0;
 // Identity configuration
 var identity_js_1 = require("./identity.js");
 Object.defineProperty(exports, "CredentialProviderConfigSchema", { enumerable: true, get: function () { return identity_js_1.CredentialProviderConfigSchema; } });
 Object.defineProperty(exports, "OAuth2ProviderConfigSchema", { enumerable: true, get: function () { return identity_js_1.OAuth2ProviderConfigSchema; } });
 Object.defineProperty(exports, "AuthProviderSchema", { enumerable: true, get: function () { return identity_js_1.AuthProviderSchema; } });
+Object.defineProperty(exports, "OAuthProviderSecretMetadataSchema", { enumerable: true, get: function () { return identity_js_1.OAuthProviderSecretMetadataSchema; } });
+Object.defineProperty(exports, "OAuthProviderSchema", { enumerable: true, get: function () { return identity_js_1.OAuthProviderSchema; } });
+Object.defineProperty(exports, "OAuthConfigSchema", { enumerable: true, get: function () { return identity_js_1.OAuthConfigSchema; } });
 // Configuration builder utilities
 var builder_js_1 = require("./builder.js");
 Object.defineProperty(exports, "buildBaseConfig", { enumerable: true, get: function () { return builder_js_1.buildBaseConfig; } });