multi-agent-protocol 0.0.4 → 0.0.6

package/schema/schema.json

@@ -74,7 +74,13 @@
         { "$ref": "#/$defs/MailThreadCreateRequest" },
         { "$ref": "#/$defs/MailThreadListRequest" },
         { "$ref": "#/$defs/MailSummaryRequest" },
-        { "$ref": "#/$defs/MailReplayRequest" }
+        { "$ref": "#/$defs/MailReplayRequest" },
+        { "$ref": "#/$defs/CredGetRequest" },
+        { "$ref": "#/$defs/CredListRequest" },
+        { "$ref": "#/$defs/CredStatusRequest" },
+        { "$ref": "#/$defs/WorkspaceSearchRequest" },
+        { "$ref": "#/$defs/WorkspaceListRequest" },
+        { "$ref": "#/$defs/WorkspaceReadRequest" }
       ]
     },
     "MAPResponse": {
@@ -307,6 +313,17 @@
           },
           "additionalProperties": false
         },
+        "credentials": {
+          "type": "object",
+          "description": "Credential brokering capabilities",
+          "properties": {
+            "enabled": { "type": "boolean", "description": "Whether credential brokering is enabled (server response only)" },
+            "canGet": { "type": "boolean", "description": "Can request credentials via cred/get" },
+            "canList": { "type": "boolean", "description": "Can list available scopes via cred/list" },
+            "canStatus": { "type": "boolean", "description": "Can check broker status via cred/status" }
+          },
+          "additionalProperties": false
+        },
         "_meta": { "$ref": "#/$defs/Meta" }
       },
       "additionalProperties": false
@@ -412,6 +429,8 @@
         "visibility": { "$ref": "#/$defs/AgentVisibility" },
         "lifecycle": { "$ref": "#/$defs/AgentLifecycle" },
         "capabilities": { "$ref": "#/$defs/ParticipantCapabilities" },
+        "capabilityDescriptor": { "$ref": "#/$defs/MAPAgentCapabilityDescriptor" },
+        "environment": { "$ref": "#/$defs/AgentEnvironment" },
         "metadata": { "type": "object" },
         "_meta": { "$ref": "#/$defs/Meta" }
       },
@@ -419,6 +438,28 @@
       "additionalProperties": false
     },
 
+    "AgentEnvironment": {
+      "type": "object",
+      "description": "Compute environment information for an agent. Category names are normative; field conventions within categories are documented separately.",
+      "properties": {
+        "schemaVersion": { "type": "string", "description": "Schema version (e.g., '1.0')" },
+        "profiles": { "type": "array", "items": { "type": "string" }, "description": "Self-declared profile compliance" },
+        "host": { "type": "object", "additionalProperties": true, "description": "Host/machine info (arch, cpu, memory, gpu)" },
+        "os": { "type": "object", "additionalProperties": true, "description": "Operating system info (type, version)" },
+        "process": { "type": "object", "additionalProperties": true, "description": "Process/runtime info (pid, cwd, runtime)" },
+        "container": { "type": "object", "additionalProperties": true, "description": "Container info if containerized" },
+        "cloud": { "type": "object", "additionalProperties": true, "description": "Cloud provider info (provider, region)" },
+        "k8s": { "type": "object", "additionalProperties": true, "description": "Kubernetes info if in k8s" },
+        "filesystem": { "type": "object", "additionalProperties": true, "description": "Filesystem/workspace info (cwd, mounts, workspace)" },
+        "network": { "type": "object", "additionalProperties": true, "description": "Network info (connectivity, addresses)" },
+        "tools": { "type": "object", "additionalProperties": true, "description": "Available tools and runtimes" },
+        "resources": { "type": "object", "additionalProperties": true, "description": "Resource limits and constraints" },
+        "security": { "type": "object", "additionalProperties": true, "description": "Security/isolation context" },
+        "services": { "type": "object", "additionalProperties": true, "description": "External services and APIs (aiProviders, mcp)" }
+      },
+      "additionalProperties": true
+    },
+
     "Address": {
       "description": "Flexible addressing for any topology",
       "oneOf": [
@@ -691,6 +732,7 @@
       "enum": [
         "agent_registered",
         "agent_state_changed",
+        "agent_environment_changed",
         "agent_unregistered",
         "message_sent",
         "message_delivered",
@@ -768,6 +810,11 @@
           "$ref": "#/$defs/MailSubscriptionFilter",
           "description": "Mail-specific filter for conversation events"
         },
+        "environmentMatch": {
+          "type": "object",
+          "description": "Filter by agent environment attributes (e.g., 'os.type', 'cloud.region', 'network.connectivity')",
+          "additionalProperties": true
+        },
         "_meta": { "$ref": "#/$defs/Meta" }
       },
       "additionalProperties": false
@@ -818,7 +865,10 @@
               "properties": {
                 "method": {
                   "type": "string",
-                  "enum": ["bearer", "api-key", "mtls", "none"]
+                  "oneOf": [
+                    { "enum": ["bearer", "api-key", "mtls", "none"] },
+                    { "type": "string", "pattern": "^x-" }
+                  ]
                 },
                 "token": { "type": "string" }
               }
@@ -845,6 +895,10 @@
             "version": { "type": "string" }
           }
         },
+        "serverEnvironment": {
+          "$ref": "#/$defs/AgentEnvironment",
+          "description": "Server's compute environment (if relevant)"
+        },
         "_meta": { "$ref": "#/$defs/Meta" }
       },
       "required": ["protocolVersion", "sessionId", "participantId", "capabilities"]
@@ -1003,7 +1057,20 @@
                   "items": { "$ref": "#/$defs/ScopeId" }
                 },
                 "parent": { "$ref": "#/$defs/AgentId" },
-                "hasChildren": { "type": "boolean" }
+                "hasChildren": { "type": "boolean" },
+                "capabilityId": {
+                  "type": "string",
+                  "description": "Filter by structured capability ID from capabilityDescriptor"
+                },
+                "tags": {
+                  "type": "array",
+                  "items": { "type": "string" },
+                  "description": "Filter by semantic tags from capabilityDescriptor"
+                },
+                "accepts": {
+                  "type": "string",
+                  "description": "Filter by accepted content type from capabilityDescriptor (MIME type)"
+                }
               }
             },
             "limit": { "type": "integer", "minimum": 1 },
@@ -1213,6 +1280,8 @@
             },
             "visibility": { "$ref": "#/$defs/AgentVisibility" },
             "capabilities": { "$ref": "#/$defs/ParticipantCapabilities" },
+            "capabilityDescriptor": { "$ref": "#/$defs/MAPAgentCapabilityDescriptor" },
+            "environment": { "$ref": "#/$defs/AgentEnvironment" },
             "metadata": { "type": "object" },
             "_meta": { "$ref": "#/$defs/Meta" }
           }
@@ -1252,8 +1321,20 @@
             },
             "visibility": { "$ref": "#/$defs/AgentVisibility" },
             "capabilities": { "$ref": "#/$defs/ParticipantCapabilities" },
+            "capabilityDescriptor": { "$ref": "#/$defs/MAPAgentCapabilityDescriptor" },
+            "environment": { "$ref": "#/$defs/AgentEnvironment" },
             "initialMessage": { "$ref": "#/$defs/Message" },
             "metadata": { "type": "object" },
+            "requestedScopes": {
+              "type": "array",
+              "items": { "type": "string" },
+              "description": "Scopes to request for the delegated credential (defaults to parent's scopes)"
+            },
+            "ttlMinutes": {
+              "type": "integer",
+              "minimum": 1,
+              "description": "TTL in minutes for the delegated credential"
+            },
             "_meta": { "$ref": "#/$defs/Meta" }
           }
         }
@@ -1266,6 +1347,20 @@
       "properties": {
         "agent": { "$ref": "#/$defs/Agent" },
         "messageId": { "$ref": "#/$defs/MessageId" },
+        "delegatedCredentials": {
+          "type": "object",
+          "description": "Credentials delegated to the spawned child agent (when auth provider supports delegation)",
+          "properties": {
+            "method": { "type": "string", "description": "Auth method for the delegated credential" },
+            "credentials": { "type": "object", "description": "The delegated credential data" },
+            "env": {
+              "type": "object",
+              "additionalProperties": { "type": "string" },
+              "description": "Environment variables for the child agent"
+            }
+          },
+          "required": ["method", "credentials"]
+        },
         "_meta": { "$ref": "#/$defs/Meta" }
       },
       "required": ["agent"]
@@ -1749,7 +1844,7 @@
       "type": "object",
       "x-method": "map/federation/connect",
       "x-tier": "extension",
-      "description": "Connect to a peer MAP system",
+      "description": "Connect to a peer MAP system. Supports single-request auth: include auth inline to complete federation handshake in one round-trip.",
       "properties": {
         "jsonrpc": { "$ref": "#/$defs/JsonRpcVersion" },
         "id": { "$ref": "#/$defs/RequestId" },
@@ -1760,15 +1855,49 @@
             "systemId": { "type": "string" },
             "endpoint": { "type": "string", "format": "uri" },
             "auth": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "description": "Standard federation auth (bearer, api-key, mtls, etc.)",
+                  "properties": {
+                    "method": {
+                      "type": "string",
+                      "oneOf": [
+                        { "enum": ["bearer", "api-key", "mtls", "none", "did:wba", "oauth2"] },
+                        { "type": "string", "pattern": "^x-" }
+                      ]
+                    },
+                    "credentials": { "type": "string" }
+                  },
+                  "required": ["method"]
+                },
+                { "$ref": "#/$defs/DIDWBACredentials" }
+              ]
+            },
+            "authContext": {
               "type": "object",
+              "description": "Additional auth context for single-request federation auth",
               "properties": {
-                "method": {
-                  "type": "string",
-                  "enum": ["bearer", "api-key", "mtls"]
-                },
-                "credentials": { "type": "string" }
-              },
-              "required": ["method"]
+                "challenge": { "type": "string", "description": "Challenge nonce for proof-based auth" }
+              }
+            },
+            "systemInfo": {
+              "type": "object",
+              "description": "Connecting system's self-description",
+              "properties": {
+                "name": { "type": "string" },
+                "version": { "type": "string" }
+              }
+            },
+            "protocolVersion": { "type": "integer", "description": "MAP protocol version (default: 1)" },
+            "exposure": {
+              "type": "object",
+              "description": "Which resources the connecting system exposes",
+              "properties": {
+                "agents": { "type": "boolean" },
+                "scopes": { "type": "boolean" },
+                "events": { "type": "boolean" }
+              }
             },
             "_meta": { "$ref": "#/$defs/Meta" }
           },
@@ -1779,9 +1908,33 @@
     },
     "FederationConnectResponse": {
       "type": "object",
-      "description": "Response to map/federation/connect",
+      "description": "Response to map/federation/connect. When single-request auth succeeds, includes sessionId and principal. When auth fails or is required, includes authRequired with supported methods and challenge.",
       "properties": {
         "connected": { "type": "boolean" },
+        "sessionId": { "type": "string", "description": "Session ID assigned on successful auth" },
+        "principal": {
+          "type": "object",
+          "description": "Authenticated principal (on successful auth)",
+          "properties": {
+            "id": { "type": "string" },
+            "issuer": { "type": "string" },
+            "claims": { "type": "object" }
+          }
+        },
+        "authRequired": {
+          "type": "object",
+          "description": "Auth negotiation data (when auth is required or failed)",
+          "properties": {
+            "methods": {
+              "type": "array",
+              "items": { "type": "string" },
+              "description": "Supported auth methods"
+            },
+            "challenge": { "type": "string", "description": "Challenge nonce for proof-based auth methods" },
+            "required": { "type": "boolean", "description": "Whether authentication is required to proceed" }
+          },
+          "required": ["methods", "challenge"]
+        },
         "systemInfo": {
           "type": "object",
           "properties": {
@@ -2553,6 +2706,362 @@
         "_meta": { "$ref": "#/$defs/Meta" }
       },
       "required": ["turns", "hasMore", "missedCount"]
+    },
+
+    "CredGetRequest": {
+      "type": "object",
+      "x-method": "cred/get",
+      "x-tier": "extension",
+      "description": "Request a short-lived credential for a scope and resource",
+      "properties": {
+        "jsonrpc": { "$ref": "#/$defs/JsonRpcVersion" },
+        "id": { "$ref": "#/$defs/RequestId" },
+        "method": { "const": "cred/get" },
+        "params": {
+          "type": "object",
+          "properties": {
+            "scope": { "type": "string", "description": "Scope to request (e.g. 'github:repo:write')" },
+            "resource": { "type": "string", "description": "Resource to access (e.g. 'acme-corp/frontend')" },
+            "_meta": { "$ref": "#/$defs/Meta" }
+          },
+          "required": ["scope", "resource"]
+        }
+      },
+      "required": ["jsonrpc", "id", "method", "params"]
+    },
+    "CredGetResponse": {
+      "type": "object",
+      "description": "Response to cred/get",
+      "properties": {
+        "credentialType": {
+          "type": "string",
+          "enum": ["bearer_token", "aws_credentials", "api_key"],
+          "description": "Type of credential returned"
+        },
+        "credential": { "type": "object", "description": "Provider-specific credential data" },
+        "expiresAt": { "type": "string", "format": "date-time", "description": "When the credential expires (ISO 8601)" },
+        "_meta": { "$ref": "#/$defs/Meta" }
+      },
+      "required": ["credentialType", "credential"]
+    },
+    "CredListRequest": {
+      "type": "object",
+      "x-method": "cred/list",
+      "x-tier": "extension",
+      "description": "List available scopes for the authenticated token",
+      "properties": {
+        "jsonrpc": { "$ref": "#/$defs/JsonRpcVersion" },
+        "id": { "$ref": "#/$defs/RequestId" },
+        "method": { "const": "cred/list" },
+        "params": {
+          "type": "object",
+          "properties": {
+            "_meta": { "$ref": "#/$defs/Meta" }
+          }
+        }
+      },
+      "required": ["jsonrpc", "id", "method"]
+    },
+    "CredListResponse": {
+      "type": "object",
+      "description": "Response to cred/list",
+      "properties": {
+        "agentId": { "type": "string", "description": "Agent ID from the authenticated token" },
+        "scopes": { "type": "array", "items": { "type": "string" }, "description": "Available scopes" },
+        "constraints": { "type": "object", "description": "Token constraints" },
+        "expiresAt": { "type": "string", "format": "date-time", "description": "Token expiration" },
+        "_meta": { "$ref": "#/$defs/Meta" }
+      },
+      "required": ["agentId", "scopes"]
+    },
+    "CredStatusRequest": {
+      "type": "object",
+      "x-method": "cred/status",
+      "x-tier": "extension",
+      "description": "Check credential broker status and available providers",
+      "properties": {
+        "jsonrpc": { "$ref": "#/$defs/JsonRpcVersion" },
+        "id": { "$ref": "#/$defs/RequestId" },
+        "method": { "const": "cred/status" },
+        "params": {
+          "type": "object",
+          "properties": {
+            "_meta": { "$ref": "#/$defs/Meta" }
+          }
+        }
+      },
+      "required": ["jsonrpc", "id", "method"]
+    },
+    "CredStatusResponse": {
+      "type": "object",
+      "description": "Response to cred/status",
+      "properties": {
+        "providers": { "type": "array", "items": { "type": "string" }, "description": "Available credential providers" },
+        "_meta": { "$ref": "#/$defs/Meta" }
+      },
+      "required": ["providers"]
+    },
+
+    "WorkspaceSearchRequest": {
+      "type": "object",
+      "x-method": "workspace/search",
+      "x-tier": "extension",
+      "description": "Search for files matching a query in an agent's workspace",
+      "properties": {
+        "jsonrpc": { "$ref": "#/$defs/JsonRpcVersion" },
+        "id": { "$ref": "#/$defs/RequestId" },
+        "method": { "const": "workspace/search" },
+        "params": {
+          "type": "object",
+          "properties": {
+            "agentId": { "type": "string", "description": "Agent whose workspace to search" },
+            "query": { "type": "string", "description": "Search query (matched against filenames)" },
+            "cwd": { "type": "string", "description": "Subdirectory to search within (relative to workspace root)" },
+            "limit": { "type": "integer", "description": "Max results to return (default 50)" },
+            "_meta": { "$ref": "#/$defs/Meta" }
+          },
+          "required": ["agentId", "query"]
+        }
+      },
+      "required": ["jsonrpc", "id", "method", "params"]
+    },
+    "WorkspaceSearchResponse": {
+      "type": "object",
+      "description": "Response to workspace/search",
+      "properties": {
+        "files": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/WorkspaceFileResult" },
+          "description": "Matching files"
+        },
+        "_meta": { "$ref": "#/$defs/Meta" }
+      },
+      "required": ["files"]
+    },
+    "WorkspaceListRequest": {
+      "type": "object",
+      "x-method": "workspace/list",
+      "x-tier": "extension",
+      "description": "List files in a directory of an agent's workspace",
+      "properties": {
+        "jsonrpc": { "$ref": "#/$defs/JsonRpcVersion" },
+        "id": { "$ref": "#/$defs/RequestId" },
+        "method": { "const": "workspace/list" },
+        "params": {
+          "type": "object",
+          "properties": {
+            "agentId": { "type": "string", "description": "Agent whose workspace to list" },
+            "directory": { "type": "string", "description": "Directory to list (relative to workspace root, default '.')" },
+            "_meta": { "$ref": "#/$defs/Meta" }
+          },
+          "required": ["agentId"]
+        }
+      },
+      "required": ["jsonrpc", "id", "method", "params"]
+    },
+    "WorkspaceListResponse": {
+      "type": "object",
+      "description": "Response to workspace/list",
+      "properties": {
+        "files": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/WorkspaceFileResult" },
+          "description": "Files in the directory"
+        },
+        "_meta": { "$ref": "#/$defs/Meta" }
+      },
+      "required": ["files"]
+    },
+    "WorkspaceReadRequest": {
+      "type": "object",
+      "x-method": "workspace/read",
+      "x-tier": "extension",
+      "description": "Read file contents from an agent's workspace",
+      "properties": {
+        "jsonrpc": { "$ref": "#/$defs/JsonRpcVersion" },
+        "id": { "$ref": "#/$defs/RequestId" },
+        "method": { "const": "workspace/read" },
+        "params": {
+          "type": "object",
+          "properties": {
+            "agentId": { "type": "string", "description": "Agent whose workspace to read from" },
+            "path": { "type": "string", "description": "File path relative to workspace root" },
+            "lineRange": {
+              "type": "object",
+              "description": "Optional line range to read (1-indexed)",
+              "properties": {
+                "start": { "type": "integer", "description": "Start line (1-indexed, inclusive)" },
+                "end": { "type": "integer", "description": "End line (1-indexed, inclusive)" }
+              },
+              "required": ["start", "end"]
+            },
+            "_meta": { "$ref": "#/$defs/Meta" }
+          },
+          "required": ["agentId", "path"]
+        }
+      },
+      "required": ["jsonrpc", "id", "method", "params"]
+    },
+    "WorkspaceReadResponse": {
+      "type": "object",
+      "description": "Response to workspace/read",
+      "properties": {
+        "text": { "type": "string", "description": "File text content" },
+        "mime": { "type": "string", "description": "MIME type" },
+        "size": { "type": "integer", "description": "File size in bytes" },
+        "_meta": { "$ref": "#/$defs/Meta" }
+      },
+      "required": ["text", "mime", "size"]
+    },
+    "WorkspaceFileResult": {
+      "type": "object",
+      "description": "A file or directory entry in a workspace",
+      "properties": {
+        "path": { "type": "string", "description": "Relative path from workspace root" },
+        "isDirectory": { "type": "boolean", "description": "Whether this is a directory" },
+        "size": { "type": "integer", "description": "File size in bytes (undefined for directories)" },
+        "mime": { "type": "string", "description": "MIME type guess based on extension" }
+      },
+      "required": ["path", "isDirectory"]
+    },
+
+    "MAPAgentCapabilityDescriptor": {
+      "type": "object",
+      "description": "Structured capability descriptor for rich agent discovery",
+      "properties": {
+        "id": { "type": "string", "description": "Globally unique capability descriptor ID (e.g., 'urn:map:cap:code-review')" },
+        "version": { "type": "string", "description": "Semantic version of the capability descriptor" },
+        "name": { "type": "string", "description": "Human-readable name" },
+        "description": { "type": "string", "description": "Human-readable description" },
+        "capabilities": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/MAPCapabilityDeclaration" },
+          "description": "Individual capabilities this agent provides"
+        },
+        "tags": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Semantic tags for categorization (e.g., 'code', 'review', 'testing')"
+        },
+        "accepts": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/MAPInterfaceSpec" },
+          "description": "Input interfaces this agent accepts"
+        },
+        "provides": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/MAPInterfaceSpec" },
+          "description": "Output interfaces this agent provides"
+        }
+      }
+    },
+    "MAPCapabilityDeclaration": {
+      "type": "object",
+      "description": "A single capability declared by an agent",
+      "properties": {
+        "id": { "type": "string", "description": "Capability identifier (e.g., 'code-review', 'translation')" },
+        "version": { "type": "string", "description": "Capability version" },
+        "description": { "type": "string" },
+        "interfaces": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/MAPInterfaceSpec" },
+          "description": "Interfaces for this specific capability"
+        }
+      },
+      "required": ["id"]
+    },
+    "MAPInterfaceSpec": {
+      "type": "object",
+      "description": "Content type interface specification",
+      "properties": {
+        "contentType": { "type": "string", "description": "MIME type (e.g., 'application/json', 'text/plain')" },
+        "schema": { "type": "string", "description": "Optional JSON Schema URI for the content" },
+        "description": { "type": "string" }
+      },
+      "required": ["contentType"]
+    },
+
+    "DIDDocument": {
+      "type": "object",
+      "description": "W3C DID Document for did:wba method",
+      "properties": {
+        "@context": {
+          "oneOf": [
+            { "type": "string" },
+            { "type": "array", "items": { "type": "string" } }
+          ]
+        },
+        "id": { "type": "string", "description": "The DID (e.g., 'did:wba:agents.example.com:gateway')" },
+        "verificationMethod": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/DIDVerificationMethod" }
+        },
+        "authentication": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Key references for authentication (e.g., 'did:wba:...#key-1')"
+        },
+        "service": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/DIDService" }
+        }
+      },
+      "required": ["id"]
+    },
+    "DIDVerificationMethod": {
+      "type": "object",
+      "description": "A verification method in a DID Document",
+      "properties": {
+        "id": { "type": "string" },
+        "type": { "type": "string", "description": "Key type (e.g., 'JsonWebKey2020')" },
+        "controller": { "type": "string" },
+        "publicKeyJwk": { "type": "object", "description": "Public key in JWK format" }
+      },
+      "required": ["id", "type", "controller"]
+    },
+    "DIDService": {
+      "type": "object",
+      "description": "A service endpoint in a DID Document",
+      "properties": {
+        "id": { "type": "string" },
+        "type": { "type": "string", "description": "Service type (e.g., 'MAPFederationEndpoint')" },
+        "serviceEndpoint": {
+          "oneOf": [
+            { "type": "string" },
+            { "type": "object" }
+          ]
+        },
+        "mapProtocolVersion": { "type": "integer" },
+        "mapCapabilities": { "type": "object" }
+      },
+      "required": ["id", "type", "serviceEndpoint"]
+    },
+    "DIDWBAProof": {
+      "type": "object",
+      "description": "Cryptographic proof for DID:WBA authentication",
+      "properties": {
+        "type": { "type": "string", "description": "Proof type (e.g., 'JsonWebSignature2020')" },
+        "created": { "type": "string", "format": "date-time", "description": "ISO 8601 timestamp" },
+        "challenge": { "type": "string", "description": "Server-provided challenge nonce" },
+        "jws": { "type": "string", "description": "JWS compact serialization of the proof signature" }
+      },
+      "required": ["type", "created", "challenge", "jws"]
+    },
+    "DIDWBACredentials": {
+      "type": "object",
+      "description": "Federation auth credentials using did:wba",
+      "properties": {
+        "method": { "const": "did:wba" },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "did": { "type": "string", "description": "The DID of the authenticating system" },
+            "proof": { "$ref": "#/$defs/DIDWBAProof" }
+          },
+          "required": ["did", "proof"]
+        }
+      },
+      "required": ["method", "metadata"]
     }
   }
 }