@aauth/proxy 0.1.3

package/README.md

@@ -0,0 +1,75 @@
+# @aauth/proxy
+
+MCP stdio server that represents you as an agent in the [AAuth](https://github.com/DickHardt/AAuth) protocol. The LLM sees a fixed eight-tool surface; new resources and operations are surfaced through the same tools, regardless of how many you add.
+
+Your AAuth signing key is bound to this machine via [`@aauth/local-keys`](https://www.npmjs.com/package/@aauth/local-keys) — non-extractable when a Secure Enclave, TPM, or YubiKey is available; software-backed otherwise. The agent proxy holds no upstream service credentials.
+
+Design and protocol details: [`design.md`](./design.md).
+
+## Prerequisites
+
+- Node ≥ 22.
+- An AAuth identity on this machine. If none exists, the agent proxy's MCP server still starts; the first tool call returns a bootstrap prompt that points the LLM at [`@aauth/bootstrap`](https://www.npmjs.com/package/@aauth/bootstrap). The agent proxy picks the identity up on the next call — no restart.
+
+```sh
+npx @aauth/bootstrap setup
+```
+
+## Install
+
+### Claude Code
+
+```json
+{
+  "mcpServers": {
+    "aauth-proxy": { "command": "npx", "args": ["-y", "@aauth/proxy"] }
+  }
+}
+```
+
+### Claude Desktop
+
+Edit `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or `%APPDATA%\Claude\claude_desktop_config.json` (Windows):
+
+```json
+{
+  "mcpServers": {
+    "aauth-proxy": { "command": "npx", "args": ["-y", "@aauth/proxy"] }
+  }
+}
+```
+
+### Cursor
+
+Settings → MCP → Add new server, then add:
+
+```json
+{
+  "aauth-proxy": { "command": "npx", "args": ["-y", "@aauth/proxy"] }
+}
+```
+
+### Other MCP hosts
+
+Any stdio MCP host: `npx -y @aauth/proxy`.
+
+## CLI flags
+
+| Flag | Purpose |
+|---|---|
+| `--log` | Tee JSON-RPC frames to `~/.aauth/proxy/logs/<ISO>.jsonl` for debugging. |
+
+## Environment variables
+
+All optional; sensible defaults come from `@aauth/local-keys`.
+
+| Var | Default | Purpose |
+|---|---|---|
+| `PROXY_REGISTRY_URL` | `https://registry.aauth.dev` | AAuth resource registry |
+| `PROXY_PS_URL` | from local-keys | Person Server URL |
+| `PROXY_AGENT_URL` | first configured | Agent provider URL |
+| `PROXY_AGENT_TOKEN` + `PROXY_AGENT_PRIVATE_JWK` (or `PROXY_AGENT_KEY_FILE`) | — | Test-only software-identity override that bypasses local-keys |
+
+## License
+
+MIT

package/dist/agent.d.ts

@@ -0,0 +1,37 @@
+import { fetch as signedFetch } from '@hellocoop/httpsig';
+import type { L1Entry } from './store.js';
+export type AgentSigningKey = Parameters<typeof signedFetch>[1]['signingKey'];
+export interface ProxyConfig {
+    psUrl: string;
+    agentPrivateJwk: AgentSigningKey;
+    agentToken: string;
+}
+export interface InvokeArgs {
+    pathParams?: Record<string, string>;
+    query?: string;
+    body?: unknown;
+    contentType?: string;
+}
+export interface Interaction {
+    url: string;
+    code: string;
+    pollUrl: string;
+}
+export type InvokeResult = {
+    kind: 'result';
+    status: number;
+    body: unknown;
+} | {
+    kind: 'interaction';
+    interaction: Interaction;
+};
+export type InteractionHandler = (url: string, code: string) => Promise<void> | void;
+type Poller = (url: string) => Promise<Response>;
+export declare function pollUntilDone(poll: Poller, locationUrl: string, timeoutMs?: number, onPoll?: (elapsedMs: number) => void | Promise<void>): Promise<Response>;
+export declare function invokeAtResource(cfg: ProxyConfig, l1: L1Entry, operationId: string, args?: InvokeArgs): Promise<InvokeResult>;
+export declare function invokeAtResourceComplete(cfg: ProxyConfig, l1: L1Entry, operationId: string, onInteraction: InteractionHandler, args?: InvokeArgs, maxRounds?: number, pollTimeoutMs?: number, onPoll?: (elapsedMs: number) => void | Promise<void>): Promise<{
+    status: number;
+    body: unknown;
+}>;
+export {};
+//# sourceMappingURL=agent.d.ts.map

package/dist/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEzC,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;AAE7E,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,EAAE,eAAe,CAAA;IAChC,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAAA;AAErD,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAyEpF,KAAK,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAShD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,SAAS,SAAU,EACnB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACnD,OAAO,CAAC,QAAQ,CAAC,CAUnB;AAgCD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,OAAO,EACX,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC,YAAY,CAAC,CAgGvB;AAMD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,OAAO,EACX,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,kBAAkB,EACjC,IAAI,GAAE,UAAe,EACrB,SAAS,SAAI,EACb,aAAa,SAAU,EACvB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACnD,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAW5C"}

package/dist/agent.js

@@ -0,0 +1,220 @@
+// agent proxy — the user's AAuth agent. v0 core: the authorize-first R3 invoke flow
+// against the resource proxy, exchanging at the PS.
+//
+// invoke() is non-blocking: when an interaction is required (PS consent or the
+// resource's OAuth bootstrap) it RETURNS the interaction (url + code + poll URL)
+// rather than completing it, so a caller — the MCP server — can surface the URL
+// to the user. invokeComplete() drives it to completion for programmatic use,
+// performing the interaction via a callback and polling.
+//
+// Built directly on @hellocoop/httpsig (the @aauth/mcp-agent package is
+// 401-challenge-driven and has no R3/authorize-first path, mirroring the
+// resource-side finding).
+import { fetch as signedFetch } from '@hellocoop/httpsig';
+import { routeOperation } from './resource.js';
+function signWith(cfg, token) {
+    return (url, init = {}) => signedFetch(url, { ...init, signingKey: cfg.agentPrivateJwk, signatureKey: { type: 'jwt', jwt: token } });
+}
+function parseInteraction(requirement) {
+    if (!requirement || !requirement.includes('requirement=interaction'))
+        return undefined;
+    const url = /url="([^"]+)"/.exec(requirement)?.[1];
+    const code = /code="([^"]+)"/.exec(requirement)?.[1];
+    return url && code ? { url, code } : undefined;
+}
+// A per-call escalation challenge (W2): the resource returns 401 with
+// `requirement=auth-token; resource-token="…"` for a conditional/irreversible op.
+// The agent takes that resource token (which carries the call as r3_context) to
+// the PS for a per-call auth token, then retries.
+function parseAuthTokenChallenge(requirement) {
+    if (!requirement || !requirement.includes('requirement=auth-token'))
+        return undefined;
+    return /resource-token="([^"]+)"/.exec(requirement)?.[1];
+}
+function interactionFrom(res) {
+    const parsed = parseInteraction(res.headers.get('aauth-requirement'));
+    const pollUrl = res.headers.get('location') ?? '';
+    return parsed && pollUrl ? { ...parsed, pollUrl } : undefined;
+}
+async function safeBody(res) {
+    const text = await res.text();
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+async function psMetadata(psUrl) {
+    return (await (await fetch(`${psUrl.replace(/\/$/, '')}/.well-known/aauth-person.json`)).json());
+}
+// POST the interaction to the PS so it can try to reach the user (live web
+// session, registered mobile push). On 2xx the PS owns user-reach; the agent
+// blocks on the resource pollUrl until the user completes there. On any
+// non-2xx (including the spec-pending interaction_unavailable error — see
+// AAuth#34) the agent falls back to driving the URL itself.
+async function relayInteractionToPS(signAgent, endpoint, interaction) {
+    try {
+        const res = await signAgent(endpoint, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({
+                type: 'interaction',
+                url: interaction.url,
+                code: interaction.code,
+            }),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+// Poll a deferred (202) Location until terminal. The poll MUST be signed — the
+// PS pending endpoint verifies the agent signature (an unsigned poll gets 401,
+// which would look like an instant terminal response).
+//
+// `onPoll` (optional) is invoked once per poll iteration with elapsed ms — a
+// heartbeat hook for hosts that hold a request open (e.g. emit progress
+// notifications over a long-running tool call).
+export async function pollUntilDone(poll, locationUrl, timeoutMs = 180_000, onPoll) {
+    const start = Date.now();
+    const deadline = start + timeoutMs;
+    let res = await poll(locationUrl);
+    while (res.status === 202 && Date.now() < deadline) {
+        await onPoll?.(Date.now() - start);
+        await new Promise((r) => setTimeout(r, 1000));
+        res = await poll(locationUrl);
+    }
+    return res;
+}
+// Exchange a resource token at the PS for an auth token. capabilities tells the
+// PS the agent can relay interactions to the user, so it returns a 202 consent
+// interaction (surfaced for the caller to drive + retry) rather than requiring a
+// registered mobile device. On PS endpoints this is a token-request parameter,
+// not a header (the AAuth-Capabilities header is for resource requests).
+async function exchangeAtPS(signAgent, tokenEndpoint, resourceToken) {
+    const res = await signAgent(tokenEndpoint, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ resource_token: resourceToken, capabilities: ['interaction'] }),
+    });
+    if (res.status === 202) {
+        const interaction = interactionFrom(res);
+        if (interaction)
+            return { kind: 'interaction', interaction };
+    }
+    if (!res.ok)
+        return { kind: 'result', status: res.status, body: await safeBody(res) };
+    const { auth_token } = (await res.json());
+    return { kind: 'token', authToken: auth_token };
+}
+// Resource-parameterized invoke. The new tool surface in server.ts calls into
+// this directly with an L1 entry from store.ts; the legacy invoke() below
+// wraps it for cfg.resourceProxyBase-based callers (tests, demo scripts).
+export async function invokeAtResource(cfg, l1, operationId, args = {}) {
+    const route = await routeOperation(l1, operationId, args);
+    if (route.plan.kind !== 'sync.request') {
+        return {
+            kind: 'result',
+            status: 501,
+            body: { error: `${route.plan.kind}_not_yet_supported`, opId: operationId },
+        };
+    }
+    const plan = route.plan;
+    const apiUrl = `${l1.origin}${plan.path}${plan.query ? `?${plan.query}` : ''}`;
+    const requestInit = {
+        method: plan.method,
+        ...(plan.headers ? { headers: plan.headers } : {}),
+        ...(plan.body !== undefined ? { body: plan.body } : {}),
+    };
+    // agent-token access mode: sign with the agent token + go. No PS exchange.
+    if (l1.access_mode === 'agent-token') {
+        const res = await signWith(cfg, cfg.agentToken)(apiUrl, requestInit);
+        return { kind: 'result', status: res.status, body: await safeBody(res) };
+    }
+    // aauth-access-token / auth-token: R3 flow.
+    if (!l1.authorization_endpoint) {
+        throw new Error(`resource ${l1.resource}: no authorization_endpoint (access_mode ${l1.access_mode} requires R3)`);
+    }
+    const signAgent = signWith(cfg, cfg.agentToken);
+    const ps = await psMetadata(cfg.psUrl);
+    // 1. authorize-first: declare the operation, get a resource token.
+    const authzRes = await signAgent(l1.authorization_endpoint, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({
+            r3_operations: {
+                vocabulary: route.adapter.vocabUri,
+                operations: [{ operationId }],
+            },
+        }),
+    });
+    if (!authzRes.ok)
+        return { kind: 'result', status: authzRes.status, body: await safeBody(authzRes) };
+    const { resource_token } = (await authzRes.json());
+    // 2. exchange at the PS for an auth token (surface a consent interaction if any).
+    const ex = await exchangeAtPS(signAgent, ps.token_endpoint, resource_token);
+    if (ex.kind !== 'token')
+        return ex;
+    // 3. call the resource. Writes carry the body; the agent signs over it so the
+    // proxy's content-digest check (and the r3_context it packs on escalation)
+    // match the actual call.
+    const callWith = (token) => signWith(cfg, token)(apiUrl, requestInit);
+    let apiRes = await callWith(ex.authToken);
+    // First contact: a resource-issued interaction (e.g. OAuth bootstrap). Try
+    // the PS's interaction_endpoint first so it can use its own user-reach
+    // channels (live web session, mobile push). On any non-2xx — including the
+    // spec-pending interaction_unavailable error (AAuth#34) and any PS that
+    // hasn't implemented the endpoint yet — surface the interaction so the
+    // caller can drive it (layer 2: local OS open / layer 3: text+QR).
+    if (apiRes.status === 202) {
+        const interaction = interactionFrom(apiRes);
+        if (interaction) {
+            const engaged = ps.interaction_endpoint
+                ? await relayInteractionToPS(signAgent, ps.interaction_endpoint, interaction)
+                : false;
+            if (!engaged)
+                return { kind: 'interaction', interaction };
+            const poll = (url) => signWith(cfg, cfg.agentToken)(url, { method: 'GET', headers: { Prefer: 'wait=20' } });
+            const completed = await pollUntilDone(poll, interaction.pollUrl, 180_000);
+            if (completed.status === 202)
+                return { kind: 'interaction', interaction };
+            apiRes = await callWith(ex.authToken);
+        }
+    }
+    // Per-call escalation (W2): a conditional/irreversible op returns a 401
+    // auth-token challenge. Take its resource token (which carries the call as
+    // r3_context) to the PS for a per-call auth token, then retry the same call.
+    // If the PS needs consent first, it returns a 202 interaction we surface.
+    const challenge = apiRes.status === 401 ? parseAuthTokenChallenge(apiRes.headers.get('aauth-requirement')) : undefined;
+    if (challenge) {
+        const stepEx = await exchangeAtPS(signAgent, ps.token_endpoint, challenge);
+        if (stepEx.kind !== 'token')
+            return stepEx;
+        apiRes = await callWith(stepEx.authToken);
+        if (apiRes.status === 202) {
+            const interaction = interactionFrom(apiRes);
+            if (interaction)
+                return { kind: 'interaction', interaction };
+        }
+    }
+    return { kind: 'result', status: apiRes.status, body: await safeBody(apiRes) };
+}
+// Drive invokeAtResource to completion: perform each interaction via
+// `onInteraction`, poll until it resolves, and retry. For programmatic / test
+// use; the MCP tool surface is non-blocking by design and surfaces interaction
+// URLs to the LLM caller instead.
+export async function invokeAtResourceComplete(cfg, l1, operationId, onInteraction, args = {}, maxRounds = 5, pollTimeoutMs = 180_000, onPoll) {
+    // Poll deferred URLs signed with the agent token (long-poll via Prefer: wait).
+    const poll = (url) => signWith(cfg, cfg.agentToken)(url, { method: 'GET', headers: { Prefer: 'wait=20' } });
+    for (let round = 0; round < maxRounds; round++) {
+        const result = await invokeAtResource(cfg, l1, operationId, args);
+        if (result.kind === 'result')
+            return { status: result.status, body: result.body };
+        await onInteraction(result.interaction.url, result.interaction.code);
+        await pollUntilDone(poll, result.interaction.pollUrl, pollTimeoutMs, onPoll);
+    }
+    throw new Error('invoke did not complete after interactions');
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oDAAoD;AACpD,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,0BAA0B;AAE1B,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAiB,cAAc,EAAa,MAAM,eAAe,CAAA;AA8BxE,SAAS,QAAQ,CAAC,GAAgB,EAAE,KAAa;IAC/C,OAAO,CAAC,GAAW,EAAE,OAA6E,EAAE,EAAE,EAAE,CACtG,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,eAAe,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;AAC7G,CAAC;AAED,SAAS,gBAAgB,CAAC,WAA0B;IAClD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAAE,OAAO,SAAS,CAAA;IACtF,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACpD,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAChD,CAAC;AAED,sEAAsE;AACtE,kFAAkF;AAClF,gFAAgF;AAChF,kDAAkD;AAClD,SAAS,uBAAuB,CAAC,WAA0B;IACzD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAAE,OAAO,SAAS,CAAA;IACrF,OAAO,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,GAAa;IACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IACjD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAOD,KAAK,UAAU,UAAU,CAAC,KAAa;IACrC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAe,CAAA;AAChH,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AACxE,0EAA0E;AAC1E,4DAA4D;AAC5D,KAAK,UAAU,oBAAoB,CACjC,SAAsB,EACtB,QAAgB,EAChB,WAAwB;IAExB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,aAAa;gBACnB,GAAG,EAAE,WAAW,CAAC,GAAG;gBACpB,IAAI,EAAE,WAAW,CAAC,IAAI;aACvB,CAAC;SACH,CAAC,CAAA;QACF,OAAO,GAAG,CAAC,EAAE,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAID,+EAA+E;AAC/E,+EAA+E;AAC/E,uDAAuD;AACvD,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,WAAmB,EACnB,SAAS,GAAG,OAAO,EACnB,MAAoD;IAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACxB,MAAM,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;IAClC,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAA;IACjC,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACnD,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAA;QAClC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QAC7C,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AASD,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,yEAAyE;AACzE,KAAK,UAAU,YAAY,CAAC,SAAsB,EAAE,aAAqB,EAAE,aAAqB;IAC9F,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;QACzC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;KACvF,CAAC,CAAA;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAA;IACrF,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAA;IACnE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;AACjD,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAgB,EAChB,EAAW,EACX,WAAmB,EACnB,OAAmB,EAAE;IAErB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;IACzD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,oBAAoB,EAAE,IAAI,EAAE,WAAW,EAAE;SAC3E,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC9E,MAAM,WAAW,GAAG;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAA;IAED,2EAA2E;IAC3E,IAAI,EAAE,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACpE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAA;IAC1E,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,YAAY,EAAE,CAAC,QAAQ,4CAA4C,EAAE,CAAC,WAAW,eAAe,CACjG,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IAC/C,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAEtC,mEAAmE;IACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,sBAAsB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,aAAa,EAAE;gBACb,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAClC,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;aAC9B;SACF,CAAC;KACH,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACpF,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAA;IAEhF,kFAAkF;IAClF,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IAC3E,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,CAAA;IAElC,8EAA8E;IAC9E,2EAA2E;IAC3E,yBAAyB;IACzB,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAE7E,IAAI,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,EAAE,CAAC,oBAAoB;gBACrC,CAAC,CAAC,MAAM,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,EAAE,WAAW,CAAC;gBAC7E,CAAC,CAAC,KAAK,CAAA;YACT,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;YACzD,MAAM,IAAI,GAAW,CAAC,GAAG,EAAE,EAAE,CAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;YACvF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YACzE,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;YACzE,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtG,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;QAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,CAAA;QAC1C,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACzC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YAC3C,IAAI,WAAW;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAA;AAChF,CAAC;AAED,qEAAqE;AACrE,8EAA8E;AAC9E,+EAA+E;AAC/E,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAgB,EAChB,EAAW,EACX,WAAmB,EACnB,aAAiC,EACjC,OAAmB,EAAE,EACrB,SAAS,GAAG,CAAC,EACb,aAAa,GAAG,OAAO,EACvB,MAAoD;IAEpD,+EAA+E;IAC/E,MAAM,IAAI,GAAW,CAAC,GAAG,EAAE,EAAE,CAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;IACvF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QACjE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QACjF,MAAM,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACpE,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;AAC/D,CAAC"}

package/dist/host.d.ts

@@ -0,0 +1,6 @@
+export interface CanonicalHost {
+    host: string;
+    origin: string;
+}
+export declare function canonicalizeHost(input: string): CanonicalHost | null;
+//# sourceMappingURL=host.d.ts.map

package/dist/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAapE"}

package/dist/host.js

@@ -0,0 +1,27 @@
+// Host normalization. The agent proxy's canonical resource identifier is the bare
+// lowercased host (with port if non-default), e.g. `api-hubapi-com.proxy.aauth.dev`
+// or `localhost:8787` for local dev tunnels. The origin (`https://host` or
+// `http://host` for local) is also returned and stored on each L1 entry so the
+// scheme survives across agent proxy restarts.
+//
+// Production AAuth resources are https; we allow http for local dev + the test
+// harness.
+export function canonicalizeHost(input) {
+    let urlStr = input.trim();
+    if (!urlStr)
+        return null;
+    if (!/^https?:\/\//i.test(urlStr))
+        urlStr = `https://${urlStr}`;
+    let url;
+    try {
+        url = new URL(urlStr);
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== 'https:' && url.protocol !== 'http:')
+        return null;
+    const host = url.host.toLowerCase();
+    return { host, origin: `${url.protocol}//${host}` };
+}
+//# sourceMappingURL=host.js.map

package/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,oFAAoF;AACpF,2EAA2E;AAC3E,+EAA+E;AAC/E,+CAA+C;AAC/C,EAAE;AACF,+EAA+E;AAC/E,WAAW;AAOX,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACzB,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,GAAG,WAAW,MAAM,EAAE,CAAA;IAC/D,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;IACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,EAAE,CAAA;AACrD,CAAC"}

package/dist/identity-local.d.ts

@@ -0,0 +1,10 @@
+import type { ProxyConfig } from './agent.js';
+import type { IdentityProvider } from './identity.js';
+export declare function loadIdentity(): ProxyConfig;
+export declare function buildConfigFromLocalKeys(opts?: {
+    agentUrl?: string;
+    psUrl?: string;
+    local?: string;
+}): Promise<ProxyConfig>;
+export declare function createLocalKeysIdentityProvider(): IdentityProvider;
+//# sourceMappingURL=identity-local.d.ts.map

package/dist/identity-local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-local.d.ts","sourceRoot":"","sources":["../src/identity-local.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAQrD,wBAAgB,YAAY,IAAI,WAAW,CAS1C;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,OAAO,CAAC,WAAW,CAAC,CAkBtB;AAWD,wBAAgB,+BAA+B,IAAI,gBAAgB,CAelE"}

package/dist/identity-local.js

@@ -0,0 +1,70 @@
+// @aauth/proxy/local — the Node-only identity adapter for the stdio server.
+//
+// This is the only place @aauth/local-keys is imported, so the package's core
+// entry point stays enclave-free (and bundleable for workerd). Two sources:
+//  - env: a software agent token + key (PROXY_AGENT_PRIVATE_JWK / *_KEY_FILE) —
+//    tests and simple software-only use.
+//  - @aauth/local-keys: the real path — the bootstrapped AP key (Secure Enclave
+//    / YubiKey) mints the agent token, binding a fresh software ephemeral key.
+//    That ephemeral key (returned as `signingKey`) signs HTTP requests, so
+//    the agent proxy's request-signing path is unchanged; only token minting differs.
+import { readFileSync } from 'node:fs';
+import { createAgentToken, getAgentConfig, listAgentProviders } from '@aauth/local-keys';
+function required(name) {
+    const value = process.env[name];
+    if (!value)
+        throw new Error(`agent proxy: missing required env var ${name}`);
+    return value;
+}
+export function loadIdentity() {
+    const psUrl = required('PROXY_PS_URL');
+    const agentToken = required('PROXY_AGENT_TOKEN');
+    const jwkJson = process.env.PROXY_AGENT_PRIVATE_JWK ??
+        readFileSync(process.env.PROXY_AGENT_KEY_FILE ?? '.secrets/proxy-agent-key.json', 'utf8');
+    return { psUrl, agentToken, agentPrivateJwk: JSON.parse(jwkJson) };
+}
+export async function buildConfigFromLocalKeys(opts = {}) {
+    const agentUrl = opts.agentUrl ?? process.env.PROXY_AGENT_URL ?? listAgentProviders()[0];
+    if (!agentUrl) {
+        throw new Error('agent proxy: no agent configured (run @aauth/bootstrap) and no PROXY_AGENT_URL set');
+    }
+    const psUrl = opts.psUrl ?? process.env.PROXY_PS_URL ?? getAgentConfig(agentUrl)?.personServerUrl;
+    if (!psUrl)
+        throw new Error(`agent proxy: no Person Server configured for ${agentUrl}; set PROXY_PS_URL`);
+    // The AP key (enclave/yubikey) signs the agent token, binding a fresh software
+    // ephemeral key returned as signingKey.
+    const { signingKey, signatureKey } = await createAgentToken({ agentUrl, local: opts.local });
+    return {
+        psUrl,
+        agentPrivateJwk: signingKey,
+        agentToken: signatureKey.jwt,
+    };
+}
+// The stdio server's IdentityProvider. Resolves lazily and caches the result
+// so the enclave signs the agent token at most once per session (the env path
+// is likewise resolved once). When no agent provider is configured it returns
+// `needsBootstrap` without caching, so a mid-session bootstrap is picked up on
+// the next call without a restart.
+//
+// `local` becomes the local-part of the agent id (`aauth:${local}@${domain}`),
+// sourced by the caller from the MCP client's declared name so each host on the
+// user's machine gets a distinct identifier.
+export function createLocalKeysIdentityProvider() {
+    let cached = null;
+    return {
+        async resolve({ local }) {
+            if (cached)
+                return { kind: 'ready', cfg: cached };
+            if (process.env.PROXY_AGENT_PRIVATE_JWK) {
+                cached = loadIdentity();
+                return { kind: 'ready', cfg: cached };
+            }
+            const agentUrl = process.env.PROXY_AGENT_URL ?? listAgentProviders()[0];
+            if (!agentUrl)
+                return { kind: 'needsBootstrap' };
+            cached = await buildConfigFromLocalKeys({ local });
+            return { kind: 'ready', cfg: cached };
+        },
+    };
+}
+//# sourceMappingURL=identity-local.js.map

package/dist/identity-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-local.js","sourceRoot":"","sources":["../src/identity-local.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,sFAAsF;AAEtF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAIxF,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAA;IAC5E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAA;IAEhD,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,+BAA+B,EAAE,MAAM,CAAC,CAAA;IAE3F,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA8D,EAAE;IAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAA;IACxF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;IACvG,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACjG,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,oBAAoB,CAAC,CAAA;IAEzG,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;IAE5F,OAAO;QACL,KAAK;QACL,eAAe,EAAE,UAAwC;QACzD,UAAU,EAAE,YAAY,CAAC,GAAG;KAC7B,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,mCAAmC;AACnC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,6CAA6C;AAC7C,MAAM,UAAU,+BAA+B;IAC7C,IAAI,MAAM,GAAuB,IAAI,CAAA;IACrC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE;YACrB,IAAI,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;YACjD,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;gBACxC,MAAM,GAAG,YAAY,EAAE,CAAA;gBACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;YACvC,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAA;YACvE,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;YAChD,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;QACvC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/identity.d.ts

@@ -0,0 +1,13 @@
+import type { ProxyConfig } from './agent.js';
+export type BootstrapStatus = {
+    kind: 'ready';
+    cfg: ProxyConfig;
+} | {
+    kind: 'needsBootstrap';
+};
+export interface IdentityProvider {
+    resolve(ctx: {
+        local?: string;
+    }): Promise<BootstrapStatus>;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,WAAW,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAA;AAE9B,MAAM,WAAW,gBAAgB;IAI/B,OAAO,CAAC,GAAG,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAC3D"}

package/dist/identity.js

@@ -0,0 +1,11 @@
+// the agent proxy's runtime identity port.
+//
+// An IdentityProvider resolves the ProxyConfig (psUrl + agent private JWK +
+// agent token) for the current principal. This module is transport- and
+// platform-agnostic and MUST NOT import @aauth/local-keys (or any Node-only
+// enclave dependency) — that keeps a workerd bundle of @aauth/proxy's core
+// enclave-free. The stdio server's provider lives in @aauth/proxy/local
+// (createLocalKeysIdentityProvider); other hosts (e.g. a multi-tenant server)
+// supply their own.
+export {};
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,8EAA8E;AAC9E,oBAAoB"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+export { invokeAtResource, invokeAtResourceComplete } from './agent.js';
+export type { AgentSigningKey, Interaction, InteractionHandler, InvokeArgs, InvokeResult, ProxyConfig, } from './agent.js';
+export { buildProxyTools } from './tools.js';
+export type { ProxyDeps, InteractionContext } from './tools.js';
+export type { BootstrapStatus, IdentityProvider } from './identity.js';
+export { canonicalizeHost } from './host.js';
+export type { CanonicalHost } from './host.js';
+export { createMemoryDocCache, fetchResource, getOperationsForResource, listOperationsForResource, routeOperation, toL1Entry, } from './resource.js';
+export type { AAuthResourceMeta, DocCache, FetchedResource, PickedVocab, RoutedOperation, } from './resource.js';
+export { createFsRegistryCache, fetchRegistry, registryUrl } from './registry.js';
+export type { CachedIndex, RegistryCache, RegistryEntry, RegistryIndex } from './registry.js';
+export { createFsL1Store } from './store.js';
+export type { AccessMode, L1Entry, L1Store } from './store.js';
+export * from './vocab/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACvE,YAAY,EACV,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAE/D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAEtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAE9C,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,SAAS,GACV,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,iBAAiB,EACjB,QAAQ,EACR,eAAe,EACf,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AACjF,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE7F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAE9D,cAAc,kBAAkB,CAAA"}

package/dist/index.js

@@ -0,0 +1,13 @@
+// Public API for @aauth/proxy (core, workerd-safe — no fs/stdio/local-keys at
+// import time). Consumers get the agent flow, the transport-agnostic tool
+// factory, the injectable storage/identity ports, and the default filesystem
+// adapters. The Node-only @aauth/local-keys identity adapter is exported
+// separately from "@aauth/proxy/local".
+export { invokeAtResource, invokeAtResourceComplete } from './agent.js';
+export { buildProxyTools } from './tools.js';
+export { canonicalizeHost } from './host.js';
+export { createMemoryDocCache, fetchResource, getOperationsForResource, listOperationsForResource, routeOperation, toL1Entry, } from './resource.js';
+export { createFsRegistryCache, fetchRegistry, registryUrl } from './registry.js';
+export { createFsL1Store } from './store.js';
+export * from './vocab/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,wCAAwC;AAExC,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAUvE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAK5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAG5C,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,SAAS,GACV,MAAM,eAAe,CAAA;AAStB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGjF,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAG5C,cAAc,kBAAkB,CAAA"}

package/dist/registry.d.ts

@@ -0,0 +1,34 @@
+import type { ProxyConfig } from './agent.js';
+import type { AccessMode } from './store.js';
+export interface RegistryEntry {
+    issuer: string;
+    name: string;
+    description: string;
+    access_mode: AccessMode;
+    logo_uri?: string;
+    added: string;
+    submitted_by?: {
+        agent: string;
+        ap: string;
+        user?: string;
+    };
+}
+export interface RegistryIndex {
+    updated: string;
+    resources: RegistryEntry[];
+}
+export interface CachedIndex {
+    etag?: string;
+    fetched: string;
+    index: RegistryIndex;
+}
+export interface RegistryCache {
+    read(): Promise<CachedIndex | undefined>;
+    write(c: CachedIndex): Promise<void>;
+}
+export declare function registryUrl(): string;
+export declare function createFsRegistryCache(opts?: {
+    dir?: string;
+}): RegistryCache;
+export declare function fetchRegistry(cfg: ProxyConfig, cache: RegistryCache): Promise<RegistryIndex>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,UAAU,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5D;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,aAAa,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;CACrB;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACxC,KAAK,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrC;AAED,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAID,wBAAgB,qBAAqB,CAAC,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,aAAa,CAgBhF;AAKD,wBAAsB,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAoBlG"}