@atlasauth/pca-authzen 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Atlas Authorization
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,68 @@
-# Temporary Holding Version
+# @atlasauth/pca-authzen
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Proof-Carrying Authority (PCA) behind the OpenID AuthZEN Authorization API. It gives you a Policy Decision Point (PDP) so any AuthZEN-speaking Policy Enforcement Point (an API gateway, a service mesh sidecar, an MCP host) can ask "can this subject do this action on this resource?" and get a boolean decision backed by the PCA verifier and policy engine.
+
+- If the request `context` carries a signed PCActn (key `pca_action`), the PDP verifies it and then runs the deterministic policy decision.
+- Otherwise it evaluates the declared policy statically (exact admission via `@atlasauth/pca-analyzer`).
+- Everything fails closed: an unresolved policy, a malformed or foreign PCActn, a verifier rejection, a policy denial or a thrown error all return `decision: false`.
+
+It exposes Access Evaluation, Access Evaluations (batch), the COAZ profile for MCP tool authorization, and an approval-required reference (AARP style) when a step-up cosign is needed.
+
+## Install
+
+```sh
+npm i @atlasauth/pca-authzen @atlasauth/pca @atlasauth/pca-analyzer
+```
+
+## Usage
+
+```ts
+import { agent, generateKeyPair } from '@atlasauth/pca';
+import { authzenPdp, authzenHandler, PCA_ACTION_KEY, isApprovalRequired } from '@atlasauth/pca-authzen';
+
+const a = agent({
+  principal: generateKeyPair(),
+  goal: 'reconcile october refunds',
+  permissions: { stripe: ['refund'] },
+  limits: { refund: '$500' },
+  aud: 'rs_demo',
+});
+
+const pdp = authzenPdp({
+  audience: 'rs_demo',
+  // Look up the authority for each request. Return null to deny.
+  resolve: () => ({ grant: a.grant, chain: a.chain, policy: a.policy, budget: a.budget }),
+});
+
+const { encoded } = a.act('stripe.refund', 'charge:ch_1', { amount: 42, currency: 'usd' });
+
+const resp = await pdp.evaluate({
+  subject: { type: 'agent', id: 'a1' },
+  action: { name: 'stripe.refund', properties: { amount: 42, currency: 'usd' } },
+  resource: { type: 'charge', id: 'ch_1' },
+  context: { [PCA_ACTION_KEY]: encoded },
+});
+// resp.decision is a boolean; isApprovalRequired(resp) is true for a pending step-up
+
+// Framework-agnostic HTTP handler for the standard AuthZEN paths:
+const handle = authzenHandler(pdp); // handle({ path: '/access/v1/evaluation', body }) -> { status, body }
+```
+
+The signed PCActn must match the requested action, resource and parameters, otherwise the decision is false. If you omit `audience` and the PCActn carries an `aud`, the PDP fails closed.
+
+## API
+
+- `authzenPdp(config)` returns `{ evaluate, evaluations, evaluateTool }`
+- `authzenHandler(pdp)`, with path constants `EVALUATION_PATH`, `EVALUATIONS_PATH`, `COAZ_TOOL_PATH`
+- `approvalOf`, `isApprovalRequired`, `PCA_ACTION_KEY`, `PCA_APPROVAL_KEY`
+- Request guards (`isAccessEvaluationRequest`, ...) and `defaultToAction` (override per request with `toAction`)
+
+## Status
+
+The PDP is only as strong as the `resolve` callback you provide: it decides against the grant, policy and budget you hand it, and it keeps no state of its own. Cryptography in the underlying PCA packages is unaudited.
+
+Source and issues: https://github.com/Atlas-Authorization/pca
+
+## License
+
+MIT - see LICENSE

package/dist/index.d.ts

@@ -0,0 +1,230 @@
+/**
+ * @atlasauth/pca-authzen — PCA behind the OpenID AuthZEN Authorization API.
+ *
+ * The OpenID AuthZEN Authorization API 1.0 (final, Jan 2026) standardises the PEP↔PDP wire: a Policy
+ * Enforcement Point (an API gateway, a service mesh sidecar, an MCP host) asks a Policy Decision Point
+ * `can this subject do this action on this resource in this context?` and gets back a boolean decision.
+ * This package makes Proof-Carrying Authority (PCA) answer that call, so ANY AuthZEN-speaking PEP can
+ * use the PCA verifier + Policy-VM as its decision point without knowing anything about PCActns,
+ * capability chains, trust budgets or FROST — instant distribution across the AuthZEN ecosystem.
+ *
+ * It maps the AuthZEN quad onto PCA two ways:
+ *   • when the `context` carries a signed PCActn, the PDP VERIFIES it (`verifyPCActnCore`) and then runs
+ *     the deterministic Policy-VM decision (`decide`) — proof-carrying, runtime authority;
+ *   • otherwise it evaluates the declared policy STATICALLY (`@atlasauth/pca-analyzer` exact admission) —
+ *     "is this action admissible at all under the authority?".
+ * Everything FAILS CLOSED: an unresolved policy, a malformed/foreign PCActn, a verifier rejection, a
+ * policy denial, or any thrown error all yield `decision: false`.
+ *
+ * Three AuthZEN surfaces are exposed:
+ *   • Access Evaluation  (`evaluate`)        — the single `{subject,action,resource,context}` call;
+ *   • Access Evaluations (`evaluations`)     — the boxcar / batch endpoint with default-inheritance;
+ *   • the COAZ profile    (`evaluateTool`)   — MCP-tool authorization (tool → required capability → decision);
+ *   • the AARP profile    (step-up)          — when the Policy-VM needs a human/guardian co-sign, the
+ *                                               decision carries an "approval required" reference that maps
+ *                                               onto PCA's FROST/CIBA step-up.
+ * A framework-agnostic `authzenHandler` turns all of this into the status + JSON a PEP expects.
+ */
+import { type Capability, type CapabilityChain, type EnforcementGates, type PlanNode, type RequiredThreshold, type RiskInputs, type TrustBudget } from '@atlasauth/pca';
+import { type AnalyzerAction, type PolicyInput } from '@atlasauth/pca-analyzer';
+/** AuthZEN Subject: the entity requesting access (a typed, identified principal + free-form properties). */
+export interface AuthzenSubject {
+    type: string;
+    id: string;
+    properties?: Record<string, unknown>;
+}
+/** AuthZEN Action: the operation the subject wants to take. `name` is the verb. */
+export interface AuthzenAction {
+    name: string;
+    properties?: Record<string, unknown>;
+}
+/** AuthZEN Resource: the target the action is taken on (typed + identified + free-form properties). */
+export interface AuthzenResource {
+    type: string;
+    id: string;
+    properties?: Record<string, unknown>;
+}
+/** AuthZEN Context: environmental / request attributes. Carries the PCActn and/or PCA hints here. */
+export type AuthzenContext = Record<string, unknown>;
+/** The AuthZEN Access Evaluation request (the PDP's single-decision input). */
+export interface AccessEvaluationRequest {
+    subject: AuthzenSubject;
+    action: AuthzenAction;
+    resource: AuthzenResource;
+    context?: AuthzenContext;
+}
+/** AuthZEN decision context: the OPTIONAL additional information a PDP returns with a decision. */
+export interface DecisionContext {
+    id?: string;
+    /** Machine-readable rationale for operators / audit. */
+    reason_admin?: Record<string, unknown>;
+    /** Human-facing rationale a PEP may surface to the end user. */
+    reason_user?: Record<string, unknown>;
+    [k: string]: unknown;
+}
+/** The AuthZEN Access Evaluation response. `decision` is the boolean a PEP enforces. */
+export interface AccessEvaluationResponse {
+    decision: boolean;
+    context?: DecisionContext;
+}
+/** How the PDP processes a boxcar: run everything, or short-circuit on the first deny / permit. */
+export type EvaluationsSemantic = 'execute_all' | 'deny_on_first_deny' | 'permit_on_first_permit';
+/**
+ * The AuthZEN Access Evaluations (boxcar) request. Top-level `subject`/`action`/`resource`/`context` are
+ * DEFAULTS each item inherits; a per-item field overrides the default for that item only.
+ */
+export interface AccessEvaluationsRequest {
+    subject?: AuthzenSubject;
+    action?: AuthzenAction;
+    resource?: AuthzenResource;
+    context?: AuthzenContext;
+    evaluations: Array<Partial<AccessEvaluationRequest>>;
+    options?: {
+        evaluations_semantic?: EvaluationsSemantic;
+    };
+}
+/** The AuthZEN Access Evaluations (boxcar) response: decisions in request order. */
+export interface AccessEvaluationsResponse {
+    evaluations: AccessEvaluationResponse[];
+}
+/**
+ * COAZ (MCP-tool authorization) request: an MCP host asking whether `subject` may invoke `tool` with the
+ * given arguments. The PDP maps the tool to the PCA capability it requires and decides.
+ */
+export interface CoazToolAuthorizationRequest {
+    subject: AuthzenSubject;
+    tool: {
+        name: string;
+        arguments?: Record<string, unknown>;
+    };
+    context?: AuthzenContext;
+}
+/** COAZ response: the decision plus which capability the tool required (tool → required capability → decision). */
+export interface CoazToolAuthorizationResponse {
+    decision: boolean;
+    /** Echoed tool name. */
+    tool: string;
+    /** The PCA capability (verb) the tool was authorized against. */
+    required_capability: string;
+    context?: DecisionContext;
+}
+/** Well-known AuthZEN decision-context key under which the AARP pending-approval reference is carried. */
+export declare const PCA_APPROVAL_KEY: "pca_approval";
+/** Well-known AuthZEN context key under which a PEP forwards the signed PCActn (compact wire string). */
+export declare const PCA_ACTION_KEY: "pca_action";
+/**
+ * AARP pending-approval reference. Produced when the Policy-VM decision needs a tier-2 (guardian) or
+ * tier-3 (human) co-sign. It maps onto PCA's FROST / CIBA step-up: `tier` is the threshold `t`, and
+ * `auth_req_id` is the CIBA-style handle a PEP polls / an approval inbox resolves. `goal_commit` carries
+ * the grant's signed goal lineage so the approver sees which goal this action traces back to.
+ */
+export interface AarpPending {
+    approval_required: true;
+    /** CIBA-style reference the PEP uses to poll / resolve the pending approval. */
+    auth_req_id: string;
+    /** The threshold tier a guardian/human must satisfy (2 guardian, 3 human). */
+    tier: 2 | 3;
+    /** The full Policy-VM required threshold (t / proof / optimistic). */
+    required_threshold: RequiredThreshold;
+    /** Signed goal commitment from the grant this action is under (approval lineage). */
+    goal_commit: string;
+    /** The risk value the action carries. */
+    risk: number;
+    reason: string;
+    requested_at: number;
+}
+/** True iff this decision is a step-up (deny now, approval pending) carrying an AARP reference. */
+export declare function isApprovalRequired(resp: AccessEvaluationResponse): boolean;
+/** Extract the AARP pending-approval reference from a decision, or null if none. */
+export declare function approvalOf(resp: AccessEvaluationResponse): AarpPending | null;
+/**
+ * The PCA authority + evaluation inputs a resolved AuthZEN request decides against. The host supplies
+ * this (keyed off the request's subject/resource/etc.) so the PDP stays stateless about where grants and
+ * budgets live.
+ */
+export interface PdpDecisionContext {
+    /** The signed Root Intent Grant (the capability-chain root the PCActn must chain from). */
+    grant: Capability;
+    /** The full capability chain (root first). Defaults to the PCActn's own `cap_chain`. */
+    chain?: CapabilityChain;
+    /** The policy to evaluate STATICALLY when no PCActn is present (the grant's compiled policy, usually). */
+    policy: PolicyInput;
+    /** Plan nodes for semantic-distance risk (optional). */
+    plan?: PlanNode[];
+    /**
+     * Server-authoritative risk inputs for the Policy-VM. Omitted / missing fields fail safe to WORST
+     * (which raises the required threshold), so a PDP that cannot score risk defaults to demanding step-up.
+     */
+    risk?: Partial<RiskInputs>;
+    /** Trust budget to meter against. Defaults to a fresh budget at the grant's `bMax`. */
+    budget?: TrustBudget;
+    /** Optional opt-in verifier enforcement gates (M1 taint / M3 freshness / M5 attestation). */
+    enforce?: EnforcementGates;
+    /** Override the default AuthZEN→PCA action mapping for this request. */
+    toAction?: (req: AccessEvaluationRequest) => AnalyzerAction;
+}
+export interface AuthzenPdpConfig {
+    /**
+     * Resolve the PCA authority for an AuthZEN request. Return `null`/`undefined` to DENY (fail closed:
+     * no policy context => no authority => no access). May throw; a throw is caught and fails closed.
+     */
+    resolve: (req: AccessEvaluationRequest) => PdpDecisionContext | null | undefined;
+    /**
+     * This PDP's own audience id, compared to a PCActn's signed `aud` (cross-instance binding):
+     *  - a string  => must equal the PCActn `aud`;
+     *  - `null`    => accept any audience;
+     *  - omitted   => FAIL CLOSED when a PCActn carries an `aud` (forwarded to `verifyPCActnCore`).
+     */
+    audience?: string | null;
+    /** Clock (epoch ms). Defaults to `Date.now`. */
+    now?: () => number;
+    /** Map an MCP tool name to the PCA capability (verb) it requires. Default: identity (verb === tool). */
+    toolCapability?: (toolName: string) => string;
+}
+export interface AuthzenPdp {
+    /** AuthZEN Access Evaluation: one `{subject,action,resource,context}` → one decision. */
+    evaluate(req: AccessEvaluationRequest): Promise<AccessEvaluationResponse>;
+    /** AuthZEN Access Evaluations: the boxcar / batch endpoint with default-inheritance + semantics. */
+    evaluations(req: AccessEvaluationsRequest): Promise<AccessEvaluationsResponse>;
+    /** COAZ profile: authorize an MCP tool invocation (tool → required capability → decision). */
+    evaluateTool(req: CoazToolAuthorizationRequest): Promise<CoazToolAuthorizationResponse>;
+}
+export declare function isAuthzenSubject(x: unknown): x is AuthzenSubject;
+export declare function isAuthzenAction(x: unknown): x is AuthzenAction;
+export declare function isAuthzenResource(x: unknown): x is AuthzenResource;
+export declare function isAccessEvaluationRequest(x: unknown): x is AccessEvaluationRequest;
+export declare function isAccessEvaluationsRequest(x: unknown): x is AccessEvaluationsRequest;
+export declare function isCoazToolAuthorizationRequest(x: unknown): x is CoazToolAuthorizationRequest;
+/**
+ * Default AuthZEN→PCA action mapping:
+ *   verb     = action.name
+ *   resource = `${resource.type}:${resource.id}`  (or just the type when id is empty)
+ *   params   = { ...resource.properties, ...action.properties }   (action wins on key collision)
+ *   subject  = subject.properties   (witness for `subject.*` conditions)
+ *   env      = context (minus PCA keys)  (witness for `env.*` conditions)
+ */
+export declare function defaultToAction(req: AccessEvaluationRequest): AnalyzerAction;
+export declare function authzenPdp(config: AuthzenPdpConfig): AuthzenPdp;
+/** The AuthZEN 1.0 standard Access Evaluation path. */
+export declare const EVALUATION_PATH: "/access/v1/evaluation";
+/** The AuthZEN 1.0 standard Access Evaluations (boxcar) path. */
+export declare const EVALUATIONS_PATH: "/access/v1/evaluations";
+/** The COAZ (MCP-tool authorization) profile path. */
+export declare const COAZ_TOOL_PATH: "/access/v1/mcp/tool/evaluation";
+export interface HandlerRequest {
+    path: string;
+    body: unknown;
+}
+export interface HandlerResponse {
+    status: number;
+    body: AccessEvaluationResponse | AccessEvaluationsResponse | CoazToolAuthorizationResponse | {
+        error: string;
+    };
+}
+/**
+ * A tiny, framework-agnostic handler: give it `{ path, body }` (body = the parsed JSON a PEP POSTed) and
+ * it returns `{ status, body }` to serialize back. A malformed body is a 400 (which a PEP enforces as a
+ * deny — fail closed); a decision endpoint always returns 200 with the AuthZEN decision JSON. Drop it
+ * behind Express, Fastify, a Lambda, a service-mesh filter — anything that can hand it a path + JSON.
+ */
+export declare function authzenHandler(pdp: AuthzenPdp): (req: HandlerRequest) => Promise<HandlerResponse>;

package/dist/index.js

@@ -0,0 +1,393 @@
+"use strict";
+/**
+ * @atlasauth/pca-authzen — PCA behind the OpenID AuthZEN Authorization API.
+ *
+ * The OpenID AuthZEN Authorization API 1.0 (final, Jan 2026) standardises the PEP↔PDP wire: a Policy
+ * Enforcement Point (an API gateway, a service mesh sidecar, an MCP host) asks a Policy Decision Point
+ * `can this subject do this action on this resource in this context?` and gets back a boolean decision.
+ * This package makes Proof-Carrying Authority (PCA) answer that call, so ANY AuthZEN-speaking PEP can
+ * use the PCA verifier + Policy-VM as its decision point without knowing anything about PCActns,
+ * capability chains, trust budgets or FROST — instant distribution across the AuthZEN ecosystem.
+ *
+ * It maps the AuthZEN quad onto PCA two ways:
+ *   • when the `context` carries a signed PCActn, the PDP VERIFIES it (`verifyPCActnCore`) and then runs
+ *     the deterministic Policy-VM decision (`decide`) — proof-carrying, runtime authority;
+ *   • otherwise it evaluates the declared policy STATICALLY (`@atlasauth/pca-analyzer` exact admission) —
+ *     "is this action admissible at all under the authority?".
+ * Everything FAILS CLOSED: an unresolved policy, a malformed/foreign PCActn, a verifier rejection, a
+ * policy denial, or any thrown error all yield `decision: false`.
+ *
+ * Three AuthZEN surfaces are exposed:
+ *   • Access Evaluation  (`evaluate`)        — the single `{subject,action,resource,context}` call;
+ *   • Access Evaluations (`evaluations`)     — the boxcar / batch endpoint with default-inheritance;
+ *   • the COAZ profile    (`evaluateTool`)   — MCP-tool authorization (tool → required capability → decision);
+ *   • the AARP profile    (step-up)          — when the Policy-VM needs a human/guardian co-sign, the
+ *                                               decision carries an "approval required" reference that maps
+ *                                               onto PCA's FROST/CIBA step-up.
+ * A framework-agnostic `authzenHandler` turns all of this into the status + JSON a PEP expects.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COAZ_TOOL_PATH = exports.EVALUATIONS_PATH = exports.EVALUATION_PATH = exports.PCA_ACTION_KEY = exports.PCA_APPROVAL_KEY = void 0;
+exports.isApprovalRequired = isApprovalRequired;
+exports.approvalOf = approvalOf;
+exports.isAuthzenSubject = isAuthzenSubject;
+exports.isAuthzenAction = isAuthzenAction;
+exports.isAuthzenResource = isAuthzenResource;
+exports.isAccessEvaluationRequest = isAccessEvaluationRequest;
+exports.isAccessEvaluationsRequest = isAccessEvaluationsRequest;
+exports.isCoazToolAuthorizationRequest = isCoazToolAuthorizationRequest;
+exports.defaultToAction = defaultToAction;
+exports.authzenPdp = authzenPdp;
+exports.authzenHandler = authzenHandler;
+const pca_1 = require("@atlasauth/pca");
+const pca_analyzer_1 = require("@atlasauth/pca-analyzer");
+// ---- AARP profile: approval-required (step-up) ----------------------------------------------------
+/** Well-known AuthZEN decision-context key under which the AARP pending-approval reference is carried. */
+exports.PCA_APPROVAL_KEY = 'pca_approval';
+/** Well-known AuthZEN context key under which a PEP forwards the signed PCActn (compact wire string). */
+exports.PCA_ACTION_KEY = 'pca_action';
+/** True iff this decision is a step-up (deny now, approval pending) carrying an AARP reference. */
+function isApprovalRequired(resp) {
+    return approvalOf(resp) !== null;
+}
+/** Extract the AARP pending-approval reference from a decision, or null if none. */
+function approvalOf(resp) {
+    const ctx = resp.context;
+    if (ctx === undefined)
+        return null;
+    const p = ctx[exports.PCA_APPROVAL_KEY];
+    if (isRecord(p) && p.approval_required === true && typeof p.auth_req_id === 'string') {
+        // Structurally the pending reference the PDP itself wrote.
+        const tier = p.tier === 3 ? 3 : 2;
+        const rt = p.required_threshold;
+        return {
+            approval_required: true,
+            auth_req_id: p.auth_req_id,
+            tier,
+            required_threshold: isRequiredThreshold(rt) ? rt : { t: tier, proof: tier === 3 ? 'strong' : 'standard', optimisticAllowed: false },
+            goal_commit: typeof p.goal_commit === 'string' ? p.goal_commit : '',
+            risk: typeof p.risk === 'number' ? p.risk : 1,
+            reason: typeof p.reason === 'string' ? p.reason : 'approval required',
+            requested_at: typeof p.requested_at === 'number' ? p.requested_at : 0,
+        };
+    }
+    return null;
+}
+// ===================================================================================================
+// small, cast-free guards & helpers
+// ===================================================================================================
+function isRecord(x) {
+    return typeof x === 'object' && x !== null && !Array.isArray(x);
+}
+function isRequiredThreshold(x) {
+    return isRecord(x) && (x.t === 1 || x.t === 2 || x.t === 3) && typeof x.proof === 'string' && typeof x.optimisticAllowed === 'boolean';
+}
+function isAuthzenSubject(x) {
+    return isRecord(x) && typeof x.type === 'string' && typeof x.id === 'string';
+}
+function isAuthzenAction(x) {
+    return isRecord(x) && typeof x.name === 'string';
+}
+function isAuthzenResource(x) {
+    return isRecord(x) && typeof x.type === 'string' && typeof x.id === 'string';
+}
+function isAccessEvaluationRequest(x) {
+    return (isRecord(x) &&
+        isAuthzenSubject(x.subject) &&
+        isAuthzenAction(x.action) &&
+        isAuthzenResource(x.resource) &&
+        (x.context === undefined || isRecord(x.context)));
+}
+function isAccessEvaluationsRequest(x) {
+    return isRecord(x) && Array.isArray(x.evaluations);
+}
+function isCoazToolAuthorizationRequest(x) {
+    return isRecord(x) && isAuthzenSubject(x.subject) && isRecord(x.tool) && typeof x.tool.name === 'string';
+}
+/** A denial response with machine + human rationale. */
+function deny(reason, id) {
+    const context = { reason_admin: { denied: true, reason }, reason_user: { message: reason } };
+    if (id !== undefined)
+        context.id = id;
+    return { decision: false, context };
+}
+/** A permit response with optional rationale. */
+function permit(reason) {
+    return { decision: true, context: { reason_admin: { reason } } };
+}
+/** Pull a string reversibility hint out of the request (action.properties / context), for static mapping. */
+function pickReversibility(req) {
+    const fromAction = req.action.properties;
+    if (isRecord(fromAction) && typeof fromAction.reversibility_class === 'string')
+        return fromAction.reversibility_class;
+    const fromCtx = req.context;
+    if (isRecord(fromCtx) && typeof fromCtx.reversibility_class === 'string')
+        return fromCtx.reversibility_class;
+    return undefined;
+}
+/** The env witness a predicate's `env.*` conditions see: the context minus PCA-private keys. */
+function envFromContext(context) {
+    if (!isRecord(context))
+        return undefined;
+    const out = {};
+    for (const [k, v] of Object.entries(context)) {
+        if (k === exports.PCA_ACTION_KEY || k === exports.PCA_APPROVAL_KEY)
+            continue;
+        out[k] = v;
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+/**
+ * Default AuthZEN→PCA action mapping:
+ *   verb     = action.name
+ *   resource = `${resource.type}:${resource.id}`  (or just the type when id is empty)
+ *   params   = { ...resource.properties, ...action.properties }   (action wins on key collision)
+ *   subject  = subject.properties   (witness for `subject.*` conditions)
+ *   env      = context (minus PCA keys)  (witness for `env.*` conditions)
+ */
+function defaultToAction(req) {
+    const resource = req.resource.id.length > 0 ? `${req.resource.type}:${req.resource.id}` : req.resource.type;
+    const params = {
+        ...(isRecord(req.resource.properties) ? req.resource.properties : {}),
+        ...(isRecord(req.action.properties) ? req.action.properties : {}),
+    };
+    const out = { verb: req.action.name, resource, params };
+    const rc = pickReversibility(req);
+    if (rc !== undefined)
+        out.reversibilityClass = rc;
+    if (isRecord(req.subject.properties))
+        out.subject = req.subject.properties;
+    const env = envFromContext(req.context);
+    if (env !== undefined)
+        out.env = env;
+    return out;
+}
+/** Extract the forwarded PCActn (compact wire string) from the AuthZEN context, if any. */
+function pcactnFromContext(context) {
+    if (!isRecord(context))
+        return null;
+    const raw = context[exports.PCA_ACTION_KEY];
+    if (raw === undefined || raw === null)
+        return null;
+    if (typeof raw !== 'string')
+        return 'malformed';
+    try {
+        return (0, pca_1.decodePCActn)(raw);
+    }
+    catch {
+        return 'malformed';
+    }
+}
+// ===================================================================================================
+// the PDP
+// ===================================================================================================
+function authzenPdp(config) {
+    const clock = config.now ?? (() => Date.now());
+    const toolCapability = config.toolCapability ?? ((name) => name);
+    async function evaluate(req) {
+        const now = clock();
+        try {
+            const ctx = config.resolve(req);
+            if (ctx === null || ctx === undefined)
+                return deny('no PCA authority resolved for this request');
+            const mapped = (ctx.toAction ?? defaultToAction)(req);
+            const carried = pcactnFromContext(req.context);
+            if (carried === 'malformed')
+                return deny('context carries a malformed PCActn');
+            // ---- static path: no PCActn → "is this admissible under the declared authority at all?" ----
+            if (carried === null) {
+                const admissible = (0, pca_analyzer_1.admitsConcrete)(ctx.policy, mapped);
+                return admissible
+                    ? permit('statically admissible under the declared authority')
+                    : deny('action is not admissible under the declared authority');
+            }
+            // ---- proof-carrying path: verify the PCActn, then run the Policy-VM decision ----
+            const p = carried;
+            // The proof must be FOR the action the PEP is asking about (bind the signed action to the request):
+            // verb + resource, and the request's attributes must hash to the PCActn's signed `params_digest`
+            // (so a valid proof for one set of args cannot be replayed against different ones).
+            if (p.action.verb !== mapped.verb || p.action.resource !== mapped.resource) {
+                return deny(`the PCActn authorizes ${p.action.verb} on ${p.action.resource}, not the requested ${mapped.verb} on ${mapped.resource}`);
+            }
+            const reqParams = paramsOf(mapped);
+            if ((0, pca_1.paramsDigest)(reqParams) !== p.action.params_digest) {
+                return deny("the request attributes do not match the PCActn's signed params_digest");
+            }
+            const verify = await (0, pca_1.verifyPCActnCore)(p, {
+                grant: ctx.grant,
+                nowEpoch: now,
+                audience: config.audience,
+                ...(ctx.enforce !== undefined ? { enforce: ctx.enforce } : {}),
+            });
+            if (!verify.allow) {
+                return {
+                    decision: false,
+                    context: {
+                        reason_admin: { denied: true, stage: 'verify', checks: verify.checks, reason: verify.reason ?? 'PCActn verification failed' },
+                        reason_user: { message: 'the proof-carrying action did not verify' },
+                    },
+                };
+            }
+            const budget = ctx.budget ?? freshBudget(ctx.grant, now);
+            const decision = (0, pca_1.decide)((0, pca_1.deriveDecideInput)(p, {
+                grant: ctx.grant,
+                chain: ctx.chain ?? p.cap_chain,
+                ...(ctx.plan !== undefined ? { plan: ctx.plan } : {}),
+                params: reqParams,
+                risk: ctx.risk ?? {},
+                budget,
+                now,
+                ...(mapped.subject !== undefined ? { subject: mapped.subject } : {}),
+                ...(mapped.env !== undefined ? { env: mapped.env } : {}),
+            }));
+            if (!decision.releaseGuardianShare) {
+                return {
+                    decision: false,
+                    context: {
+                        reason_admin: { denied: true, stage: 'policy', reasons: decision.reasons, risk: decision.r },
+                        reason_user: { message: 'the policy does not permit this action' },
+                    },
+                };
+            }
+            if (decision.admit) {
+                return {
+                    decision: true,
+                    context: { reason_admin: { stage: 'policy', risk: decision.r, threshold: decision.requiredThreshold } },
+                };
+            }
+            // Admissible but needs a guardian/human co-sign → AARP approval-required (step-up).
+            return approvalRequired(p, decision, ctx.grant, now);
+        }
+        catch (err) {
+            return deny(`evaluation error (fail closed): ${err instanceof Error ? err.message : 'unknown'}`);
+        }
+    }
+    async function evaluations(req) {
+        if (!Array.isArray(req.evaluations))
+            return { evaluations: [] };
+        const semantic = req.options?.evaluations_semantic ?? 'execute_all';
+        const merged = req.evaluations.map((item) => mergeEvaluation(req, item));
+        if (semantic === 'execute_all') {
+            const out = await Promise.all(merged.map((m) => (m === null ? Promise.resolve(deny('incomplete evaluation (missing subject/action/resource)')) : evaluate(m))));
+            return { evaluations: out };
+        }
+        // Short-circuit modes: evaluate sequentially, stop at the first matching decision.
+        const out = [];
+        for (const m of merged) {
+            const r = m === null ? deny('incomplete evaluation (missing subject/action/resource)') : await evaluate(m);
+            out.push(r);
+            if (semantic === 'deny_on_first_deny' && r.decision === false)
+                break;
+            if (semantic === 'permit_on_first_permit' && r.decision === true)
+                break;
+        }
+        return { evaluations: out };
+    }
+    async function evaluateTool(req) {
+        const capability = toolCapability(req.tool.name);
+        const mappedReq = {
+            subject: req.subject,
+            action: { name: capability, ...(req.tool.arguments !== undefined ? { properties: req.tool.arguments } : {}) },
+            resource: { type: 'mcp_tool', id: req.tool.name },
+            ...(req.context !== undefined ? { context: req.context } : {}),
+        };
+        const resp = await evaluate(mappedReq);
+        return {
+            decision: resp.decision,
+            tool: req.tool.name,
+            required_capability: capability,
+            ...(resp.context !== undefined ? { context: resp.context } : {}),
+        };
+    }
+    return { evaluate, evaluations, evaluateTool };
+}
+// ---- internals ------------------------------------------------------------------------------------
+function paramsOf(action) {
+    return isRecord(action.params) ? action.params : {};
+}
+function freshBudget(grant, now) {
+    const env = (0, pca_1.readEnvelope)(grant);
+    const bMax = env?.risk_policy.bMax;
+    return { B: typeof bMax === 'number' && Number.isFinite(bMax) ? bMax : 0, tau: now, asOf: now };
+}
+/** Build the AARP approval-required decision from a step-up Policy-VM result. */
+function approvalRequired(p, decision, grant, now) {
+    const tier = decision.requiredThreshold.t >= 3 ? 3 : 2;
+    const reason = decision.reasons[0] ?? `requires tier-${tier} co-sign`;
+    const auth_req_id = (0, pca_1.hashCanonical)({
+        d: 'atlas-pca/authzen/aarp/v1',
+        verb: p.action.verb,
+        resource: p.action.resource,
+        params_digest: p.action.params_digest,
+        counter: p.counter,
+        at: now,
+    });
+    const pending = {
+        approval_required: true,
+        auth_req_id,
+        tier,
+        required_threshold: decision.requiredThreshold,
+        goal_commit: (0, pca_1.readEnvelope)(grant)?.goal_commit ?? '',
+        risk: decision.r,
+        reason,
+        requested_at: now,
+    };
+    return {
+        decision: false,
+        context: {
+            id: auth_req_id,
+            reason_admin: { stage: 'step_up', risk: decision.r, threshold: decision.requiredThreshold, reasons: decision.reasons },
+            reason_user: { message: 'approval required before this action can proceed' },
+            [exports.PCA_APPROVAL_KEY]: pending,
+        },
+    };
+}
+/** Merge boxcar defaults with one item; null when a required piece is still missing (→ fail closed). */
+function mergeEvaluation(defaults, item) {
+    const subject = item.subject ?? defaults.subject;
+    const action = item.action ?? defaults.action;
+    const resource = item.resource ?? defaults.resource;
+    const context = item.context ?? defaults.context;
+    if (!isAuthzenSubject(subject) || !isAuthzenAction(action) || !isAuthzenResource(resource))
+        return null;
+    return { subject, action, resource, ...(context !== undefined ? { context } : {}) };
+}
+// ===================================================================================================
+// framework-agnostic HTTP handler
+// ===================================================================================================
+/** The AuthZEN 1.0 standard Access Evaluation path. */
+exports.EVALUATION_PATH = '/access/v1/evaluation';
+/** The AuthZEN 1.0 standard Access Evaluations (boxcar) path. */
+exports.EVALUATIONS_PATH = '/access/v1/evaluations';
+/** The COAZ (MCP-tool authorization) profile path. */
+exports.COAZ_TOOL_PATH = '/access/v1/mcp/tool/evaluation';
+/**
+ * A tiny, framework-agnostic handler: give it `{ path, body }` (body = the parsed JSON a PEP POSTed) and
+ * it returns `{ status, body }` to serialize back. A malformed body is a 400 (which a PEP enforces as a
+ * deny — fail closed); a decision endpoint always returns 200 with the AuthZEN decision JSON. Drop it
+ * behind Express, Fastify, a Lambda, a service-mesh filter — anything that can hand it a path + JSON.
+ */
+function authzenHandler(pdp) {
+    return async (req) => {
+        switch (req.path) {
+            case exports.EVALUATION_PATH: {
+                if (!isAccessEvaluationRequest(req.body))
+                    return { status: 400, body: { error: 'invalid AuthZEN Access Evaluation request' } };
+                return { status: 200, body: await pdp.evaluate(req.body) };
+            }
+            case exports.EVALUATIONS_PATH: {
+                if (!isAccessEvaluationsRequest(req.body))
+                    return { status: 400, body: { error: 'invalid AuthZEN Access Evaluations request' } };
+                return { status: 200, body: await pdp.evaluations(req.body) };
+            }
+            case exports.COAZ_TOOL_PATH: {
+                if (!isCoazToolAuthorizationRequest(req.body))
+                    return { status: 400, body: { error: 'invalid COAZ MCP-tool authorization request' } };
+                return { status: 200, body: await pdp.evaluateTool(req.body) };
+            }
+            default:
+                return { status: 404, body: { error: `unknown AuthZEN path: ${req.path}` } };
+        }
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAqJH,gDAEC;AAGD,gCAoBC;AAyED,4CAEC;AACD,0CAEC;AACD,8CAEC;AACD,8DAQC;AACD,gEAEC;AACD,wEAEC;AA0CD,0CAaC;AAmBD,gCAoIC;AAoFD,wCAmBC;AAjkBD,wCAiBwB;AACxB,0DAAgG;AAkGhG,sGAAsG;AAEtG,0GAA0G;AAC7F,QAAA,gBAAgB,GAAG,cAAuB,CAAC;AAExD,yGAAyG;AAC5F,QAAA,cAAc,GAAG,YAAqB,CAAC;AAwBpD,mGAAmG;AACnG,SAAgB,kBAAkB,CAAC,IAA8B;IAC/D,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;AACnC,CAAC;AAED,oFAAoF;AACpF,SAAgB,UAAU,CAAC,IAA8B;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,wBAAgB,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrF,2DAA2D;QAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,kBAAkB,CAAC;QAChC,OAAO;YACL,iBAAiB,EAAE,IAAI;YACvB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,IAAI;YACJ,kBAAkB,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE;YACnI,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACnE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB;YACrE,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA6DD,sGAAsG;AACtG,oCAAoC;AACpC,sGAAsG;AAEtG,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAU;IACrC,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC;AACzI,CAAC;AAED,SAAgB,gBAAgB,CAAC,CAAU;IACzC,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;AAC/E,CAAC;AACD,SAAgB,eAAe,CAAC,CAAU;IACxC,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnD,CAAC;AACD,SAAgB,iBAAiB,CAAC,CAAU;IAC1C,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;AAC/E,CAAC;AACD,SAAgB,yBAAyB,CAAC,CAAU;IAClD,OAAO,CACL,QAAQ,CAAC,CAAC,CAAC;QACX,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3B,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7B,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC;AACD,SAAgB,0BAA0B,CAAC,CAAU;IACnD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AACrD,CAAC;AACD,SAAgB,8BAA8B,CAAC,CAAU;IACvD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC3G,CAAC;AAED,wDAAwD;AACxD,SAAS,IAAI,CAAC,MAAc,EAAE,EAAW;IACvC,MAAM,OAAO,GAAoB,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;IAC9G,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IACtC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,iDAAiD;AACjD,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,6GAA6G;AAC7G,SAAS,iBAAiB,CAAC,GAA4B;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;IACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,mBAAmB,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,mBAAmB,CAAC;IACtH,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,mBAAmB,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC;IAC7G,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,SAAS,cAAc,CAAC,OAAmC;IACzD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,sBAAc,IAAI,CAAC,KAAK,wBAAgB;YAAE,SAAS;QAC7D,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,GAA4B;IAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5G,MAAM,MAAM,GAA4B;QACtC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;IACF,MAAM,GAAG,GAAmB,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACxE,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,EAAE,KAAK,SAAS;QAAE,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC;IAClD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3E,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,SAAS,iBAAiB,CAAC,OAAmC;IAC5D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,sBAAc,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,IAAA,kBAAY,EAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,UAAU;AACV,sGAAsG;AAEtG,SAAgB,UAAU,CAAC,MAAwB;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzE,KAAK,UAAU,QAAQ,CAAC,GAA4B;QAClD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAEjG,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAE/E,+FAA+F;YAC/F,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,UAAU,GAAG,IAAA,6BAAc,EAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtD,OAAO,UAAU;oBACf,CAAC,CAAC,MAAM,CAAC,oDAAoD,CAAC;oBAC9D,CAAC,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YACpE,CAAC;YAED,oFAAoF;YACpF,MAAM,CAAC,GAAG,OAAO,CAAC;YAElB,oGAAoG;YACpG,iGAAiG;YACjG,oFAAoF;YACpF,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC3E,OAAO,IAAI,CACT,yBAAyB,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,uBAAuB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,EAAE,CACzH,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,IAAA,kBAAY,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACvF,CAAC;YAED,MAAM,MAAM,GAAiB,MAAM,IAAA,sBAAgB,EAAC,CAAC,EAAE;gBACrD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG;gBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE;wBACP,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,4BAA4B,EAAE;wBAC7H,WAAW,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE;qBACrE;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAgB,GAAG,CAAC,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,IAAA,YAAM,EACrB,IAAA,uBAAiB,EAAC,CAAC,EAAE;gBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS;gBAC/B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;gBACpB,MAAM;gBACN,GAAG;gBACH,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;gBACnC,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE;wBACP,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE;wBAC5F,WAAW,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE;qBACnE;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,iBAAiB,EAAE,EAAE;iBACxG,CAAC;YACJ,CAAC;YAED,oFAAoF;YACpF,OAAO,gBAAgB,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,GAA6B;QACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAwB,GAAG,CAAC,OAAO,EAAE,oBAAoB,IAAI,aAAa,CAAC;QACzF,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAEzE,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChK,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QAC9B,CAAC;QAED,mFAAmF;QACnF,MAAM,GAAG,GAA+B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3G,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,QAAQ,KAAK,oBAAoB,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;gBAAE,MAAM;YACrE,IAAI,QAAQ,KAAK,wBAAwB,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;gBAAE,MAAM;QAC1E,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,GAAiC;QAC3D,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAA4B;YACzC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC7G,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;YACnB,mBAAmB,EAAE,UAAU;YAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC;AAED,sGAAsG;AAEtG,SAAS,QAAQ,CAAC,MAAsB;IACtC,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,GAAW;IACjD,MAAM,GAAG,GAAG,IAAA,kBAAY,EAAC,KAAK,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC;IACnC,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAClG,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,CAAS,EAAE,QAAmC,EAAE,KAAiB,EAAE,GAAW;IACtG,MAAM,IAAI,GAAU,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,iBAAiB,IAAI,UAAU,CAAC;IACtE,MAAM,WAAW,GAAG,IAAA,mBAAa,EAAC;QAChC,CAAC,EAAE,2BAA2B;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;QACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;QAC3B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa;QACrC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,EAAE,EAAE,GAAG;KACR,CAAC,CAAC;IACH,MAAM,OAAO,GAAgB;QAC3B,iBAAiB,EAAE,IAAI;QACvB,WAAW;QACX,IAAI;QACJ,kBAAkB,EAAE,QAAQ,CAAC,iBAAiB;QAC9C,WAAW,EAAE,IAAA,kBAAY,EAAC,KAAK,CAAC,EAAE,WAAW,IAAI,EAAE;QACnD,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChB,MAAM;QACN,YAAY,EAAE,GAAG;KAClB,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE;YACP,EAAE,EAAE,WAAW;YACf,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YACtH,WAAW,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE;YAC5E,CAAC,wBAAgB,CAAC,EAAE,OAAO;SAC5B;KACF,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,SAAS,eAAe,CAAC,QAAkC,EAAE,IAAsC;IACjG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;IACjD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACxG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,sGAAsG;AACtG,kCAAkC;AAClC,sGAAsG;AAEtG,uDAAuD;AAC1C,QAAA,eAAe,GAAG,uBAAgC,CAAC;AAChE,iEAAiE;AACpD,QAAA,gBAAgB,GAAG,wBAAiC,CAAC;AAClE,sDAAsD;AACzC,QAAA,cAAc,GAAG,gCAAyC,CAAC;AAYxE;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,GAAe;IAC5C,OAAO,KAAK,EAAE,GAAmB,EAA4B,EAAE;QAC7D,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,uBAAe,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,EAAE,CAAC;gBAC/H,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,CAAC;YACD,KAAK,wBAAgB,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE,EAAE,CAAC;gBACjI,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,CAAC;YACD,KAAK,sBAAc,CAAC,CAAC,CAAC;gBACpB,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,EAAE,CAAC;gBACtI,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,CAAC;YACD;gBACE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,58 @@
 {
   "name": "@atlasauth/pca-authzen",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "AuthZEN PDP for PCA: expose the PCA verifier/policy engine behind the OpenID AuthZEN Authorization API (subject/action/resource/context) with the COAZ MCP-tool and AARP approval profiles, so any AuthZEN PEP can use PCA as its decision point.",
+  "keywords": [
+    "authzen",
+    "pdp",
+    "openid",
+    "authorization api",
+    "agent authorization",
+    "proof-carrying authority",
+    "pca",
+    "ai agents"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/Atlas-Authorization/pca#readme",
+  "bugs": {
+    "url": "https://github.com/Atlas-Authorization/pca/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Atlas-Authorization/pca.git",
+    "directory": "packages/pca-authzen"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@atlasauth/pca": "0.2.0",
+    "@atlasauth/pca-analyzer": "0.2.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
 }