@atlasauth/pca-authzen 0.1.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Atlas Authorization
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,68 @@
+# @atlasauth/pca-authzen
+
+Proof-Carrying Authority (PCA) behind the OpenID AuthZEN Authorization API. It gives you a Policy Decision Point (PDP) so any AuthZEN-speaking Policy Enforcement Point (an API gateway, a service mesh sidecar, an MCP host) can ask "can this subject do this action on this resource?" and get a boolean decision backed by the PCA verifier and policy engine.
+
+- If the request `context` carries a signed PCActn (key `pca_action`), the PDP verifies it and then runs the deterministic policy decision.
+- Otherwise it evaluates the declared policy statically (exact admission via `@atlasauth/pca-analyzer`).
+- Everything fails closed: an unresolved policy, a malformed or foreign PCActn, a verifier rejection, a policy denial or a thrown error all return `decision: false`.
+
+It exposes Access Evaluation, Access Evaluations (batch), the COAZ profile for MCP tool authorization, and an approval-required reference (AARP style) when a step-up cosign is needed.
+
+## Install
+
+```sh
+npm i @atlasauth/pca-authzen @atlasauth/pca @atlasauth/pca-analyzer
+```
+
+## Usage
+
+```ts
+import { agent, generateKeyPair } from '@atlasauth/pca';
+import { authzenPdp, authzenHandler, PCA_ACTION_KEY, isApprovalRequired } from '@atlasauth/pca-authzen';
+
+const a = agent({
+  principal: generateKeyPair(),
+  goal: 'reconcile october refunds',
+  permissions: { stripe: ['refund'] },
+  limits: { refund: '$500' },
+  aud: 'rs_demo',
+});
+
+const pdp = authzenPdp({
+  audience: 'rs_demo',
+  // Look up the authority for each request. Return null to deny.
+  resolve: () => ({ grant: a.grant, chain: a.chain, policy: a.policy, budget: a.budget }),
+});
+
+const { encoded } = a.act('stripe.refund', 'charge:ch_1', { amount: 42, currency: 'usd' });
+
+const resp = await pdp.evaluate({
+  subject: { type: 'agent', id: 'a1' },
+  action: { name: 'stripe.refund', properties: { amount: 42, currency: 'usd' } },
+  resource: { type: 'charge', id: 'ch_1' },
+  context: { [PCA_ACTION_KEY]: encoded },
+});
+// resp.decision is a boolean; isApprovalRequired(resp) is true for a pending step-up
+
+// Framework-agnostic HTTP handler for the standard AuthZEN paths:
+const handle = authzenHandler(pdp); // handle({ path: '/access/v1/evaluation', body }) -> { status, body }
+```
+
+The signed PCActn must match the requested action, resource and parameters, otherwise the decision is false. If you omit `audience` and the PCActn carries an `aud`, the PDP fails closed.
+
+## API
+
+- `authzenPdp(config)` returns `{ evaluate, evaluations, evaluateTool }`
+- `authzenHandler(pdp)`, with path constants `EVALUATION_PATH`, `EVALUATIONS_PATH`, `COAZ_TOOL_PATH`
+- `approvalOf`, `isApprovalRequired`, `PCA_ACTION_KEY`, `PCA_APPROVAL_KEY`
+- Request guards (`isAccessEvaluationRequest`, ...) and `defaultToAction` (override per request with `toAction`)
+
+## Status
+
+The PDP is only as strong as the `resolve` callback you provide: it decides against the grant, policy and budget you hand it, and it keeps no state of its own. Cryptography in the underlying PCA packages is unaudited.
+
+Source and issues: https://github.com/Atlas-Authorization/pca
+
+## License
+
+MIT - see LICENSE

package/package.json

@@ -1,7 +1,27 @@
 {
   "name": "@atlasauth/pca-authzen",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "AuthZEN PDP for PCA: expose the PCA verifier/policy engine behind the OpenID AuthZEN Authorization API (subject/action/resource/context) with the COAZ MCP-tool and AARP approval profiles, so any AuthZEN PEP can use PCA as its decision point.",
+  "keywords": [
+    "authzen",
+    "pdp",
+    "openid",
+    "authorization api",
+    "agent authorization",
+    "proof-carrying authority",
+    "pca",
+    "ai agents"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/Atlas-Authorization/pca#readme",
+  "bugs": {
+    "url": "https://github.com/Atlas-Authorization/pca/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Atlas-Authorization/pca.git",
+    "directory": "packages/pca-authzen"
+  },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -12,8 +32,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@atlasauth/pca": "0.1.0",
-    "@atlasauth/pca-analyzer": "0.1.0"
+    "@atlasauth/pca": "0.2.0",
+    "@atlasauth/pca-analyzer": "0.2.0"
   },
   "devDependencies": {
     "typescript": "^5.6.3",
@@ -21,8 +41,12 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "LICENSE"
   ],
+  "engines": {
+    "node": ">=20"
+  },
   "publishConfig": {
     "access": "public"
   },