@cyanmycelium/mcp-broker 0.3.0 → 1.0.1

package/dist/auth/http.auth.js

@@ -0,0 +1,121 @@
+import { AuthError, scopesOf } from "./auth.types.js";
+import { buildResourceMetadata } from "./resource.metadata.js";
+import { SubjectMappingError } from "../authorization/index.js";
+/** Well-known prefix under which per-slot Protected Resource Metadata is served. */
+const PRM_PREFIX = "/.well-known/oauth-protected-resource/";
+/** Extracts the bearer token from an `Authorization` header, or `null`. */
+function extractBearer(header) {
+    if (typeof header !== "string")
+        return null;
+    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+    return match ? match[1].trim() : null;
+}
+/** Strips characters that would break (or inject into) an HTTP header value. */
+function headerSafe(value) {
+    return value.replace(/[\r\n"]/g, " ").trim();
+}
+/**
+ * The HTTP enforcement point for the resource-server layer. Wraps a
+ * {@link IResolvedAuth} plus the configured `/mcp` path suffix and turns it into
+ * the three operations the transport needs: serve Protected Resource Metadata,
+ * authorize a request, and write an RFC 9728 `401`/`403` challenge.
+ *
+ * A slot's **canonical resource URI** is `<publicBaseUrl>/<slot>/<mcp>` and is
+ * used uniformly across all of that slot's HTTP endpoints (`/mcp`, `/sse`,
+ * `/messages`) so a single token audience covers the whole slot.
+ */
+export class HttpAuthGuard {
+    _auth;
+    /** The `/mcp` suffix without a leading slash, e.g. `"mcp"`. */
+    _mcpSuffix;
+    constructor(auth, mcpSuffix) {
+        this._auth = auth;
+        this._mcpSuffix = mcpSuffix.replace(/^\//, "");
+    }
+    /** Canonical resource identifier for a slot (RFC 8707 §2). */
+    resourceFor(slot) {
+        return `${this._auth.publicBaseUrl}/${encodeURIComponent(slot)}/${this._mcpSuffix}`;
+    }
+    /** RFC 9728 metadata URL for a slot, advertised in the `401` challenge. */
+    metadataUrlFor(slot) {
+        return `${this._auth.publicBaseUrl}${PRM_PREFIX}${encodeURIComponent(slot)}/${this._mcpSuffix}`;
+    }
+    /** Required scope(s) for a slot: per-slot override, else the baseline. */
+    requiredScopesFor(slot) {
+        return this._auth.perSlotScopes?.[slot] ?? this._auth.requiredScopes ?? [];
+    }
+    /** The RFC 9728 metadata document for a slot. */
+    metadataFor(slot) {
+        return buildResourceMetadata({
+            resource: this.resourceFor(slot),
+            authorizationServers: this._auth.authorizationServers,
+            scopesSupported: this._auth.scopesSupported,
+        });
+    }
+    /**
+     * If `rawUrl` is a Protected Resource Metadata request
+     * (`/.well-known/oauth-protected-resource/<slot>/<mcp>`), returns the slot;
+     * otherwise `null`.
+     */
+    matchMetadataRequest(rawUrl) {
+        if (!rawUrl.startsWith(PRM_PREFIX))
+            return null;
+        const parts = rawUrl.slice(PRM_PREFIX.length).split("/").filter(Boolean);
+        if (parts.length !== 2 || parts[1] !== this._mcpSuffix)
+            return null;
+        return decodeURIComponent(parts[0]);
+    }
+    /**
+     * Validates the request's bearer token against the slot's canonical resource
+     * and enforces the slot's required scopes. Resolves to the {@link IPrincipal}
+     * on success; rejects with an {@link AuthError} (`401` missing/invalid token,
+     * `403` insufficient scope) otherwise.
+     */
+    async authorize(req, slot) {
+        const token = extractBearer(req.headers["authorization"]);
+        if (!token) {
+            throw new AuthError(401, "invalid_token", "Missing bearer token");
+        }
+        const claims = await this._auth.validator.validate(token, this.resourceFor(slot));
+        const scopes = scopesOf(claims);
+        const required = this.requiredScopesFor(slot);
+        const missing = required.filter((s) => !scopes.has(s));
+        if (missing.length > 0) {
+            throw new AuthError(403, "insufficient_scope", `Missing required scope(s): ${missing.join(" ")}`, required.join(" "));
+        }
+        let subject;
+        try {
+            subject = this._auth.authorization?.subjectMapper.map(claims);
+        }
+        catch (error) {
+            if (error instanceof SubjectMappingError) {
+                throw new AuthError(403, "insufficient_scope", "Malformed configured JWT subject claim");
+            }
+            throw error;
+        }
+        return subject ? { claims, scopes, subject } : { claims, scopes };
+    }
+    /**
+     * Builds the RFC 9728 §5.1 `WWW-Authenticate` header value for a challenge.
+     * Always points the client at the slot's metadata URL so it can discover the
+     * authorization server and retry. Shared by the HTTP and WebSocket paths.
+     */
+    challengeHeader(slot, err) {
+        const params = [`resource_metadata="${this.metadataUrlFor(slot)}"`, `error="${err.code}"`];
+        if (err.description)
+            params.push(`error_description="${headerSafe(err.description)}"`);
+        if (err.scope)
+            params.push(`scope="${headerSafe(err.scope)}"`);
+        return `Bearer ${params.join(", ")}`;
+    }
+    /**
+     * Writes an RFC 9728 §5.1 `WWW-Authenticate` challenge and the matching
+     * status to an HTTP response.
+     */
+    writeChallenge(res, slot, err) {
+        res.setHeader("WWW-Authenticate", this.challengeHeader(slot, err));
+        res.writeHead(err.status, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify({ error: err.code, error_description: err.description }));
+    }
+}
+//# sourceMappingURL=http.auth.js.map

package/dist/auth/http.auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.auth.js","sourceRoot":"","sources":["../../src/auth/http.auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAuC,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAmC,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,oFAAoF;AACpF,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAE5D,2EAA2E;AAC3E,SAAS,aAAa,CAAC,MAAqC;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAa;IACL,KAAK,CAAgB;IACtC,+DAA+D;IAC9C,UAAU,CAAS;IAEpC,YAAY,IAAmB,EAAE,SAAiB;QAC9C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,8DAA8D;IAC9D,WAAW,CAAC,IAAY;QACpB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IACxF,CAAC;IAED,2EAA2E;IAC3E,cAAc,CAAC,IAAY;QACvB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IACpG,CAAC;IAED,0EAA0E;IAC1E,iBAAiB,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAC/E,CAAC;IAED,iDAAiD;IACjD,WAAW,CAAC,IAAY;QACpB,OAAO,qBAAqB,CAAC;YACzB,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAChC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB;YACrD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;SAC9C,CAAC,CAAC;IACP,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,MAAc;QAC/B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,GAAoB,EAAE,IAAY;QAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,oBAAoB,EAAE,8BAA8B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1H,CAAC;QAED,IAAI,OAA8B,CAAC;QACnC,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBACvC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,IAAY,EAAE,GAAc;QACxC,MAAM,MAAM,GAAG,CAAC,sBAAsB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3F,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvF,IAAI,GAAG,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/D,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,GAAmB,EAAE,IAAY,EAAE,GAAc;QAC5D,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACnE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;QACjF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;CACJ"}

package/dist/auth/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Barrel for the broker's OAuth 2.1 resource-server layer. See the individual
+ * modules for details; the transport wires these up in `ws.tunnel.ts`.
+ */
+export { AuthError, scopesOf } from "./auth.types.js";
+export type { IAccessTokenClaims, ITokenValidator, AuthErrorCode, IPrincipal, IResolvedAuth, AggregateScopeFilter, AccessTokenClaims, TokenValidator, Principal, ResolvedAuth, } from "./auth.types.js";
+export { JwtTokenValidator } from "./jwt.validator.js";
+export type { IJwtValidatorOptions, JwtValidatorOptions } from "./jwt.validator.js";
+export { buildResourceMetadata } from "./resource.metadata.js";
+export type { IProtectedResourceMetadata, ProtectedResourceMetadata } from "./resource.metadata.js";
+export { HttpAuthGuard } from "./http.auth.js";
+export { buildJwtAuth } from "./auth.config.js";
+export type { IJwtAuthOptions, JwtAuthOptions } from "./auth.config.js";
+export { SharedSecretProviderAuthenticator } from "./provider.auth.js";
+export { normalizeProviderAuthentication, providerMayPublish } from "./provider.auth.js";
+export type { IProviderAuthenticator, IProviderPrincipal, ProviderAuthenticationResult, ProviderAuthenticator, ProviderAuthenticatorReturn, ProviderPrincipal, } from "./provider.auth.js";

package/dist/auth/index.js

@@ -0,0 +1,12 @@
+/**
+ * Barrel for the broker's OAuth 2.1 resource-server layer. See the individual
+ * modules for details; the transport wires these up in `ws.tunnel.ts`.
+ */
+export { AuthError, scopesOf } from "./auth.types.js";
+export { JwtTokenValidator } from "./jwt.validator.js";
+export { buildResourceMetadata } from "./resource.metadata.js";
+export { HttpAuthGuard } from "./http.auth.js";
+export { buildJwtAuth } from "./auth.config.js";
+export { SharedSecretProviderAuthenticator } from "./provider.auth.js";
+export { normalizeProviderAuthentication, providerMayPublish } from "./provider.auth.js";
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAatD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/jwt.validator.d.ts

@@ -0,0 +1,35 @@
+import { type IAccessTokenClaims, type ITokenValidator } from "./auth.types.js";
+/**
+ * Options for {@link JwtTokenValidator}. `jwksUri` points at the authorization
+ * server's JWKS endpoint; `issuer` (when set) is checked against the token `iss`.
+ */
+export interface IJwtValidatorOptions {
+    /** URL of the authorization server's JWKS document. */
+    jwksUri: string;
+    /** Expected token issuer(s). When omitted, the `iss` claim is not checked. */
+    issuer?: string | string[];
+    /** Leeway in seconds for `exp`/`nbf` checks. Defaults to jose's `0`. */
+    clockToleranceSec?: number;
+}
+/**
+ * An {@link ITokenValidator} that verifies JWT access tokens **statelessly** by
+ * checking the signature against the authorization server's JWKS and validating
+ * the standard claims. This is the default validator for a public deployment:
+ * no per-request round-trip to the AS, no shared introspection secret.
+ *
+ * Audience binding (RFC 8707) is enforced by passing the per-request canonical
+ * resource URI as the required `audience`, so a token minted for another slot —
+ * or another service — is rejected.
+ *
+ * The JWKS is fetched lazily and cached (with rotation/cooldown) by
+ * `jose.createRemoteJWKSet`.
+ */
+export declare class JwtTokenValidator implements ITokenValidator {
+    private readonly _jwks;
+    private readonly _issuer?;
+    private readonly _clockTolerance;
+    constructor(options: IJwtValidatorOptions);
+    validate(token: string, resource: string): Promise<IAccessTokenClaims>;
+}
+/** @deprecated Use {@link IJwtValidatorOptions}. */
+export type JwtValidatorOptions = IJwtValidatorOptions;

package/dist/auth/jwt.validator.js

@@ -0,0 +1,46 @@
+import { createRemoteJWKSet, jwtVerify, errors } from "jose";
+import { AuthError } from "./auth.types.js";
+/**
+ * An {@link ITokenValidator} that verifies JWT access tokens **statelessly** by
+ * checking the signature against the authorization server's JWKS and validating
+ * the standard claims. This is the default validator for a public deployment:
+ * no per-request round-trip to the AS, no shared introspection secret.
+ *
+ * Audience binding (RFC 8707) is enforced by passing the per-request canonical
+ * resource URI as the required `audience`, so a token minted for another slot —
+ * or another service — is rejected.
+ *
+ * The JWKS is fetched lazily and cached (with rotation/cooldown) by
+ * `jose.createRemoteJWKSet`.
+ */
+export class JwtTokenValidator {
+    _jwks;
+    _issuer;
+    _clockTolerance;
+    constructor(options) {
+        this._jwks = createRemoteJWKSet(new URL(options.jwksUri));
+        this._issuer = options.issuer;
+        this._clockTolerance = options.clockToleranceSec ?? 0;
+    }
+    async validate(token, resource) {
+        try {
+            const { payload } = await jwtVerify(token, this._jwks, {
+                audience: resource,
+                issuer: this._issuer,
+                clockTolerance: this._clockTolerance,
+            });
+            return payload;
+        }
+        catch (err) {
+            // Token-level failures (bad signature, wrong audience/issuer, expired,
+            // no matching key) are JOSEError subclasses ⇒ a genuine 401. Anything
+            // else (JWKS endpoint unreachable, malformed config) is infrastructure:
+            // rethrow so the caller surfaces a 500 instead of a misleading 401.
+            if (err instanceof errors.JOSEError) {
+                throw new AuthError(401, "invalid_token", err.message);
+            }
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=jwt.validator.js.map

package/dist/auth/jwt.validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.validator.js","sourceRoot":"","sources":["../../src/auth/jwt.validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,EAAwB,MAAM,MAAM,CAAC;AACnF,OAAO,EAAE,SAAS,EAAiD,MAAM,iBAAiB,CAAC;AAe3F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IACT,KAAK,CAAkB;IACvB,OAAO,CAAqB;IAC5B,eAAe,CAAS;IAEzC,YAAY,OAA6B;QACrC,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,QAAgB;QAC1C,IAAI,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACnD,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,cAAc,EAAE,IAAI,CAAC,eAAe;aACvC,CAAC,CAAC;YACH,OAAO,OAA6B,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;YACpE,IAAI,GAAG,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;CACJ"}

package/dist/auth/provider.auth.d.ts

@@ -0,0 +1,51 @@
+import type { IncomingMessage } from "http";
+import { ResourcePath } from "../authorization/index.js";
+export interface IProviderPrincipal {
+    readonly id: string;
+    readonly subjects?: readonly string[];
+    readonly allowedResources?: readonly string[];
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export type ProviderAuthenticationResult = {
+    readonly authenticated: true;
+    readonly principal: IProviderPrincipal;
+} | {
+    readonly authenticated: false;
+    readonly reason?: string;
+};
+export type ProviderAuthenticatorReturn = boolean | ProviderAuthenticationResult;
+/**
+ * Authenticates a **provider** (the engine that connects _into_ the broker to
+ * serve a slot) at the WebSocket upgrade handshake. This is a distinct concern
+ * from the OAuth 2.1 resource-server layer that guards *clients*: a provider is
+ * not an OAuth client acting for a resource owner, it is the backend claiming a
+ * slot. Authenticating it is what stops a stranger from occupying a free slot
+ * (`ws://host/provider/<slot>`) and impersonating the real engine.
+ */
+export interface IProviderAuthenticator {
+    /**
+     * Returns a structured result, or a legacy boolean for backward
+     * compatibility. `slot` is the dedicated slot name for
+     * `/provider/<slot>`, or `undefined` for the multiplexed `/providers`
+     * socket, which is authenticated before any provider name is known.
+     */
+    authenticate(req: IncomingMessage, slot: string | undefined): ProviderAuthenticatorReturn | Promise<ProviderAuthenticatorReturn>;
+}
+export declare function normalizeProviderAuthentication(result: ProviderAuthenticatorReturn, fallbackId?: string): ProviderAuthenticationResult;
+export declare function providerMayPublish(principal: IProviderPrincipal, resource: ResourcePath): boolean;
+/**
+ * The default {@link IProviderAuthenticator}: every provider connection must
+ * present a single shared secret (via `X-Provider-Token` or `Authorization:
+ * Bearer`). Compared in constant time. Suitable when the broker and its
+ * providers are operated by the same party; swap in a custom authenticator for
+ * per-slot secrets, mTLS, or a signed handshake.
+ */
+export declare class SharedSecretProviderAuthenticator implements IProviderAuthenticator {
+    private readonly _secret;
+    constructor(secret: string);
+    authenticate(req: IncomingMessage): ProviderAuthenticationResult;
+}
+/** @deprecated Use {@link IProviderPrincipal}. */
+export type ProviderPrincipal = IProviderPrincipal;
+/** @deprecated Use {@link IProviderAuthenticator}. */
+export type ProviderAuthenticator = IProviderAuthenticator;

package/dist/auth/provider.auth.js

@@ -0,0 +1,80 @@
+import { timingSafeEqual } from "crypto";
+import { ResourcePathPattern } from "../authorization/index.js";
+export function normalizeProviderAuthentication(result, fallbackId = "legacy-provider") {
+    if (typeof result === "boolean") {
+        return result ? { authenticated: true, principal: { id: fallbackId, allowedResources: ["**"] } } : { authenticated: false };
+    }
+    if (!result.authenticated)
+        return result;
+    if (!result.principal.id)
+        return { authenticated: false, reason: "provider principal id is empty" };
+    return result;
+}
+export function providerMayPublish(principal, resource) {
+    const allowed = principal.allowedResources;
+    if (allowed === undefined)
+        return true;
+    if (allowed.length === 0)
+        return false;
+    try {
+        const patterns = allowed.map((pattern) => ResourcePathPattern.parse(pattern));
+        return patterns.some((pattern) => pattern.matches(resource));
+    }
+    catch {
+        return false;
+    }
+}
+/** Constant-time string comparison; `false` on any length mismatch. */
+function safeEqual(a, b) {
+    const ab = Buffer.from(a);
+    const bb = Buffer.from(b);
+    if (ab.length !== bb.length)
+        return false;
+    return timingSafeEqual(ab, bb);
+}
+/**
+ * Reads the secret a provider presents, from either the `X-Provider-Token`
+ * header or an `Authorization: Bearer <secret>` header.
+ */
+function presentedSecret(req) {
+    const xheader = req.headers["x-provider-token"];
+    if (typeof xheader === "string" && xheader.trim())
+        return xheader.trim();
+    const auth = req.headers["authorization"];
+    if (typeof auth === "string") {
+        const match = /^Bearer\s+(.+)$/i.exec(auth.trim());
+        if (match)
+            return match[1].trim();
+    }
+    return null;
+}
+/**
+ * The default {@link IProviderAuthenticator}: every provider connection must
+ * present a single shared secret (via `X-Provider-Token` or `Authorization:
+ * Bearer`). Compared in constant time. Suitable when the broker and its
+ * providers are operated by the same party; swap in a custom authenticator for
+ * per-slot secrets, mTLS, or a signed handshake.
+ */
+export class SharedSecretProviderAuthenticator {
+    _secret;
+    constructor(secret) {
+        if (!secret) {
+            throw new Error("provider auth: a non-empty shared secret is required.");
+        }
+        this._secret = secret;
+    }
+    authenticate(req) {
+        const presented = presentedSecret(req);
+        if (!presented || !safeEqual(presented, this._secret)) {
+            return { authenticated: false };
+        }
+        return {
+            authenticated: true,
+            principal: {
+                id: "shared-secret",
+                allowedResources: ["**"],
+            },
+        };
+    }
+}
+//# sourceMappingURL=provider.auth.js.map

package/dist/auth/provider.auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.auth.js","sourceRoot":"","sources":["../../src/auth/provider.auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEzC,OAAO,EAAgB,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AA+B9E,MAAM,UAAU,+BAA+B,CAAC,MAAmC,EAAE,UAAU,GAAG,iBAAiB;IAC/G,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAChI,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACpG,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAA6B,EAAE,QAAsB;IACpF,MAAM,OAAO,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9E,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAoB;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAEzE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,iCAAiC;IACzB,OAAO,CAAS;IAEjC,YAAY,MAAc;QACtB,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,YAAY,CAAC,GAAoB;QAC7B,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpC,CAAC;QACD,OAAO;YACH,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE;gBACP,EAAE,EAAE,eAAe;gBACnB,gBAAgB,EAAE,CAAC,IAAI,CAAC;aAC3B;SACJ,CAAC;IACN,CAAC;CACJ"}

package/dist/auth/resource.metadata.d.ts

@@ -0,0 +1,32 @@
+/**
+ * OAuth 2.0 Protected Resource Metadata (RFC 9728).
+ *
+ * Each slot exposed over HTTP is an independent resource server; its metadata
+ * document tells an MCP client which authorization server(s) issue tokens for
+ * that slot and which bearer methods it accepts. Served (unauthenticated, it is
+ * public discovery data) at
+ * `<publicBaseUrl>/.well-known/oauth-protected-resource/<slot>/<mcp>`.
+ */
+/** The RFC 9728 metadata document for a single protected resource. */
+export interface IProtectedResourceMetadata {
+    /** Canonical resource identifier (RFC 8707) — the slot's `/mcp` endpoint. */
+    resource: string;
+    /** Authorization server issuer URLs; MUST contain at least one. */
+    authorization_servers: string[];
+    /** Scopes the resource understands, when advertised. */
+    scopes_supported?: string[];
+    /** How bearer tokens may be presented. The broker only reads the header. */
+    bearer_methods_supported: string[];
+}
+/**
+ * Builds the RFC 9728 metadata document for one slot. `bearer_methods_supported`
+ * is fixed to `["header"]` because the broker rejects tokens passed any other
+ * way (never the query string, per OAuth 2.1 §5).
+ */
+export declare function buildResourceMetadata(params: {
+    resource: string;
+    authorizationServers: string[];
+    scopesSupported?: string[];
+}): IProtectedResourceMetadata;
+/** @deprecated Use {@link IProtectedResourceMetadata}. */
+export type ProtectedResourceMetadata = IProtectedResourceMetadata;

package/dist/auth/resource.metadata.js

@@ -0,0 +1,26 @@
+/**
+ * OAuth 2.0 Protected Resource Metadata (RFC 9728).
+ *
+ * Each slot exposed over HTTP is an independent resource server; its metadata
+ * document tells an MCP client which authorization server(s) issue tokens for
+ * that slot and which bearer methods it accepts. Served (unauthenticated, it is
+ * public discovery data) at
+ * `<publicBaseUrl>/.well-known/oauth-protected-resource/<slot>/<mcp>`.
+ */
+/**
+ * Builds the RFC 9728 metadata document for one slot. `bearer_methods_supported`
+ * is fixed to `["header"]` because the broker rejects tokens passed any other
+ * way (never the query string, per OAuth 2.1 §5).
+ */
+export function buildResourceMetadata(params) {
+    const doc = {
+        resource: params.resource,
+        authorization_servers: params.authorizationServers,
+        bearer_methods_supported: ["header"],
+    };
+    if (params.scopesSupported && params.scopesSupported.length > 0) {
+        doc.scopes_supported = params.scopesSupported;
+    }
+    return doc;
+}
+//# sourceMappingURL=resource.metadata.js.map

package/dist/auth/resource.metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.metadata.js","sourceRoot":"","sources":["../../src/auth/resource.metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAwF;IAC1H,MAAM,GAAG,GAA+B;QACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,qBAAqB,EAAE,MAAM,CAAC,oBAAoB;QAClD,wBAAwB,EAAE,CAAC,QAAQ,CAAC;KACvC,CAAC;IACF,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/authorization/audit.d.ts

@@ -0,0 +1,14 @@
+import type { IAuthorizationAuditEvent, IAuthorizationDecision, IAuthorizationSubject } from "./policy.types.js";
+import type { ResourcePath } from "./resource.path.js";
+export interface IAuditContext {
+    readonly subject: IAuthorizationSubject;
+    readonly slot: string;
+    readonly resource?: ResourcePath;
+    readonly capability?: string;
+    readonly provider?: string;
+    readonly tool?: string;
+}
+export declare function makeAuthorizationAuditEvent(context: IAuditContext, decision: IAuthorizationDecision): IAuthorizationAuditEvent;
+export declare function writeAuthorizationAuditEvent(event: IAuthorizationAuditEvent): void;
+/** @deprecated Use {@link IAuditContext}. */
+export type AuditContext = IAuditContext;

package/dist/authorization/audit.js

@@ -0,0 +1,20 @@
+export function makeAuthorizationAuditEvent(context, decision) {
+    const clientId = context.subject.ids.find((id) => id.startsWith("client:"))?.slice("client:".length);
+    return {
+        timestamp: new Date().toISOString(),
+        allowed: decision.allowed,
+        subjectIds: context.subject.ids,
+        clientId,
+        slot: context.slot,
+        resource: context.resource?.value,
+        capability: context.capability,
+        provider: context.provider,
+        tool: context.tool,
+        reason: decision.reason,
+        matchedPolicies: decision.matchedPolicies,
+    };
+}
+export function writeAuthorizationAuditEvent(event) {
+    console.error(`[broker] authorization ${JSON.stringify(event)}`);
+}
+//# sourceMappingURL=audit.js.map

package/dist/authorization/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/authorization/audit.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,2BAA2B,CAAC,OAAsB,EAAE,QAAgC;IAChG,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrG,OAAO;QACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG;QAC/B,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,eAAe,EAAE,QAAQ,CAAC,eAAe;KAC5C,CAAC;AACN,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAA+B;IACxE,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/authorization/capability.classifier.d.ts

@@ -0,0 +1,30 @@
+import { ResourcePath } from "./resource.path.js";
+export interface IMcpOperation {
+    readonly method?: string;
+    readonly params?: unknown;
+}
+export interface IClassifiedCapability {
+    readonly capability: string;
+    readonly tool?: string;
+}
+export interface ICapabilityClassifier {
+    classify(operation: IMcpOperation, resource: ResourcePath, provider?: string): IClassifiedCapability | undefined;
+}
+export declare function validateCapability(capability: string, label?: string): void;
+/**
+ * Classifies MCP methods without deriving privilege from arbitrary tool names.
+ * Provider-qualified mappings win over global mappings, then tools/call falls
+ * back to `mcp.tools.call`.
+ */
+export declare class ConfiguredCapabilityClassifier implements ICapabilityClassifier {
+    private readonly _globalTools;
+    private readonly _providerMappings;
+    constructor(toolCapabilities?: Readonly<Record<string, string>>, providerToolCapabilities?: Readonly<Record<string, Readonly<Record<string, string>>>>);
+    classify(operation: IMcpOperation, resource: ResourcePath, provider?: string): IClassifiedCapability | undefined;
+}
+/** @deprecated Use {@link IMcpOperation}. */
+export type McpOperation = IMcpOperation;
+/** @deprecated Use {@link IClassifiedCapability}. */
+export type ClassifiedCapability = IClassifiedCapability;
+/** @deprecated Use {@link ICapabilityClassifier}. */
+export type CapabilityClassifier = ICapabilityClassifier;

package/dist/authorization/capability.classifier.js

@@ -0,0 +1,85 @@
+import { ResourcePathPattern } from "./resource.path.js";
+const STATIC_CAPABILITIES = {
+    "resources/list": "mcp.resources.read",
+    "resources/read": "mcp.resources.read",
+    "tools/list": "mcp.tools.list",
+    "prompts/list": "mcp.prompts.read",
+    "prompts/get": "mcp.prompts.read",
+    "completion/complete": "mcp.completion.use",
+    "notifications/resources/list_changed": "mcp.resources.read",
+    "notifications/resources/updated": "mcp.resources.read",
+    "notifications/tools/list_changed": "mcp.tools.list",
+    "notifications/prompts/list_changed": "mcp.prompts.read",
+};
+const BROKER_READ_TOOLS = new Set(["broker_info", "providers_list", "provider_status"]);
+function toolNameFrom(params) {
+    if (typeof params !== "object" || params === null || Array.isArray(params))
+        return undefined;
+    const name = params["name"];
+    return typeof name === "string" && name ? name : undefined;
+}
+export function validateCapability(capability, label = "capability") {
+    if (typeof capability !== "string" || (capability !== "*" && !/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(capability))) {
+        throw new Error(`authorization ${label}: "${capability}" is malformed.`);
+    }
+}
+/**
+ * Classifies MCP methods without deriving privilege from arbitrary tool names.
+ * Provider-qualified mappings win over global mappings, then tools/call falls
+ * back to `mcp.tools.call`.
+ */
+export class ConfiguredCapabilityClassifier {
+    _globalTools;
+    _providerMappings;
+    constructor(toolCapabilities = {}, providerToolCapabilities = {}) {
+        for (const [tool, capability] of Object.entries(toolCapabilities)) {
+            if (!tool)
+                throw new Error("authorization toolCapabilities: tool names must not be empty.");
+            validateCapability(capability, `toolCapabilities["${tool}"]`);
+        }
+        this._globalTools = Object.freeze({ ...toolCapabilities });
+        const mappings = [];
+        for (const [patternValue, tools] of Object.entries(providerToolCapabilities)) {
+            const pattern = ResourcePathPattern.parse(patternValue);
+            for (const [tool, capability] of Object.entries(tools)) {
+                if (!tool)
+                    throw new Error(`authorization providerToolCapabilities["${patternValue}"]: tool names must not be empty.`);
+                validateCapability(capability, `providerToolCapabilities["${patternValue}"]["${tool}"]`);
+            }
+            mappings.push({ pattern, tools: Object.freeze({ ...tools }) });
+        }
+        mappings.sort((left, right) => right.pattern.specificity - left.pattern.specificity || left.pattern.value.localeCompare(right.pattern.value));
+        this._providerMappings = Object.freeze(mappings);
+    }
+    classify(operation, resource, provider) {
+        const method = operation.method;
+        if (!method)
+            return undefined;
+        if (provider === "_broker") {
+            if (method === "tools/list" || method === "resources/list" || method === "resources/read") {
+                return { capability: "broker.providers.read" };
+            }
+            if (method === "tools/call") {
+                const tool = toolNameFrom(operation.params);
+                if (tool && BROKER_READ_TOOLS.has(tool))
+                    return { capability: "broker.providers.read", tool };
+            }
+        }
+        if (method !== "tools/call") {
+            const capability = STATIC_CAPABILITIES[method];
+            return capability ? { capability } : undefined;
+        }
+        const tool = toolNameFrom(operation.params);
+        if (!tool)
+            return { capability: "mcp.tools.call" };
+        for (const mapping of this._providerMappings) {
+            if (mapping.pattern.matches(resource)) {
+                const capability = mapping.tools[tool];
+                if (capability)
+                    return { capability, tool };
+            }
+        }
+        return { capability: this._globalTools[tool] ?? "mcp.tools.call", tool };
+    }
+}
+//# sourceMappingURL=capability.classifier.js.map

package/dist/authorization/capability.classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.classifier.js","sourceRoot":"","sources":["../../src/authorization/capability.classifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAqBvE,MAAM,mBAAmB,GAAqC;IAC1D,gBAAgB,EAAE,oBAAoB;IACtC,gBAAgB,EAAE,oBAAoB;IACtC,YAAY,EAAE,gBAAgB;IAC9B,cAAc,EAAE,kBAAkB;IAClC,aAAa,EAAE,kBAAkB;IACjC,qBAAqB,EAAE,oBAAoB;IAC3C,sCAAsC,EAAE,oBAAoB;IAC5D,iCAAiC,EAAE,oBAAoB;IACvD,kCAAkC,EAAE,gBAAgB;IACpD,oCAAoC,EAAE,kBAAkB;CAC3D,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAExF,SAAS,YAAY,CAAC,MAAe;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,MAAM,IAAI,GAAI,MAA4C,CAAC,MAAM,CAAC,CAAC;IACnE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,KAAK,GAAG,YAAY;IACvE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,MAAM,UAAU,iBAAiB,CAAC,CAAC;IAC7E,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,8BAA8B;IACtB,YAAY,CAAmC;IAC/C,iBAAiB,CAA8B;IAEhE,YAAY,mBAAqD,EAAE,EAAE,2BAAuF,EAAE;QAC1J,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC5F,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,IAAI,IAAI,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,YAAY,mCAAmC,CAAC,CAAC;gBACvH,kBAAkB,CAAC,UAAU,EAAE,6BAA6B,YAAY,OAAO,IAAI,IAAI,CAAC,CAAC;YAC7F,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9I,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ,CAAC,SAAwB,EAAE,QAAsB,EAAE,QAAiB;QACxE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBACxF,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC;YACnD,CAAC;YACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC5C,IAAI,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC;YAClG,CAAC;QACL,CAAC;QAED,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,UAAU;oBAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAChD,CAAC;QACL,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;CACJ"}

package/dist/authorization/index.d.ts

@@ -0,0 +1,13 @@
+export { ResourcePath, ResourcePathPattern } from "./resource.path.js";
+export { ConfiguredCapabilityClassifier, validateCapability } from "./capability.classifier.js";
+export type { CapabilityClassifier, ClassifiedCapability, ICapabilityClassifier, IClassifiedCapability, IMcpOperation, McpOperation } from "./capability.classifier.js";
+export { ConfigPolicyEngine } from "./policy.engine.js";
+export { JwtSubjectMapper, SubjectMappingError } from "./subject.mapper.js";
+export type { ISubjectMapper, SubjectMapper } from "./subject.mapper.js";
+export { DefaultSlotResourceResolver } from "./slot.resource.js";
+export type { ISlotResourceResolver, SlotResourceResolver } from "./slot.resource.js";
+export { authorizationWithEngine, compileAuthorizationPolicy, hasAuthorizationPolicies } from "./runtime.js";
+export type { IPolicyAuthorization, PolicyAuthorization } from "./runtime.js";
+export { makeAuthorizationAuditEvent, writeAuthorizationAuditEvent } from "./audit.js";
+export type { AuditContext, IAuditContext } from "./audit.js";
+export type { AuthorizationAuditConfig, AuthorizationAuditEvent, AuthorizationDecision, AuthorizationDecisionReason, AuthorizationPolicyConfig, AuthorizationRequest, AuthorizationSubject, DenyPolicy, IAuthorizationAuditConfig, IAuthorizationAuditEvent, IAuthorizationDecision, IAuthorizationPolicyConfig, IAuthorizationRequest, IAuthorizationSubject, IDenyPolicy, IPolicyAssignment, IPolicyEngine, IRoleDefinition, ISubjectMappingConfig, PolicyAssignment, PolicyEngine, RoleDefinition, SubjectMappingConfig, } from "./policy.types.js";