@kya-os/consent 0.1.37 → 0.1.39

package/dist/cjs/mcp-app/inline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline.js","sourceRoot":"","sources":["../../../src/mcp-app/inline.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,sEAAsE;AACzD,QAAA,oBAAoB,GAAW,mizuBAAmizuB,CAAC;AAEhlzuB,4CAA4C;AAC/B,QAAA,yBAAyB,GAAW,MAAM,CAAC"}

package/dist/cjs/mcp-app/types.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * MCP Apps Consent Types
+ *
+ * Type definitions for the inline consent UI rendered via MCP Apps.
+ * These match the structuredContent shape produced by
+ * MCPIRuntimeBase.buildConsentUIResult().
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/mcp-app/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/mcp-app/types.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG"}

package/dist/cjs/popup/index.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * Consent popup launcher exports.
+ *
+ * @module @kya-os/consent/popup
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildConsentMarkdownLink = exports.buildPopupResource = exports.shouldUsePopup = exports.POPUP_WINDOW_FEATURES = exports.POPUP_CAPABLE_CLIENT_IDS = void 0;
+var launcher_js_1 = require("./launcher.js");
+Object.defineProperty(exports, "POPUP_CAPABLE_CLIENT_IDS", { enumerable: true, get: function () { return launcher_js_1.POPUP_CAPABLE_CLIENT_IDS; } });
+Object.defineProperty(exports, "POPUP_WINDOW_FEATURES", { enumerable: true, get: function () { return launcher_js_1.POPUP_WINDOW_FEATURES; } });
+Object.defineProperty(exports, "shouldUsePopup", { enumerable: true, get: function () { return launcher_js_1.shouldUsePopup; } });
+Object.defineProperty(exports, "buildPopupResource", { enumerable: true, get: function () { return launcher_js_1.buildPopupResource; } });
+Object.defineProperty(exports, "buildConsentMarkdownLink", { enumerable: true, get: function () { return launcher_js_1.buildConsentMarkdownLink; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/popup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/popup/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6CAMuB;AALrB,uHAAA,wBAAwB,OAAA;AACxB,oHAAA,qBAAqB,OAAA;AACrB,6GAAA,cAAc,OAAA;AACd,iHAAA,kBAAkB,OAAA;AAClB,uHAAA,wBAAwB,OAAA"}

package/dist/cjs/popup/launcher.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * Consent Popup Launcher
+ *
+ * The framework returns a *markdown link* by default when a tool requires
+ * delegation: the agent surfaces the link to the user, who clicks through to
+ * the consent page in a normal browser tab.
+ *
+ * For clients that ship an embedded browser (today: `.mcpb`-installed Claude
+ * Desktop), we can do better — return a structured-content UI resource that
+ * opens a stripped-chrome popup window with the consent URL preloaded. The
+ * popup closes itself on success. The user never leaves the chat.
+ *
+ * This module is runtime-agnostic. It returns plain data; the runtime adapter
+ * (e.g. `@kya-os/mcp-i-cloudflare`) is responsible for delivering the chosen
+ * representation back to the MCP client.
+ *
+ * @module @kya-os/consent/popup/launcher
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POPUP_WINDOW_FEATURES = exports.POPUP_CAPABLE_CLIENT_IDS = void 0;
+exports.shouldUsePopup = shouldUsePopup;
+exports.buildPopupResource = buildPopupResource;
+exports.buildConsentMarkdownLink = buildConsentMarkdownLink;
+/**
+ * Stable identifiers for clients that support the embedded popup launcher.
+ *
+ * These IDs match the canonical IDs in `@kya-os/mcp-i-cloudflare`'s
+ * `findKnownClient` registry. Adding a new client here requires that the
+ * client also surface a usable embedded browser.
+ */
+exports.POPUP_CAPABLE_CLIENT_IDS = ["claude"];
+/**
+ * Decide whether the consent flow should be presented as a popup for this
+ * client + config combination. Falls back to `false` when either input
+ * disqualifies the popup path.
+ *
+ * @param clientId - Canonical client id from `findKnownClient`. Pass the
+ *                   `id` field, not the raw `clientInfo.name` string.
+ * @param popupEnabled - The resolved `popupEnabled` flag from `ResolvedUI`.
+ */
+function shouldUsePopup(clientId, popupEnabled) {
+    if (!popupEnabled)
+        return false;
+    if (!clientId)
+        return false;
+    return exports.POPUP_CAPABLE_CLIENT_IDS.includes(clientId);
+}
+/**
+ * Default popup window size. Matches the consent screen's max width
+ * (`max-w-[512px]`) plus enough vertical room for the capability list and
+ * the action bar.
+ */
+exports.POPUP_WINDOW_FEATURES = {
+    width: 520,
+    height: 760,
+};
+/**
+ * Build the popup resource payload for a given consent URL.
+ */
+function buildPopupResource(consentUrl) {
+    return {
+        type: "kya-os/consent-popup",
+        consentUrl,
+        features: { ...exports.POPUP_WINDOW_FEATURES },
+        fallbackMarkdown: buildConsentMarkdownLink(consentUrl),
+    };
+}
+/**
+ * Markdown text the framework returns when the client doesn't support the
+ * popup path. Identical to the historical `Authorize the action here →`
+ * line so existing flows are unchanged.
+ */
+function buildConsentMarkdownLink(consentUrl) {
+    return `[Authorize the action here →](${consentUrl})`;
+}
+//# sourceMappingURL=launcher.js.map

package/dist/cjs/popup/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../../src/popup/launcher.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAsBH,wCAOC;AAwCD,gDAOC;AAOD,4DAEC;AAnFD;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG,CAAC,QAAQ,CAAU,CAAC;AAI5D;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAC5B,QAA4B,EAC5B,YAAiC;IAEjC,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAQ,gCAA8C,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACU,QAAA,qBAAqB,GAAG;IACnC,KAAK,EAAE,GAAG;IACV,MAAM,EAAE,GAAG;CACH,CAAC;AA2BX;;GAEG;AACH,SAAgB,kBAAkB,CAAC,UAAkB;IACnD,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,UAAU;QACV,QAAQ,EAAE,EAAE,GAAG,6BAAqB,EAAE;QACtC,gBAAgB,EAAE,wBAAwB,CAAC,UAAU,CAAC;KACvD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,UAAkB;IACzD,OAAO,iCAAiC,UAAU,GAAG,CAAC;AACxD,CAAC"}

package/dist/cjs/schemas/capabilities.schemas.js

@@ -0,0 +1,129 @@
+"use strict";
+/**
+ * Capability + Agent Metadata + Cedar Schemas
+ *
+ * Runtime validation for capability metadata, the agent identity tile, and
+ * Cedar policy fragments. Cedar fragments are validated only for shape here;
+ * full grammar validation is performed by the dashboard's existing
+ * `compile-policy.ts` before persistence.
+ *
+ * @module @kya-os/consent/schemas/capabilities
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CedarTemplateContextSchema = exports.ConsentThemeSchema = exports.AgentMetadataSchema = exports.CapabilityGroupSchema = exports.CapabilitySchema = exports.CedarPolicySchema = exports.CapabilityIconSchema = exports.RiskLevelSchema = void 0;
+exports.validateCapability = validateCapability;
+exports.validateCapabilityGroup = validateCapabilityGroup;
+exports.validateAgentMetadata = validateAgentMetadata;
+const zod_1 = require("zod");
+/**
+ * Risk classification.
+ */
+exports.RiskLevelSchema = zod_1.z.enum(["low", "medium", "high", "critical"]);
+/**
+ * Allowlist of icon tokens recognized by `<consent-capability-card>`.
+ */
+exports.CapabilityIconSchema = zod_1.z.enum([
+    "search",
+    "cart",
+    "card",
+    "pin",
+    "pin-new",
+    "shield",
+    "key",
+    "tools",
+    "user",
+    "calendar",
+    "lock",
+    "eye",
+    "send",
+    "package",
+    "neutral",
+]);
+/**
+ * Cedar policy fragment shape check. Full grammar validation runs in the
+ * dashboard's compile-policy.ts; here we only enforce a length cap and confirm
+ * the fragment opens with the `permit` or `forbid` keyword (the only two valid
+ * Cedar effects).
+ */
+exports.CedarPolicySchema = zod_1.z
+    .string()
+    .min(1, "Cedar fragment cannot be empty")
+    .max(8000, "Cedar fragment must be 8000 characters or less")
+    .refine((value) => /^\s*(permit|forbid)\s*\(/.test(value), "Cedar fragment must begin with `permit (` or `forbid (`");
+/**
+ * A single capability row.
+ */
+exports.CapabilitySchema = zod_1.z.object({
+    id: zod_1.z
+        .string()
+        .min(1, "Capability id is required")
+        .max(64, "Capability id must be 64 characters or less")
+        .regex(/^[a-z][a-z0-9._-]*$/, "Capability id must be lowercase alphanumeric with `.`, `_`, or `-`"),
+    label: zod_1.z
+        .string()
+        .min(1, "Capability label is required")
+        .max(80, "Capability label must be 80 characters or less"),
+    description: zod_1.z
+        .string()
+        .min(1, "Capability description is required")
+        .max(280, "Capability description must be 280 characters or less"),
+    icon: exports.CapabilityIconSchema,
+    riskLevel: exports.RiskLevelSchema,
+    defaultOn: zod_1.z.boolean(),
+    cedar: exports.CedarPolicySchema,
+    scopes: zod_1.z
+        .array(zod_1.z.string().min(1).max(120))
+        .min(1, "At least one scope is required")
+        .max(20, "At most 20 scopes per capability"),
+    category: zod_1.z.string().max(80).optional(),
+});
+/**
+ * Capability group (optional clustering).
+ */
+exports.CapabilityGroupSchema = zod_1.z.object({
+    id: zod_1.z
+        .string()
+        .min(1)
+        .max(64)
+        .regex(/^[a-z][a-z0-9._-]*$/, "Group id must be lowercase alphanumeric"),
+    label: zod_1.z.string().min(1).max(80),
+    capabilities: zod_1.z
+        .array(exports.CapabilitySchema)
+        .min(1, "Group must contain at least one capability")
+        .max(20, "At most 20 capabilities per group"),
+});
+/**
+ * Agent identity tile data.
+ */
+exports.AgentMetadataSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1).max(80),
+    did: zod_1.z.string().min(1).max(500),
+    vendor: zod_1.z.string().max(80).optional(),
+    surfaceLabel: zod_1.z.string().max(40).optional(),
+    verified: zod_1.z.boolean(),
+    logoUrl: zod_1.z.string().url().optional(),
+    connectedAt: zod_1.z.string().datetime().optional(),
+});
+/**
+ * Theme selection.
+ */
+exports.ConsentThemeSchema = zod_1.z.enum(["light", "dark"]);
+/**
+ * Cedar template context bound at compile time.
+ */
+exports.CedarTemplateContextSchema = zod_1.z.object({
+    agent_did: zod_1.z.string().min(1).max(500),
+    user_did: zod_1.z.string().min(1).max(500),
+    org: zod_1.z.string().min(1).max(120),
+    deployment: zod_1.z.string().min(1).max(120),
+});
+function validateCapability(value) {
+    return exports.CapabilitySchema.safeParse(value);
+}
+function validateCapabilityGroup(value) {
+    return exports.CapabilityGroupSchema.safeParse(value);
+}
+function validateAgentMetadata(value) {
+    return exports.AgentMetadataSchema.safeParse(value);
+}
+//# sourceMappingURL=capabilities.schemas.js.map

package/dist/cjs/schemas/capabilities.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.schemas.js","sourceRoot":"","sources":["../../../src/schemas/capabilities.schemas.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAoIH,gDAIC;AAED,0DAIC;AAED,sDAIC;AAlJD,6BAAwB;AAExB;;GAEG;AACU,QAAA,eAAe,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE7E;;GAEG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC;IACzC,QAAQ;IACR,MAAM;IACN,MAAM;IACN,KAAK;IACL,SAAS;IACT,QAAQ;IACR,KAAK;IACL,OAAO;IACP,MAAM;IACN,UAAU;IACV,MAAM;IACN,KAAK;IACL,MAAM;IACN,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;KACxC,GAAG,CAAC,IAAI,EAAE,gDAAgD,CAAC;KAC3D,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EACjD,yDAAyD,CAC1D,CAAC;AAEJ;;GAEG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;SACnC,GAAG,CAAC,EAAE,EAAE,6CAA6C,CAAC;SACtD,KAAK,CACJ,qBAAqB,EACrB,oEAAoE,CACrE;IACH,KAAK,EAAE,OAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACtC,GAAG,CAAC,EAAE,EAAE,gDAAgD,CAAC;IAC5D,WAAW,EAAE,OAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;SAC5C,GAAG,CAAC,GAAG,EAAE,uDAAuD,CAAC;IACpE,IAAI,EAAE,4BAAoB;IAC1B,SAAS,EAAE,uBAAe;IAC1B,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;IACtB,KAAK,EAAE,yBAAiB;IACxB,MAAM,EAAE,OAAC;SACN,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;SACxC,GAAG,CAAC,EAAE,EAAE,kCAAkC,CAAC;IAC9C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,qBAAqB,EAAE,yCAAyC,CAAC;IAC1E,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAChC,YAAY,EAAE,OAAC;SACZ,KAAK,CAAC,wBAAgB,CAAC;SACvB,GAAG,CAAC,CAAC,EAAE,4CAA4C,CAAC;SACpD,GAAG,CAAC,EAAE,EAAE,mCAAmC,CAAC;CAChD,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAI5D;;GAEG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACvC,CAAC,CAAC;AAMH,SAAgB,kBAAkB,CAChC,KAAc;IAEd,OAAO,wBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,uBAAuB,CACrC,KAAc;IAEd,OAAO,6BAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,qBAAqB,CACnC,KAAc;IAEd,OAAO,2BAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC"}

package/dist/cjs/schemas/config.schemas.js

@@ -14,6 +14,7 @@ exports.validateCustomField = validateCustomField;
 const zod_1 = require("zod");
 const branding_schemas_js_1 = require("./branding.schemas.js");
 const modes_schemas_js_1 = require("./modes.schemas.js");
+const capabilities_schemas_js_1 = require("./capabilities.schemas.js");
 /**
  * Consent UI Schema
  */
@@ -124,6 +125,23 @@ exports.ConsentConfigSchema = zod_1.z.object({
     passkey: modes_schemas_js_1.PasskeyConfigSchema.optional(),
     idv: modes_schemas_js_1.IDVConfigSchema.optional(),
     expirationDays: zod_1.z.number().int().min(1).max(365).optional(),
+    capabilities: zod_1.z
+        .array(capabilities_schemas_js_1.CapabilityGroupSchema)
+        .max(20, "At most 20 capability groups allowed")
+        .optional(),
+    agentMetadata: capabilities_schemas_js_1.AgentMetadataSchema.optional(),
+    theme: capabilities_schemas_js_1.ConsentThemeSchema.optional(),
+    headlineVerb: zod_1.z
+        .string()
+        .min(1)
+        .max(40, "Headline verb must be 40 characters or less")
+        .optional(),
+    revocationPath: zod_1.z
+        .string()
+        .min(1)
+        .max(120, "Revocation path must be 120 characters or less")
+        .optional(),
+    inactivityDays: zod_1.z.number().int().min(1).max(3650).optional(),
     metadata: exports.ConsentMetadataSchema.optional(),
 });
 /**

package/dist/cjs/schemas/config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.schemas.js","sourceRoot":"","sources":["../../../src/schemas/config.schemas.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAyKH,sDAIC;AAED,0DAIC;AAED,kDAIC;AAvLD,6BAAwB;AACxB,+DAA8D;AAC9D,yDAQ4B;AAE5B;;GAEG;AACU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC,QAAQ,EAAE;IAC7E,WAAW,EAAE,OAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,EAAE,4CAA4C,CAAC;SACtD,QAAQ,EAAE;IACb,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,KAAK,EAAE,6CAA6C,CAAC;SACzD,QAAQ,EAAE;IACb,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,6CAA6C,CAAC;IACzE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,6CAA6C,CAAC;CAC1E,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAChC,GAAG,CAAC,EAAE,EAAE,0CAA0C,CAAC;SACnD,KAAK,CACJ,iBAAiB,EACjB,gEAAgE,CACjE;IACH,KAAK,EAAE,OAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;SACjC,GAAG,CAAC,GAAG,EAAE,4CAA4C,CAAC;IACzD,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,sCAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,CACL,CAAC,IAAI,EAAE,EAAE;IACP,kCAAkC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,4CAA4C;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,EACD;IACE,OAAO,EACL,8EAA8E;CACjF,CACF,CAAC;AAMJ;;GAEG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAIH;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,2CAAqB,CAAC,QAAQ,EAAE;IAC1C,EAAE,EAAE,uBAAe,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,0BAAkB,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,OAAC;SACZ,KAAK,CAAC,gCAAwB,CAAC;SAC/B,GAAG,CAAC,EAAE,EAAE,kCAAkC,CAAC;SAC3C,QAAQ,EAAE;IACb,WAAW,EAAE,0CAAuB,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,oCAAiB,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,wCAAqB,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,kCAAe,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,qCAAkB,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,sCAAmB,CAAC,QAAQ,EAAE;IACvC,GAAG,EAAE,kCAAe,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,QAAQ,EAAE,6BAAqB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,2BAA2B,GAAG,2BAAmB,CAAC,MAAM,CAAC;IACpE,QAAQ,EAAE,6BAAqB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAMH;;GAEG;AAEH,SAAgB,qBAAqB,CACnC,MAAe;IAEf,OAAO,2BAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,uBAAuB,CACrC,QAAiB;IAEjB,OAAO,2CAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,mBAAmB,CACjC,KAAc;IAEd,OAAO,gCAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"config.schemas.js","sourceRoot":"","sources":["../../../src/schemas/config.schemas.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA+LH,sDAIC;AAED,0DAIC;AAED,kDAIC;AA7MD,6BAAwB;AACxB,+DAA8D;AAC9D,yDAQ4B;AAC5B,uEAImC;AAEnC;;GAEG;AACU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC,QAAQ,EAAE;IAC7E,WAAW,EAAE,OAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,EAAE,4CAA4C,CAAC;SACtD,QAAQ,EAAE;IACb,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,KAAK,EAAE,6CAA6C,CAAC;SACzD,QAAQ,EAAE;IACb,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,6CAA6C,CAAC;IACzE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,6CAA6C,CAAC;CAC1E,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAChC,GAAG,CAAC,EAAE,EAAE,0CAA0C,CAAC;SACnD,KAAK,CACJ,iBAAiB,EACjB,gEAAgE,CACjE;IACH,KAAK,EAAE,OAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;SACjC,GAAG,CAAC,GAAG,EAAE,4CAA4C,CAAC;IACzD,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,sCAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,CACL,CAAC,IAAI,EAAE,EAAE;IACP,kCAAkC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,4CAA4C;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,EACD;IACE,OAAO,EACL,8EAA8E;CACjF,CACF,CAAC;AAMJ;;GAEG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAIH;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,2CAAqB,CAAC,QAAQ,EAAE;IAC1C,EAAE,EAAE,uBAAe,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,0BAAkB,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,OAAC;SACZ,KAAK,CAAC,gCAAwB,CAAC;SAC/B,GAAG,CAAC,EAAE,EAAE,kCAAkC,CAAC;SAC3C,QAAQ,EAAE;IACb,WAAW,EAAE,0CAAuB,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,oCAAiB,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,wCAAqB,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,kCAAe,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,qCAAkB,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,sCAAmB,CAAC,QAAQ,EAAE;IACvC,GAAG,EAAE,kCAAe,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,YAAY,EAAE,OAAC;SACZ,KAAK,CAAC,+CAAqB,CAAC;SAC5B,GAAG,CAAC,EAAE,EAAE,sCAAsC,CAAC;SAC/C,QAAQ,EAAE;IACb,aAAa,EAAE,6CAAmB,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,4CAAkB,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,EAAE,6CAA6C,CAAC;SACtD,QAAQ,EAAE;IACb,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,EAAE,gDAAgD,CAAC;SAC1D,QAAQ,EAAE;IACb,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5D,QAAQ,EAAE,6BAAqB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,2BAA2B,GAAG,2BAAmB,CAAC,MAAM,CAAC;IACpE,QAAQ,EAAE,6BAAqB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAMH;;GAEG;AAEH,SAAgB,qBAAqB,CACnC,MAAe;IAEf,OAAO,2BAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,uBAAuB,CACrC,QAAiB;IAEjB,OAAO,2CAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,mBAAmB,CACjC,KAAc;IAEd,OAAO,gCAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC"}

package/dist/cjs/schemas/index.js

@@ -26,4 +26,5 @@ __exportStar(require("./config.schemas.js"), exports);
 __exportStar(require("./branding.schemas.js"), exports);
 __exportStar(require("./modes.schemas.js"), exports);
 __exportStar(require("./api.schemas.js"), exports);
+__exportStar(require("./capabilities.schemas.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/schemas/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/schemas/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;AAEH,sDAAoC;AACpC,wDAAsC;AACtC,qDAAmC;AACnC,mDAAiC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/schemas/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;AAEH,sDAAoC;AACpC,wDAAsC;AACtC,qDAAmC;AACnC,mDAAiC;AACjC,4DAA0C"}

package/dist/cjs/styles/index.js

@@ -25,4 +25,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./tokens.js"), exports);
 __exportStar(require("./css-variables.js"), exports);
 __exportStar(require("./stylesheet.js"), exports);
+__exportStar(require("./theme.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/styles/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/styles/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,qDAAmC;AACnC,kDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/styles/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,qDAAmC;AACnC,kDAAgC;AAChC,6CAA2B"}

package/dist/cjs/styles/theme.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * Consent + Gateway Design-Language Themes
+ *
+ * Two CSS-custom-property token sets shared by the new consent screen and
+ * the (future) migrated OAuth Gateway consent. The themes match the screens
+ * Peter approved for Hardware World:
+ *
+ * - `light` → paper background, dark on light, serif headline (Peter's mockup).
+ * - `dark`  → glassy dark modal, soft halo backdrop (OAuth Gateway aesthetic).
+ *
+ * Components consume these tokens through Shadow DOM CSS (`var(--cs-*)`).
+ * Org branding flows through `surfaceAccent` / `surfaceAccentText` so the
+ * primary button can adopt operator brand color while the rest of the
+ * surface stays in the chosen theme.
+ *
+ * The amber `HIGHER RISK` chip token is fixed across themes so the visual
+ * stays recognizable regardless of org branding.
+ *
+ * @module @kya-os/consent/styles/theme
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.darkTheme = exports.lightTheme = void 0;
+exports.getConsentTheme = getConsentTheme;
+exports.themeToCssVariables = themeToCssVariables;
+const FIXED_RISK_CHIP_BG = "#FCE7B6";
+const FIXED_RISK_CHIP_TEXT = "#7A4F00";
+exports.lightTheme = {
+    surfaceBg: "#F4F1EA",
+    surfaceCard: "#FFFFFF",
+    surfaceBorder: "rgba(15, 23, 42, 0.10)",
+    surfaceInset: "#F1ECE2",
+    textPrimary: "#0F172A",
+    textSecondary: "#334155",
+    textTertiary: "#64748B",
+    surfaceAccent: "#0F172A",
+    surfaceAccentText: "#FFFFFF",
+    pillVerifiedBg: "#DCFCE7",
+    pillVerifiedText: "#166534",
+    pillUnverifiedBg: "#F1F5F9",
+    pillUnverifiedText: "#475569",
+    chipRiskBg: FIXED_RISK_CHIP_BG,
+    chipRiskText: FIXED_RISK_CHIP_TEXT,
+    focusRing: "rgba(15, 23, 42, 0.35)",
+    cardShadow: "0 30px 80px -40px rgba(15, 23, 42, 0.40)",
+};
+exports.darkTheme = {
+    surfaceBg: "#0B0808",
+    surfaceCard: "rgba(20, 20, 22, 0.92)",
+    surfaceBorder: "rgba(255, 255, 255, 0.08)",
+    surfaceInset: "rgba(255, 255, 255, 0.04)",
+    textPrimary: "#F8FAFC",
+    textSecondary: "#CBD5E1",
+    textTertiary: "#94A3B8",
+    surfaceAccent: "#F8FAFC",
+    surfaceAccentText: "#0F172A",
+    pillVerifiedBg: "rgba(34, 197, 94, 0.16)",
+    pillVerifiedText: "#86EFAC",
+    pillUnverifiedBg: "rgba(148, 163, 184, 0.18)",
+    pillUnverifiedText: "#CBD5E1",
+    chipRiskBg: FIXED_RISK_CHIP_BG,
+    chipRiskText: FIXED_RISK_CHIP_TEXT,
+    focusRing: "rgba(248, 250, 252, 0.55)",
+    cardShadow: "0 40px 90px -40px rgba(0, 0, 0, 0.85)",
+};
+/**
+ * Resolve a theme by name. Defaults to `light` for any unknown value.
+ */
+function getConsentTheme(theme) {
+    return theme === "dark" ? exports.darkTheme : exports.lightTheme;
+}
+/**
+ * Render a theme as a CSS string suitable for injecting into a `<style>` block
+ * or `:host { ... }` rule. Each token becomes a `--cs-{kebab}` custom property.
+ */
+function themeToCssVariables(tokens) {
+    const declarations = [];
+    for (const [key, value] of Object.entries(tokens)) {
+        declarations.push(`  --cs-${camelToKebab(key)}: ${value};`);
+    }
+    return declarations.join("\n");
+}
+function camelToKebab(value) {
+    return value.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`);
+}
+//# sourceMappingURL=theme.js.map

package/dist/cjs/styles/theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../../src/styles/theme.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AA0GH,0CAEC;AAMD,kDAMC;AA5DD,MAAM,kBAAkB,GAAG,SAAS,CAAC;AACrC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAE1B,QAAA,UAAU,GAAuB;IAC5C,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,wBAAwB;IACvC,YAAY,EAAE,SAAS;IACvB,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,SAAS;IACxB,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,SAAS;IACxB,iBAAiB,EAAE,SAAS;IAC5B,cAAc,EAAE,SAAS;IACzB,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,SAAS;IAC3B,kBAAkB,EAAE,SAAS;IAC7B,UAAU,EAAE,kBAAkB;IAC9B,YAAY,EAAE,oBAAoB;IAClC,SAAS,EAAE,wBAAwB;IACnC,UAAU,EAAE,0CAA0C;CACvD,CAAC;AAEW,QAAA,SAAS,GAAuB;IAC3C,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,wBAAwB;IACrC,aAAa,EAAE,2BAA2B;IAC1C,YAAY,EAAE,2BAA2B;IACzC,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,SAAS;IACxB,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,SAAS;IACxB,iBAAiB,EAAE,SAAS;IAC5B,cAAc,EAAE,yBAAyB;IACzC,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,2BAA2B;IAC7C,kBAAkB,EAAE,SAAS;IAC7B,UAAU,EAAE,kBAAkB;IAC9B,YAAY,EAAE,oBAAoB;IAClC,SAAS,EAAE,2BAA2B;IACtC,UAAU,EAAE,uCAAuC;CACpD,CAAC;AAEF;;GAEG;AACH,SAAgB,eAAe,CAAC,KAA+B;IAC7D,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAS,CAAC,CAAC,CAAC,kBAAU,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,MAA0B;IAC5D,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,YAAY,CAAC,IAAI,CAAC,UAAU,YAAY,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/cjs/types/capabilities.types.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Capability + Agent Metadata + Cedar Types
+ *
+ * The new consent screen renders operator-authored capabilities, each backed by
+ * a Cedar policy fragment. The label, description, icon, and risk level shown
+ * to the user are the human rendering of the same record.
+ *
+ * @module @kya-os/consent/types/capabilities
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=capabilities.types.js.map

package/dist/cjs/types/capabilities.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.types.js","sourceRoot":"","sources":["../../../src/types/capabilities.types.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG"}

package/dist/cjs/types/index.js

@@ -28,4 +28,5 @@ __exportStar(require("./copy.types.js"), exports);
 __exportStar(require("./modes.types.js"), exports);
 __exportStar(require("./page.types.js"), exports);
 __exportStar(require("./api.types.js"), exports);
+__exportStar(require("./capabilities.types.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;AAEH,oDAAkC;AAClC,sDAAoC;AACpC,kDAAgC;AAChC,mDAAiC;AACjC,kDAAgC;AAChC,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;AAEH,oDAAkC;AAClC,sDAAoC;AACpC,kDAAgC;AAChC,mDAAiC;AACjC,kDAAgC;AAChC,iDAA+B;AAC/B,0DAAwC"}

package/dist/components/consent-action-bar.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Consent Action Bar
+ *
+ * Primary `Allow {Agent} →` (light theme) / `Allow access` (dark theme) +
+ * secondary `Not now` (light) / `Deny` (dark). Shared between the consent
+ * screen and the (future-migrated) gateway consent.
+ *
+ * Emits `consent-allow` and `consent-deny` events; the parent decides what to
+ * do (typically: submit the form on allow, close window on deny).
+ *
+ * @module components/consent-action-bar
+ */
+import { LitElement } from "lit";
+import type { ConsentTheme } from "../types/capabilities.types.js";
+export declare class ConsentActionBar extends LitElement {
+    agentName: string;
+    theme: ConsentTheme;
+    disabled: boolean;
+    loading: boolean;
+    static styles: import("lit").CSSResult;
+    private emitAllow;
+    private emitDeny;
+    render(): import("lit").TemplateResult<1>;
+}
+declare global {
+    interface HTMLElementTagNameMap {
+        "consent-action-bar": ConsentActionBar;
+    }
+}
+//# sourceMappingURL=consent-action-bar.d.ts.map

package/dist/components/consent-action-bar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-action-bar.d.ts","sourceRoot":"","sources":["../../src/components/consent-action-bar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAa,MAAM,KAAK,CAAC;AAI5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAEnE,qBACa,gBAAiB,SAAQ,UAAU;IAClB,SAAS,SAAM;IACf,KAAK,EAAE,YAAY,CAAW;IAC7B,QAAQ,UAAS;IACjB,OAAO,UAAS;IAE7C,OAAgB,MAAM,0BAiDpB;IAEF,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,QAAQ;IAOP,MAAM;CA+BhB;AAED,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,qBAAqB;QAC7B,oBAAoB,EAAE,gBAAgB,CAAC;KACxC;CACF"}

package/dist/components/consent-action-bar.js

@@ -0,0 +1,135 @@
+/**
+ * Consent Action Bar
+ *
+ * Primary `Allow {Agent} →` (light theme) / `Allow access` (dark theme) +
+ * secondary `Not now` (light) / `Deny` (dark). Shared between the consent
+ * screen and the (future-migrated) gateway consent.
+ *
+ * Emits `consent-allow` and `consent-deny` events; the parent decides what to
+ * do (typically: submit the form on allow, close window on deny).
+ *
+ * @module components/consent-action-bar
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { LitElement, html, css } from "lit";
+import { customElement, property } from "lit/decorators.js";
+import { CONSENT_COPY_TOKENS, formatToken } from "../copy/tokens.js";
+let ConsentActionBar = class ConsentActionBar extends LitElement {
+    constructor() {
+        super(...arguments);
+        this.agentName = "";
+        this.theme = "light";
+        this.disabled = false;
+        this.loading = false;
+    }
+    emitAllow() {
+        if (this.disabled || this.loading)
+            return;
+        this.dispatchEvent(new CustomEvent("consent-allow", { bubbles: true, composed: true }));
+    }
+    emitDeny() {
+        if (this.loading)
+            return;
+        this.dispatchEvent(new CustomEvent("consent-deny", { bubbles: true, composed: true }));
+    }
+    render() {
+        const allowLabel = this.theme === "dark"
+            ? CONSENT_COPY_TOKENS.actions.allowAccess
+            : `${formatToken(CONSENT_COPY_TOKENS.actions.allowAgentTemplate, {
+                Agent: this.agentName || "this agent",
+            })} →`;
+        const denyLabel = this.theme === "dark"
+            ? CONSENT_COPY_TOKENS.actions.deny
+            : CONSENT_COPY_TOKENS.actions.notNow;
+        return html `
+      <button
+        class="primary"
+        type="button"
+        ?disabled=${this.disabled || this.loading}
+        @click=${this.emitAllow}
+      >
+        ${allowLabel}
+      </button>
+      <button
+        class="secondary"
+        type="button"
+        ?disabled=${this.loading}
+        @click=${this.emitDeny}
+      >
+        ${denyLabel}
+      </button>
+    `;
+    }
+};
+ConsentActionBar.styles = css `
+    :host {
+      display: flex;
+      flex-direction: column;
+      gap: 4px;
+      width: 100%;
+    }
+
+    button {
+      width: 100%;
+      padding: 14px 18px;
+      border-radius: 999px;
+      font-size: 15px;
+      font-weight: 500;
+      font-family: inherit;
+      cursor: pointer;
+      transition: opacity 0.15s ease, transform 0.05s ease;
+      border: none;
+    }
+
+    button:disabled {
+      opacity: 0.5;
+      cursor: not-allowed;
+    }
+
+    button:focus-visible {
+      outline: 2px solid var(--cs-focus-ring, #0F172A);
+      outline-offset: 3px;
+    }
+
+    .primary {
+      background: var(--cs-surface-accent, #0F172A);
+      color: var(--cs-surface-accent-text, #FFFFFF);
+    }
+
+    .primary:hover:not(:disabled) {
+      opacity: 0.92;
+    }
+
+    .secondary {
+      background: transparent;
+      color: var(--cs-text-secondary, #334155);
+      padding: 10px 18px;
+      font-weight: 500;
+    }
+
+    .secondary:hover:not(:disabled) {
+      color: var(--cs-text-primary, #0F172A);
+    }
+  `;
+__decorate([
+    property({ type: String })
+], ConsentActionBar.prototype, "agentName", void 0);
+__decorate([
+    property({ type: String })
+], ConsentActionBar.prototype, "theme", void 0);
+__decorate([
+    property({ type: Boolean })
+], ConsentActionBar.prototype, "disabled", void 0);
+__decorate([
+    property({ type: Boolean })
+], ConsentActionBar.prototype, "loading", void 0);
+ConsentActionBar = __decorate([
+    customElement("consent-action-bar")
+], ConsentActionBar);
+export { ConsentActionBar };
+//# sourceMappingURL=consent-action-bar.js.map

package/dist/components/consent-action-bar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-action-bar.js","sourceRoot":"","sources":["../../src/components/consent-action-bar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAI9D,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,UAAU;IAAzC;;QACuB,cAAS,GAAG,EAAE,CAAC;QACf,UAAK,GAAiB,OAAO,CAAC;QAC7B,aAAQ,GAAG,KAAK,CAAC;QACjB,YAAO,GAAG,KAAK,CAAC;IAkG/C,CAAC;IA7CS,SAAS;QACf,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,CAChB,IAAI,WAAW,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CACpE,CAAC;IACJ,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,aAAa,CAChB,IAAI,WAAW,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CACnE,CAAC;IACJ,CAAC;IAEQ,MAAM;QACb,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,KAAK,MAAM;YACnB,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW;YACzC,CAAC,CAAC,GAAG,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,kBAAkB,EAAE;gBAC7D,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,YAAY;aACtC,CAAC,IAAI,CAAC;QACb,MAAM,SAAS,GACb,IAAI,CAAC,KAAK,KAAK,MAAM;YACnB,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI;YAClC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;QAEzC,OAAO,IAAI,CAAA;;;;oBAIK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;iBAChC,IAAI,CAAC,SAAS;;UAErB,UAAU;;;;;oBAKA,IAAI,CAAC,OAAO;iBACf,IAAI,CAAC,QAAQ;;UAEpB,SAAS;;KAEd,CAAC;IACJ,CAAC;;AA/Fe,uBAAM,GAAG,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiD3B,AAjDqB,CAiDpB;AAtD0B;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;mDAAgB;AACf;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;+CAA+B;AAC7B;IAA5B,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;kDAAkB;AACjB;IAA5B,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iDAAiB;AAJlC,gBAAgB;IAD5B,aAAa,CAAC,oBAAoB,CAAC;GACvB,gBAAgB,CAsG5B"}