@kya-os/consent 0.1.37 → 0.1.39

package/dist/copy/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Design-language copy tokens.
+ *
+ * @module @kya-os/consent/copy
+ */
+export { CONSENT_COPY_TOKENS, formatToken } from "./tokens.js";
+export type { ConsentCopyTokens } from "./tokens.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/copy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/copy/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/copy/index.js

@@ -0,0 +1,7 @@
+/**
+ * Design-language copy tokens.
+ *
+ * @module @kya-os/consent/copy
+ */
+export { CONSENT_COPY_TOKENS, formatToken } from "./tokens.js";
+//# sourceMappingURL=index.js.map

package/dist/copy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/copy/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/copy/tokens.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Design-Language Copy Tokens
+ *
+ * Frozen strings shared between the new consent screen and the OAuth Gateway
+ * consent modal. Pinning the vocabulary in one place keeps both screens on
+ * the same design system, simplifies i18n, and makes the future gateway
+ * migration mechanical.
+ *
+ * Templates use `{Placeholder}` syntax for values bound by `formatToken`.
+ * Templates that take no values are plain strings.
+ *
+ * @module @kya-os/consent/copy/tokens
+ */
+export declare const CONSENT_COPY_TOKENS: {
+    readonly eyebrow: {
+        /** Light theme (consent screen). */
+        readonly permissionRequest: "PERMISSION REQUEST";
+        /** Dark theme (gateway). `{Brand}` → operator-set brand name. */
+        readonly gatewayBrand: "{Brand} Gateway";
+    };
+    readonly headline: {
+        /**
+         * `{Agent}` → agent display name (serif italic at render time).
+         * `{Verb}`  → operator verb, default "use".
+         * `{Org}`   → organization display name (serif italic at render time).
+         */
+        readonly template: "{Agent} would like to {Verb} at {Org} for you.";
+    };
+    readonly subhead: {
+        /** `{Agent}` → agent display name. */
+        readonly template: "Pick what {Agent} is allowed to do on your behalf. You stay in charge — change or cancel anytime.";
+    };
+    readonly agentTile: {
+        readonly verifiedPill: "Verified";
+        readonly unverifiedPill: "UNVERIFIED";
+        /** `{Vendor}` → vendor name. `{Surface}` → surface label. */
+        readonly metaTemplate: "Made by {Vendor} · Asking from your {Surface} · {Connected}";
+        readonly connectedJustNow: "Connected just now";
+        /** `{Minutes}` → minutes since connection. */
+        readonly connectedMinutesAgo: "Connected {Minutes} min ago";
+    };
+    readonly section: {
+        /** `{Agent}` → agent display name (uppercased at render time). */
+        readonly capabilitiesHeader: "WHAT {Agent} CAN DO FOR YOU";
+        readonly tapToToggle: "Tap to toggle";
+        /** Used in the dark gateway theme. */
+        readonly permissionsRequested: "PERMISSIONS REQUESTED";
+    };
+    readonly capabilityRow: {
+        readonly higherRiskChip: "HIGHER RISK";
+        readonly viewPolicyLink: "View policy";
+        /** Disclosure title above the raw Cedar. */
+        readonly rawPolicyTitle: "Cedar policy";
+        /** Disclosure title above the plain-language gloss. */
+        readonly glossTitle: "What this allows";
+        /** Used in the gloss when no resource is extractable. */
+        readonly glossUnknownResource: "this deployment";
+    };
+    readonly footer: {
+        /**
+         * `{RevocationPath}` → e.g. "Account → Connected Agents".
+         * `{Org}`            → organization display name.
+         */
+        readonly revocationTemplate: "You can change or revoke any of these permissions anytime under {RevocationPath} at {Org}.";
+        /** `{Days}` → inactivity days, default 90. */
+        readonly inactivityTemplate: "Permissions automatically expire after {Days} days of inactivity.";
+    };
+    readonly actions: {
+        /** Light theme primary. `{Agent}` → agent display name. */
+        readonly allowAgentTemplate: "Allow {Agent}";
+        /** Dark theme primary. */
+        readonly allowAccess: "Allow access";
+        /** Light theme secondary. */
+        readonly notNow: "Not now";
+        /** Dark theme secondary. */
+        readonly deny: "Deny";
+    };
+    readonly attribution: {
+        /** Light theme. */
+        readonly protectedBy: "Protected by Checkpoint";
+        /** Dark theme. */
+        readonly securedBy: "Secured by Checkpoint";
+        readonly howThisWorks: "How does this work?";
+    };
+};
+export type ConsentCopyTokens = typeof CONSENT_COPY_TOKENS;
+/**
+ * Bind `{Placeholder}` values into a template. Unmatched placeholders are
+ * left in place so missing context becomes visible rather than silently
+ * collapsing to empty strings.
+ */
+export declare function formatToken(template: string, values: Record<string, string | number | undefined>): string;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/copy/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/copy/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,mBAAmB;;QAE5B,oCAAoC;;QAEpC,iEAAiE;;;;QAIjE;;;;WAIG;;;;QAIH,sCAAsC;;;;;;QAOtC,6DAA6D;;;QAG7D,8CAA8C;;;;QAI9C,kEAAkE;;;QAGlE,sCAAsC;;;;;;QAMtC,4CAA4C;;QAE5C,uDAAuD;;QAEvD,yDAAyD;;;;QAIzD;;;WAGG;;QAGH,8CAA8C;;;;QAK9C,2DAA2D;;QAE3D,0BAA0B;;QAE1B,6BAA6B;;QAE7B,4BAA4B;;;;QAI5B,mBAAmB;;QAEnB,kBAAkB;;;;CAIZ,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,OAAO,mBAAmB,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAClD,MAAM,CAKR"}

package/dist/copy/tokens.js

@@ -0,0 +1,97 @@
+/**
+ * Design-Language Copy Tokens
+ *
+ * Frozen strings shared between the new consent screen and the OAuth Gateway
+ * consent modal. Pinning the vocabulary in one place keeps both screens on
+ * the same design system, simplifies i18n, and makes the future gateway
+ * migration mechanical.
+ *
+ * Templates use `{Placeholder}` syntax for values bound by `formatToken`.
+ * Templates that take no values are plain strings.
+ *
+ * @module @kya-os/consent/copy/tokens
+ */
+export const CONSENT_COPY_TOKENS = {
+    eyebrow: {
+        /** Light theme (consent screen). */
+        permissionRequest: "PERMISSION REQUEST",
+        /** Dark theme (gateway). `{Brand}` → operator-set brand name. */
+        gatewayBrand: "{Brand} Gateway",
+    },
+    headline: {
+        /**
+         * `{Agent}` → agent display name (serif italic at render time).
+         * `{Verb}`  → operator verb, default "use".
+         * `{Org}`   → organization display name (serif italic at render time).
+         */
+        template: "{Agent} would like to {Verb} at {Org} for you.",
+    },
+    subhead: {
+        /** `{Agent}` → agent display name. */
+        template: "Pick what {Agent} is allowed to do on your behalf. You stay in charge — change or cancel anytime.",
+    },
+    agentTile: {
+        verifiedPill: "Verified",
+        unverifiedPill: "UNVERIFIED",
+        /** `{Vendor}` → vendor name. `{Surface}` → surface label. */
+        metaTemplate: "Made by {Vendor} · Asking from your {Surface} · {Connected}",
+        connectedJustNow: "Connected just now",
+        /** `{Minutes}` → minutes since connection. */
+        connectedMinutesAgo: "Connected {Minutes} min ago",
+    },
+    section: {
+        /** `{Agent}` → agent display name (uppercased at render time). */
+        capabilitiesHeader: "WHAT {Agent} CAN DO FOR YOU",
+        tapToToggle: "Tap to toggle",
+        /** Used in the dark gateway theme. */
+        permissionsRequested: "PERMISSIONS REQUESTED",
+    },
+    capabilityRow: {
+        higherRiskChip: "HIGHER RISK",
+        viewPolicyLink: "View policy",
+        /** Disclosure title above the raw Cedar. */
+        rawPolicyTitle: "Cedar policy",
+        /** Disclosure title above the plain-language gloss. */
+        glossTitle: "What this allows",
+        /** Used in the gloss when no resource is extractable. */
+        glossUnknownResource: "this deployment",
+    },
+    footer: {
+        /**
+         * `{RevocationPath}` → e.g. "Account → Connected Agents".
+         * `{Org}`            → organization display name.
+         */
+        revocationTemplate: "You can change or revoke any of these permissions anytime under {RevocationPath} at {Org}.",
+        /** `{Days}` → inactivity days, default 90. */
+        inactivityTemplate: "Permissions automatically expire after {Days} days of inactivity.",
+    },
+    actions: {
+        /** Light theme primary. `{Agent}` → agent display name. */
+        allowAgentTemplate: "Allow {Agent}",
+        /** Dark theme primary. */
+        allowAccess: "Allow access",
+        /** Light theme secondary. */
+        notNow: "Not now",
+        /** Dark theme secondary. */
+        deny: "Deny",
+    },
+    attribution: {
+        /** Light theme. */
+        protectedBy: "Protected by Checkpoint",
+        /** Dark theme. */
+        securedBy: "Secured by Checkpoint",
+        howThisWorks: "How does this work?",
+    },
+};
+/**
+ * Bind `{Placeholder}` values into a template. Unmatched placeholders are
+ * left in place so missing context becomes visible rather than silently
+ * collapsing to empty strings.
+ */
+export function formatToken(template, values) {
+    return template.replace(/\{(\w+)\}/g, (match, key) => {
+        const value = values[key];
+        return value === undefined ? match : String(value);
+    });
+}
+//# sourceMappingURL=tokens.js.map

package/dist/copy/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/copy/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,OAAO,EAAE;QACP,oCAAoC;QACpC,iBAAiB,EAAE,oBAAoB;QACvC,iEAAiE;QACjE,YAAY,EAAE,iBAAiB;KAChC;IACD,QAAQ,EAAE;QACR;;;;WAIG;QACH,QAAQ,EAAE,gDAAgD;KAC3D;IACD,OAAO,EAAE;QACP,sCAAsC;QACtC,QAAQ,EACN,mGAAmG;KACtG;IACD,SAAS,EAAE;QACT,YAAY,EAAE,UAAU;QACxB,cAAc,EAAE,YAAY;QAC5B,6DAA6D;QAC7D,YAAY,EAAE,6DAA6D;QAC3E,gBAAgB,EAAE,oBAAoB;QACtC,8CAA8C;QAC9C,mBAAmB,EAAE,6BAA6B;KACnD;IACD,OAAO,EAAE;QACP,kEAAkE;QAClE,kBAAkB,EAAE,6BAA6B;QACjD,WAAW,EAAE,eAAe;QAC5B,sCAAsC;QACtC,oBAAoB,EAAE,uBAAuB;KAC9C;IACD,aAAa,EAAE;QACb,cAAc,EAAE,aAAa;QAC7B,cAAc,EAAE,aAAa;QAC7B,4CAA4C;QAC5C,cAAc,EAAE,cAAc;QAC9B,uDAAuD;QACvD,UAAU,EAAE,kBAAkB;QAC9B,yDAAyD;QACzD,oBAAoB,EAAE,iBAAiB;KACxC;IACD,MAAM,EAAE;QACN;;;WAGG;QACH,kBAAkB,EAChB,4FAA4F;QAC9F,8CAA8C;QAC9C,kBAAkB,EAChB,mEAAmE;KACtE;IACD,OAAO,EAAE;QACP,2DAA2D;QAC3D,kBAAkB,EAAE,eAAe;QACnC,0BAA0B;QAC1B,WAAW,EAAE,cAAc;QAC3B,6BAA6B;QAC7B,MAAM,EAAE,SAAS;QACjB,4BAA4B;QAC5B,IAAI,EAAE,MAAM;KACb;IACD,WAAW,EAAE;QACX,mBAAmB;QACnB,WAAW,EAAE,yBAAyB;QACtC,kBAAkB;QAClB,SAAS,EAAE,uBAAuB;QAClC,YAAY,EAAE,qBAAqB;KACpC;CACO,CAAC;AAIX;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,MAAmD;IAEnD,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -16,4 +16,8 @@ export * from "./templates/index.js";
 export { generateConsentShell, generateInlineConsentShell } from "./bundle/shell.js";
 export type { ConsentShellOptions } from "./bundle/shell.js";
 export { CONSENT_BUNDLE, CONSENT_BUNDLE_SIZE } from "./bundle/inline.js";
+export * from "./capabilities/index.js";
+export * from "./cedar/index.js";
+export * from "./copy/index.js";
+export * from "./popup/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAGnC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,mBAAmB,CAAC;AAGlC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,qBAAqB,CAAC;AAGpC,cAAc,sBAAsB,CAAC;AAGrC,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACrF,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAGnC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,mBAAmB,CAAC;AAGlC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,qBAAqB,CAAC;AAGpC,cAAc,sBAAsB,CAAC;AAGrC,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACrF,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzE,cAAc,yBAAyB,CAAC;AAGxC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,iBAAiB,CAAC;AAGhC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -25,4 +25,12 @@ export * from "./templates/index.js";
 export { generateConsentShell, generateInlineConsentShell } from "./bundle/shell.js";
 // Re-export inline bundle for Workers (serves as string content)
 export { CONSENT_BUNDLE, CONSENT_BUNDLE_SIZE } from "./bundle/inline.js";
+// Re-export capability registry
+export * from "./capabilities/index.js";
+// Re-export Cedar policy compilation + plain-language gloss
+export * from "./cedar/index.js";
+// Re-export design-language copy tokens
+export * from "./copy/index.js";
+// Re-export popup launcher (consumed by runtime adapters)
+export * from "./popup/index.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,sBAAsB;AACtB,2EAA2E;AAC3E,cAAc,kBAAkB,CAAC;AAEjC,wBAAwB;AACxB,cAAc,oBAAoB,CAAC;AAEnC,0BAA0B;AAC1B,cAAc,sBAAsB,CAAC;AAErC,uBAAuB;AACvB,cAAc,mBAAmB,CAAC;AAElC,qCAAqC;AACrC,cAAc,uBAAuB,CAAC;AAEtC,mCAAmC;AACnC,cAAc,qBAAqB,CAAC;AAEpC,0BAA0B;AAC1B,cAAc,sBAAsB,CAAC;AAErC,2DAA2D;AAC3D,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAGrF,iEAAiE;AACjE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,sBAAsB;AACtB,2EAA2E;AAC3E,cAAc,kBAAkB,CAAC;AAEjC,wBAAwB;AACxB,cAAc,oBAAoB,CAAC;AAEnC,0BAA0B;AAC1B,cAAc,sBAAsB,CAAC;AAErC,uBAAuB;AACvB,cAAc,mBAAmB,CAAC;AAElC,qCAAqC;AACrC,cAAc,uBAAuB,CAAC;AAEtC,mCAAmC;AACnC,cAAc,qBAAqB,CAAC;AAEpC,0BAA0B;AAC1B,cAAc,sBAAsB,CAAC;AAErC,2DAA2D;AAC3D,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAGrF,iEAAiE;AACjE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,gCAAgC;AAChC,cAAc,yBAAyB,CAAC;AAExC,4DAA4D;AAC5D,cAAc,kBAAkB,CAAC;AAEjC,wCAAwC;AACxC,cAAc,iBAAiB,CAAC;AAEhC,0DAA0D;AAC1D,cAAc,kBAAkB,CAAC"}

package/dist/mcp-app/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * MCP App Consent Module
+ *
+ * Exports the self-contained consent HTML for serving via MCP Apps
+ * resources/read, plus supporting types.
+ *
+ * @module @kya-os/consent/mcp-app
+ */
+export { CONSENT_MCP_APP_HTML, CONSENT_MCP_APP_HTML_SIZE } from "./inline.js";
+export type { ConsentParams, ConsentApprovalResponse } from "./types.js";

package/dist/mcp-app/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp-app/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC9E,YAAY,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC"}

package/dist/mcp-app/index.js

@@ -0,0 +1,9 @@
+/**
+ * MCP App Consent Module
+ *
+ * Exports the self-contained consent HTML for serving via MCP Apps
+ * resources/read, plus supporting types.
+ *
+ * @module @kya-os/consent/mcp-app
+ */
+export { CONSENT_MCP_APP_HTML, CONSENT_MCP_APP_HTML_SIZE } from "./inline.js";

package/dist/mcp-app/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp-app/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC"}

package/dist/mcp-app/inline.d.ts

@@ -0,0 +1,16 @@
+/**
+ * MCP App Consent HTML (Inline Bundle)
+ *
+ * Self-contained HTML string for rendering the consent UI inside
+ * an MCP Apps sandboxed iframe. Includes the Lit component bundle
+ * and the MCP Apps bridge script.
+ *
+ * DO NOT EDIT - regenerate with: node scripts/generate-mcp-app-bundle.js
+ *
+ * @module @kya-os/consent/mcp-app
+ * @generated
+ */
+/** Complete HTML for the consent MCP App, ready for resources/read */
+export declare const CONSENT_MCP_APP_HTML: string;
+/** Size in bytes (for logging/debugging) */
+export declare const CONSENT_MCP_APP_HTML_SIZE: number;

package/dist/mcp-app/inline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline.d.ts","sourceRoot":"","sources":["../../src/mcp-app/inline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,EAAE,MAA4izuB,CAAC;AAEhlzuB,4CAA4C;AAC5C,eAAO,MAAM,yBAAyB,EAAE,MAAe,CAAC"}