@kya-os/consent 0.1.37 → 0.1.39

package/dist/mcp-app/inline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline.js","sourceRoot":"","sources":["../../src/mcp-app/inline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAW,mizuBAAmizuB,CAAC;AAEhlzuB,4CAA4C;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GAAW,MAAM,CAAC"}

package/dist/mcp-app/types.d.ts

@@ -0,0 +1,33 @@
+/**
+ * MCP Apps Consent Types
+ *
+ * Type definitions for the inline consent UI rendered via MCP Apps.
+ * These match the structuredContent shape produced by
+ * MCPIRuntimeBase.buildConsentUIResult().
+ */
+/** Parameters passed via structuredContent from the runtime */
+export interface ConsentParams {
+    type: "consent_required";
+    /** Auth mode: "consent-only" (default) or "credentials" (username/password form) */
+    authMode?: "consent-only" | "credentials";
+    tool: string;
+    scopes: string[];
+    agentDid: string;
+    agentName: string;
+    sessionId: string;
+    projectId: string;
+    resumeToken: string;
+    serverUrl: string;
+    /** Fallback URL if the iframe can't reach the server */
+    consentUrl: string;
+    /** Credential provider name (only present when authMode is "credentials") */
+    provider?: string;
+}
+/** Response from POST /consent/approve */
+export interface ConsentApprovalResponse {
+    success: boolean;
+    delegation_id?: string;
+    delegation_token?: string;
+    error?: string;
+    error_code?: string;
+}

package/dist/mcp-app/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp-app/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,kBAAkB,CAAC;IACzB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,0CAA0C;AAC1C,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/mcp-app/types.js

@@ -0,0 +1,8 @@
+/**
+ * MCP Apps Consent Types
+ *
+ * Type definitions for the inline consent UI rendered via MCP Apps.
+ * These match the structuredContent shape produced by
+ * MCPIRuntimeBase.buildConsentUIResult().
+ */
+export {};

package/dist/mcp-app/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp-app/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/popup/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Consent popup launcher exports.
+ *
+ * @module @kya-os/consent/popup
+ */
+export { POPUP_CAPABLE_CLIENT_IDS, POPUP_WINDOW_FEATURES, shouldUsePopup, buildPopupResource, buildConsentMarkdownLink, } from "./launcher.js";
+export type { ConsentPopupResource, PopupCapableClientId } from "./launcher.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/popup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/popup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/popup/index.js

@@ -0,0 +1,7 @@
+/**
+ * Consent popup launcher exports.
+ *
+ * @module @kya-os/consent/popup
+ */
+export { POPUP_CAPABLE_CLIENT_IDS, POPUP_WINDOW_FEATURES, shouldUsePopup, buildPopupResource, buildConsentMarkdownLink, } from "./launcher.js";
+//# sourceMappingURL=index.js.map

package/dist/popup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/popup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,eAAe,CAAC"}

package/dist/popup/launcher.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Consent Popup Launcher
+ *
+ * The framework returns a *markdown link* by default when a tool requires
+ * delegation: the agent surfaces the link to the user, who clicks through to
+ * the consent page in a normal browser tab.
+ *
+ * For clients that ship an embedded browser (today: `.mcpb`-installed Claude
+ * Desktop), we can do better — return a structured-content UI resource that
+ * opens a stripped-chrome popup window with the consent URL preloaded. The
+ * popup closes itself on success. The user never leaves the chat.
+ *
+ * This module is runtime-agnostic. It returns plain data; the runtime adapter
+ * (e.g. `@kya-os/mcp-i-cloudflare`) is responsible for delivering the chosen
+ * representation back to the MCP client.
+ *
+ * @module @kya-os/consent/popup/launcher
+ */
+/**
+ * Stable identifiers for clients that support the embedded popup launcher.
+ *
+ * These IDs match the canonical IDs in `@kya-os/mcp-i-cloudflare`'s
+ * `findKnownClient` registry. Adding a new client here requires that the
+ * client also surface a usable embedded browser.
+ */
+export declare const POPUP_CAPABLE_CLIENT_IDS: readonly ["claude"];
+export type PopupCapableClientId = (typeof POPUP_CAPABLE_CLIENT_IDS)[number];
+/**
+ * Decide whether the consent flow should be presented as a popup for this
+ * client + config combination. Falls back to `false` when either input
+ * disqualifies the popup path.
+ *
+ * @param clientId - Canonical client id from `findKnownClient`. Pass the
+ *                   `id` field, not the raw `clientInfo.name` string.
+ * @param popupEnabled - The resolved `popupEnabled` flag from `ResolvedUI`.
+ */
+export declare function shouldUsePopup(clientId: string | undefined, popupEnabled: boolean | undefined): clientId is PopupCapableClientId;
+/**
+ * Default popup window size. Matches the consent screen's max width
+ * (`max-w-[512px]`) plus enough vertical room for the capability list and
+ * the action bar.
+ */
+export declare const POPUP_WINDOW_FEATURES: {
+    readonly width: 520;
+    readonly height: 760;
+};
+/**
+ * The structured-content payload returned to the MCP client when we want it to
+ * open the consent page in a popup. The MCP client must be able to render
+ * `application/vnd.kya-os.consent-popup+json` as an action; otherwise the
+ * runtime should fall back to the markdown link.
+ *
+ * The schema mirrors the MCP UI resource shape: a single content block with
+ * a uri (the consent URL) and a hint to open in a popup with the given
+ * window features.
+ */
+export interface ConsentPopupResource {
+    type: "kya-os/consent-popup";
+    consentUrl: string;
+    features: {
+        width: number;
+        height: number;
+    };
+    /**
+     * Markdown fallback the client can display if it does not understand the
+     * popup hint. Same content as `buildConsentMarkdownLink`, included so a
+     * single response works for both popup-aware and popup-naive clients.
+     */
+    fallbackMarkdown: string;
+}
+/**
+ * Build the popup resource payload for a given consent URL.
+ */
+export declare function buildPopupResource(consentUrl: string): ConsentPopupResource;
+/**
+ * Markdown text the framework returns when the client doesn't support the
+ * popup path. Identical to the historical `Authorize the action here →`
+ * line so existing flows are unchanged.
+ */
+export declare function buildConsentMarkdownLink(consentUrl: string): string;
+//# sourceMappingURL=launcher.d.ts.map

package/dist/popup/launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../src/popup/launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,qBAAsB,CAAC;AAE5D,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,YAAY,EAAE,OAAO,GAAG,SAAS,GAChC,QAAQ,IAAI,oBAAoB,CAIlC;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;CAGxB,CAAC;AAEX;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,CAO3E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEnE"}

package/dist/popup/launcher.js

@@ -0,0 +1,71 @@
+/**
+ * Consent Popup Launcher
+ *
+ * The framework returns a *markdown link* by default when a tool requires
+ * delegation: the agent surfaces the link to the user, who clicks through to
+ * the consent page in a normal browser tab.
+ *
+ * For clients that ship an embedded browser (today: `.mcpb`-installed Claude
+ * Desktop), we can do better — return a structured-content UI resource that
+ * opens a stripped-chrome popup window with the consent URL preloaded. The
+ * popup closes itself on success. The user never leaves the chat.
+ *
+ * This module is runtime-agnostic. It returns plain data; the runtime adapter
+ * (e.g. `@kya-os/mcp-i-cloudflare`) is responsible for delivering the chosen
+ * representation back to the MCP client.
+ *
+ * @module @kya-os/consent/popup/launcher
+ */
+/**
+ * Stable identifiers for clients that support the embedded popup launcher.
+ *
+ * These IDs match the canonical IDs in `@kya-os/mcp-i-cloudflare`'s
+ * `findKnownClient` registry. Adding a new client here requires that the
+ * client also surface a usable embedded browser.
+ */
+export const POPUP_CAPABLE_CLIENT_IDS = ["claude"];
+/**
+ * Decide whether the consent flow should be presented as a popup for this
+ * client + config combination. Falls back to `false` when either input
+ * disqualifies the popup path.
+ *
+ * @param clientId - Canonical client id from `findKnownClient`. Pass the
+ *                   `id` field, not the raw `clientInfo.name` string.
+ * @param popupEnabled - The resolved `popupEnabled` flag from `ResolvedUI`.
+ */
+export function shouldUsePopup(clientId, popupEnabled) {
+    if (!popupEnabled)
+        return false;
+    if (!clientId)
+        return false;
+    return POPUP_CAPABLE_CLIENT_IDS.includes(clientId);
+}
+/**
+ * Default popup window size. Matches the consent screen's max width
+ * (`max-w-[512px]`) plus enough vertical room for the capability list and
+ * the action bar.
+ */
+export const POPUP_WINDOW_FEATURES = {
+    width: 520,
+    height: 760,
+};
+/**
+ * Build the popup resource payload for a given consent URL.
+ */
+export function buildPopupResource(consentUrl) {
+    return {
+        type: "kya-os/consent-popup",
+        consentUrl,
+        features: { ...POPUP_WINDOW_FEATURES },
+        fallbackMarkdown: buildConsentMarkdownLink(consentUrl),
+    };
+}
+/**
+ * Markdown text the framework returns when the client doesn't support the
+ * popup path. Identical to the historical `Authorize the action here →`
+ * line so existing flows are unchanged.
+ */
+export function buildConsentMarkdownLink(consentUrl) {
+    return `[Authorize the action here →](${consentUrl})`;
+}
+//# sourceMappingURL=launcher.js.map

package/dist/popup/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/popup/launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAQ,CAAU,CAAC;AAI5D;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,YAAiC;IAEjC,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAQ,wBAA8C,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,GAAG;IACV,MAAM,EAAE,GAAG;CACH,CAAC;AA2BX;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,UAAU;QACV,QAAQ,EAAE,EAAE,GAAG,qBAAqB,EAAE;QACtC,gBAAgB,EAAE,wBAAwB,CAAC,UAAU,CAAC;KACvD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,OAAO,iCAAiC,UAAU,GAAG,CAAC;AACxD,CAAC"}