@kya-os/consent 0.1.8 → 0.1.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bundle/inline.d.ts.map +1 -1
- package/dist/bundle/inline.js +2 -2
- package/dist/bundle/inline.js.map +1 -1
- package/dist/bundle/shell.d.ts +6 -0
- package/dist/bundle/shell.d.ts.map +1 -1
- package/dist/bundle/shell.js +4 -1
- package/dist/bundle/shell.js.map +1 -1
- package/dist/components/mcp-consent.d.ts +42 -18
- package/dist/components/mcp-consent.d.ts.map +1 -1
- package/dist/components/mcp-consent.js +234 -132
- package/dist/components/mcp-consent.js.map +1 -1
- package/dist/consent.js +119 -27
- package/dist/consent.min.js +26 -25
- package/dist/schemas/api.schemas.d.ts +116 -116
- package/dist/schemas/config.schemas.d.ts +116 -116
- package/dist/schemas/modes.schemas.d.ts +28 -28
- package/dist/templates/registry.d.ts +6 -0
- package/dist/templates/registry.d.ts.map +1 -1
- package/dist/templates/registry.js +11 -13
- package/dist/templates/registry.js.map +1 -1
- package/dist/types/modes.types.d.ts +53 -0
- package/dist/types/modes.types.d.ts.map +1 -1
- package/dist/types/modes.types.js +67 -0
- package/dist/types/modes.types.js.map +1 -1
- package/package.json +1 -1
|
@@ -23,21 +23,21 @@ export declare const CredentialsConfigSchema: z.ZodObject<{
|
|
|
23
23
|
showForgotPassword: z.ZodOptional<z.ZodBoolean>;
|
|
24
24
|
forgotPasswordUrl: z.ZodOptional<z.ZodString>;
|
|
25
25
|
}, "strip", z.ZodTypeAny, {
|
|
26
|
+
showForgotPassword?: boolean | undefined;
|
|
27
|
+
forgotPasswordUrl?: string | undefined;
|
|
26
28
|
usernameLabel?: string | undefined;
|
|
27
29
|
usernamePlaceholder?: string | undefined;
|
|
28
30
|
passwordLabel?: string | undefined;
|
|
29
31
|
passwordPlaceholder?: string | undefined;
|
|
30
32
|
showRememberMe?: boolean | undefined;
|
|
33
|
+
}, {
|
|
31
34
|
showForgotPassword?: boolean | undefined;
|
|
32
35
|
forgotPasswordUrl?: string | undefined;
|
|
33
|
-
}, {
|
|
34
36
|
usernameLabel?: string | undefined;
|
|
35
37
|
usernamePlaceholder?: string | undefined;
|
|
36
38
|
passwordLabel?: string | undefined;
|
|
37
39
|
passwordPlaceholder?: string | undefined;
|
|
38
40
|
showRememberMe?: boolean | undefined;
|
|
39
|
-
showForgotPassword?: boolean | undefined;
|
|
40
|
-
forgotPasswordUrl?: string | undefined;
|
|
41
41
|
}>;
|
|
42
42
|
export type CredentialsConfigSchemaType = z.infer<typeof CredentialsConfigSchema>;
|
|
43
43
|
/**
|
|
@@ -67,17 +67,17 @@ export declare const MagicLinkConfigSchema: z.ZodObject<{
|
|
|
67
67
|
buttonText: z.ZodOptional<z.ZodString>;
|
|
68
68
|
resendCooldown: z.ZodOptional<z.ZodNumber>;
|
|
69
69
|
}, "strip", z.ZodTypeAny, {
|
|
70
|
+
resendCooldown?: number | undefined;
|
|
70
71
|
buttonText?: string | undefined;
|
|
71
72
|
enabled?: boolean | undefined;
|
|
72
73
|
emailLabel?: string | undefined;
|
|
73
74
|
emailPlaceholder?: string | undefined;
|
|
74
|
-
resendCooldown?: number | undefined;
|
|
75
75
|
}, {
|
|
76
|
+
resendCooldown?: number | undefined;
|
|
76
77
|
buttonText?: string | undefined;
|
|
77
78
|
enabled?: boolean | undefined;
|
|
78
79
|
emailLabel?: string | undefined;
|
|
79
80
|
emailPlaceholder?: string | undefined;
|
|
80
|
-
resendCooldown?: number | undefined;
|
|
81
81
|
}>;
|
|
82
82
|
export type MagicLinkConfigSchemaType = z.infer<typeof MagicLinkConfigSchema>;
|
|
83
83
|
/**
|
|
@@ -91,19 +91,19 @@ export declare const OTPConfigSchema: z.ZodObject<{
|
|
|
91
91
|
digits: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<4>, z.ZodLiteral<6>, z.ZodLiteral<8>]>>;
|
|
92
92
|
resendCooldown: z.ZodOptional<z.ZodNumber>;
|
|
93
93
|
}, "strip", z.ZodTypeAny, {
|
|
94
|
-
enabled?: boolean | undefined;
|
|
95
94
|
resendCooldown?: number | undefined;
|
|
95
|
+
enabled?: boolean | undefined;
|
|
96
96
|
phoneLabel?: string | undefined;
|
|
97
97
|
phonePlaceholder?: string | undefined;
|
|
98
98
|
instructions?: string | undefined;
|
|
99
|
-
digits?:
|
|
99
|
+
digits?: 4 | 6 | 8 | undefined;
|
|
100
100
|
}, {
|
|
101
|
-
enabled?: boolean | undefined;
|
|
102
101
|
resendCooldown?: number | undefined;
|
|
102
|
+
enabled?: boolean | undefined;
|
|
103
103
|
phoneLabel?: string | undefined;
|
|
104
104
|
phonePlaceholder?: string | undefined;
|
|
105
105
|
instructions?: string | undefined;
|
|
106
|
-
digits?:
|
|
106
|
+
digits?: 4 | 6 | 8 | undefined;
|
|
107
107
|
}>;
|
|
108
108
|
export type OTPConfigSchemaType = z.infer<typeof OTPConfigSchema>;
|
|
109
109
|
/**
|
|
@@ -182,21 +182,21 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
182
182
|
showForgotPassword: z.ZodOptional<z.ZodBoolean>;
|
|
183
183
|
forgotPasswordUrl: z.ZodOptional<z.ZodString>;
|
|
184
184
|
}, "strip", z.ZodTypeAny, {
|
|
185
|
+
showForgotPassword?: boolean | undefined;
|
|
186
|
+
forgotPasswordUrl?: string | undefined;
|
|
185
187
|
usernameLabel?: string | undefined;
|
|
186
188
|
usernamePlaceholder?: string | undefined;
|
|
187
189
|
passwordLabel?: string | undefined;
|
|
188
190
|
passwordPlaceholder?: string | undefined;
|
|
189
191
|
showRememberMe?: boolean | undefined;
|
|
192
|
+
}, {
|
|
190
193
|
showForgotPassword?: boolean | undefined;
|
|
191
194
|
forgotPasswordUrl?: string | undefined;
|
|
192
|
-
}, {
|
|
193
195
|
usernameLabel?: string | undefined;
|
|
194
196
|
usernamePlaceholder?: string | undefined;
|
|
195
197
|
passwordLabel?: string | undefined;
|
|
196
198
|
passwordPlaceholder?: string | undefined;
|
|
197
199
|
showRememberMe?: boolean | undefined;
|
|
198
|
-
showForgotPassword?: boolean | undefined;
|
|
199
|
-
forgotPasswordUrl?: string | undefined;
|
|
200
200
|
}>>;
|
|
201
201
|
oauth: z.ZodOptional<z.ZodObject<{
|
|
202
202
|
providerId: z.ZodOptional<z.ZodString>;
|
|
@@ -218,17 +218,17 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
218
218
|
buttonText: z.ZodOptional<z.ZodString>;
|
|
219
219
|
resendCooldown: z.ZodOptional<z.ZodNumber>;
|
|
220
220
|
}, "strip", z.ZodTypeAny, {
|
|
221
|
+
resendCooldown?: number | undefined;
|
|
221
222
|
buttonText?: string | undefined;
|
|
222
223
|
enabled?: boolean | undefined;
|
|
223
224
|
emailLabel?: string | undefined;
|
|
224
225
|
emailPlaceholder?: string | undefined;
|
|
225
|
-
resendCooldown?: number | undefined;
|
|
226
226
|
}, {
|
|
227
|
+
resendCooldown?: number | undefined;
|
|
227
228
|
buttonText?: string | undefined;
|
|
228
229
|
enabled?: boolean | undefined;
|
|
229
230
|
emailLabel?: string | undefined;
|
|
230
231
|
emailPlaceholder?: string | undefined;
|
|
231
|
-
resendCooldown?: number | undefined;
|
|
232
232
|
}>>;
|
|
233
233
|
otp: z.ZodOptional<z.ZodObject<{
|
|
234
234
|
enabled: z.ZodOptional<z.ZodBoolean>;
|
|
@@ -238,19 +238,19 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
238
238
|
digits: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<4>, z.ZodLiteral<6>, z.ZodLiteral<8>]>>;
|
|
239
239
|
resendCooldown: z.ZodOptional<z.ZodNumber>;
|
|
240
240
|
}, "strip", z.ZodTypeAny, {
|
|
241
|
-
enabled?: boolean | undefined;
|
|
242
241
|
resendCooldown?: number | undefined;
|
|
242
|
+
enabled?: boolean | undefined;
|
|
243
243
|
phoneLabel?: string | undefined;
|
|
244
244
|
phonePlaceholder?: string | undefined;
|
|
245
245
|
instructions?: string | undefined;
|
|
246
|
-
digits?:
|
|
246
|
+
digits?: 4 | 6 | 8 | undefined;
|
|
247
247
|
}, {
|
|
248
|
-
enabled?: boolean | undefined;
|
|
249
248
|
resendCooldown?: number | undefined;
|
|
249
|
+
enabled?: boolean | undefined;
|
|
250
250
|
phoneLabel?: string | undefined;
|
|
251
251
|
phonePlaceholder?: string | undefined;
|
|
252
252
|
instructions?: string | undefined;
|
|
253
|
-
digits?:
|
|
253
|
+
digits?: 4 | 6 | 8 | undefined;
|
|
254
254
|
}>>;
|
|
255
255
|
qrCode: z.ZodOptional<z.ZodObject<{
|
|
256
256
|
enabled: z.ZodOptional<z.ZodBoolean>;
|
|
@@ -305,13 +305,13 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
305
305
|
}>>;
|
|
306
306
|
}, "strip", z.ZodTypeAny, {
|
|
307
307
|
credentials?: {
|
|
308
|
+
showForgotPassword?: boolean | undefined;
|
|
309
|
+
forgotPasswordUrl?: string | undefined;
|
|
308
310
|
usernameLabel?: string | undefined;
|
|
309
311
|
usernamePlaceholder?: string | undefined;
|
|
310
312
|
passwordLabel?: string | undefined;
|
|
311
313
|
passwordPlaceholder?: string | undefined;
|
|
312
314
|
showRememberMe?: boolean | undefined;
|
|
313
|
-
showForgotPassword?: boolean | undefined;
|
|
314
|
-
forgotPasswordUrl?: string | undefined;
|
|
315
315
|
} | undefined;
|
|
316
316
|
oauth?: {
|
|
317
317
|
providerId?: string | undefined;
|
|
@@ -319,12 +319,12 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
319
319
|
buttonText?: string | undefined;
|
|
320
320
|
} | undefined;
|
|
321
321
|
otp?: {
|
|
322
|
-
enabled?: boolean | undefined;
|
|
323
322
|
resendCooldown?: number | undefined;
|
|
323
|
+
enabled?: boolean | undefined;
|
|
324
324
|
phoneLabel?: string | undefined;
|
|
325
325
|
phonePlaceholder?: string | undefined;
|
|
326
326
|
instructions?: string | undefined;
|
|
327
|
-
digits?:
|
|
327
|
+
digits?: 4 | 6 | 8 | undefined;
|
|
328
328
|
} | undefined;
|
|
329
329
|
passkey?: {
|
|
330
330
|
buttonText?: string | undefined;
|
|
@@ -340,11 +340,11 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
340
340
|
estimatedTime?: string | undefined;
|
|
341
341
|
} | undefined;
|
|
342
342
|
magicLink?: {
|
|
343
|
+
resendCooldown?: number | undefined;
|
|
343
344
|
buttonText?: string | undefined;
|
|
344
345
|
enabled?: boolean | undefined;
|
|
345
346
|
emailLabel?: string | undefined;
|
|
346
347
|
emailPlaceholder?: string | undefined;
|
|
347
|
-
resendCooldown?: number | undefined;
|
|
348
348
|
} | undefined;
|
|
349
349
|
qrCode?: {
|
|
350
350
|
enabled?: boolean | undefined;
|
|
@@ -354,13 +354,13 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
354
354
|
} | undefined;
|
|
355
355
|
}, {
|
|
356
356
|
credentials?: {
|
|
357
|
+
showForgotPassword?: boolean | undefined;
|
|
358
|
+
forgotPasswordUrl?: string | undefined;
|
|
357
359
|
usernameLabel?: string | undefined;
|
|
358
360
|
usernamePlaceholder?: string | undefined;
|
|
359
361
|
passwordLabel?: string | undefined;
|
|
360
362
|
passwordPlaceholder?: string | undefined;
|
|
361
363
|
showRememberMe?: boolean | undefined;
|
|
362
|
-
showForgotPassword?: boolean | undefined;
|
|
363
|
-
forgotPasswordUrl?: string | undefined;
|
|
364
364
|
} | undefined;
|
|
365
365
|
oauth?: {
|
|
366
366
|
providerId?: string | undefined;
|
|
@@ -368,12 +368,12 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
368
368
|
buttonText?: string | undefined;
|
|
369
369
|
} | undefined;
|
|
370
370
|
otp?: {
|
|
371
|
-
enabled?: boolean | undefined;
|
|
372
371
|
resendCooldown?: number | undefined;
|
|
372
|
+
enabled?: boolean | undefined;
|
|
373
373
|
phoneLabel?: string | undefined;
|
|
374
374
|
phonePlaceholder?: string | undefined;
|
|
375
375
|
instructions?: string | undefined;
|
|
376
|
-
digits?:
|
|
376
|
+
digits?: 4 | 6 | 8 | undefined;
|
|
377
377
|
} | undefined;
|
|
378
378
|
passkey?: {
|
|
379
379
|
buttonText?: string | undefined;
|
|
@@ -389,11 +389,11 @@ export declare const ModeConfigsSchema: z.ZodObject<{
|
|
|
389
389
|
estimatedTime?: string | undefined;
|
|
390
390
|
} | undefined;
|
|
391
391
|
magicLink?: {
|
|
392
|
+
resendCooldown?: number | undefined;
|
|
392
393
|
buttonText?: string | undefined;
|
|
393
394
|
enabled?: boolean | undefined;
|
|
394
395
|
emailLabel?: string | undefined;
|
|
395
396
|
emailPlaceholder?: string | undefined;
|
|
396
|
-
resendCooldown?: number | undefined;
|
|
397
397
|
} | undefined;
|
|
398
398
|
qrCode?: {
|
|
399
399
|
enabled?: boolean | undefined;
|
|
@@ -22,6 +22,12 @@ export declare function getTemplateForMode(authMode: AuthMode, config: ExtendedC
|
|
|
22
22
|
/**
|
|
23
23
|
* Determine the auth mode from config.
|
|
24
24
|
*
|
|
25
|
+
* This function is ONLY for template selection in the consent/clickwrap flow.
|
|
26
|
+
* The credential vs OAuth decision happens BEFORE template rendering, in ConsentService.
|
|
27
|
+
*
|
|
28
|
+
* NOTE: String-based provider detection has been removed intentionally.
|
|
29
|
+
* Credential rendering uses renderCredentialPage() directly, not this function.
|
|
30
|
+
*
|
|
25
31
|
* @param config - Page config with optional OAuth settings
|
|
26
32
|
* @returns Detected auth mode
|
|
27
33
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/templates/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAS9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,KAAK,EACV,yBAAyB,EAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAqBtE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,yBAAyB,EACjC,YAAY,CAAC,EAAE,qBAAqB,GACnC,mBAAmB,CAyBrB;AAED
|
|
1
|
+
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/templates/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAS9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,KAAK,EACV,yBAAyB,EAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAqBtE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,yBAAyB,EACjC,YAAY,CAAC,EAAE,qBAAqB,GACnC,mBAAmB,CAyBrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,yBAAyB,GAChC,QAAQ,CAiBV;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,QAAQ,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,QAAQ,EAAE,CAE/C;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,yBAAyB,EACjC,YAAY,CAAC,EAAE,qBAAqB,EACpC,QAAQ,CAAC,EAAE,QAAQ,GAClB,MAAM,CAIR;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,yBAAyB,EACjC,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,qBAAqB,GACnC,MAAM,CAOR"}
|
|
@@ -46,35 +46,33 @@ export function getTemplateForMode(authMode, config, remoteConfig) {
|
|
|
46
46
|
/**
|
|
47
47
|
* Determine the auth mode from config.
|
|
48
48
|
*
|
|
49
|
+
* This function is ONLY for template selection in the consent/clickwrap flow.
|
|
50
|
+
* The credential vs OAuth decision happens BEFORE template rendering, in ConsentService.
|
|
51
|
+
*
|
|
52
|
+
* NOTE: String-based provider detection has been removed intentionally.
|
|
53
|
+
* Credential rendering uses renderCredentialPage() directly, not this function.
|
|
54
|
+
*
|
|
49
55
|
* @param config - Page config with optional OAuth settings
|
|
50
56
|
* @returns Detected auth mode
|
|
51
57
|
*/
|
|
52
58
|
export function detectAuthMode(config) {
|
|
53
|
-
//
|
|
59
|
+
// Priority 1: OAuth URL/requirement takes precedence
|
|
54
60
|
if (config.oauthRequired || config.oauthUrl) {
|
|
55
61
|
return AUTH_MODES.OAUTH;
|
|
56
62
|
}
|
|
57
|
-
// Check
|
|
58
|
-
if (config.provider) {
|
|
59
|
-
const provider = config.provider.toLowerCase();
|
|
60
|
-
if (provider.includes("oauth") ||
|
|
61
|
-
["github", "google", "microsoft", "slack", "auth0"].includes(provider)) {
|
|
62
|
-
return AUTH_MODES.OAUTH;
|
|
63
|
-
}
|
|
64
|
-
}
|
|
65
|
-
// Check mode config
|
|
63
|
+
// Priority 2: Check modeConfig (credentials, magicLink, otp, etc.)
|
|
66
64
|
const modeConfig = config.modeConfig;
|
|
67
65
|
if (modeConfig) {
|
|
68
|
-
if (modeConfig.oauth)
|
|
69
|
-
return AUTH_MODES.OAUTH;
|
|
70
66
|
if (modeConfig.credentials)
|
|
71
67
|
return AUTH_MODES.CREDENTIALS;
|
|
68
|
+
if (modeConfig.oauth)
|
|
69
|
+
return AUTH_MODES.OAUTH;
|
|
72
70
|
if (modeConfig.magicLink?.enabled)
|
|
73
71
|
return AUTH_MODES.MAGIC_LINK;
|
|
74
72
|
if (modeConfig.otp?.enabled)
|
|
75
73
|
return AUTH_MODES.OTP;
|
|
76
74
|
}
|
|
77
|
-
// Default
|
|
75
|
+
// Default: consent-only (no authentication required)
|
|
78
76
|
return AUTH_MODES.CONSENT_ONLY;
|
|
79
77
|
}
|
|
80
78
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/templates/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEvF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAerD;;GAEG;AACH,MAAM,iBAAiB,GAAmD;IACxE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,mBAAmB;IAC9C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,mBAAmB;IAC7C,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,aAAa;IACjC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,iBAAiB;IAC1C,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW;CAC9B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAkB,EAClB,MAAiC,EACjC,YAAoC;IAEpC,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,6CAA6C;QAC7C,OAAO,CAAC,IAAI,CACV,sBAAsB,QAAQ,gCAAgC,CAC/D,CAAC;QACF,OAAO,kBAAkB,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC3E,CAAC;IAED,wBAAwB;IACxB,MAAM,kBAAkB,GAAG,YAAY,IAAI,uBAAuB,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvE,8EAA8E;IAC9E,IAAI,QAAQ,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,IAAI,mBAAmB,CAC5B,MAAM,EACN,QAAQ,EACR,kBAAkB,CAAC,WAAW,CAC/B,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED
|
|
1
|
+
{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/templates/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEvF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAerD;;GAEG;AACH,MAAM,iBAAiB,GAAmD;IACxE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,mBAAmB;IAC9C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,mBAAmB;IAC7C,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,aAAa;IACjC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,iBAAiB;IAC1C,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW;CAC9B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAkB,EAClB,MAAiC,EACjC,YAAoC;IAEpC,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,6CAA6C;QAC7C,OAAO,CAAC,IAAI,CACV,sBAAsB,QAAQ,gCAAgC,CAC/D,CAAC;QACF,OAAO,kBAAkB,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC3E,CAAC;IAED,wBAAwB;IACxB,MAAM,kBAAkB,GAAG,YAAY,IAAI,uBAAuB,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvE,8EAA8E;IAC9E,IAAI,QAAQ,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,IAAI,mBAAmB,CAC5B,MAAM,EACN,QAAQ,EACR,kBAAkB,CAAC,WAAW,CAC/B,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAiC;IAEjC,qDAAqD;IACrD,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,mEAAmE;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,UAAU,CAAC,WAAW;YAAE,OAAO,UAAU,CAAC,WAAW,CAAC;QAC1D,IAAI,UAAU,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,KAAK,CAAC;QAC9C,IAAI,UAAU,CAAC,SAAS,EAAE,OAAO;YAAE,OAAO,UAAU,CAAC,UAAU,CAAC;QAChE,IAAI,UAAU,CAAC,GAAG,EAAE,OAAO;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC;IACrD,CAAC;IAED,qDAAqD;IACrD,OAAO,UAAU,CAAC,YAAY,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAgB,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAe,CAAC;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAiC,EACjC,YAAoC,EACpC,QAAmB;IAEnB,MAAM,IAAI,GAAG,QAAQ,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAiC,EACjC,QAAgB,EAChB,YAAoC;IAEpC,MAAM,kBAAkB,GAAG,YAAY,IAAI,uBAAuB,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/B,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC3B,CAAC"}
|
|
@@ -231,4 +231,57 @@ export interface AuthModeRegistryEntry {
|
|
|
231
231
|
/** Tags for filtering/categorization */
|
|
232
232
|
tags: string[];
|
|
233
233
|
}
|
|
234
|
+
/**
|
|
235
|
+
* Consent Provider Types for delegation metadata
|
|
236
|
+
*
|
|
237
|
+
* These are the values stored in delegation metadata.provider_type
|
|
238
|
+
* and must match AgentShield's tool protection authorization.type values.
|
|
239
|
+
*
|
|
240
|
+
* IMPORTANT: This must stay in sync with @kya-os/contracts/tool-protection CONSENT_PROVIDER_TYPES
|
|
241
|
+
*/
|
|
242
|
+
export declare const PROVIDER_TYPES: {
|
|
243
|
+
/** Consent-only - no authentication, just clickwrap agreement */
|
|
244
|
+
readonly NONE: "none";
|
|
245
|
+
/** Password-based authentication (email/password, username/password) */
|
|
246
|
+
readonly PASSWORD: "password";
|
|
247
|
+
/** OAuth2 provider authentication */
|
|
248
|
+
readonly OAUTH2: "oauth2";
|
|
249
|
+
/** Email magic link authentication */
|
|
250
|
+
readonly MAGIC_LINK: "magic_link";
|
|
251
|
+
/** One-time password (SMS/email code) */
|
|
252
|
+
readonly OTP: "otp";
|
|
253
|
+
};
|
|
254
|
+
export type ProviderType = (typeof PROVIDER_TYPES)[keyof typeof PROVIDER_TYPES];
|
|
255
|
+
/**
|
|
256
|
+
* AUTH_MODE to PROVIDER_TYPE Mapping
|
|
257
|
+
*
|
|
258
|
+
* This is the CANONICAL mapping documented in the module header.
|
|
259
|
+
* It maps UI-level auth modes to API-level provider types.
|
|
260
|
+
*
|
|
261
|
+
* IMPORTANT: This mapping ensures type-safety between:
|
|
262
|
+
* - AUTH_MODES (what UI/flow to render)
|
|
263
|
+
* - PROVIDER_TYPES (what to send to AgentShield for authorization validation)
|
|
264
|
+
*
|
|
265
|
+
* The tool protection layer expects authorization.type to match these values.
|
|
266
|
+
*/
|
|
267
|
+
export declare const AUTH_MODE_TO_PROVIDER_TYPE: Record<AuthMode, ProviderType>;
|
|
268
|
+
/**
|
|
269
|
+
* Get the provider_type for a given auth mode
|
|
270
|
+
*
|
|
271
|
+
* This is the type-safe way to convert between UI auth modes
|
|
272
|
+
* and API provider types. Use this instead of hardcoding strings.
|
|
273
|
+
*
|
|
274
|
+
* @param mode - The auth mode (from AUTH_MODES)
|
|
275
|
+
* @returns The corresponding provider type for delegation metadata
|
|
276
|
+
*
|
|
277
|
+
* @example
|
|
278
|
+
* ```ts
|
|
279
|
+
* import { AUTH_MODES, getProviderTypeForAuthMode } from '@kya-os/consent';
|
|
280
|
+
*
|
|
281
|
+
* const mode = AUTH_MODES.CREDENTIALS;
|
|
282
|
+
* const providerType = getProviderTypeForAuthMode(mode);
|
|
283
|
+
* // providerType === 'password' (NOT 'credential'!)
|
|
284
|
+
* ```
|
|
285
|
+
*/
|
|
286
|
+
export declare function getProviderTypeForAuthMode(mode: AuthMode): ProviderType;
|
|
234
287
|
//# sourceMappingURL=modes.types.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"modes.types.d.ts","sourceRoot":"","sources":["../../src/types/modes.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU;IACrB,4EAA4E;;IAG5E,8EAA8E;;IAG9E,2EAA2E;;IAG3E,6EAA6E;;IAG7E,yFAAyF;;IAGzF,sFAAsF;;IAGtF,sFAAsF;;IAGtF,4EAA4E;;CAEpE,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iCAAiC;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,2BAA2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iCAAiC;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,6CAA6C;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,6CAA6C;IAC7C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,8BAA8B;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,0CAA0C;IAC1C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iDAAiD;IACjD,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAElD,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAEhC,wBAAwB;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,eAAe,CAAC;IAE5B,sBAAsB;IACtB,GAAG,CAAC,EAAE,SAAS,CAAC;IAEhB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,YAAY,CAAC;IAEtB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB,sBAAsB;IACtB,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,sBAAsB;IACtB,EAAE,EAAE,QAAQ,CAAC;IAEb,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IAEpB,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IAEpB,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IAEjB,2CAA2C;IAC3C,cAAc,EAAE,OAAO,CAAC;IAExB,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IAErB,wCAAwC;IACxC,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB"}
|
|
1
|
+
{"version":3,"file":"modes.types.d.ts","sourceRoot":"","sources":["../../src/types/modes.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU;IACrB,4EAA4E;;IAG5E,8EAA8E;;IAG9E,2EAA2E;;IAG3E,6EAA6E;;IAG7E,yFAAyF;;IAGzF,sFAAsF;;IAGtF,sFAAsF;;IAGtF,4EAA4E;;CAEpE,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iCAAiC;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,2BAA2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iCAAiC;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,6CAA6C;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,6CAA6C;IAC7C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,8BAA8B;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,0CAA0C;IAC1C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iDAAiD;IACjD,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAElD,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAEhC,wBAAwB;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,eAAe,CAAC;IAE5B,sBAAsB;IACtB,GAAG,CAAC,EAAE,SAAS,CAAC;IAEhB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,YAAY,CAAC;IAEtB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB,sBAAsB;IACtB,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,sBAAsB;IACtB,EAAE,EAAE,QAAQ,CAAC;IAEb,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IAEpB,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IAEpB,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IAEjB,2CAA2C;IAC3C,cAAc,EAAE,OAAO,CAAC;IAExB,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IAErB,wCAAwC;IACxC,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc;IACzB,iEAAiE;;IAEjE,wEAAwE;;IAExE,qCAAqC;;IAErC,sCAAsC;;IAEtC,yCAAyC;;CAEjC,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,CAUrE,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,CAEvE"}
|
|
@@ -66,4 +66,71 @@ export const AUTH_MODES = {
|
|
|
66
66
|
/** Identity verification (future) - Auth → Consent → Success (3 screens) */
|
|
67
67
|
IDV: "idv",
|
|
68
68
|
};
|
|
69
|
+
// =============================================================================
|
|
70
|
+
// AUTH_MODE → CONSENT_PROVIDER_TYPE MAPPING (Single Source of Truth)
|
|
71
|
+
// =============================================================================
|
|
72
|
+
/**
|
|
73
|
+
* Consent Provider Types for delegation metadata
|
|
74
|
+
*
|
|
75
|
+
* These are the values stored in delegation metadata.provider_type
|
|
76
|
+
* and must match AgentShield's tool protection authorization.type values.
|
|
77
|
+
*
|
|
78
|
+
* IMPORTANT: This must stay in sync with @kya-os/contracts/tool-protection CONSENT_PROVIDER_TYPES
|
|
79
|
+
*/
|
|
80
|
+
export const PROVIDER_TYPES = {
|
|
81
|
+
/** Consent-only - no authentication, just clickwrap agreement */
|
|
82
|
+
NONE: "none",
|
|
83
|
+
/** Password-based authentication (email/password, username/password) */
|
|
84
|
+
PASSWORD: "password",
|
|
85
|
+
/** OAuth2 provider authentication */
|
|
86
|
+
OAUTH2: "oauth2",
|
|
87
|
+
/** Email magic link authentication */
|
|
88
|
+
MAGIC_LINK: "magic_link",
|
|
89
|
+
/** One-time password (SMS/email code) */
|
|
90
|
+
OTP: "otp",
|
|
91
|
+
};
|
|
92
|
+
/**
|
|
93
|
+
* AUTH_MODE to PROVIDER_TYPE Mapping
|
|
94
|
+
*
|
|
95
|
+
* This is the CANONICAL mapping documented in the module header.
|
|
96
|
+
* It maps UI-level auth modes to API-level provider types.
|
|
97
|
+
*
|
|
98
|
+
* IMPORTANT: This mapping ensures type-safety between:
|
|
99
|
+
* - AUTH_MODES (what UI/flow to render)
|
|
100
|
+
* - PROVIDER_TYPES (what to send to AgentShield for authorization validation)
|
|
101
|
+
*
|
|
102
|
+
* The tool protection layer expects authorization.type to match these values.
|
|
103
|
+
*/
|
|
104
|
+
export const AUTH_MODE_TO_PROVIDER_TYPE = {
|
|
105
|
+
[AUTH_MODES.CONSENT_ONLY]: PROVIDER_TYPES.NONE,
|
|
106
|
+
[AUTH_MODES.CREDENTIALS]: PROVIDER_TYPES.PASSWORD, // CRITICAL: 'password', NOT 'credential'
|
|
107
|
+
[AUTH_MODES.OAUTH]: PROVIDER_TYPES.OAUTH2,
|
|
108
|
+
[AUTH_MODES.MAGIC_LINK]: PROVIDER_TYPES.MAGIC_LINK,
|
|
109
|
+
[AUTH_MODES.OTP]: PROVIDER_TYPES.OTP,
|
|
110
|
+
// Future modes - default to NONE until implemented
|
|
111
|
+
[AUTH_MODES.QR_CODE]: PROVIDER_TYPES.NONE,
|
|
112
|
+
[AUTH_MODES.PASSKEY]: PROVIDER_TYPES.NONE,
|
|
113
|
+
[AUTH_MODES.IDV]: PROVIDER_TYPES.NONE,
|
|
114
|
+
};
|
|
115
|
+
/**
|
|
116
|
+
* Get the provider_type for a given auth mode
|
|
117
|
+
*
|
|
118
|
+
* This is the type-safe way to convert between UI auth modes
|
|
119
|
+
* and API provider types. Use this instead of hardcoding strings.
|
|
120
|
+
*
|
|
121
|
+
* @param mode - The auth mode (from AUTH_MODES)
|
|
122
|
+
* @returns The corresponding provider type for delegation metadata
|
|
123
|
+
*
|
|
124
|
+
* @example
|
|
125
|
+
* ```ts
|
|
126
|
+
* import { AUTH_MODES, getProviderTypeForAuthMode } from '@kya-os/consent';
|
|
127
|
+
*
|
|
128
|
+
* const mode = AUTH_MODES.CREDENTIALS;
|
|
129
|
+
* const providerType = getProviderTypeForAuthMode(mode);
|
|
130
|
+
* // providerType === 'password' (NOT 'credential'!)
|
|
131
|
+
* ```
|
|
132
|
+
*/
|
|
133
|
+
export function getProviderTypeForAuthMode(mode) {
|
|
134
|
+
return AUTH_MODE_TO_PROVIDER_TYPE[mode] ?? PROVIDER_TYPES.NONE;
|
|
135
|
+
}
|
|
69
136
|
//# sourceMappingURL=modes.types.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"modes.types.js","sourceRoot":"","sources":["../../src/types/modes.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,4EAA4E;IAC5E,YAAY,EAAE,cAAc;IAE5B,8EAA8E;IAC9E,WAAW,EAAE,aAAa;IAE1B,2EAA2E;IAC3E,KAAK,EAAE,OAAO;IAEd,6EAA6E;IAC7E,UAAU,EAAE,YAAY;IAExB,yFAAyF;IACzF,GAAG,EAAE,KAAK;IAEV,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,4EAA4E;IAC5E,GAAG,EAAE,KAAK;CACF,CAAC"}
|
|
1
|
+
{"version":3,"file":"modes.types.js","sourceRoot":"","sources":["../../src/types/modes.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,4EAA4E;IAC5E,YAAY,EAAE,cAAc;IAE5B,8EAA8E;IAC9E,WAAW,EAAE,aAAa;IAE1B,2EAA2E;IAC3E,KAAK,EAAE,OAAO;IAEd,6EAA6E;IAC7E,UAAU,EAAE,YAAY;IAExB,yFAAyF;IACzF,GAAG,EAAE,KAAK;IAEV,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,4EAA4E;IAC5E,GAAG,EAAE,KAAK;CACF,CAAC;AAwNX,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,iEAAiE;IACjE,IAAI,EAAE,MAAM;IACZ,wEAAwE;IACxE,QAAQ,EAAE,UAAU;IACpB,qCAAqC;IACrC,MAAM,EAAE,QAAQ;IAChB,sCAAsC;IACtC,UAAU,EAAE,YAAY;IACxB,yCAAyC;IACzC,GAAG,EAAE,KAAK;CACF,CAAC;AAIX;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAmC;IACxE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC,IAAI;IAC9C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,QAAQ,EAAE,yCAAyC;IAC5F,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,MAAM;IACzC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU;IAClD,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,GAAG;IACpC,mDAAmD;IACnD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,IAAI;IACzC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,IAAI;IACzC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,IAAI;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAc;IACvD,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC;AACjE,CAAC"}
|