@kya-os/consent 0.1.9 → 0.1.12

package/dist/types/modes.types.js

@@ -66,4 +66,71 @@ export const AUTH_MODES = {
     /** Identity verification (future) - Auth → Consent → Success (3 screens) */
     IDV: "idv",
 };
+// =============================================================================
+// AUTH_MODE → CONSENT_PROVIDER_TYPE MAPPING (Single Source of Truth)
+// =============================================================================
+/**
+ * Consent Provider Types for delegation metadata
+ *
+ * These are the values stored in delegation metadata.provider_type
+ * and must match AgentShield's tool protection authorization.type values.
+ *
+ * IMPORTANT: This must stay in sync with @kya-os/contracts/tool-protection CONSENT_PROVIDER_TYPES
+ */
+export const PROVIDER_TYPES = {
+    /** Consent-only - no authentication, just clickwrap agreement */
+    NONE: "none",
+    /** Password-based authentication (email/password, username/password) */
+    PASSWORD: "password",
+    /** OAuth2 provider authentication */
+    OAUTH2: "oauth2",
+    /** Email magic link authentication */
+    MAGIC_LINK: "magic_link",
+    /** One-time password (SMS/email code) */
+    OTP: "otp",
+};
+/**
+ * AUTH_MODE to PROVIDER_TYPE Mapping
+ *
+ * This is the CANONICAL mapping documented in the module header.
+ * It maps UI-level auth modes to API-level provider types.
+ *
+ * IMPORTANT: This mapping ensures type-safety between:
+ * - AUTH_MODES (what UI/flow to render)
+ * - PROVIDER_TYPES (what to send to AgentShield for authorization validation)
+ *
+ * The tool protection layer expects authorization.type to match these values.
+ */
+export const AUTH_MODE_TO_PROVIDER_TYPE = {
+    [AUTH_MODES.CONSENT_ONLY]: PROVIDER_TYPES.NONE,
+    [AUTH_MODES.CREDENTIALS]: PROVIDER_TYPES.PASSWORD, // CRITICAL: 'password', NOT 'credential'
+    [AUTH_MODES.OAUTH]: PROVIDER_TYPES.OAUTH2,
+    [AUTH_MODES.MAGIC_LINK]: PROVIDER_TYPES.MAGIC_LINK,
+    [AUTH_MODES.OTP]: PROVIDER_TYPES.OTP,
+    // Future modes - default to NONE until implemented
+    [AUTH_MODES.QR_CODE]: PROVIDER_TYPES.NONE,
+    [AUTH_MODES.PASSKEY]: PROVIDER_TYPES.NONE,
+    [AUTH_MODES.IDV]: PROVIDER_TYPES.NONE,
+};
+/**
+ * Get the provider_type for a given auth mode
+ *
+ * This is the type-safe way to convert between UI auth modes
+ * and API provider types. Use this instead of hardcoding strings.
+ *
+ * @param mode - The auth mode (from AUTH_MODES)
+ * @returns The corresponding provider type for delegation metadata
+ *
+ * @example
+ * ```ts
+ * import { AUTH_MODES, getProviderTypeForAuthMode } from '@kya-os/consent';
+ *
+ * const mode = AUTH_MODES.CREDENTIALS;
+ * const providerType = getProviderTypeForAuthMode(mode);
+ * // providerType === 'password' (NOT 'credential'!)
+ * ```
+ */
+export function getProviderTypeForAuthMode(mode) {
+    return AUTH_MODE_TO_PROVIDER_TYPE[mode] ?? PROVIDER_TYPES.NONE;
+}
 //# sourceMappingURL=modes.types.js.map

package/dist/types/modes.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"modes.types.js","sourceRoot":"","sources":["../../src/types/modes.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,4EAA4E;IAC5E,YAAY,EAAE,cAAc;IAE5B,8EAA8E;IAC9E,WAAW,EAAE,aAAa;IAE1B,2EAA2E;IAC3E,KAAK,EAAE,OAAO;IAEd,6EAA6E;IAC7E,UAAU,EAAE,YAAY;IAExB,yFAAyF;IACzF,GAAG,EAAE,KAAK;IAEV,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,4EAA4E;IAC5E,GAAG,EAAE,KAAK;CACF,CAAC"}
+{"version":3,"file":"modes.types.js","sourceRoot":"","sources":["../../src/types/modes.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,4EAA4E;IAC5E,YAAY,EAAE,cAAc;IAE5B,8EAA8E;IAC9E,WAAW,EAAE,aAAa;IAE1B,2EAA2E;IAC3E,KAAK,EAAE,OAAO;IAEd,6EAA6E;IAC7E,UAAU,EAAE,YAAY;IAExB,yFAAyF;IACzF,GAAG,EAAE,KAAK;IAEV,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,sFAAsF;IACtF,OAAO,EAAE,SAAS;IAElB,4EAA4E;IAC5E,GAAG,EAAE,KAAK;CACF,CAAC;AAwNX,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,iEAAiE;IACjE,IAAI,EAAE,MAAM;IACZ,wEAAwE;IACxE,QAAQ,EAAE,UAAU;IACpB,qCAAqC;IACrC,MAAM,EAAE,QAAQ;IAChB,sCAAsC;IACtC,UAAU,EAAE,YAAY;IACxB,yCAAyC;IACzC,GAAG,EAAE,KAAK;CACF,CAAC;AAIX;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAmC;IACxE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC,IAAI;IAC9C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,QAAQ,EAAE,yCAAyC;IAC5F,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,MAAM;IACzC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU;IAClD,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,GAAG;IACpC,mDAAmD;IACnD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,IAAI;IACzC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,IAAI;IACzC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,IAAI;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAc;IACvD,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC;AACjE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/consent",
-  "version": "0.1.9",
+  "version": "0.1.12",
   "description": "Canonical consent page types, styles, and utilities for MCP-I and AgentShield",
   "type": "module",
   "main": "dist/index.js",