npm - @kya-os/create-mcpi-app - Versions diffs - 1.10.4 → 1.10.5 - Mend

@kya-os/create-mcpi-app 1.10.4 → 1.10.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/.turbo/turbo-build.log +7 -7
package/dist/bundles/blank.js +184 -73
package/dist/bundles/ecommerce.js +184 -73
package/dist/bundles/hardware-world.js +184 -73
package/dist/bundles/manifest.json +11 -11
package/dist/bundles/mix-station.js +184 -73
package/dist/helpers/get-package-versions.js +2 -2
package/package.json +4 -4

package/dist/bundles/mix-station.js CHANGED Viewed

@@ -141712,7 +141712,7 @@ async function handlePickupInternal(ctx, request, now2) {
 // ../mcp-i-cloudflare/package.json
 var package_default = {
   name: "@kya-os/mcp-i-cloudflare",
-  version: "1.12.2",
+  version: "1.12.3",
   description: "Cloudflare Workers adapter for MCP-I framework",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -141741,9 +141741,9 @@ var package_default = {
   },
   dependencies: {
     "@kya-os/consent": "^0.1.41",
-    "@kya-os/contracts": "^1.9.1",
+    "@kya-os/contracts": "^1.9.2",
     "@kya-os/mcp": "^1.10.1",
-    "@kya-os/mcp-i-core": "^1.8.2",
+    "@kya-os/mcp-i-core": "^1.8.3",
     "@kya-os/mcp-i-runtime": "^1.0.0",
     "@kya-os/provider-registry": "^0.1.7",
     "@modelcontextprotocol/sdk": "^1.25.2",
@@ -147473,6 +147473,29 @@ function buildSuccessCheck(raw2) {
   }
   return { path, expectedValue };
 }
+function buildConsentOverrides(raw2) {
+  if (!raw2)
+    return void 0;
+  const branding = readRecord(raw2, "branding", "branding");
+  const formTitle = readString(raw2, "formTitle", "form_title");
+  const formDescription = readString(raw2, "formDescription", "form_description");
+  const identityFieldLabel = readString(raw2, "identityFieldLabel", "identity_field_label");
+  const identityFieldType = readString(raw2, "identityFieldType", "identity_field_type");
+  const passwordFieldLabel = readString(raw2, "passwordFieldLabel", "password_field_label");
+  const submitButtonText = readString(raw2, "submitButtonText", "submit_button_text");
+  if (!branding && !formTitle && !formDescription && !identityFieldLabel && !identityFieldType && !passwordFieldLabel && !submitButtonText) {
+    return void 0;
+  }
+  return {
+    ...branding ? { branding } : {},
+    ...formTitle ? { formTitle } : {},
+    ...formDescription ? { formDescription } : {},
+    ...identityFieldLabel ? { identityFieldLabel } : {},
+    ...identityFieldType ? { identityFieldType } : {},
+    ...passwordFieldLabel ? { passwordFieldLabel } : {},
+    ...submitButtonText ? { submitButtonText } : {}
+  };
+}
 function buildCredentialConfig(entry) {
   const authEndpoint = readString(entry, "authEndpoint", "auth_endpoint");
   const requestBodyTemplate = readRecord(entry, "requestBodyTemplate", "request_body_template");
@@ -147494,6 +147517,7 @@ function buildCredentialConfig(entry) {
   const tokenUsage = readString(entry, "tokenUsage", "token_usage");
   const tokenHeader = readString(entry, "tokenHeader", "token_header");
   const cookieFormat = readString(entry, "cookieFormat", "cookie_format");
+  const consentOverrides = buildConsentOverrides(readRecord(entry, "consentOverrides", "consent_overrides"));
   return {
     // The handler ignores `type`, but the contract's discriminant is "credential".
     type: "credential",
@@ -147505,7 +147529,8 @@ function buildCredentialConfig(entry) {
     ...headers ? { headers } : {},
     ...tokenUsage ? { tokenUsage } : {},
     ...tokenHeader ? { tokenHeader } : {},
-    ...cookieFormat ? { cookieFormat } : {}
+    ...cookieFormat ? { cookieFormat } : {},
+    ...consentOverrides ? { consentOverrides } : {}
   };
 }
 async function resolveAnchorCredentialProvider(env2, _scopes) {
@@ -147651,6 +147676,15 @@ function htmlResponse(html, status) {
     }
   });
 }
+function jsonResponse(body, status) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: {
+      "Content-Type": "application/json",
+      "Cache-Control": "no-store"
+    }
+  });
+}
 function page(title, bodyInner) {
   return `<!DOCTYPE html>
 <html lang="en">
@@ -147682,54 +147716,111 @@ function approvalFailedPage(message3, status = 410) {
 <p>${escapeHtml2(message3)}</p>
 </main>`), status);
 }
-function successPage() {
-  return htmlResponse(page("Authorization complete", `<main class="kya-consent-success">
-<h1>Authorization complete</h1>
-<p>You have authorized the request. You can close this window and return to the application.</p>
-</main>`), 200);
-}
-function approveFormPage(sid, info, csrfToken) {
-  const scopeItems = info.requiredScopes.length > 0 ? info.requiredScopes.map((s5) => `<li class="kya-scope-item">${escapeHtml2(s5)}</li>`).join("") : `<li class="kya-scope-item">No specific permissions required.</li>`;
-  return page("Permission Request", `<main class="kya-consent">
-<h1>Authorize delegation</h1>
-<p class="kya-permissions-header">This request needs the following permissions:</p>
-<ul class="kya-permissions-list">${scopeItems}</ul>
-<form method="POST" action="/consent/approve?sid=${encodeURIComponent(sid)}">
-<input type="hidden" name="sid" value="${escapeHtml2(sid)}">
-<input type="hidden" name="csrf_token" value="${escapeHtml2(csrfToken)}">
-<button type="submit" class="kya-consent-allow">Allow</button>
-</form>
-</main>`);
-}
-function credentialFieldNames(provider) {
-  const names = [];
-  for (const template of Object.values(provider.config.requestBodyTemplate)) {
-    const match2 = /\{\{(\w+)\}\}/.exec(template);
-    if (match2 && !names.includes(match2[1]))
-      names.push(match2[1]);
-  }
-  return names.length > 0 ? names : ["email", "password"];
-}
-function credentialFormPage(sid, info, provider, csrfToken) {
-  const scopeItems = info.requiredScopes.length > 0 ? info.requiredScopes.map((s5) => `<li class="kya-scope-item">${escapeHtml2(s5)}</li>`).join("") : `<li class="kya-scope-item">No specific permissions required.</li>`;
-  const fieldInputs = credentialFieldNames(provider).map((name16) => {
-    const isSecret = /pass|secret|token|pin/i.test(name16);
-    const label = name16.charAt(0).toUpperCase() + name16.slice(1);
-    return `<label class="kya-field-label" for="kya-field-${escapeHtml2(name16)}">${escapeHtml2(label)}</label>
-<input class="kya-field-input" id="kya-field-${escapeHtml2(name16)}" name="${escapeHtml2(name16)}" type="${isSecret ? "password" : "text"}" autocomplete="${isSecret ? "current-password" : "username"}" required>`;
-  }).join("");
-  return page("Permission Request", `<main class="kya-consent">
-<h1>Sign in to authorize</h1>
-<p class="kya-provider-name">${escapeHtml2(provider.displayName)}</p>
-<p class="kya-permissions-header">This request needs the following permissions:</p>
-<ul class="kya-permissions-list">${scopeItems}</ul>
-<form method="POST" action="/consent/approve?sid=${encodeURIComponent(sid)}">
-<input type="hidden" name="sid" value="${escapeHtml2(sid)}">
-<input type="hidden" name="csrf_token" value="${escapeHtml2(csrfToken)}">
-${fieldInputs}
-<button type="submit" class="kya-consent-allow">Sign in &amp; allow</button>
-</form>
-</main>`);
+function notFoundJson() {
+  return jsonResponse({
+    error: "We could not find this authorization request. It may have already completed or been cancelled."
+  }, 404);
+}
+function approvalFailedJson(message3, status = 410) {
+  return jsonResponse({ error: message3 }, status);
+}
+function successJson(delegationId) {
+  return jsonResponse({ success: true, delegation_id: delegationId }, 200);
+}
+function resolveAnchorCapabilities(consentConfig, scopes) {
+  if (consentConfig.capabilities && consentConfig.capabilities.length > 0) {
+    return consentConfig.capabilities;
+  }
+  if (scopes.length === 0)
+    return void 0;
+  const derived = resolveCapabilitiesForScopes(scopes);
+  if (derived.length === 0)
+    return void 0;
+  return [{ id: "default", label: "Permissions", capabilities: derived }];
+}
+function renderAnchorConsentShell(params) {
+  const { consentConfig, info, sid, csrfToken, serverUrl, projectId, credential } = params;
+  const cpc = credential?.provider.config;
+  const cpcOverrides = cpc?.consentOverrides;
+  const shellConfig = {
+    branding: consentConfig.branding,
+    terms: consentConfig.terms,
+    customFields: consentConfig.customFields,
+    ui: consentConfig.ui,
+    expirationDays: consentConfig.expirationDays,
+    credentials: credential ? {
+      usernameLabel: cpcOverrides?.identityFieldLabel || consentConfig.credentials?.usernameLabel || "Username",
+      usernamePlaceholder: consentConfig.credentials?.usernamePlaceholder || "Enter your username",
+      passwordLabel: cpcOverrides?.passwordFieldLabel || consentConfig.credentials?.passwordLabel || "Password",
+      passwordPlaceholder: consentConfig.credentials?.passwordPlaceholder || "Enter your password",
+      showRememberMe: consentConfig.credentials?.showRememberMe ?? true,
+      showForgotPassword: consentConfig.credentials?.showForgotPassword ?? false,
+      forgotPasswordUrl: consentConfig.credentials?.forgotPasswordUrl
+    } : consentConfig.credentials
+  };
+  const shellOptions = {
+    config: shellConfig,
+    tool: "",
+    scopes: info.requiredScopes,
+    agentDid: info.agentDid || "",
+    sessionId: sid,
+    projectId,
+    serverUrl,
+    // Browser-tab title only (the in-page heading is `shellConfig.ui.title`,
+    // shared across screens) — surface the provider's display name here for the
+    // credential branch instead of dropping it entirely.
+    pageTitle: credential ? `Sign in to ${credential.provider.displayName}` : "Permission Request",
+    csrfToken,
+    capabilities: resolveAnchorCapabilities(consentConfig, info.requiredScopes),
+    agentMetadata: consentConfig.agentMetadata,
+    consentTheme: consentConfig.theme,
+    headlineVerb: consentConfig.headlineVerb,
+    revocationPath: consentConfig.revocationPath,
+    inactivityDays: consentConfig.inactivityDays,
+    ...credential ? {
+      authMode: "credentials",
+      provider: credential.provider.providerId,
+      authorizationType: "password"
+    } : {}
+  };
+  return generateConsentShell(shellOptions);
+}
+function resolveServerUrl(env2, c) {
+  const configured = env2.MCP_SERVER_URL;
+  if (configured && configured !== "null" && configured.startsWith("http")) {
+    return configured;
+  }
+  const raw2 = c.req?.raw;
+  if (raw2) {
+    try {
+      return new URL(raw2.url).origin;
+    } catch {
+    }
+  }
+  return "";
+}
+async function resolveApproveSid(c) {
+  const query = c.req.query("sid");
+  if (isAnchorSid(query))
+    return query;
+  const raw2 = c.req?.raw;
+  if (!raw2)
+    return void 0;
+  try {
+    const contentType2 = raw2.headers.get("Content-Type") || "";
+    const clone5 = raw2.clone();
+    let candidate;
+    if (contentType2.includes("application/json")) {
+      const body = await clone5.json();
+      candidate = body.sid ?? body.session_id;
+    } else {
+      const form = await clone5.formData();
+      candidate = form.get("sid") ?? form.get("session_id");
+    }
+    return typeof candidate === "string" && isAnchorSid(candidate) ? candidate : void 0;
+  } catch {
+    return void 0;
+  }
 }
 function base64UrlEncodeBytes(bytes) {
   return btoa(String.fromCharCode(...bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
@@ -147872,51 +147963,69 @@ async function handleAnchorConsentGet(c, sid, env2, _cfg) {
   }
   const info = await infoResponse.json();
   const csrfToken = await mintCsrfToken(env2, sid);
+  const projectId = env2.AGENTSHIELD_PROJECT_ID || "";
+  const consentConfig = await new ConsentConfigService(env2).getConsentConfig(projectId);
+  const serverUrl = resolveServerUrl(env2, c);
   const resolution = await resolveAnchorCredentialProvider(env2, info.requiredScopes);
   if (resolution.status === "credential") {
-    return htmlResponse(credentialFormPage(sid, info, resolution.provider, csrfToken), 200);
+    return htmlResponse(renderAnchorConsentShell({
+      consentConfig,
+      info,
+      sid,
+      csrfToken,
+      serverUrl,
+      projectId,
+      credential: { provider: resolution.provider }
+    }), 200);
   }
-  return htmlResponse(approveFormPage(sid, info, csrfToken), 200);
+  return htmlResponse(renderAnchorConsentShell({
+    consentConfig,
+    info,
+    sid,
+    csrfToken,
+    serverUrl,
+    projectId
+  }), 200);
 }
 async function handleAnchorConsentApprove(c, sid, env2, cfg) {
   const bodyFields = await readBodyFields(c);
   if (!isTestConsentMode(env2)) {
     const valid = await validateCsrfToken(env2, sid, bodyFields.csrf_token);
     if (!valid) {
-      return htmlResponse(page("Authorization failed", `<main class="kya-consent-failed"><h1>Authorization failed</h1><p>Invalid or missing security token. Please reload and try again.</p></main>`), 403);
+      return jsonResponse({
+        error: "Invalid or missing security token. Please reload and try again."
+      }, 403);
     }
   }
   const infoResponse = await callAnchor2(env2, sid, INTERNAL_PICKUP_INFO, {
     sid
   });
   if (infoResponse.status === 404)
-    return notFoundPage();
+    return notFoundJson();
   if (infoResponse.status === 410) {
-    return approvalFailedPage("This authorization request has expired. Nothing was authorized.");
+    return approvalFailedJson("This authorization request has expired. Nothing was authorized.");
   }
   if (!infoResponse.ok) {
-    return approvalFailedPage("This authorization request could not be loaded. Please start over.", 502);
+    return approvalFailedJson("This authorization request could not be loaded. Please start over.", 502);
   }
   const info = await infoResponse.json();
   const resolution = await resolveAnchorCredentialProvider(env2, info.requiredScopes);
   if (resolution.status === "unavailable") {
-    return approvalFailedPage("We could not verify the sign-in requirement for this request. Please try again.", 503);
+    return approvalFailedJson("We could not verify the sign-in requirement for this request. Please try again.", 503);
   }
   const provider = resolution.status === "credential" ? resolution.provider : null;
   let authorizedUser = null;
   if (provider) {
-    const credentials = {};
-    for (const name16 of credentialFieldNames(provider)) {
-      if (bodyFields[name16] !== void 0)
-        credentials[name16] = bodyFields[name16];
-    }
+    const { sid: _sid, csrf_token: _csrfToken, tool: _tool, scopes: _scopes, agent_did: _agentDid, session_id: _sessionId, project_id: _projectId, provider: _providerField, provider_type: _providerType, auth_mode: _authMode, termsAccepted: _termsAccepted, credential_provider_type: _credentialProviderType, credential_provider: _credentialProvider, oauth_provider_type: _oauthProviderType, user_did: _userDid, credential_user_email: _credentialUserEmail, credential_provider_user_id: _credentialProviderUserId, ...credentials } = bodyFields;
     const handler = createCredentialAuthHandler({
       fetch: (...args) => globalThis.fetch(...args),
       logger: (msg, data) => console.debug(`[kya-http] ${msg}`, data)
     });
     const authResult = await handler.authenticate(provider.config, credentials);
     if (!authResult.success) {
-      return htmlResponse(page("Sign-in failed", `<main class="kya-consent-failed"><h1>Sign-in failed</h1><p>${escapeHtml2(authResult.error || "Those credentials were not accepted. Please try again.")}</p></main>`), 401);
+      return jsonResponse({
+        error: authResult.error || "Those credentials were not accepted. Please try again."
+      }, 401);
     }
     const identity = await resolveCredentialIdentity(env2, {
       projectId: env2.AGENTSHIELD_PROJECT_ID || "",
@@ -147926,7 +148035,7 @@ async function handleAnchorConsentApprove(c, sid, env2, cfg) {
       userDisplayName: authResult.userDisplayName
     });
     if (!identity.success || !identity.userDid) {
-      return approvalFailedPage("We signed you in but could not resolve your identity. Please start over.", 500);
+      return approvalFailedJson("We signed you in but could not resolve your identity. Please start over.", 500);
     }
     authorizedUser = {
       userDid: identity.userDid,
@@ -147940,7 +148049,7 @@ async function handleAnchorConsentApprove(c, sid, env2, cfg) {
     ({ vcJwt, subjectDid } = await mintDelegationVcJwt(env2, sid, info, cfg.delegationExpiresInS));
   } catch (error87) {
     console.warn(`[kya-http] delegation mint failed (sid=${sid}):`, error87 instanceof Error ? error87.message : String(error87));
-    return approvalFailedPage("We could not complete the authorization. Please start over.", 500);
+    return approvalFailedJson("We could not complete the authorization. Please start over.", 500);
   }
   const approveResponse = await callAnchor2(env2, sid, INTERNAL_PICKUP_APPROVE, {
     sid,
@@ -147948,12 +148057,12 @@ async function handleAnchorConsentApprove(c, sid, env2, cfg) {
     expiresInS: cfg.delegationExpiresInS
   });
   if (approveResponse.status === 410) {
-    return approvalFailedPage("This authorization request expired before it could be completed. Nothing was authorized.");
+    return approvalFailedJson("This authorization request expired before it could be completed. Nothing was authorized.");
   }
   if (approveResponse.status === 404)
-    return notFoundPage();
+    return notFoundJson();
   if (!approveResponse.ok) {
-    return approvalFailedPage("We could not complete the authorization. Please start over.", 502);
+    return approvalFailedJson("We could not complete the authorization. Please start over.", 502);
   }
   if (authorizedUser && provider) {
     const report = notifyDelegation(env2, {
@@ -147970,7 +148079,7 @@ async function handleAnchorConsentApprove(c, sid, env2, cfg) {
     const execCtx = c.executionCtx;
     execCtx?.waitUntil?.(report);
   }
-  return successPage();
+  return successJson(`urn:uuid:${sid}`);
 }
 async function readBodyFields(c) {
   const out = {};
@@ -148024,8 +148133,10 @@ function registerDelegationHttpRoutes(app, options, deps) {
   });
   app.post(`${CONSENT_ROUTE}/approve`, async (c, next) => {
     const { env: env2, cfg } = resolveRequest(c, options);
-    const sid = c.req.query("sid");
-    if (!cfg || !isAnchorSid(sid))
+    if (!cfg)
+      return next();
+    const sid = await resolveApproveSid(c);
+    if (!isAnchorSid(sid))
       return next();
     return handleAnchorConsentApprove(c, sid, env2, cfg);
   });

package/dist/helpers/get-package-versions.js CHANGED Viewed

@@ -78,8 +78,8 @@ export async function getPackageVersions() {
         return {
             "@kya-os/mcp-i": "^1.7.13",
             "@kya-os/cli": "^1.5.9",
-            "@kya-os/mcp-i-cloudflare": "^1.12.2",
-            "@kya-os/contracts": "^1.9.1",
+            "@kya-os/mcp-i-cloudflare": "^1.12.3",
+            "@kya-os/contracts": "^1.9.2",
         };
     }
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/create-mcpi-app",
-  "version": "1.10.4",
+  "version": "1.10.5",
   "description": "Scaffold a new MCP-I application",
   "type": "module",
   "main": "./dist/helpers/index.js",
@@ -55,11 +55,11 @@
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "^10.1.1",
-    "@kya-os/cli": "^1.6.2",
+    "@kya-os/cli": "^1.6.3",
     "@kya-os/cli-effects": "^1.0.19",
-    "@kya-os/contracts": "^1.9.1",
+    "@kya-os/contracts": "^1.9.2",
     "@kya-os/mcp-i": "^1.7.13",
-    "@kya-os/mcp-i-cloudflare": "^1.12.2",
+    "@kya-os/mcp-i-cloudflare": "^1.12.3",
     "base-x": "^5.0.0",
     "chalk": "^4.1.2",
     "commander": "^12.1.0",