@kya-os/mcp-i-cloudflare 1.12.3 → 1.13.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -1
- package/dist/agent.d.ts +1 -1
- package/dist/agent.d.ts.map +1 -1
- package/dist/agent.js +23 -24
- package/dist/agent.js.map +1 -1
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +23 -9
- package/dist/app.js.map +1 -1
- package/dist/audit/assurance.d.ts +12 -0
- package/dist/audit/assurance.d.ts.map +1 -0
- package/dist/audit/assurance.js +21 -0
- package/dist/audit/assurance.js.map +1 -0
- package/dist/audit/deployment-binding.d.ts +513 -0
- package/dist/audit/deployment-binding.d.ts.map +1 -0
- package/dist/audit/deployment-binding.js +364 -0
- package/dist/audit/deployment-binding.js.map +1 -0
- package/dist/audit/durable-producer.d.ts +151 -0
- package/dist/audit/durable-producer.d.ts.map +1 -0
- package/dist/audit/durable-producer.js +953 -0
- package/dist/audit/durable-producer.js.map +1 -0
- package/dist/audit/verified-recorder-client.d.ts +34 -0
- package/dist/audit/verified-recorder-client.d.ts.map +1 -0
- package/dist/audit/verified-recorder-client.js +192 -0
- package/dist/audit/verified-recorder-client.js.map +1 -0
- package/dist/config.d.ts +8 -3
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +9 -3
- package/dist/config.js.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.d.ts +18 -1
- package/dist/delegation-http/consent-anchor-bridge.d.ts.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.js +18 -5
- package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
- package/dist/delegation-http/pickup-routes.d.ts.map +1 -1
- package/dist/delegation-http/pickup-routes.js +36 -3
- package/dist/delegation-http/pickup-routes.js.map +1 -1
- package/dist/delegation-http/well-known-capability.d.ts +2 -1
- package/dist/delegation-http/well-known-capability.d.ts.map +1 -1
- package/dist/delegation-http/well-known-capability.js +2 -1
- package/dist/delegation-http/well-known-capability.js.map +1 -1
- package/dist/helpers/env-mapper.d.ts.map +1 -1
- package/dist/helpers/env-mapper.js +27 -0
- package/dist/helpers/env-mapper.js.map +1 -1
- package/dist/index.d.ts +8 -6
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +14 -2
- package/dist/index.js.map +1 -1
- package/dist/runtime/invoke-tool-handler.d.ts +10 -0
- package/dist/runtime/invoke-tool-handler.d.ts.map +1 -0
- package/dist/runtime/invoke-tool-handler.js +11 -0
- package/dist/runtime/invoke-tool-handler.js.map +1 -0
- package/dist/runtime.d.ts +1 -6
- package/dist/runtime.d.ts.map +1 -1
- package/dist/runtime.js +72 -72
- package/dist/runtime.js.map +1 -1
- package/dist/services/consent-audit.service.d.ts +3 -10
- package/dist/services/consent-audit.service.d.ts.map +1 -1
- package/dist/services/consent-audit.service.js +44 -77
- package/dist/services/consent-audit.service.js.map +1 -1
- package/dist/services/consent-templates/template-renderer.d.ts.map +1 -1
- package/dist/services/consent-templates/template-renderer.js +6 -4
- package/dist/services/consent-templates/template-renderer.js.map +1 -1
- package/dist/services/consent.service.d.ts +17 -2
- package/dist/services/consent.service.d.ts.map +1 -1
- package/dist/services/consent.service.js +53 -30
- package/dist/services/consent.service.js.map +1 -1
- package/dist/services/proof.service.d.ts.map +1 -1
- package/dist/services/proof.service.js +20 -4
- package/dist/services/proof.service.js.map +1 -1
- package/dist/services/vault-resolver.d.ts +0 -8
- package/dist/services/vault-resolver.d.ts.map +1 -1
- package/dist/services/vault-resolver.js +0 -22
- package/dist/services/vault-resolver.js.map +1 -1
- package/dist/types.d.ts +19 -0
- package/dist/types.d.ts.map +1 -1
- package/package.json +7 -5
- package/dist/runtime/audit-logger.d.ts +0 -96
- package/dist/runtime/audit-logger.d.ts.map +0 -1
- package/dist/runtime/audit-logger.js +0 -276
- package/dist/runtime/audit-logger.js.map +0 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"template-renderer.js","sourceRoot":"","sources":["../../../src/services/consent-templates/template-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,YAAY,CAAC;AAWpB,OAAO,EACL,oBAAoB,
|
|
1
|
+
{"version":3,"file":"template-renderer.js","sourceRoot":"","sources":["../../../src/services/consent-templates/template-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,YAAY,CAAC;AAWpB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAKpB,MAAM,iBAAiB,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAgChD;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAU;IAChB,UAAU,CAAS;IAE3B,YAAY,OAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,mBAAmB,CAAC;IAC/D,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CACJ,MAA0B,EAC1B,aAA6B;QAE7B,wCAAwC;QACxC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,oDAAoD;QACpD,yDAAyD;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAExD,uDAAuD;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEpD,kDAAkD;QAClD,IAAI,QAAQ,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;QAE9C,+DAA+D;QAC/D,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO,sBAAsB,CAC3B,cAAc,EACd,MAAM,CAAC,QAAQ,EACf,YAAY,CACb,CAAC;QACJ,CAAC;QAED,sFAAsF;QACtF,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,+DAA+D;YAC/D,QAAQ,GAAG,cAAc,CAAC;YAC1B,4DAA4D;YAC5D,cAAc,CAAC,aAAa,GAAG,aAAa,CAAC;QAC/C,CAAC;QAED,OAAO,iBAAiB,CAAC,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,SAAS,CACf,MAA0B,EAC1B,aAA6B;QAE7B,wCAAwC;QACxC,MAAM,aAAa,GAAkB;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,6BAA6B;YAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,sCAAsC;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,8CAA8C;YAC9C,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,yBAAyB;YACzB,wEAAwE;YACxE,KAAK,EAAE,MAAM,CAAC,aAAa;gBACzB,CAAC,CAAC;oBACE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,4CAA4C;oBACzE,YAAY,EAAE,MAAM,CAAC,QAAQ;oBAC7B,UAAU,EAAE,iBAAiB,MAAM,CAAC,QAAQ,IAAI,OAAO,EAAE;iBAC1D;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,wEAAwE;QACxE,kEAAkE;QAClE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,6BAA6B,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACjE,MAAM,4BAA4B,GAChC,CAAC,6BAA6B,IAAI,aAAa;YAC7C,CAAC,CAAC,aAAa,CAAC,KAAK,IAAK,aAAmC,CAAC,IAAI;YAClE,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,2BAA2B,GAC/B,6BAA6B,IAAI,4BAA4B,CAAC;QAEhE,MAAM,iCAAiC,GACrC,CAAC,MAAM,CAAC,wBAAwB,IAAI,aAAa;YAC/C,CAAC,CAAC,aAAa,CAAC,OAAO;YACvB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,gCAAgC,GACpC,MAAM,CAAC,wBAAwB,IAAI,iCAAiC,CAAC;QAEvE,sBAAsB;QACtB,MAAM,YAAY,GAAwB;YACxC,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,IAAI,oBAAoB;YAC1D,yCAAyC;YACzC,kEAAkE;YAClE,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACpD,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,wCAAwC;YACrE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,gDAAgD;YAC3E,8EAA8E;YAC9E,kGAAkG;YAClG,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,6EAA6E;YAC7E,oFAAoF;YACpF,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,2EAA2E;YAC3E,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,mEAAmE;YACnE,mEAAmE;YACnE,kEAAkE;YAClE,mBAAmB,EAAE,2BAA2B;YAChD,wBAAwB,EAAE,gCAAgC;YAC1D,kEAAkE;YAClE,yEAAyE;YACzE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,oEAAoE;YACpE,gEAAgE;YAChE,yDAAyD;YACzD,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QAEF,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;OASG;IACH,oBAAoB,CAClB,MAA0B,EAC1B,gBAA0C,EAC1C,QAAgB,EAChB,SAAiB,EACjB,oBAA4B,UAAU;QAEtC,8DAA8D;QAC9D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACxG,CAAC;QAED,wDAAwD;QACxD,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACxD,cAAc,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACnC,sDAAsD;QACtD,cAAc,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAErD,gEAAgE;QAChE,MAAM,GAAG,GAAG,gBAAuB,CAAC;QACpC,cAAc,CAAC,UAAU,GAAG;YAC1B,WAAW,EAAE;gBACX,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;gBAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,KAAK;gBACnD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;aACzC;SACF,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEpD,OAAO,iBAAiB,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;OASG;IACK,uBAAuB,CAC7B,MAA0B,EAC1B,gBAA0C,EAC1C,QAAgB,EAChB,SAAiB,EACjB,oBAA4B,UAAU;QAEtC,gEAAgE;QAChE,MAAM,GAAG,GAAG,gBAAuB,CAAC;QAEpC,gEAAgE;QAChE,MAAM,aAAa,GAAkB;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,sEAAsE;YACtE,8EAA8E;YAC9E,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,mDAAmD;YACnD,WAAW,EAAE;gBACX,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;gBAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,KAAK;gBACnD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;aACzC;SACF,CAAC;QAEF,4CAA4C;QAC5C,MAAM,YAAY,GAAwB;YACxC,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,IAAI,oBAAoB;YAC1D,yBAAyB;YACzB,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,QAAQ;YAClB,uCAAuC;YACvC,SAAS,EAAE,SAAS;YACpB,uEAAuE;YACvE,iBAAiB,EAAE,iBAAiB;SACrC,CAAC;QAEF,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,OAGb;QACC,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,YAAoB,EACpB,SAAiB,EACjB,SAAmB;QAEnB,+BAA+B;QAC/B,uDAAuD;QACvD,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE;YAC/C,MAAM,QAAQ,GAA2B;gBACvC,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,QAAQ;gBACb,GAAG,EAAE,QAAQ;aACd,CAAC;YACF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QACpE,CAAC,CAAC;QAEF,MAAM,eAAe,GAAG,SAAS;YAC/B,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;;;;;;;;;;;;;;;;;;;;;;;;0GAwB+F,eAAe,CAAC,YAAY,CAAC;;;;;;;IAOnI,eAAe;;QAEX,CAAC;IACP,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,MAA0B;QAE1B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,wDAAwD;YACxD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,EAAE,4BAA4B;YAC/E,mDAAmD;YACnD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,MAA0B;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAe,CAAC;QAExC,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACvB,CAAC,CAAC;oBACE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;oBAC1C,cAAc,EAAE,QAAQ,EAAE,cAAc;oBACxC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;oBAChC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;iBACzC;gBACH,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACjB,CAAC,CAAC;oBACE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBACvB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBACrB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;iBAChC;gBACH,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,0DAA0D;YAC1D,EAAE,EAAE,MAAM,CAAC,EAAE;gBACX,CAAC,CAAC;oBACE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK;oBACtB,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW;oBAClC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,cAAc;oBACxC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB;oBAC5C,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB;oBAC5C,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC,iBAAiB;iBAC/C;gBACH,CAAC,CAAC,SAAS;YACb,yBAAyB;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,sBAAsB;YACtB,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACC,OAAO,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC"}
|
|
@@ -318,12 +318,27 @@ export declare class ConsentService {
|
|
|
318
318
|
*/
|
|
319
319
|
handle(request: Request): Promise<Response>;
|
|
320
320
|
/**
|
|
321
|
-
* Serve the consent
|
|
321
|
+
* Serve the consent bundle for CSR mode.
|
|
322
322
|
*
|
|
323
323
|
* Returns the bundled Lit Web Components as JavaScript that browsers
|
|
324
324
|
* can execute to render the <mcp-consent> element.
|
|
325
325
|
*
|
|
326
|
-
*
|
|
326
|
+
* Caching is decided by WHICH path was requested, because only one of them can
|
|
327
|
+
* safely promise immutability:
|
|
328
|
+
*
|
|
329
|
+
* - {@link CONSENT_BUNDLE_PATH} is content-addressed, so its bytes can never
|
|
330
|
+
* change. `immutable` is honest here, and a new build is simply a new URL
|
|
331
|
+
* that the shell points at.
|
|
332
|
+
* - `/consent.js` is a stable, unversioned alias. It previously carried
|
|
333
|
+
* `immutable, max-age=31536000` on the claim that the "bundle is versioned via
|
|
334
|
+
* package version" — it is not, the URL has no version in it. Browsers then
|
|
335
|
+
* pinned the bundle for a YEAR and never revalidated, so consent UI fixes
|
|
336
|
+
* could not reach anyone who had already loaded the page. It stays routed for
|
|
337
|
+
* pages cached against it, but must always revalidate so those clients can
|
|
338
|
+
* recover instead of being stuck forever.
|
|
339
|
+
*
|
|
340
|
+
* @param contentAddressed - true when served from the hashed path
|
|
341
|
+
* @returns JavaScript response
|
|
327
342
|
*/
|
|
328
343
|
private serveConsentBundle;
|
|
329
344
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"consent.service.d.ts","sourceRoot":"","sources":["../../src/services/consent.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAcpD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAYL,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"consent.service.d.ts","sourceRoot":"","sources":["../../src/services/consent.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAcpD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAYL,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AA6D/B,qBAAa,cAAc;IACzB,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,GAAG,CAAgB;IAC3B,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,cAAc,CAAC,CAAiB;IAGxC,OAAO,CAAC,YAAY,CAAC,CAAsB;IAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAgB;IAGzC,OAAO,CAAC,gBAAgB,CAAC,CAAmD;IAC5E,OAAO,CAAC,gBAAgB,CAAC,CAAwD;IAEjF;;;OAGG;gBAED,GAAG,EAAE,aAAa,EAClB,OAAO,CAAC,EAAE,iBAAiB,EAC3B,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,gBAAgB,EACnE,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,qBAAqB;IAW1E;;;;;;;OAOG;YACW,eAAe;IAmC7B;;;;;;;OAOG;IACG,mBAAmB,CAAC,KAAK,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,GAAG,OAAO,CAAC,IAAI,CAAC;IAMX,kBAAkB,CAAC,KAAK,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjB;;;;;;;;;;;;OAYG;IACG,uBAAuB,CAC3B,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EACD,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,OAAO,CAAC;IAWnB;;;;;OAKG;YACW,sBAAsB;IAwCpC;;;;;;;;;;OAUG;YACW,sBAAsB;IAqEpC;;;;;;;;;;;;;;OAcG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkFzB;;;;;;;;;;;OAWG;YACW,iCAAiC;IA0D/C;;;;;;;;;OASG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,IAAI,CAAC;IAuIhB;;;;;;;;;OASG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAsE9B;;;;;;;;;;;;;;OAcG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA0F9B;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAInC;;;;;;;;;;;;;OAaG;IACU,kCAAkC,CAC7C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmGzB;;;;;;;;;;;;;OAaG;IACU,iBAAiB,CAC5B,UAAU,EAAE,gBAAgB,EAC5B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,EACpC,eAAe,CAAC,EAAE,WAAW,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA4DzB;;;;;;;;;;;;;;;;OAgBG;IACU,kBAAkB,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GACA,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;IAwJjD;;;;;;;;;;;;OAYG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,EAC7B,iBAAiB,CAAC,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,OAAO,mCAAmC,EAAE,cAAc,GAC1E,OAAO,CAAC,OAAO,CAAC;IA+HnB;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EAAE,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,6DAA6D;IAChF,oBAAoB,CAAC,EAAE,OAAO,0BAA0B,EAAE,oBAAoB,EAC9E,SAAS,CAAC,EAAE,MAAM,EAAE,sDAAsD;IAC1E,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC;IAkQlB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB;IAuB3B;;;;;;;;;;;OAWG;IACG,kBAAkB,CACtB,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IAyElB;;;;;;;;;;OAUG;IACG,oBAAoB,CACxB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAgFhB;;;;;;;;;;OAUG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqCjD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,8BAA8B;IAYtC;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;;;;;;;;;OAaG;YACW,iBAAiB;IAk1B/B;;;;;;;;OAQG;YACW,gBAAgB;IA2lC9B;;;;;;;;OAQG;YACW,cAAc;IAwd5B;;;;;OAKG;YACW,gBAAgB;IA+S9B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;;;;OASG;YACW,oBAAoB;IAkElC;;;;;;;;;;;;OAYG;YACW,oBAAoB;IA4FlC;;;;;OAKG;YACW,iBAAiB;IAmC/B;;;;OAIG;YACW,sBAAsB;IA4FpC;;;;;;;;;OASG;YACW,wBAAwB;IAoftC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IA2BnB;;;;;;;OAOG;YACW,2BAA2B;IAkGzC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IA4GnC;;OAEG;YACW,yBAAyB;IAsDvC;;OAEG;YACW,oBAAoB;IAmDlC;;;;;;;;;;;OAWG;YACW,2BAA2B;IAmDzC;;;;;;;;;OASG;IACU,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBzE;;;;;OAKG;YACW,eAAe;IAgB7B;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAI7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAK7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAY3B;;OAEG;YACW,sBAAsB;IAmJpC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IAMnB;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqLpC;;OAEG;YACW,UAAU;IAqDxB;;;;;OAKG;YACW,WAAW;IA0GzB;;OAEG;YACW,qBAAqB;CAsBpC"}
|
|
@@ -24,7 +24,7 @@ import { createCredentialAuthHandler } from "./credential-auth.handler";
|
|
|
24
24
|
import { IdpTokenStorage } from "./idp-token-storage";
|
|
25
25
|
import { OAuthSecurityService } from "./oauth-security.service";
|
|
26
26
|
import { didKeyFragment } from "@kya-os/mcp";
|
|
27
|
-
import { CONSENT_BUNDLE, CONSENT_BUNDLE_SIZE, resolveExpirationDays, DEFAULT_EXPIRATION_DAYS, resolveCapabilitiesForScopes, } from "@kya-os/consent";
|
|
27
|
+
import { CONSENT_BUNDLE, CONSENT_BUNDLE_SIZE, CONSENT_BUNDLE_PATH, CONSENT_BUNDLE_HASH, resolveExpirationDays, DEFAULT_EXPIRATION_DAYS, resolveCapabilitiesForScopes, } from "@kya-os/consent";
|
|
28
28
|
import { calculateDOInstanceId, parseDORoutingStrategy, parseDOShardCount, } from "../utils/do-routing";
|
|
29
29
|
import { defaultProviders } from "@kya-os/provider-registry";
|
|
30
30
|
const BUILTIN_OAUTH_PROVIDER_IDS = new Set(defaultProviders
|
|
@@ -168,14 +168,10 @@ export class ConsentService {
|
|
|
168
168
|
const identity = await this.runtime.getIdentity();
|
|
169
169
|
// ✅ FIXED: CloudflareProofGenerator only takes identity, not providers
|
|
170
170
|
const proofGenerator = new CloudflareProofGenerator(identity);
|
|
171
|
-
//
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
return;
|
|
176
|
-
}
|
|
177
|
-
// Create audit service with fetched config
|
|
178
|
-
this.auditService = new ConsentAuditService(new ProofService(config, this.runtime), auditLogger, proofGenerator, config, // ✅ Config fetched from remote API
|
|
171
|
+
// Proof submission and canonical audit delivery are independent. The
|
|
172
|
+
// lifecycle service submits proofs whenever proofing is enabled and
|
|
173
|
+
// records events only when the runtime has an auditTrail configured.
|
|
174
|
+
this.auditService = new ConsentAuditService(new ProofService(config, this.runtime), proofGenerator, config, // ✅ Config fetched from remote API
|
|
179
175
|
this.runtime);
|
|
180
176
|
logger.debug("[ConsentService] Audit service initialized successfully");
|
|
181
177
|
}
|
|
@@ -1394,9 +1390,12 @@ export class ConsentService {
|
|
|
1394
1390
|
if (request.method === "OPTIONS" && url.pathname === "/consent/approve") {
|
|
1395
1391
|
return this.handleCorsPreflightForApproval(request);
|
|
1396
1392
|
}
|
|
1397
|
-
// GET
|
|
1398
|
-
|
|
1399
|
-
|
|
1393
|
+
// GET the consent bundle. The content-addressed path is what shells emit;
|
|
1394
|
+
// the legacy unversioned path stays routed so pages already cached against
|
|
1395
|
+
// it keep working (see serveConsentBundle for why it must not be immutable).
|
|
1396
|
+
if (request.method === "GET" &&
|
|
1397
|
+
(url.pathname === CONSENT_BUNDLE_PATH || url.pathname === "/consent.js")) {
|
|
1398
|
+
return this.serveConsentBundle(url.pathname === CONSENT_BUNDLE_PATH);
|
|
1400
1399
|
}
|
|
1401
1400
|
// GET /consent - Render page
|
|
1402
1401
|
if (request.method === "GET" && url.pathname === "/consent") {
|
|
@@ -1414,20 +1413,38 @@ export class ConsentService {
|
|
|
1414
1413
|
return new Response("Method not allowed", { status: 405 });
|
|
1415
1414
|
}
|
|
1416
1415
|
/**
|
|
1417
|
-
* Serve the consent
|
|
1416
|
+
* Serve the consent bundle for CSR mode.
|
|
1418
1417
|
*
|
|
1419
1418
|
* Returns the bundled Lit Web Components as JavaScript that browsers
|
|
1420
1419
|
* can execute to render the <mcp-consent> element.
|
|
1421
1420
|
*
|
|
1422
|
-
*
|
|
1421
|
+
* Caching is decided by WHICH path was requested, because only one of them can
|
|
1422
|
+
* safely promise immutability:
|
|
1423
|
+
*
|
|
1424
|
+
* - {@link CONSENT_BUNDLE_PATH} is content-addressed, so its bytes can never
|
|
1425
|
+
* change. `immutable` is honest here, and a new build is simply a new URL
|
|
1426
|
+
* that the shell points at.
|
|
1427
|
+
* - `/consent.js` is a stable, unversioned alias. It previously carried
|
|
1428
|
+
* `immutable, max-age=31536000` on the claim that the "bundle is versioned via
|
|
1429
|
+
* package version" — it is not, the URL has no version in it. Browsers then
|
|
1430
|
+
* pinned the bundle for a YEAR and never revalidated, so consent UI fixes
|
|
1431
|
+
* could not reach anyone who had already loaded the page. It stays routed for
|
|
1432
|
+
* pages cached against it, but must always revalidate so those clients can
|
|
1433
|
+
* recover instead of being stuck forever.
|
|
1434
|
+
*
|
|
1435
|
+
* @param contentAddressed - true when served from the hashed path
|
|
1436
|
+
* @returns JavaScript response
|
|
1423
1437
|
*/
|
|
1424
|
-
serveConsentBundle() {
|
|
1438
|
+
serveConsentBundle(contentAddressed) {
|
|
1425
1439
|
return new Response(CONSENT_BUNDLE, {
|
|
1426
1440
|
status: 200,
|
|
1427
1441
|
headers: {
|
|
1428
1442
|
"Content-Type": "application/javascript; charset=utf-8",
|
|
1429
|
-
|
|
1430
|
-
|
|
1443
|
+
"Cache-Control": contentAddressed
|
|
1444
|
+
? "public, max-age=31536000, immutable"
|
|
1445
|
+
: "no-cache",
|
|
1446
|
+
// Lets the legacy alias revalidate cheaply (304) instead of refetching.
|
|
1447
|
+
ETag: `"${CONSENT_BUNDLE_HASH}"`,
|
|
1431
1448
|
// Add content length for better client handling
|
|
1432
1449
|
"Content-Length": CONSENT_BUNDLE_SIZE.toString(),
|
|
1433
1450
|
// CORS headers for cross-origin script loading
|
|
@@ -1846,7 +1863,9 @@ export class ConsentService {
|
|
|
1846
1863
|
headers: { Location: resolvedOAuthUrl },
|
|
1847
1864
|
});
|
|
1848
1865
|
}
|
|
1849
|
-
else if (resolvedOAuthUrl &&
|
|
1866
|
+
else if (resolvedOAuthUrl &&
|
|
1867
|
+
isCustomOAuthProvider &&
|
|
1868
|
+
normalizedUrlProvider) {
|
|
1850
1869
|
logger.warn("[ConsentService] Ignoring custom OAuth consent-skip for untrusted query provider", {
|
|
1851
1870
|
provider,
|
|
1852
1871
|
urlProvider,
|
|
@@ -1968,8 +1987,7 @@ export class ConsentService {
|
|
|
1968
1987
|
// 3. undefined → LIT falls back to "this site"
|
|
1969
1988
|
const friendlyOrgFromHost = (rawHost) => {
|
|
1970
1989
|
// Strip common operational subdomains so we get the brand label.
|
|
1971
|
-
const host = rawHost
|
|
1972
|
-
.replace(/^(authenticate|consent|auth|api|app|www)\./i, "");
|
|
1990
|
+
const host = rawHost.replace(/^(authenticate|consent|auth|api|app|www)\./i, "");
|
|
1973
1991
|
// Drop the TLD by taking the second-to-last label when present
|
|
1974
1992
|
// (e.g. "hardwareworld.com" → "hardwareworld"; for single-label
|
|
1975
1993
|
// hosts like "localhost" use the host as-is).
|
|
@@ -3498,7 +3516,7 @@ export class ConsentService {
|
|
|
3498
3516
|
(await this.getUserDidForSession(approvalRequest.session_id, approvalRequest.oauth_identity || undefined)) ?? undefined; // Phase 5: Convert null to undefined
|
|
3499
3517
|
}
|
|
3500
3518
|
catch (error) {
|
|
3501
|
-
logger.warn("[ConsentService] Failed to get userDid for
|
|
3519
|
+
logger.warn("[ConsentService] Failed to get userDid for lifecycle recording:", error);
|
|
3502
3520
|
// Continue without userDid - audit events can still be logged
|
|
3503
3521
|
}
|
|
3504
3522
|
}
|
|
@@ -3857,11 +3875,11 @@ export class ConsentService {
|
|
|
3857
3875
|
let userDid = providedUserDid;
|
|
3858
3876
|
if (!userDid && delegationStorage) {
|
|
3859
3877
|
const identityKey = STORAGE_KEYS.sessionIdentity(sessionId);
|
|
3860
|
-
const identityData = await delegationStorage.get(identityKey, "json");
|
|
3878
|
+
const identityData = (await delegationStorage.get(identityKey, "json"));
|
|
3861
3879
|
userDid = identityData?.userDid;
|
|
3862
3880
|
if (!userDid) {
|
|
3863
3881
|
const sessionKey = STORAGE_KEYS.session(sessionId);
|
|
3864
|
-
const sessionData = await delegationStorage.get(sessionKey, "json");
|
|
3882
|
+
const sessionData = (await delegationStorage.get(sessionKey, "json"));
|
|
3865
3883
|
userDid = sessionData?.userDid;
|
|
3866
3884
|
}
|
|
3867
3885
|
}
|
|
@@ -3876,12 +3894,14 @@ export class ConsentService {
|
|
|
3876
3894
|
// Store user+agent scoped key (for cross-session persistence)
|
|
3877
3895
|
if (userDid) {
|
|
3878
3896
|
const userAgentKey = STORAGE_KEYS.delegation(userDid, agentDid);
|
|
3879
|
-
await delegationStorage.put(userAgentKey, token, {
|
|
3897
|
+
await delegationStorage.put(userAgentKey, token, {
|
|
3898
|
+
expirationTtl: ttl,
|
|
3899
|
+
});
|
|
3880
3900
|
logger.debug("[ConsentService] Token also stored to KV (user+agent key)");
|
|
3881
3901
|
}
|
|
3882
3902
|
// Store session key (for session data preservation)
|
|
3883
3903
|
const sessionKey = STORAGE_KEYS.session(sessionId);
|
|
3884
|
-
const existingData = await delegationStorage.get(sessionKey, "json");
|
|
3904
|
+
const existingData = (await delegationStorage.get(sessionKey, "json"));
|
|
3885
3905
|
await delegationStorage.put(sessionKey, JSON.stringify({
|
|
3886
3906
|
...existingData,
|
|
3887
3907
|
userDid,
|
|
@@ -4005,7 +4025,7 @@ export class ConsentService {
|
|
|
4005
4025
|
// Extract standard fields.
|
|
4006
4026
|
// inline_mode and approved are destructured to keep them out of the
|
|
4007
4027
|
// ...credentials rest object (which is sent to the external credential provider).
|
|
4008
|
-
const { tool, scopes: rawScopes, agent_did, session_id, project_id, provider, provider_type, csrf_token, inline_mode: _inlineMode, approved: _approved, termsAccepted: _termsAccepted, ...credentials } = body;
|
|
4028
|
+
const { tool, scopes: rawScopes, agent_did, agent_name, session_id, project_id, provider, provider_type, csrf_token, inline_mode: _inlineMode, approved: _approved, termsAccepted: _termsAccepted, ...credentials } = body;
|
|
4009
4029
|
logger.debug("[ConsentService] Credential submission received", {
|
|
4010
4030
|
hasUsername: !!credentials.username,
|
|
4011
4031
|
hasPassword: !!credentials.password,
|
|
@@ -4285,6 +4305,12 @@ export class ConsentService {
|
|
|
4285
4305
|
// Preserve important state from credential flow
|
|
4286
4306
|
clickwrapUrl.searchParams.set("project_id", project_id);
|
|
4287
4307
|
clickwrapUrl.searchParams.set("agent_did", agent_did);
|
|
4308
|
+
// Only ever a request param — never stored on the session — so dropping it
|
|
4309
|
+
// here makes the consent screen fall back to friendlyAgentNameFromDid(),
|
|
4310
|
+
// which renders a did:key's opaque key material as the agent name.
|
|
4311
|
+
if (agent_name) {
|
|
4312
|
+
clickwrapUrl.searchParams.set("agent_name", agent_name);
|
|
4313
|
+
}
|
|
4288
4314
|
clickwrapUrl.searchParams.set("session_id", session_id);
|
|
4289
4315
|
// Include tool and scopes for display
|
|
4290
4316
|
clickwrapUrl.searchParams.set("tool", tool);
|
|
@@ -4702,10 +4728,7 @@ export class ConsentService {
|
|
|
4702
4728
|
* Base64url encode a string
|
|
4703
4729
|
*/
|
|
4704
4730
|
base64UrlEncodeString(str) {
|
|
4705
|
-
return btoa(str)
|
|
4706
|
-
.replace(/\+/g, "-")
|
|
4707
|
-
.replace(/\//g, "_")
|
|
4708
|
-
.replace(/=/g, "");
|
|
4731
|
+
return btoa(str).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
|
|
4709
4732
|
}
|
|
4710
4733
|
/**
|
|
4711
4734
|
* Base64url decode to string
|