@kya-os/mcp-i-cloudflare 1.14.7 → 1.15.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -8
- package/dist/adapter.d.ts.map +1 -1
- package/dist/adapter.js +8 -4
- package/dist/adapter.js.map +1 -1
- package/dist/agent.d.ts +22 -5
- package/dist/agent.d.ts.map +1 -1
- package/dist/agent.js +88 -46
- package/dist/agent.js.map +1 -1
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +15 -8
- package/dist/app.js.map +1 -1
- package/dist/config.d.ts +101 -5
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +18 -12
- package/dist/config.js.map +1 -1
- package/dist/constants.d.ts +5 -3
- package/dist/constants.d.ts.map +1 -1
- package/dist/constants.js +6 -4
- package/dist/constants.js.map +1 -1
- package/dist/delegation-http/anchor-registration.d.ts +2 -2
- package/dist/delegation-http/anchor-registration.js +4 -4
- package/dist/delegation-http/anchor-registration.js.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.js +3 -3
- package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
- package/dist/delegation-http/credential-consent.d.ts +2 -2
- package/dist/delegation-http/credential-consent.js +14 -14
- package/dist/delegation-http/credential-consent.js.map +1 -1
- package/dist/delegation-http/native-http.js +5 -5
- package/dist/delegation-http/native-http.js.map +1 -1
- package/dist/delegation-http/native-oauth-state-do.d.ts +43 -0
- package/dist/delegation-http/native-oauth-state-do.d.ts.map +1 -0
- package/dist/delegation-http/native-oauth-state-do.js +175 -0
- package/dist/delegation-http/native-oauth-state-do.js.map +1 -0
- package/dist/delegation-http/native-oauth-state.d.ts +12 -0
- package/dist/delegation-http/native-oauth-state.d.ts.map +1 -0
- package/dist/delegation-http/native-oauth-state.js +131 -0
- package/dist/delegation-http/native-oauth-state.js.map +1 -0
- package/dist/delegation-http/native-oauth.d.ts.map +1 -1
- package/dist/delegation-http/native-oauth.js +22 -17
- package/dist/delegation-http/native-oauth.js.map +1 -1
- package/dist/delegation-http/register.js +1 -1
- package/dist/delegation-http/register.js.map +1 -1
- package/dist/delegation-http/registrar-auth.d.ts +1 -1
- package/dist/delegation-http/registrar-auth.js +2 -2
- package/dist/delegation-http/registrar-auth.js.map +1 -1
- package/dist/delegation-http/remote-issuer.d.ts +1 -1
- package/dist/delegation-http/remote-issuer.d.ts.map +1 -1
- package/dist/delegation-http/remote-issuer.js +4 -4
- package/dist/delegation-http/remote-issuer.js.map +1 -1
- package/dist/helpers/env-mapper.d.ts +2 -2
- package/dist/helpers/env-mapper.d.ts.map +1 -1
- package/dist/helpers/env-mapper.js +21 -14
- package/dist/helpers/env-mapper.js.map +1 -1
- package/dist/index.d.ts +3 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -3
- package/dist/index.js.map +1 -1
- package/dist/needs-authorization-meta.d.ts +5 -0
- package/dist/needs-authorization-meta.d.ts.map +1 -1
- package/dist/needs-authorization-meta.js +9 -0
- package/dist/needs-authorization-meta.js.map +1 -1
- package/dist/proof-generator.d.ts +3 -3
- package/dist/proof-generator.js +4 -4
- package/dist/proof-generator.js.map +1 -1
- package/dist/runtime/invoke-tool-handler.d.ts +26 -1
- package/dist/runtime/invoke-tool-handler.d.ts.map +1 -1
- package/dist/runtime/invoke-tool-handler.js +32 -0
- package/dist/runtime/invoke-tool-handler.js.map +1 -1
- package/dist/runtime/oauth-handler.d.ts +9 -7
- package/dist/runtime/oauth-handler.d.ts.map +1 -1
- package/dist/runtime/oauth-handler.js +53 -49
- package/dist/runtime/oauth-handler.js.map +1 -1
- package/dist/runtime/oidc/authorize-url.js +2 -2
- package/dist/runtime/oidc/authorize-url.js.map +1 -1
- package/dist/runtime/oidc/token-exchange.d.ts +1 -1
- package/dist/runtime/oidc/token-exchange.d.ts.map +1 -1
- package/dist/runtime/tool-activity.d.ts +56 -0
- package/dist/runtime/tool-activity.d.ts.map +1 -0
- package/dist/runtime/tool-activity.js +55 -0
- package/dist/runtime/tool-activity.js.map +1 -0
- package/dist/runtime.d.ts +30 -13
- package/dist/runtime.d.ts.map +1 -1
- package/dist/runtime.js +71 -18
- package/dist/runtime.js.map +1 -1
- package/dist/server.d.ts.map +1 -1
- package/dist/server.js +17 -15
- package/dist/server.js.map +1 -1
- package/dist/services/admin.service.d.ts +1 -1
- package/dist/services/admin.service.js +13 -13
- package/dist/services/admin.service.js.map +1 -1
- package/dist/services/consent-config.service.d.ts +5 -5
- package/dist/services/consent-config.service.js +12 -12
- package/dist/services/consent-config.service.js.map +1 -1
- package/dist/services/consent-templates/base/components.d.ts +1 -1
- package/dist/services/consent-templates/base/components.js +1 -1
- package/dist/services/consent-templates/base/styles.d.ts +2 -2
- package/dist/services/consent-templates/base/styles.js +4 -4
- package/dist/services/consent-templates/base/styles.js.map +1 -1
- package/dist/services/consent-templates/helpers.d.ts +3 -3
- package/dist/services/consent-templates/helpers.js +4 -4
- package/dist/services/consent-templates/helpers.js.map +1 -1
- package/dist/services/consent-templates/index.d.ts +1 -1
- package/dist/services/consent-templates/index.js +1 -1
- package/dist/services/consent-templates/modes/credentials.template.d.ts +5 -5
- package/dist/services/consent-templates/modes/credentials.template.js +9 -9
- package/dist/services/consent-templates/modes/credentials.template.js.map +1 -1
- package/dist/services/consent-templates/registry.d.ts +3 -3
- package/dist/services/consent-templates/registry.js +3 -3
- package/dist/services/consent-templates/template-renderer.d.ts +5 -3
- package/dist/services/consent-templates/template-renderer.d.ts.map +1 -1
- package/dist/services/consent-templates/template-renderer.js +5 -3
- package/dist/services/consent-templates/template-renderer.js.map +1 -1
- package/dist/services/consent-templates/types.d.ts +4 -4
- package/dist/services/consent-templates/types.js +2 -2
- package/dist/services/consent.service.d.ts +44 -24
- package/dist/services/consent.service.d.ts.map +1 -1
- package/dist/services/consent.service.js +197 -119
- package/dist/services/consent.service.js.map +1 -1
- package/dist/services/delegation-mandate.d.ts +40 -0
- package/dist/services/delegation-mandate.d.ts.map +1 -0
- package/dist/services/delegation-mandate.js +46 -0
- package/dist/services/delegation-mandate.js.map +1 -0
- package/dist/services/delegation.service.d.ts +28 -12
- package/dist/services/delegation.service.d.ts.map +1 -1
- package/dist/services/delegation.service.js +88 -99
- package/dist/services/delegation.service.js.map +1 -1
- package/dist/services/kya-os-events.service.d.ts +15 -3
- package/dist/services/kya-os-events.service.d.ts.map +1 -1
- package/dist/services/kya-os-events.service.js +14 -4
- package/dist/services/kya-os-events.service.js.map +1 -1
- package/dist/services/proof-batch-queue.d.ts +4 -4
- package/dist/services/proof-batch-queue.d.ts.map +1 -1
- package/dist/services/proof-batch-queue.js +10 -10
- package/dist/services/proof-batch-queue.js.map +1 -1
- package/dist/services/proof.service.d.ts +64 -5
- package/dist/services/proof.service.d.ts.map +1 -1
- package/dist/services/proof.service.js +127 -40
- package/dist/services/proof.service.js.map +1 -1
- package/dist/services/provider-loader.service.d.ts +6 -6
- package/dist/services/provider-loader.service.d.ts.map +1 -1
- package/dist/services/provider-loader.service.js +4 -4
- package/dist/services/provider-loader.service.js.map +1 -1
- package/dist/services/vault-resolver.d.ts +4 -4
- package/dist/services/vault-resolver.d.ts.map +1 -1
- package/dist/services/vault-resolver.js +2 -2
- package/dist/types.d.ts +6 -4
- package/dist/types.d.ts.map +1 -1
- package/dist/utils/day0-config.d.ts +1 -1
- package/dist/utils/day0-config.js +1 -1
- package/dist/utils/env-secret-resolver.d.ts +1 -1
- package/dist/utils/env-secret-resolver.js +1 -1
- package/package.json +5 -5
|
@@ -2,10 +2,10 @@
|
|
|
2
2
|
* Credentials Template
|
|
3
3
|
*
|
|
4
4
|
* Username/password authentication flow.
|
|
5
|
-
* HTML structure matches
|
|
5
|
+
* HTML structure matches Checkpoint's CredentialsPreview.tsx EXACTLY.
|
|
6
6
|
*
|
|
7
7
|
* This is a pixel-perfect port of the React component to static HTML.
|
|
8
|
-
* Any changes here MUST be synchronized with
|
|
8
|
+
* Any changes here MUST be synchronized with Checkpoint.
|
|
9
9
|
*
|
|
10
10
|
* @module consent-templates/modes/credentials
|
|
11
11
|
*/
|
|
@@ -14,7 +14,7 @@ import { escapeHtml, escapeJs, escapeAttr, validateUrl } from "../base/escape";
|
|
|
14
14
|
/**
|
|
15
15
|
* Credentials Template
|
|
16
16
|
*
|
|
17
|
-
* Renders a login form matching
|
|
17
|
+
* Renders a login form matching Checkpoint's CredentialsPreview exactly:
|
|
18
18
|
* - PreviewShell wrapper with branding
|
|
19
19
|
* - PreviewHeader with title
|
|
20
20
|
* - PreviewContent with spacing
|
|
@@ -53,7 +53,7 @@ export class CredentialsTemplate extends BaseConsentTemplate {
|
|
|
53
53
|
};
|
|
54
54
|
}
|
|
55
55
|
/**
|
|
56
|
-
* Override the main render method to match
|
|
56
|
+
* Override the main render method to match Checkpoint's exact structure.
|
|
57
57
|
* This bypasses the base template's structure to ensure pixel-perfect match.
|
|
58
58
|
*/
|
|
59
59
|
render() {
|
|
@@ -176,14 +176,14 @@ export class CredentialsTemplate extends BaseConsentTemplate {
|
|
|
176
176
|
</html>`;
|
|
177
177
|
}
|
|
178
178
|
/**
|
|
179
|
-
* Render agent icon SVG (matches AgentIconPlaceholder in
|
|
179
|
+
* Render agent icon SVG (matches AgentIconPlaceholder in Checkpoint)
|
|
180
180
|
*/
|
|
181
181
|
renderAgentIcon() {
|
|
182
182
|
const logoUrl = this.resolved.branding.logoUrl;
|
|
183
183
|
if (logoUrl) {
|
|
184
184
|
return `<img src="${escapeAttr(logoUrl)}" alt="Agent" class="w-full h-full object-contain" />`;
|
|
185
185
|
}
|
|
186
|
-
// Default placeholder icon matching
|
|
186
|
+
// Default placeholder icon matching Checkpoint exactly
|
|
187
187
|
return `<svg width="24" height="24" viewBox="0 0 24 24" fill="none" class="text-gray-400">
|
|
188
188
|
<rect x="3" y="3" width="18" height="18" rx="2" stroke="currentColor" stroke-width="2" />
|
|
189
189
|
<circle cx="8" cy="8" r="1.5" fill="currentColor" />
|
|
@@ -268,7 +268,7 @@ export class CredentialsTemplate extends BaseConsentTemplate {
|
|
|
268
268
|
const provider = escapeJs(this.config.provider || "credentials");
|
|
269
269
|
const primaryColor = escapeJs(this.resolved.branding.primaryColor);
|
|
270
270
|
// Dynamic authorization type from tool protection config
|
|
271
|
-
// Defaults to 'password' for credential flows (matches
|
|
271
|
+
// Defaults to 'password' for credential flows (matches Checkpoint expectations)
|
|
272
272
|
// This is passed through from consent.service.ts based on the tool's authorization config
|
|
273
273
|
const authorizationType = escapeJs(this.config.authorizationType || "password");
|
|
274
274
|
return `
|
|
@@ -341,9 +341,9 @@ export class CredentialsTemplate extends BaseConsentTemplate {
|
|
|
341
341
|
var formData = new FormData(form);
|
|
342
342
|
|
|
343
343
|
// DYNAMIC: provider_type comes from tool protection config
|
|
344
|
-
// This matches
|
|
344
|
+
// This matches Checkpoint's authorization.type expectation
|
|
345
345
|
// For password/credential flows, this should be 'password'
|
|
346
|
-
//
|
|
346
|
+
// Checkpoint handles backward compatibility with 'credential' type
|
|
347
347
|
var data = {
|
|
348
348
|
auth_mode: 'credentials',
|
|
349
349
|
provider_type: ${authorizationType},
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credentials.template.js","sourceRoot":"","sources":["../../../../src/services/consent-templates/modes/credentials.template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAQ/E;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAClD,uBAAuB,CAAqB;IAEpD,YACE,MAAiC,EACjC,QAA+B,EAC/B,iBAAqC;QAErC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxB,IAAI,CAAC,uBAAuB,GAAG,iBAAiB,CAAC;IACnD,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAY,iBAAiB;QAC3B,2EAA2E;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC;QACxD,OAAO;YACL,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,IAAI,UAAU;YACxE,mBAAmB,EACjB,KAAK,CAAC,mBAAmB;gBACzB,MAAM,CAAC,mBAAmB;gBAC1B,qBAAqB;YACvB,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,IAAI,UAAU;YACxE,mBAAmB,EACjB,KAAK,CAAC,mBAAmB;gBACzB,MAAM,CAAC,mBAAmB;gBAC1B,qBAAqB;YACvB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI;YACrE,kBAAkB,EAChB,KAAK,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,IAAI,IAAI;YAC/D,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB;SACvE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACtC,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;QAE3C,OAAO;;;IAGP,IAAI,CAAC,UAAU,EAAE;;;;;;kDAM6B,UAAU,CAAC,YAAY,CAAC,0BAA0B,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;;;;sDAIjF,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;;;;;;;;;YAShE,IAAI,CAAC,eAAe,EAAE;;;+DAG6B,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC;;;;;;;;cAQrF,UAAU,CAAC,MAAM,CAAC,aAAa,IAAI,UAAU,CAAC;;;;;;2BAMjC,UAAU,CAAC,MAAM,CAAC,mBAAmB,IAAI,qBAAqB,CAAC;;;;;;;;;;cAU5E,UAAU,CAAC,MAAM,CAAC,aAAa,IAAI,UAAU,CAAC;;;;;;;6BAO/B,UAAU,CAAC,MAAM,CAAC,mBAAmB,IAAI,qBAAqB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;UAyBlF,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,YAAY,CAAC;;;;;;;;;;;;;;iCAc3B,UAAU,CAAC,YAAY,CAAC,YAAY,UAAU,CAAC,YAAY,CAAC;;YAEjF,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC;;;;;;qCAMR,UAAU,CAAC,YAAY,CAAC;;;;;;;;IAQzD,IAAI,CAAC,gBAAgB,EAAE;;QAEnB,CAAC;IACP,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,aAAa,UAAU,CAAC,OAAO,CAAC,uDAAuD,CAAC;QACjG,CAAC;QACD,
|
|
1
|
+
{"version":3,"file":"credentials.template.js","sourceRoot":"","sources":["../../../../src/services/consent-templates/modes/credentials.template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAQ/E;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAClD,uBAAuB,CAAqB;IAEpD,YACE,MAAiC,EACjC,QAA+B,EAC/B,iBAAqC;QAErC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxB,IAAI,CAAC,uBAAuB,GAAG,iBAAiB,CAAC;IACnD,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAY,iBAAiB;QAC3B,2EAA2E;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC;QACxD,OAAO;YACL,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,IAAI,UAAU;YACxE,mBAAmB,EACjB,KAAK,CAAC,mBAAmB;gBACzB,MAAM,CAAC,mBAAmB;gBAC1B,qBAAqB;YACvB,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,IAAI,UAAU;YACxE,mBAAmB,EACjB,KAAK,CAAC,mBAAmB;gBACzB,MAAM,CAAC,mBAAmB;gBAC1B,qBAAqB;YACvB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI;YACrE,kBAAkB,EAChB,KAAK,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,IAAI,IAAI;YAC/D,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB;SACvE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACtC,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;QAE3C,OAAO;;;IAGP,IAAI,CAAC,UAAU,EAAE;;;;;;kDAM6B,UAAU,CAAC,YAAY,CAAC,0BAA0B,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;;;;sDAIjF,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;;;;;;;;;YAShE,IAAI,CAAC,eAAe,EAAE;;;+DAG6B,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC;;;;;;;;cAQrF,UAAU,CAAC,MAAM,CAAC,aAAa,IAAI,UAAU,CAAC;;;;;;2BAMjC,UAAU,CAAC,MAAM,CAAC,mBAAmB,IAAI,qBAAqB,CAAC;;;;;;;;;;cAU5E,UAAU,CAAC,MAAM,CAAC,aAAa,IAAI,UAAU,CAAC;;;;;;;6BAO/B,UAAU,CAAC,MAAM,CAAC,mBAAmB,IAAI,qBAAqB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;UAyBlF,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,YAAY,CAAC;;;;;;;;;;;;;;iCAc3B,UAAU,CAAC,YAAY,CAAC,YAAY,UAAU,CAAC,YAAY,CAAC;;YAEjF,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC;;;;;;qCAMR,UAAU,CAAC,YAAY,CAAC;;;;;;;;IAQzD,IAAI,CAAC,gBAAgB,EAAE;;QAEnB,CAAC;IACP,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,aAAa,UAAU,CAAC,OAAO,CAAC,uDAAuD,CAAC;QACjG,CAAC;QACD,uDAAuD;QACvD,OAAO;;;;;WAKA,CAAC;IACV,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAC7B,MAAyB,EACzB,YAAoB;QAEpB,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC;QACrD,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,KAAK,IAAI,CAAC;QAEtD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QAE5C,kGAAkG;QAClG,2FAA2F;QAC3F,MAAM,YAAY,GAAG,YAAY;YAC/B,CAAC,CAAC;;;;;;;;;;;;;;;;KAgBH;YACC,CAAC,CAAC,eAAe,CAAC;QAEpB,oEAAoE;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB;YAC3C,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC;iBACS,UAAU,CAAC,YAAY,IAAI,GAAG,CAAC;;yBAEvB,UAAU,CAAC,YAAY,CAAC;;;KAG5C;YACC,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;;UAED,YAAY;UACZ,UAAU;;KAEf,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IAES,mBAAmB;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAES,kBAAkB;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,iFAAiF;QACjF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAEnE,yDAAyD;QACzD,gFAAgF;QAChF,0FAA0F;QAC1F,MAAM,iBAAiB,GAAG,QAAQ,CAChC,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,UAAU,CAC5C,CAAC;QAEF,OAAO;;;;;;;;;;;;;;;;;;;;;;;wBAuBa,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA2BZ,SAAS;wBACT,SAAS;;;;;;;;;;;;;;;;;;;;;;;;uBAwBV,iBAAiB;kBACtB,QAAQ;;;;cAIZ,IAAI;gBACF,MAAM;mBACH,QAAQ;oBACP,SAAS;oBACT,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA0CnB,CAAC;IACT,CAAC;CACF"}
|
|
@@ -14,7 +14,7 @@ import type { ConsentPageConfig } from "@kya-os/contracts/consent";
|
|
|
14
14
|
*
|
|
15
15
|
* @param authMode - The authentication mode
|
|
16
16
|
* @param config - Extended page config with mode-specific settings
|
|
17
|
-
* @param remoteConfig - Remote consent configuration from
|
|
17
|
+
* @param remoteConfig - Remote consent configuration from Checkpoint
|
|
18
18
|
* @returns Template instance ready to render
|
|
19
19
|
*/
|
|
20
20
|
export declare function getTemplateForMode(authMode: AuthMode, config: ExtendedConsentPageConfig, remoteConfig?: ConsentConfigWithMeta): BaseConsentTemplate;
|
|
@@ -50,7 +50,7 @@ export declare function getRegisteredModes(): AuthMode[];
|
|
|
50
50
|
* This is the main entry point for rendering consent pages.
|
|
51
51
|
*
|
|
52
52
|
* @param config - Extended page config
|
|
53
|
-
* @param remoteConfig - Remote consent configuration from
|
|
53
|
+
* @param remoteConfig - Remote consent configuration from Checkpoint
|
|
54
54
|
* @param authMode - Optional explicit auth mode (auto-detected if not provided)
|
|
55
55
|
* @returns Rendered HTML string
|
|
56
56
|
*/
|
|
@@ -60,7 +60,7 @@ export declare function renderConsentPage(config: ExtendedConsentPageConfig, rem
|
|
|
60
60
|
*
|
|
61
61
|
* @param config - Extended page config
|
|
62
62
|
* @param oauthUrl - OAuth authorization URL
|
|
63
|
-
* @param remoteConfig - Remote consent configuration from
|
|
63
|
+
* @param remoteConfig - Remote consent configuration from Checkpoint
|
|
64
64
|
* @returns Rendered HTML string
|
|
65
65
|
*/
|
|
66
66
|
export declare function renderOAuthConsentPage(config: ExtendedConsentPageConfig, oauthUrl: string, remoteConfig?: ConsentConfigWithMeta): string;
|
|
@@ -23,7 +23,7 @@ const TEMPLATE_REGISTRY = {
|
|
|
23
23
|
*
|
|
24
24
|
* @param authMode - The authentication mode
|
|
25
25
|
* @param config - Extended page config with mode-specific settings
|
|
26
|
-
* @param remoteConfig - Remote consent configuration from
|
|
26
|
+
* @param remoteConfig - Remote consent configuration from Checkpoint
|
|
27
27
|
* @returns Template instance ready to render
|
|
28
28
|
*/
|
|
29
29
|
export function getTemplateForMode(authMode, config, remoteConfig) {
|
|
@@ -103,7 +103,7 @@ export function getRegisteredModes() {
|
|
|
103
103
|
* This is the main entry point for rendering consent pages.
|
|
104
104
|
*
|
|
105
105
|
* @param config - Extended page config
|
|
106
|
-
* @param remoteConfig - Remote consent configuration from
|
|
106
|
+
* @param remoteConfig - Remote consent configuration from Checkpoint
|
|
107
107
|
* @param authMode - Optional explicit auth mode (auto-detected if not provided)
|
|
108
108
|
* @returns Rendered HTML string
|
|
109
109
|
*/
|
|
@@ -117,7 +117,7 @@ export function renderConsentPage(config, remoteConfig, authMode) {
|
|
|
117
117
|
*
|
|
118
118
|
* @param config - Extended page config
|
|
119
119
|
* @param oauthUrl - OAuth authorization URL
|
|
120
|
-
* @param remoteConfig - Remote consent configuration from
|
|
120
|
+
* @param remoteConfig - Remote consent configuration from Checkpoint
|
|
121
121
|
* @returns Rendered HTML string
|
|
122
122
|
*/
|
|
123
123
|
export function renderOAuthConsentPage(config, oauthUrl, remoteConfig) {
|
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
* but uses the new modular template system internally.
|
|
6
6
|
*
|
|
7
7
|
* Now supports CSR (Client-Side Rendering) mode using @kya-os/consent
|
|
8
|
-
* Lit Web Components for pixel-perfect
|
|
8
|
+
* Lit Web Components for pixel-perfect Checkpoint parity.
|
|
9
9
|
*
|
|
10
10
|
* @module consent-templates/template-renderer
|
|
11
11
|
*/
|
|
@@ -13,7 +13,7 @@ import type { ConsentPageConfig, OAuthIdentity } from "@kya-os/contracts/consent
|
|
|
13
13
|
import type { CredentialProviderConfig } from "@kya-os/contracts/config";
|
|
14
14
|
import { type ConsentUI, type CredentialsConfig } from "@kya-os/consent";
|
|
15
15
|
/**
|
|
16
|
-
* ConsentPageConfig extended with fields that flow through from
|
|
16
|
+
* ConsentPageConfig extended with fields that flow through from Checkpoint
|
|
17
17
|
* remote config but are intentionally excluded from the contracts type.
|
|
18
18
|
*/
|
|
19
19
|
type RendererPageConfig = ConsentPageConfig & {
|
|
@@ -29,6 +29,8 @@ type RendererPageConfig = ConsentPageConfig & {
|
|
|
29
29
|
ui?: ConsentUI;
|
|
30
30
|
credentials?: CredentialsConfig;
|
|
31
31
|
expirationDays?: number;
|
|
32
|
+
/** Fixed grant lifetime; set only when the server bound a delegation mandate. */
|
|
33
|
+
fixedExpiryDays?: number;
|
|
32
34
|
agentName?: string;
|
|
33
35
|
capabilities?: import('@kya-os/contracts/consent').CapabilityGroup[];
|
|
34
36
|
agentMetadata?: import('@kya-os/contracts/consent').AgentMetadata;
|
|
@@ -44,7 +46,7 @@ type RendererPageConfig = ConsentPageConfig & {
|
|
|
44
46
|
* Template-based consent page renderer.
|
|
45
47
|
*
|
|
46
48
|
* Drop-in replacement for ConsentPageRenderer that uses the new
|
|
47
|
-
* modular template system with pixel-perfect
|
|
49
|
+
* modular template system with pixel-perfect Checkpoint parity.
|
|
48
50
|
*
|
|
49
51
|
* Supports two rendering modes:
|
|
50
52
|
* - SSR (Server-Side Rendering) - Default, renders full HTML on server
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"template-renderer.d.ts","sourceRoot":"","sources":["../../../src/services/consent-templates/template-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAYH,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAUzB;;;GAGG;AACH,KAAK,kBAAkB,GAAG,iBAAiB,GAAG;IAC5C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,YAAY,CAAC,EAAE,OAAO,2BAA2B,EAAE,eAAe,EAAE,CAAC;IACrE,aAAa,CAAC,EAAE,OAAO,2BAA2B,EAAE,aAAa,CAAC;IAClE,YAAY,CAAC,EAAE,OAAO,2BAA2B,EAAE,YAAY,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,2BAA2B,EAAE,oBAAoB,CAAC;CACzE,CAAC;AAEF;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAK/D;;;;;;;;;OASG;IACH,MAAM,CACJ,MAAM,EAAE,kBAAkB,EAC1B,aAAa,CAAC,EAAE,aAAa,GAC5B,MAAM;IAoCT;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,SAAS;
|
|
1
|
+
{"version":3,"file":"template-renderer.d.ts","sourceRoot":"","sources":["../../../src/services/consent-templates/template-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAYH,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAUzB;;;GAGG;AACH,KAAK,kBAAkB,GAAG,iBAAiB,GAAG;IAC5C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,YAAY,CAAC,EAAE,OAAO,2BAA2B,EAAE,eAAe,EAAE,CAAC;IACrE,aAAa,CAAC,EAAE,OAAO,2BAA2B,EAAE,aAAa,CAAC;IAClE,YAAY,CAAC,EAAE,OAAO,2BAA2B,EAAE,YAAY,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,2BAA2B,EAAE,oBAAoB,CAAC;CACzE,CAAC;AAEF;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAK/D;;;;;;;;;OASG;IACH,MAAM,CACJ,MAAM,EAAE,kBAAkB,EAC1B,aAAa,CAAC,EAAE,aAAa,GAC5B,MAAM;IAoCT;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,SAAS;IAmGjB;;;;;;;;;OASG;IACH,oBAAoB,CAClB,MAAM,EAAE,kBAAkB,EAC1B,gBAAgB,EAAE,wBAAwB,EAC1C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,MAAmB,GACrC,MAAM;IA+BT;;;;;;;;;OASG;IACH,OAAO,CAAC,uBAAuB;IAuD/B;;;;;;OAMG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,MAAM;IAIV;;;;;;;OAOG;IACH,iBAAiB,CACf,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,OAAO,GAClB,MAAM;IAsDT;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA2B3B;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAqC1B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,gBAAgB,CAEnB"}
|
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
* but uses the new modular template system internally.
|
|
6
6
|
*
|
|
7
7
|
* Now supports CSR (Client-Side Rendering) mode using @kya-os/consent
|
|
8
|
-
* Lit Web Components for pixel-perfect
|
|
8
|
+
* Lit Web Components for pixel-perfect Checkpoint parity.
|
|
9
9
|
*
|
|
10
10
|
* @module consent-templates/template-renderer
|
|
11
11
|
*/
|
|
@@ -22,7 +22,7 @@ const DEFAULT_BUNDLE_PATH = CONSENT_BUNDLE_PATH;
|
|
|
22
22
|
* Template-based consent page renderer.
|
|
23
23
|
*
|
|
24
24
|
* Drop-in replacement for ConsentPageRenderer that uses the new
|
|
25
|
-
* modular template system with pixel-perfect
|
|
25
|
+
* modular template system with pixel-perfect Checkpoint parity.
|
|
26
26
|
*
|
|
27
27
|
* Supports two rendering modes:
|
|
28
28
|
* - SSR (Server-Side Rendering) - Default, renders full HTML on server
|
|
@@ -93,8 +93,10 @@ export class TemplateRenderer {
|
|
|
93
93
|
ui: config.ui,
|
|
94
94
|
// Map credentials config if available
|
|
95
95
|
credentials: config.credentials,
|
|
96
|
-
// Map expiration days from
|
|
96
|
+
// Map expiration days from Checkpoint config
|
|
97
97
|
expirationDays: config.expirationDays,
|
|
98
|
+
// Fixed-lifetime footer copy (only present with a mandate)
|
|
99
|
+
fixedExpiryDays: config.fixedExpiryDays,
|
|
98
100
|
// Map other mode configs
|
|
99
101
|
// CRITICAL: Include providerId for proper OAuth button URL construction
|
|
100
102
|
oauth: config.oauthRequired
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"template-renderer.js","sourceRoot":"","sources":["../../../src/services/consent-templates/template-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,YAAY,CAAC;AAWpB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAKpB,MAAM,iBAAiB,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"template-renderer.js","sourceRoot":"","sources":["../../../src/services/consent-templates/template-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,GACf,MAAM,YAAY,CAAC;AAWpB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAKpB,MAAM,iBAAiB,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAkChD;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAU;IAChB,UAAU,CAAS;IAE3B,YAAY,OAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,mBAAmB,CAAC;IAC/D,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CACJ,MAA0B,EAC1B,aAA6B;QAE7B,wCAAwC;QACxC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,oDAAoD;QACpD,yDAAyD;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAExD,uDAAuD;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEpD,kDAAkD;QAClD,IAAI,QAAQ,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;QAE9C,+DAA+D;QAC/D,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO,sBAAsB,CAC3B,cAAc,EACd,MAAM,CAAC,QAAQ,EACf,YAAY,CACb,CAAC;QACJ,CAAC;QAED,sFAAsF;QACtF,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,+DAA+D;YAC/D,QAAQ,GAAG,cAAc,CAAC;YAC1B,4DAA4D;YAC5D,cAAc,CAAC,aAAa,GAAG,aAAa,CAAC;QAC/C,CAAC;QAED,OAAO,iBAAiB,CAAC,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,SAAS,CACf,MAA0B,EAC1B,aAA6B;QAE7B,wCAAwC;QACxC,MAAM,aAAa,GAAkB;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,6BAA6B;YAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,sCAAsC;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,6CAA6C;YAC7C,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,2DAA2D;YAC3D,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,yBAAyB;YACzB,wEAAwE;YACxE,KAAK,EAAE,MAAM,CAAC,aAAa;gBACzB,CAAC,CAAC;oBACE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,4CAA4C;oBACzE,YAAY,EAAE,MAAM,CAAC,QAAQ;oBAC7B,UAAU,EAAE,iBAAiB,MAAM,CAAC,QAAQ,IAAI,OAAO,EAAE;iBAC1D;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,wEAAwE;QACxE,kEAAkE;QAClE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,6BAA6B,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACjE,MAAM,4BAA4B,GAChC,CAAC,6BAA6B,IAAI,aAAa;YAC7C,CAAC,CAAC,aAAa,CAAC,KAAK,IAAK,aAAmC,CAAC,IAAI;YAClE,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,2BAA2B,GAC/B,6BAA6B,IAAI,4BAA4B,CAAC;QAEhE,MAAM,iCAAiC,GACrC,CAAC,MAAM,CAAC,wBAAwB,IAAI,aAAa;YAC/C,CAAC,CAAC,aAAa,CAAC,OAAO;YACvB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,gCAAgC,GACpC,MAAM,CAAC,wBAAwB,IAAI,iCAAiC,CAAC;QAEvE,sBAAsB;QACtB,MAAM,YAAY,GAAwB;YACxC,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,IAAI,oBAAoB;YAC1D,yCAAyC;YACzC,kEAAkE;YAClE,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACpD,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,wCAAwC;YACrE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,gDAAgD;YAC3E,8EAA8E;YAC9E,kGAAkG;YAClG,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,6EAA6E;YAC7E,oFAAoF;YACpF,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,2EAA2E;YAC3E,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,mEAAmE;YACnE,mEAAmE;YACnE,kEAAkE;YAClE,mBAAmB,EAAE,2BAA2B;YAChD,wBAAwB,EAAE,gCAAgC;YAC1D,kEAAkE;YAClE,yEAAyE;YACzE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,oEAAoE;YACpE,gEAAgE;YAChE,yDAAyD;YACzD,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QAEF,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;OASG;IACH,oBAAoB,CAClB,MAA0B,EAC1B,gBAA0C,EAC1C,QAAgB,EAChB,SAAiB,EACjB,oBAA4B,UAAU;QAEtC,8DAA8D;QAC9D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACxG,CAAC;QAED,wDAAwD;QACxD,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACxD,cAAc,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACnC,sDAAsD;QACtD,cAAc,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAErD,gEAAgE;QAChE,MAAM,GAAG,GAAG,gBAAuB,CAAC;QACpC,cAAc,CAAC,UAAU,GAAG;YAC1B,WAAW,EAAE;gBACX,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;gBAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,KAAK;gBACnD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;aACzC;SACF,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEpD,OAAO,iBAAiB,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;OASG;IACK,uBAAuB,CAC7B,MAA0B,EAC1B,gBAA0C,EAC1C,QAAgB,EAChB,SAAiB,EACjB,oBAA4B,UAAU;QAEtC,gEAAgE;QAChE,MAAM,GAAG,GAAG,gBAAuB,CAAC;QAEpC,gEAAgE;QAChE,MAAM,aAAa,GAAkB;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,sEAAsE;YACtE,8EAA8E;YAC9E,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,mDAAmD;YACnD,WAAW,EAAE;gBACX,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;gBACrE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;gBAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,KAAK;gBACnD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;aACzC;SACF,CAAC;QAEF,4CAA4C;QAC5C,MAAM,YAAY,GAAwB;YACxC,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,IAAI,oBAAoB;YAC1D,yBAAyB;YACzB,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,QAAQ;YAClB,uCAAuC;YACvC,SAAS,EAAE,SAAS;YACpB,uEAAuE;YACvE,iBAAiB,EAAE,iBAAiB;SACrC,CAAC;QAEF,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,OAGb;QACC,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,YAAoB,EACpB,SAAiB,EACjB,SAAmB;QAEnB,+BAA+B;QAC/B,uDAAuD;QACvD,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE;YAC/C,MAAM,QAAQ,GAA2B;gBACvC,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,QAAQ;gBACb,GAAG,EAAE,QAAQ;aACd,CAAC;YACF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QACpE,CAAC,CAAC;QAEF,MAAM,eAAe,GAAG,SAAS;YAC/B,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;;;;;;;;;;;;;;;;;;;;;;;;0GAwB+F,eAAe,CAAC,YAAY,CAAC;;;;;;;IAOnI,eAAe;;QAEX,CAAC;IACP,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,MAA0B;QAE1B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,wDAAwD;YACxD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,EAAE,4BAA4B;YAC/E,mDAAmD;YACnD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,MAA0B;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAe,CAAC;QAExC,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACvB,CAAC,CAAC;oBACE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;oBAC1C,cAAc,EAAE,QAAQ,EAAE,cAAc;oBACxC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;oBAChC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;iBACzC;gBACH,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACjB,CAAC,CAAC;oBACE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBACvB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBACrB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;iBAChC;gBACH,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,0DAA0D;YAC1D,EAAE,EAAE,MAAM,CAAC,EAAE;gBACX,CAAC,CAAC;oBACE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK;oBACtB,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW;oBAClC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,cAAc;oBACxC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB;oBAC5C,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB;oBAC5C,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC,iBAAiB;iBAC/C;gBACH,CAAC,CAAC,SAAS;YACb,yBAAyB;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,sBAAsB;YACtB,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACC,OAAO,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC"}
|
|
@@ -2,14 +2,14 @@
|
|
|
2
2
|
* Consent Template Types
|
|
3
3
|
*
|
|
4
4
|
* Shared type definitions for the consent template system.
|
|
5
|
-
* Aligned with
|
|
5
|
+
* Aligned with Checkpoint's consent configuration types.
|
|
6
6
|
*
|
|
7
7
|
* @module consent-templates/types
|
|
8
8
|
*/
|
|
9
9
|
export type { ConsentPageConfig, ConsentBranding, ConsentTerms, ConsentCustomField, OAuthIdentity, } from "@kya-os/contracts/consent";
|
|
10
10
|
/**
|
|
11
11
|
* Supported authentication modes.
|
|
12
|
-
* Matches
|
|
12
|
+
* Matches Checkpoint's AUTH_MODES constant.
|
|
13
13
|
*/
|
|
14
14
|
export declare const AUTH_MODES: {
|
|
15
15
|
readonly CONSENT_ONLY: "consent-only";
|
|
@@ -21,7 +21,7 @@ export declare const AUTH_MODES: {
|
|
|
21
21
|
export type AuthMode = (typeof AUTH_MODES)[keyof typeof AUTH_MODES];
|
|
22
22
|
/**
|
|
23
23
|
* Resolved copy values ready for rendering.
|
|
24
|
-
* Matches
|
|
24
|
+
* Matches Checkpoint's ResolvedConsentCopy.
|
|
25
25
|
*/
|
|
26
26
|
export interface ResolvedConsentCopy {
|
|
27
27
|
/** Page title */
|
|
@@ -47,7 +47,7 @@ export interface ResolvedConsentCopy {
|
|
|
47
47
|
}
|
|
48
48
|
/**
|
|
49
49
|
* Resolved branding values ready for CSS.
|
|
50
|
-
* Matches
|
|
50
|
+
* Matches Checkpoint's ResolvedConsentBranding.
|
|
51
51
|
*/
|
|
52
52
|
export interface ResolvedConsentBranding {
|
|
53
53
|
/** Primary brand color (hex) */
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* Consent Template Types
|
|
3
3
|
*
|
|
4
4
|
* Shared type definitions for the consent template system.
|
|
5
|
-
* Aligned with
|
|
5
|
+
* Aligned with Checkpoint's consent configuration types.
|
|
6
6
|
*
|
|
7
7
|
* @module consent-templates/types
|
|
8
8
|
*/
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
// ============================================================================
|
|
12
12
|
/**
|
|
13
13
|
* Supported authentication modes.
|
|
14
|
-
* Matches
|
|
14
|
+
* Matches Checkpoint's AUTH_MODES constant.
|
|
15
15
|
*/
|
|
16
16
|
export const AUTH_MODES = {
|
|
17
17
|
CONSENT_ONLY: "consent-only",
|
|
@@ -11,6 +11,12 @@ import type { CloudflareRuntime } from "../runtime";
|
|
|
11
11
|
import type { OAuthIdentity } from "@kya-os/contracts/consent";
|
|
12
12
|
import { type DelegationVCVerificationResult, type DelegationRecord } from "@kya-os/mcp";
|
|
13
13
|
import { type UserKeyPair } from "@kya-os/mcp-i-runtime";
|
|
14
|
+
import type { DelegationMandateProvider } from "../config";
|
|
15
|
+
/** Optional ConsentService behavior configured by the server. */
|
|
16
|
+
export interface ConsentServiceOptions {
|
|
17
|
+
/** Server-bound grant limits; see CloudflareRuntimeConfig.delegationMandate. */
|
|
18
|
+
delegationMandate?: DelegationMandateProvider;
|
|
19
|
+
}
|
|
14
20
|
export declare class ConsentService {
|
|
15
21
|
private configService;
|
|
16
22
|
private renderer;
|
|
@@ -21,11 +27,25 @@ export declare class ConsentService {
|
|
|
21
27
|
private auditInitPromise?;
|
|
22
28
|
private providerResolver?;
|
|
23
29
|
private providerRegistry?;
|
|
30
|
+
private readonly delegationMandate?;
|
|
24
31
|
/**
|
|
25
32
|
* ✅ FIXED: Constructor takes env: CloudflareEnv, not config
|
|
26
33
|
* Phase 2: Optional providerResolver and providerRegistry for tool-specific providers
|
|
27
34
|
*/
|
|
28
|
-
constructor(env: CloudflareEnv, runtime?: CloudflareRuntime, providerResolver?: import("@kya-os/mcp-i-runtime").ProviderResolver, providerRegistry?: import("@kya-os/mcp-i-runtime").OAuthProviderRegistry);
|
|
35
|
+
constructor(env: CloudflareEnv, runtime?: CloudflareRuntime, providerResolver?: import("@kya-os/mcp-i-runtime").ProviderResolver, providerRegistry?: import("@kya-os/mcp-i-runtime").OAuthProviderRegistry, options?: ConsentServiceOptions);
|
|
36
|
+
/**
|
|
37
|
+
* Ask the server's mandate provider about these scopes.
|
|
38
|
+
*
|
|
39
|
+
* Keyed on scopes (what the grant authorizes), never on a tool name, so a
|
|
40
|
+
* request naming a different tool with the same scopes gets the same
|
|
41
|
+
* limits. The provider gets the runtime identity DID, so a mandate can name
|
|
42
|
+
* this server as the merchant without trusting any request field.
|
|
43
|
+
*
|
|
44
|
+
* Without a provider this always returns `{ ok: true, mandate: undefined }`.
|
|
45
|
+
* With one, a missing identity or a throw returns `{ ok: false }`.
|
|
46
|
+
*/
|
|
47
|
+
private resolveMandate;
|
|
48
|
+
private mandateErrorResponse;
|
|
29
49
|
/**
|
|
30
50
|
* Get or initialize audit service (lazy initialization)
|
|
31
51
|
*
|
|
@@ -93,7 +113,7 @@ export declare class ConsentService {
|
|
|
93
113
|
*/
|
|
94
114
|
private initializeAuditService;
|
|
95
115
|
/**
|
|
96
|
-
* Fetch CloudflareRuntimeConfig from remote API (
|
|
116
|
+
* Fetch CloudflareRuntimeConfig from remote API (Checkpoint)
|
|
97
117
|
*
|
|
98
118
|
* ⚠️ CRITICAL: Config MUST be fetched from remote API, not constructed from env.
|
|
99
119
|
*
|
|
@@ -136,11 +156,11 @@ export declare class ConsentService {
|
|
|
136
156
|
/**
|
|
137
157
|
* Update session with resolved identity (Phase 5)
|
|
138
158
|
*
|
|
139
|
-
* Called after
|
|
159
|
+
* Called after Checkpoint identity/resolve returns a persistent user DID.
|
|
140
160
|
* Stores the DID in session storage and creates OAuth mapping.
|
|
141
161
|
*
|
|
142
162
|
* @param sessionId - Session ID
|
|
143
|
-
* @param userDid - Persistent user DID from
|
|
163
|
+
* @param userDid - Persistent user DID from Checkpoint
|
|
144
164
|
* @param oauthIdentity - OAuth identity for creating persistent mapping
|
|
145
165
|
*/
|
|
146
166
|
updateSessionWithIdentity(sessionId: string, userDid: string, oauthIdentity?: OAuthIdentity | null): Promise<void>;
|
|
@@ -162,8 +182,8 @@ export declare class ConsentService {
|
|
|
162
182
|
* GENERATES a new key pair if one doesn't exist.
|
|
163
183
|
*
|
|
164
184
|
* NOTE: The generated key pair has its own did:key which may differ
|
|
165
|
-
* from
|
|
166
|
-
* OAuth identity. See docs/proposals/VC/
|
|
185
|
+
* from Checkpoint's persistentUserDid. Both are tied to the same
|
|
186
|
+
* OAuth identity. See docs/proposals/VC/CHECKPOINT_SIGNING_ENDPOINT.md
|
|
167
187
|
* for the future cleaner architecture.
|
|
168
188
|
*
|
|
169
189
|
* @param sessionId - Session ID for caching
|
|
@@ -233,7 +253,7 @@ export declare class ConsentService {
|
|
|
233
253
|
*
|
|
234
254
|
* Determines if OAuth flow should be used instead of direct delegation creation.
|
|
235
255
|
* OAuth is required if:
|
|
236
|
-
* - Project has OAuth provider configured in
|
|
256
|
+
* - Project has OAuth provider configured in Checkpoint
|
|
237
257
|
* - No OAuth identity is present in the request
|
|
238
258
|
*
|
|
239
259
|
* @param projectId - Project ID to check
|
|
@@ -259,15 +279,15 @@ export declare class ConsentService {
|
|
|
259
279
|
* @param serverUrl - Server URL for callback
|
|
260
280
|
* @param provider - Optional provider name (resolved if not provided)
|
|
261
281
|
* @param oauthSecurityService - Optional OAuthSecurityService for CSRF protection
|
|
262
|
-
* @param agentName - Optional human-readable agent name for
|
|
282
|
+
* @param agentName - Optional human-readable agent name for Checkpoint dashboard display
|
|
263
283
|
* @param tool - Optional tool name to preserve through OAuth flow for clickwrap redirect
|
|
264
284
|
* @returns OAuth authorization URL
|
|
265
285
|
*/
|
|
266
286
|
buildOAuthUrl(projectId: string, agentDid: string, sessionId: string, scopes: string[], serverUrl: string, provider?: string, // Phase 2: Optional provider name (resolved if not provided)
|
|
267
|
-
oauthSecurityService?: import("./oauth-security.service").OAuthSecurityService, agentName?: string, // Human-readable agent name for
|
|
287
|
+
oauthSecurityService?: import("./oauth-security.service").OAuthSecurityService, agentName?: string, // Human-readable agent name for Checkpoint dashboard
|
|
268
288
|
tool?: string): Promise<string>;
|
|
269
289
|
/**
|
|
270
|
-
* Build direct OAuth URL (bypasses
|
|
290
|
+
* Build direct OAuth URL (bypasses Checkpoint bouncer endpoint)
|
|
271
291
|
*
|
|
272
292
|
* Used for custom providers that need direct OAuth URLs (e.g., self-hosted OAuth servers).
|
|
273
293
|
* Triggered when providerConfig.proxyMode === true && !providerConfig.supportsPKCE
|
|
@@ -285,7 +305,7 @@ export declare class ConsentService {
|
|
|
285
305
|
* Link OAuth identity to User DID
|
|
286
306
|
*
|
|
287
307
|
* Maps OAuth provider identity (provider + subject) to a persistent User DID.
|
|
288
|
-
* Phase 5: Requires existing userDid from
|
|
308
|
+
* Phase 5: Requires existing userDid from Checkpoint /identity/resolve endpoint.
|
|
289
309
|
* Throws error if session has no user DID (enforces OAuth → identity flow).
|
|
290
310
|
*
|
|
291
311
|
* @param oauthIdentity - OAuth provider identity
|
|
@@ -295,14 +315,14 @@ export declare class ConsentService {
|
|
|
295
315
|
*/
|
|
296
316
|
linkOAuthToUserDid(oauthIdentity: OAuthIdentity, sessionId: string): Promise<string>;
|
|
297
317
|
/**
|
|
298
|
-
* Cache an externally-resolved User DID (from
|
|
318
|
+
* Cache an externally-resolved User DID (from Checkpoint identity resolution)
|
|
299
319
|
*
|
|
300
|
-
* Phase 5: When
|
|
320
|
+
* Phase 5: When Checkpoint provides a persistent user_did, we cache the
|
|
301
321
|
* OAuth identity → userDid mapping in KV so future lookups don't require
|
|
302
|
-
* calling
|
|
322
|
+
* calling Checkpoint again.
|
|
303
323
|
*
|
|
304
324
|
* @param oauthIdentity - OAuth identity from provider
|
|
305
|
-
* @param userDid - Persistent user DID from
|
|
325
|
+
* @param userDid - Persistent user DID from Checkpoint
|
|
306
326
|
* @returns void
|
|
307
327
|
*/
|
|
308
328
|
cacheExternalUserDid(oauthIdentity: OAuthIdentity, userDid: string): Promise<void>;
|
|
@@ -403,7 +423,7 @@ export declare class ConsentService {
|
|
|
403
423
|
/**
|
|
404
424
|
* Handle consent approval
|
|
405
425
|
*
|
|
406
|
-
* Validates request, creates delegation via
|
|
426
|
+
* Validates request, creates delegation via Checkpoint API,
|
|
407
427
|
* stores token in KV, and returns success response.
|
|
408
428
|
*
|
|
409
429
|
* @param request - Approval request
|
|
@@ -411,7 +431,7 @@ export declare class ConsentService {
|
|
|
411
431
|
*/
|
|
412
432
|
private handleApproval;
|
|
413
433
|
/**
|
|
414
|
-
* Create delegation via
|
|
434
|
+
* Create delegation via Checkpoint API
|
|
415
435
|
*
|
|
416
436
|
* @param request - Approval request
|
|
417
437
|
* @returns Delegation creation result
|
|
@@ -474,7 +494,7 @@ export declare class ConsentService {
|
|
|
474
494
|
* Handle credential-based authentication submission
|
|
475
495
|
*
|
|
476
496
|
* Authenticates user credentials against customer's endpoint, resolves identity
|
|
477
|
-
* via
|
|
497
|
+
* via Checkpoint, stores token with usage metadata, and creates delegation.
|
|
478
498
|
*
|
|
479
499
|
* @param body - Raw request body with credential fields
|
|
480
500
|
* @param request - Original request (for URL derivation if MCP_SERVER_URL not set)
|
|
@@ -493,7 +513,7 @@ export declare class ConsentService {
|
|
|
493
513
|
*/
|
|
494
514
|
private parseScopes;
|
|
495
515
|
/**
|
|
496
|
-
* Fetch credential provider config from
|
|
516
|
+
* Fetch credential provider config from Checkpoint
|
|
497
517
|
*
|
|
498
518
|
* Uses the V1 /providers endpoint which returns all configured providers
|
|
499
519
|
* including credential providers with type: 'credential'.
|
|
@@ -504,7 +524,7 @@ export declare class ConsentService {
|
|
|
504
524
|
/**
|
|
505
525
|
* Map snake_case fields to camelCase for CredentialProviderConfig
|
|
506
526
|
*
|
|
507
|
-
*
|
|
527
|
+
* Checkpoint API may return snake_case fields from the database.
|
|
508
528
|
* This follows the same pattern as OAuthConfigService.getOAuthConfig().
|
|
509
529
|
*
|
|
510
530
|
* @param raw - Raw provider object from API response
|
|
@@ -513,7 +533,7 @@ export declare class ConsentService {
|
|
|
513
533
|
*/
|
|
514
534
|
private mapCredentialProviderFields;
|
|
515
535
|
/**
|
|
516
|
-
* Resolve identity via
|
|
536
|
+
* Resolve identity via Checkpoint for credential-based auth
|
|
517
537
|
*/
|
|
518
538
|
private resolveCredentialIdentity;
|
|
519
539
|
/**
|
|
@@ -699,8 +719,8 @@ export declare class ConsentService {
|
|
|
699
719
|
* Build simplified format request with proper field name
|
|
700
720
|
*
|
|
701
721
|
* CRITICAL: This method MUST NOT include session_id or project_id in the request body.
|
|
702
|
-
* These fields are NOT part of
|
|
703
|
-
* - project_id is extracted from API key context by
|
|
722
|
+
* These fields are NOT part of Checkpoint's createDelegationSchema:
|
|
723
|
+
* - project_id is extracted from API key context by Checkpoint middleware
|
|
704
724
|
* - session_id is not needed for delegation creation
|
|
705
725
|
*
|
|
706
726
|
* Including these fields will cause validation errors (400 Bad Request).
|
|
@@ -713,7 +733,7 @@ export declare class ConsentService {
|
|
|
713
733
|
/**
|
|
714
734
|
* Make API call and parse response
|
|
715
735
|
*
|
|
716
|
-
* CRITICAL: This method ensures session_id and project_id are never sent to
|
|
736
|
+
* CRITICAL: This method ensures session_id and project_id are never sent to Checkpoint.
|
|
717
737
|
* These fields are NOT part of the createDelegationSchema and will cause validation errors.
|
|
718
738
|
*/
|
|
719
739
|
private makeAPICall;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"consent.service.d.ts","sourceRoot":"","sources":["../../src/services/consent.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAepD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAYL,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"consent.service.d.ts","sourceRoot":"","sources":["../../src/services/consent.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAepD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAYL,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAGV,yBAAyB,EAC1B,MAAM,WAAW,CAAC;AAyDnB,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;CAC/C;AAgBD,qBAAa,cAAc;IACzB,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,GAAG,CAAgB;IAC3B,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,cAAc,CAAC,CAAiB;IAGxC,OAAO,CAAC,YAAY,CAAC,CAAsB;IAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAgB;IAGzC,OAAO,CAAC,gBAAgB,CAAC,CAAmD;IAC5E,OAAO,CAAC,gBAAgB,CAAC,CAAwD;IAEjF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAA4B;IAE/D;;;OAGG;gBAED,GAAG,EAAE,aAAa,EAClB,OAAO,CAAC,EAAE,iBAAiB,EAC3B,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,gBAAgB,EACnE,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,qBAAqB,EACxE,OAAO,GAAE,qBAA0B;IAYrC;;;;;;;;;;OAUG;YACW,cAAc;IAuB5B,OAAO,CAAC,oBAAoB;IAO5B;;;;;;;OAOG;YACW,eAAe;IAmC7B;;;;;;;OAOG;IACG,mBAAmB,CAAC,KAAK,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,GAAG,OAAO,CAAC,IAAI,CAAC;IAMX,kBAAkB,CAAC,KAAK,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjB;;;;;;;;;;;;OAYG;IACG,uBAAuB,CAC3B,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QAEjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,EACD,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,OAAO,CAAC;IAYnB;;;;;OAKG;YACW,sBAAsB;IAwCpC;;;;;;;;;;OAUG;YACW,sBAAsB;IAqEpC;;;;;;;;;;;;;;OAcG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkFzB;;;;;;;;;;;OAWG;YACW,iCAAiC;IA0D/C;;;;;;;;;OASG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,IAAI,CAAC;IAuIhB;;;;;;;;;OASG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAsE9B;;;;;;;;;;;;;;OAcG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA0F9B;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAInC;;;;;;;;;;;;;OAaG;IACU,kCAAkC,CAC7C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmGzB;;;;;;;;;;;;;OAaG;IACU,iBAAiB,CAC5B,UAAU,EAAE,gBAAgB,EAC5B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,EACpC,eAAe,CAAC,EAAE,WAAW,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA4DzB;;;;;;;;;;;;;;;;OAgBG;IACU,kBAAkB,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GACA,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;IAwJjD;;;;;;;;;;;;OAYG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,EAC7B,iBAAiB,CAAC,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,OAAO,mCAAmC,EAAE,cAAc,GAC1E,OAAO,CAAC,OAAO,CAAC;IA+HnB;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EAAE,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,6DAA6D;IAChF,oBAAoB,CAAC,EAAE,OAAO,0BAA0B,EAAE,oBAAoB,EAC9E,SAAS,CAAC,EAAE,MAAM,EAAE,qDAAqD;IACzE,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC;IA6QlB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB;IAuB3B;;;;;;;;;;;OAWG;IACG,kBAAkB,CACtB,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IAyElB;;;;;;;;;;OAUG;IACG,oBAAoB,CACxB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAgFhB;;;;;;;;;;OAUG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqCjD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,8BAA8B;IAYtC;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;;;;;;;;;OAaG;YACW,iBAAiB;IA02B/B;;;;;;;;OAQG;YACW,gBAAgB;IA2lC9B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAO1B;;;;;;OAMG;IACH,OAAO,CAAC,iCAAiC;IAczC;;;;;;;;OAQG;YACW,cAAc;IA+kB5B;;;;;OAKG;YACW,gBAAgB;IAsV9B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;;;;OASG;YACW,oBAAoB;IAqElC;;;;;;;;;;;;;;;;;OAiBG;YACW,oBAAoB;IAiLlC;;;;;OAKG;YACW,iBAAiB;IAmC/B;;;;OAIG;YACW,sBAAsB;IAwFpC;;;;;;;;;OASG;YACW,wBAAwB;IAgiBtC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IA2BnB;;;;;;;OAOG;YACW,2BAA2B;IAkGzC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IA4GnC;;OAEG;YACW,yBAAyB;IAsDvC;;OAEG;YACW,oBAAoB;IAmDlC;;;;;;;;;;;OAWG;YACW,2BAA2B;IAyDzC;;;;;;;;;OASG;IACU,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkCzE;;;;;OAKG;YACW,eAAe;IAgB7B;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAI7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAK7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAY3B;;;;;;;;;;;;;;;;;;;OAmBG;IACI,oBAAoB,IAAI,OAAO;IAYtC;;;;;;;;;;;;OAYG;YACW,UAAU;IAWxB;;;;;;;;OAQG;YACW,mBAAmB;IAgBjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACU,qBAAqB,CAAC,MAAM,EAAE;QACzC,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BnB;;;;;;;;;;;;;;;;;OAiBG;IACU,6BAA6B,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE;QACR,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAMX,uBAAuB;IAgHrC;;OAEG;YACW,sBAAsB;IAmJpC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IAMnB;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqLpC;;OAEG;YACW,UAAU;IAwDxB;;;;;OAKG;YACW,WAAW;IA0GzB;;OAEG;YACW,qBAAqB;CAsBpC"}
|