@kya-os/mcp-i-core 1.2.2-canary.25 → 1.2.2-canary.27

package/dist/services/authorization/authorization-registry.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * Authorization Registry
+ *
+ * Registry for managing available authorization services.
+ * Allows looking up the appropriate service for a given authorization type.
+ *
+ * @package @kya-os/mcp-i-core
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationRegistry = void 0;
+class AuthorizationRegistry {
+    services = new Map();
+    /**
+     * Register an authorization service
+     */
+    register(service) {
+        this.services.set(service.type, service);
+    }
+    /**
+     * Get an authorization service by type
+     */
+    getService(type) {
+        return this.services.get(type) || null;
+    }
+    /**
+     * Resolve authorization requirement for a tool
+     *
+     * Determines the authorization requirement based on the tool protection config.
+     * Handles backward compatibility with legacy `oauthProvider` field.
+     */
+    resolveRequirement(toolProtection) {
+        if (!toolProtection.requiresDelegation) {
+            return null;
+        }
+        // Use the explicit authorization field if present
+        if (toolProtection.authorization) {
+            return toolProtection.authorization;
+        }
+        // Legacy fallback: oauthProvider field
+        if (toolProtection.oauthProvider) {
+            return {
+                type: 'oauth',
+                provider: toolProtection.oauthProvider,
+            };
+        }
+        // If requiresDelegation is true but no auth specified, default to 'none' (consent only)
+        // UNLESS we are in a transition period where ProviderResolver might infer scopes.
+        // This logic will be refined as we move logic from ProviderResolver to here.
+        // For now, return null to let downstream logic handle fallbacks if needed,
+        // or return 'none' if we want to enforce explicit config.
+        // Returning null allows the legacy ProviderResolver to attempt scope inference
+        return null;
+    }
+}
+exports.AuthorizationRegistry = AuthorizationRegistry;
+//# sourceMappingURL=authorization-registry.js.map

package/dist/services/authorization/authorization-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-registry.js","sourceRoot":"","sources":["../../../src/services/authorization/authorization-registry.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAKH,MAAa,qBAAqB;IACxB,QAAQ,GAAsC,IAAI,GAAG,EAAE,CAAC;IAEhE;;OAEG;IACH,QAAQ,CAAC,OAA6B;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAChB,cAA8B;QAE9B,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kDAAkD;QAClD,IAAI,cAAc,CAAC,aAAa,EAAE,CAAC;YACjC,OAAO,cAAc,CAAC,aAAa,CAAC;QACtC,CAAC;QAED,uCAAuC;QACvC,IAAI,cAAc,CAAC,aAAa,EAAE,CAAC;YACjC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,cAAc,CAAC,aAAa;aACvC,CAAC;QACJ,CAAC;QAED,wFAAwF;QACxF,kFAAkF;QAClF,6EAA6E;QAC7E,2EAA2E;QAC3E,0DAA0D;QAE1D,+EAA+E;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AApDD,sDAoDC"}

package/dist/services/authorization/types.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Authorization Service Types
+ *
+ * Shared types for authorization services and flows.
+ *
+ * @package @kya-os/mcp-i-core
+ */
+import type { ToolProtection } from "@kya-os/contracts/tool-protection";
+/**
+ * Authorization Flow Result
+ */
+export interface AuthorizationResult {
+    success: boolean;
+    credential?: unknown;
+    userDid?: string;
+    metadata?: Record<string, unknown>;
+    error?: Error;
+}
+/**
+ * Authorization Flow
+ * Represents an initiated authorization flow
+ */
+export interface AuthorizationFlow {
+    /** URL to redirect the user to */
+    url: string;
+    /** Unique identifier for this flow */
+    flowId?: string;
+    /** Metadata about the flow */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Authorization Service Interface
+ * Each authorization type implements this
+ */
+export interface AuthorizationService {
+    /** Unique type identifier (e.g., 'oauth', 'mdl', 'idv') */
+    type: string;
+    /**
+     * Check if authorization is required for the given tool protection
+     */
+    isRequired(toolProtection: ToolProtection): boolean;
+    /**
+     * Initiate authorization flow
+     * Returns URL or flow identifier
+     */
+    initiateFlow(toolProtection: ToolProtection, sessionId: string, projectId: string, agentDid: string, serverUrl: string): Promise<AuthorizationFlow>;
+    /**
+     * Verify authorization result
+     * Called after user completes flow
+     */
+    verifyAuthorization(flowId: string, result: unknown): Promise<AuthorizationResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/services/authorization/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/services/authorization/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAExE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IAEZ,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,CAAC,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC;IAEpD;;;OAGG;IACH,YAAY,CACV,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE9B;;;OAGG;IACH,mBAAmB,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACjC"}

package/dist/services/authorization/types.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * Authorization Service Types
+ *
+ * Shared types for authorization services and flows.
+ *
+ * @package @kya-os/mcp-i-core
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/services/authorization/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/services/authorization/types.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG"}