@kya-os/mcp 1.2.0

package/CHANGELOG.md

@@ -0,0 +1,64 @@
+# Changelog
+
+All notable changes to @kya-os/mcp will be documented here.
+
+Format: https://keepachangelog.com/en/1.0.0/
+Versioning: https://semver.org/spec/v2.0.0.html
+
+## [Unreleased]
+
+### Changed
+
+- **Package renamed from `@mcp-i/core` to `@kya-os/mcp`.** Reframed under
+  the KYA-OS taxonomy: MCP-I is the identity surface of KYA-OS (Know
+  Your Agent Operating System), the umbrella protocol for agent
+  identity, authorization, and observability. Version stays at 1.2.0 —
+  the wire format, exports (`MCPI*`), and behavior are unchanged. The
+  old `@mcp-i/core` package is deprecated and points at this one.
+- **Spec cut to `1.0.0`** (was `0.1.0-draft` in `SPEC.md`, `1.0.0-draft`
+  in `CONFORMANCE.md`). The wire format was already pinned at `1.0.0`
+  in the handshake protocol-version field; the spec docs now match.
+  Status: Stable — donated to DIF TAAWG for ratification review. Spec
+  semver is independent of package semver: the spec describes the wire
+  protocol, the package describes the implementation shipping it.
+- Delegation middleware remains strict by default for chain and status-list validation.
+- Added `delegation.allowLegacyUnsafeDelegation` to `createMCPIMiddleware` as a temporary migration escape hatch for legacy integrations.
+- Added middleware tests covering legacy-compatibility behavior for parent-linked and status-list credentials.
+
+## [1.0.0-draft] - 2026-03-12
+
+### Added
+
+- SPEC.md protocol specification defining MCP-I extension for cryptographic identity
+- Supported DID methods: `did:key` (ephemeral/dev) and `did:web` (production)
+- Ed25519/EdDSA cryptography for signing and verification
+- Delegation module with W3C Verifiable Credential issuance and verification
+- CRISP constraint envelopes for scope, budget, temporal bounds, and audience
+- Delegation graph management with parent-child relationships
+- Cascading revocation via StatusList2021
+- `did:key` resolver for synchronous DID Document resolution
+- `did:web` resolver with HTTPS fetching and caching
+- Proof module with detached JWS generation over canonicalized request/response
+- Proof verification with DID resolution and timestamp validation
+- SHA-256 hashing with RFC 8785 JCS canonicalization
+- Session module with handshake validation and nonce-based replay prevention
+- Session TTL management with idle timeout tracking
+- Auth module with `verifyOrHints` orchestration and sensitive scope detection
+- Resume token storage for authorization flows
+- `needs_authorization` hint response pattern
+- MCP SDK middleware wrapper (`createMCPIMiddleware`)
+- Tool wrapping with automatic proof generation
+- Handshake tool registration and handling
+- Provider abstractions: CryptoProvider, ClockProvider, FetchProvider, StorageProvider, NonceCacheProvider, IdentityProvider
+- In-memory implementations for all providers (testing)
+- Configurable logging with debug, info, warn, error levels
+- Pure TypeScript protocol type definitions (zero runtime dependencies)
+- Well-known endpoint (`/.well-known/mcpi`) for server discovery
+- Outbound delegation proof JWT builder for downstream API calls
+- Three-tier conformance levels:
+  - Level 1: Core Crypto (key generation, signing, hashing, DID resolution)
+  - Level 2: Full Session (handshake, nonce, replay prevention, proofs)
+  - Level 3: Full Delegation (VCs, CRISP, graphs, revocation, chain validation)
+- Example implementations: Node.js server, proof verification, delegation issuance
+- Vitest test suite covering all conformance levels
+- GitHub Actions CI with type checking, build, test, and coverage

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 MCP-Identity
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,135 @@
+<p align="center">
+  <a href="https://modelcontextprotocol-identity.io">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://modelcontextprotocol-identity.io/images/logo-mark_white.svg">
+      <img alt="MCP-I" src="https://modelcontextprotocol-identity.io/images/logo-mark_black.svg" width="64">
+    </picture>
+  </a>
+</p>
+
+<p align="center">
+  <strong>Identity, delegation, and proof for the Model Context Protocol.</strong>
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@kya-os/mcp"><img src="https://img.shields.io/npm/v/@kya-os/mcp" alt="npm"></a>
+  <a href="https://modelcontextprotocol-identity.io"><img src="https://img.shields.io/badge/spec-modelcontextprotocol--identity.io-blue" alt="spec"></a>
+  <a href="https://identity.foundation/working-groups/agent-and-authorization.html"><img src="https://img.shields.io/badge/DIF-TAAWG-purple" alt="DIF TAAWG"></a>
+  <a href="./LICENSE"><img src="https://img.shields.io/github/license/modelcontextprotocol-identity/mcp-i-core" alt="license"></a>
+</p>
+
+<p align="center">
+  <em><code>@kya-os/mcp</code> is the reference implementation of <strong>MCP-I</strong>, the identity surface of <strong>KYA-OS</strong> (Know Your Agent Operating System). KYA-OS is the umbrella protocol for agent identity, authorization, and observability; MCP-I is its first surface, binding those primitives to Model Context Protocol servers.</em>
+</p>
+
+---
+
+AI agents call tools on your behalf. But today, there's no way to know *who* called, *whether they were allowed to*, or *what actually happened*. MCP-I fixes that for Model Context Protocol servers.
+
+- **Every server gets a cryptographic identity** (DID) — no accounts, no API keys, no central registry
+- **Every tool call gets a signed proof** — a tamper-evident receipt the agent can't forge or deny
+- **Protected tools require human consent** — per-tool authorization via W3C Delegation Credentials
+- **The AI never knows** — identity, proofs, and consent happen transparently in the protocol layer
+
+```
+npm install @kya-os/mcp
+```
+
+---
+
+## Migrate Any MCP Server in 2 Lines
+
+**Before** — a standard MCP server with no identity or proofs:
+
+```typescript
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+
+const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+
+server.registerTool('greet', { description: 'Say hello' }, async (args) => ({
+  content: [{ type: 'text', text: `Hello, ${args.name}!` }],
+}));
+```
+
+**After** — every tool response now carries a signed cryptographic proof:
+
+```typescript
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { withMCPI, NodeCryptoProvider } from '@kya-os/mcp';  // +1 line
+
+const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+await withMCPI(server, { crypto: new NodeCryptoProvider() }); // +1 line
+
+server.registerTool('greet', { description: 'Say hello' }, async (args) => ({
+  content: [{ type: 'text', text: `Hello, ${args.name}!` }],
+}));
+```
+
+That's it. `withMCPI` auto-generates an Ed25519 identity, registers the `_mcpi` protocol tool, and wraps the transport so every tool response includes a detached JWS proof in `_meta` — invisible to the LLM, verifiable by anyone.
+
+> See the full working example: [examples/context7-with-mcpi](./examples/context7-with-mcpi/) — a real MCP server (Context7) migrated with exactly 2 lines of code.
+
+---
+
+## Protect Tools with Human Consent
+
+Some tools shouldn't run without a human saying "yes." MCP-I adds per-tool authorization using W3C Verifiable Credentials:
+
+```typescript
+const checkout = mcpi.wrapWithDelegation(
+  'checkout',
+  { scopeId: 'cart:write', consentUrl: 'https://example.com/consent' },
+  mcpi.wrapWithProof('checkout', async (args) => ({
+    content: [{ type: 'text', text: `Order placed: ${args.item}` }],
+  })),
+);
+```
+
+When an agent calls `checkout` without a delegation credential, it gets back a `needs_authorization` response with a consent URL. The human approves, a scoped credential is issued, and the agent retries — now authorized.
+
+> Try it yourself: [examples/consent-basic](./examples/consent-basic/) walks through the full consent flow end-to-end.
+
+---
+
+## See It in Action
+
+```bash
+git clone https://github.com/modelcontextprotocol-identity/mcp-i-core.git
+cd mcp-i-core && npm install
+bash scripts/demo.sh
+```
+
+This starts all example servers and opens [MCP Inspector](https://github.com/modelcontextprotocol/inspector). Connect to any server, call a tool, and inspect the proof in `_meta`:
+
+| Port | Example | What it demonstrates |
+|------|---------|---------------------|
+| 3001 | [node-server](./examples/node-server/) | Proofs + restricted tools (low-level API) |
+| 3002 | [consent-basic](./examples/consent-basic/) | Human consent flow with built-in UI |
+| 3003 | [consent-full](./examples/consent-full/) | Production consent UI ([@kya-os/consent](https://www.npmjs.com/package/@kya-os/consent)) |
+| 3004 | [context7-with-mcpi](./examples/context7-with-mcpi/) | 2-line migration of a real MCP server |
+
+Also available: [outbound-delegation](./examples/outbound-delegation/) (gateway pattern), [verify-proof](./examples/verify-proof/) (standalone verification), [statuslist](./examples/statuslist/) (revocation lifecycle).
+
+---
+
+## What's Under the Hood
+
+| Capability | How it works |
+|-----------|-------------|
+| **Cryptographic identity** | Ed25519 key pairs, `did:key` and `did:web` resolution |
+| **Signed proofs** | Detached JWS over JCS-canonicalized request/response hashes |
+| **Delegation credentials** | W3C Verifiable Credentials with scope constraints |
+| **Revocation** | StatusList2021 bitstring with cascading revocation |
+| **Replay prevention** | Nonce-based handshake with timestamp skew validation |
+| **Extensible** | Bring your own KMS, HSM, nonce cache (Redis, DynamoDB, KV), or DID method |
+
+---
+
+## Links
+
+- [Spec](https://modelcontextprotocol-identity.io) | [DIF TAAWG](https://identity.foundation/working-groups/agent-and-authorization.html) | [npm](https://www.npmjs.com/package/@kya-os/mcp)
+- [CONTRIBUTING.md](./CONTRIBUTING.md) | [CONFORMANCE.md](./CONFORMANCE.md) | [SECURITY.md](./SECURITY.md) | [GOVERNANCE.md](./GOVERNANCE.md)
+
+## License
+
+MIT

package/dist/auth/handshake.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Authorization Handshake — Platform-agnostic Protocol Reference
+ *
+ * Orchestrates the MCP-I authorization flow:
+ * 1. Check agent reputation (optional)
+ * 2. Verify delegation exists
+ * 3. Return needs_authorization error if missing
+ *
+ * Uses only the global fetch API — no Node-specific imports.
+ * Safe to run on Node.js, Cloudflare Workers, and any fetch-capable runtime.
+ */
+import type { NeedsAuthorizationError } from '../types/protocol.js';
+import type { DelegationRecord } from '../types/protocol.js';
+import type { DelegationVerifier, VerifyDelegationResult } from './types.js';
+export type { DelegationVerifier, VerifyDelegationResult };
+export interface AgentReputation {
+    agentDid: string;
+    score: number | null;
+    totalInteractions: number;
+    successRate: number;
+    riskLevel: 'low' | 'medium' | 'high' | 'unknown';
+    updatedAt: number;
+}
+/**
+ * Policy for handling agents with no reputation history.
+ *
+ * - 'deny'            — reject unknown agents outright (strict environments)
+ * - 'require-consent' — route to the consent/authorization flow (default)
+ * - 'allow'           — let unknown agents through (reputation is advisory only)
+ */
+export type UnknownAgentPolicy = 'deny' | 'require-consent' | 'allow';
+export interface AuthHandshakeConfig {
+    delegationVerifier: DelegationVerifier;
+    resumeTokenStore: ResumeTokenStore;
+    reputationService?: {
+        apiUrl: string;
+        apiKey?: string;
+        apiFormat?: 'v1' | 'v2';
+    };
+    authorization: {
+        authorizationUrl: string;
+        resumeTokenTtl?: number;
+        /**
+         * How to handle agents with no reputation history (404 from reputation
+         * service, network error, or first-time agent).
+         *
+         * - 'deny'            — reject outright
+         * - 'require-consent' — route to consent flow (default)
+         * - 'allow'           — skip reputation gate for unknowns
+         */
+        unknownAgentPolicy?: UnknownAgentPolicy;
+        minReputationScore?: number;
+    };
+    debug?: boolean;
+}
+export interface VerifyOrHintsResult {
+    authorized: boolean;
+    delegation?: DelegationRecord;
+    credential?: {
+        agent_did: string;
+        user_did: string;
+        scopes: string[];
+        authorization: {
+            type: 'oauth' | 'oauth2' | 'password' | 'credential' | 'webauthn' | 'siwe' | 'none';
+            provider?: string;
+            credentialType?: string;
+            rpId?: string;
+            userVerification?: 'required' | 'preferred' | 'discouraged';
+            chainId?: number;
+            domain?: string;
+        };
+        [key: string]: unknown;
+    };
+    authError?: NeedsAuthorizationError;
+    reputation?: AgentReputation;
+    reason?: string;
+}
+export interface ResumeTokenStore {
+    create(agentDid: string, scopes: string[], metadata?: Record<string, unknown>): Promise<string>;
+    get(token: string): Promise<{
+        agentDid: string;
+        scopes: string[];
+        createdAt: number;
+        expiresAt: number;
+        metadata?: Record<string, unknown>;
+    } | null>;
+    fulfill(token: string): Promise<void>;
+}
+export declare class MemoryResumeTokenStore implements ResumeTokenStore {
+    private tokens;
+    private ttl;
+    constructor(ttlMs?: number);
+    create(agentDid: string, scopes: string[], metadata?: Record<string, unknown>): Promise<string>;
+    get(token: string): Promise<{
+        agentDid: string;
+        scopes: string[];
+        createdAt: number;
+        expiresAt: number;
+        metadata?: Record<string, unknown>;
+    } | null>;
+    fulfill(token: string): Promise<void>;
+    clear(): void;
+}
+/**
+ * Verify agent delegation or return authorization hints.
+ *
+ * Orchestrates the authorization flow:
+ * 1. Optionally check agent reputation against threshold
+ * 2. Verify existing delegation via DelegationVerifier
+ * 3. Return authorization hints if delegation is missing/invalid
+ *
+ * @param agentDid - The agent's DID to verify
+ * @param scopes - Required scopes for the operation
+ * @param config - Authorization configuration including verifier, token store, etc.
+ * @returns Result indicating authorization status, delegation, or auth hints
+ */
+export declare function verifyOrHints(agentDid: string, scopes: string[], config: AuthHandshakeConfig): Promise<VerifyOrHintsResult>;
+export declare function hasSensitiveScopes(scopes: string[]): boolean;
+//# sourceMappingURL=handshake.d.ts.map

package/dist/auth/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/auth/handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,uBAAuB,EAExB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAE7E,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,iBAAiB,GAAG,OAAO,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,iBAAiB,CAAC,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;KACzB,CAAC;IACF,aAAa,EAAE;QACb,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;;;;WAOG;QACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;QACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,UAAU,CAAC,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,aAAa,EAAE;YACb,IAAI,EACA,OAAO,GACP,QAAQ,GACR,UAAU,GACV,YAAY,GACZ,UAAU,GACV,MAAM,GACN,MAAM,CAAC;YACX,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,gBAAgB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;YAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,MAAM,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,IAAI,CAAC,CAAC;IAEV,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,qBAAa,sBAAuB,YAAW,gBAAgB;IAC7D,OAAO,CAAC,MAAM,CAUV;IACJ,OAAO,CAAC,GAAG,CAAS;gBAER,KAAK,SAAU;IAIrB,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,MAAM,CAAC;IAmBZ,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,IAAI,CAAC;IAoBH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3C,KAAK,IAAI,IAAI;CAGd;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CA+I9B;AA8GD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAc5D"}

package/dist/auth/handshake.js

@@ -0,0 +1,267 @@
+/**
+ * Authorization Handshake — Platform-agnostic Protocol Reference
+ *
+ * Orchestrates the MCP-I authorization flow:
+ * 1. Check agent reputation (optional)
+ * 2. Verify delegation exists
+ * 3. Return needs_authorization error if missing
+ *
+ * Uses only the global fetch API — no Node-specific imports.
+ * Safe to run on Node.js, Cloudflare Workers, and any fetch-capable runtime.
+ */
+import { createNeedsAuthorizationError } from '../types/protocol.js';
+import { logger } from '../logging/index.js';
+export class MemoryResumeTokenStore {
+    tokens = new Map();
+    ttl;
+    constructor(ttlMs = 600_000) {
+        this.ttl = ttlMs;
+    }
+    async create(agentDid, scopes, metadata) {
+        const bytes = new Uint8Array(16);
+        globalThis.crypto.getRandomValues(bytes);
+        const hex = Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('');
+        const token = `rt_${hex}`;
+        const now = Date.now();
+        this.tokens.set(token, {
+            agentDid,
+            scopes,
+            createdAt: now,
+            expiresAt: now + this.ttl,
+            metadata,
+            fulfilled: false,
+        });
+        return token;
+    }
+    async get(token) {
+        const data = this.tokens.get(token);
+        if (!data)
+            return null;
+        if (Date.now() > data.expiresAt) {
+            this.tokens.delete(token);
+            return null;
+        }
+        if (data.fulfilled)
+            return null;
+        return {
+            agentDid: data.agentDid,
+            scopes: data.scopes,
+            createdAt: data.createdAt,
+            expiresAt: data.expiresAt,
+            metadata: data.metadata,
+        };
+    }
+    async fulfill(token) {
+        const data = this.tokens.get(token);
+        if (data) {
+            data.fulfilled = true;
+        }
+    }
+    clear() {
+        this.tokens.clear();
+    }
+}
+/**
+ * Verify agent delegation or return authorization hints.
+ *
+ * Orchestrates the authorization flow:
+ * 1. Optionally check agent reputation against threshold
+ * 2. Verify existing delegation via DelegationVerifier
+ * 3. Return authorization hints if delegation is missing/invalid
+ *
+ * @param agentDid - The agent's DID to verify
+ * @param scopes - Required scopes for the operation
+ * @param config - Authorization configuration including verifier, token store, etc.
+ * @returns Result indicating authorization status, delegation, or auth hints
+ */
+export async function verifyOrHints(agentDid, scopes, config) {
+    const startTime = Date.now();
+    if (config.debug) {
+        logger.debug(`[AuthHandshake] Verifying ${agentDid} for scopes: ${scopes.join(', ')}`);
+    }
+    let reputation;
+    if (config.reputationService && config.authorization.minReputationScore !== undefined) {
+        const unknownPolicy = config.authorization.unknownAgentPolicy ?? 'require-consent';
+        try {
+            reputation = await fetchAgentReputation(agentDid, config.reputationService);
+        }
+        catch (error) {
+            logger.error('[AuthHandshake] Reputation service unreachable, treating agent as unknown:', error);
+            reputation = {
+                agentDid,
+                score: null,
+                totalInteractions: 0,
+                successRate: 0,
+                riskLevel: 'unknown',
+                updatedAt: Date.now(),
+            };
+        }
+        if (config.debug) {
+            logger.debug(`[AuthHandshake] Reputation score: ${reputation.score}`);
+        }
+        // Unknown agent (no reputation data)
+        if (reputation.score === null) {
+            if (unknownPolicy === 'deny') {
+                const authError = await buildNeedsAuthorizationError(agentDid, scopes, config, 'Unknown agent denied by policy');
+                return {
+                    authorized: false,
+                    authError,
+                    reputation,
+                    reason: 'Unknown agent — policy: deny',
+                };
+            }
+            if (unknownPolicy === 'require-consent') {
+                const authError = await buildNeedsAuthorizationError(agentDid, scopes, config, 'Unknown agent requires consent');
+                return {
+                    authorized: false,
+                    authError,
+                    reputation,
+                    reason: 'Unknown agent — policy: require-consent',
+                };
+            }
+            // unknownPolicy === 'allow' — skip reputation gate, continue to delegation check
+            if (config.debug) {
+                logger.debug('[AuthHandshake] Unknown agent allowed by policy, skipping reputation gate');
+            }
+        }
+        // Known agent with score below threshold
+        if (reputation.score !== null && reputation.score < config.authorization.minReputationScore) {
+            if (config.debug) {
+                logger.debug(`[AuthHandshake] Reputation ${reputation.score} < ${config.authorization.minReputationScore}, requiring authorization`);
+            }
+            const authError = await buildNeedsAuthorizationError(agentDid, scopes, config, 'Agent reputation score below threshold');
+            return {
+                authorized: false,
+                authError,
+                reputation,
+                reason: 'Low reputation score',
+            };
+        }
+    }
+    let delegationResult;
+    try {
+        delegationResult = await config.delegationVerifier.verify(agentDid, scopes);
+    }
+    catch (error) {
+        logger.error('[AuthHandshake] Delegation verification failed:', error);
+        const errorMessage = `Delegation verification error: ${error instanceof Error ? error.message : 'Unknown error'}`;
+        const authError = await buildNeedsAuthorizationError(agentDid, scopes, config, errorMessage);
+        return {
+            authorized: false,
+            authError,
+            reason: errorMessage,
+        };
+    }
+    if (delegationResult.valid && delegationResult.delegation) {
+        if (config.debug) {
+            logger.debug(`[AuthHandshake] Delegation valid, authorized (${Date.now() - startTime}ms)`);
+        }
+        return {
+            authorized: true,
+            delegation: delegationResult.delegation,
+            credential: delegationResult.credential,
+            reputation,
+            reason: 'Valid delegation found',
+        };
+    }
+    if (config.debug) {
+        logger.debug(`[AuthHandshake] No delegation found, returning needs_authorization (${Date.now() - startTime}ms)`);
+    }
+    const authError = await buildNeedsAuthorizationError(agentDid, scopes, config, delegationResult.reason ?? 'No valid delegation found');
+    return {
+        authorized: false,
+        authError,
+        reputation,
+        reason: delegationResult.reason ?? 'No delegation',
+    };
+}
+async function fetchAgentReputation(agentDid, reputationConfig) {
+    const apiUrl = reputationConfig.apiUrl.replace(/\/$/, '');
+    const headers = {
+        'Content-Type': 'application/json',
+    };
+    if (reputationConfig.apiKey) {
+        headers['X-API-Key'] = reputationConfig.apiKey;
+    }
+    const isV2Format = reputationConfig.apiFormat === 'v2';
+    let response;
+    if (isV2Format) {
+        response = await fetch(`${apiUrl}/v1/reputation/${encodeURIComponent(agentDid)}`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({ include_details: false }),
+        });
+    }
+    else {
+        response = await fetch(`${apiUrl}/api/v1/reputation/${encodeURIComponent(agentDid)}`, { method: 'GET', headers });
+    }
+    if (!response.ok) {
+        if (response.status === 404) {
+            return {
+                agentDid,
+                score: null,
+                totalInteractions: 0,
+                successRate: 0,
+                riskLevel: 'unknown',
+                updatedAt: Date.now(),
+            };
+        }
+        throw new Error(`Reputation API error: ${response.status} ${response.statusText}`);
+    }
+    const data = (await response.json());
+    const score = data['score'] ?? 0;
+    const levelRaw = (data['level'] ??
+        data['riskLevel'] ??
+        'unknown').toLowerCase();
+    const riskLevel = levelRaw === 'low' || levelRaw === 'medium' || levelRaw === 'high' ? levelRaw : 'unknown';
+    return {
+        agentDid: data['agent_did'] ??
+            data['agentDid'] ??
+            agentDid,
+        score,
+        totalInteractions: data['totalInteractions'] ?? 0,
+        successRate: data['successRate'] ?? 0,
+        riskLevel,
+        updatedAt: data['calculatedAt']
+            ? new Date(data['calculatedAt']).getTime()
+            : (data['updatedAt'] ?? Date.now()),
+    };
+}
+async function buildNeedsAuthorizationError(agentDid, scopes, config, message) {
+    const resumeToken = await config.resumeTokenStore.create(agentDid, scopes, {
+        requestedAt: Date.now(),
+    });
+    const expiresAt = Date.now() + (config.authorization.resumeTokenTtl ?? 600_000);
+    const authUrl = new URL(config.authorization.authorizationUrl);
+    authUrl.searchParams.set('agent_did', agentDid);
+    authUrl.searchParams.set('scopes', scopes.join(','));
+    authUrl.searchParams.set('resume_token', resumeToken);
+    const authCode = resumeToken.substring(0, 8).toUpperCase();
+    const display = {
+        title: 'Authorization Required',
+        hint: ['link', 'qr'],
+        authorizationCode: authCode,
+        qrUrl: `https://api.qrserver.com/v1/create-qr-code/?data=${encodeURIComponent(authUrl.toString())}`,
+    };
+    return createNeedsAuthorizationError({
+        message,
+        authorizationUrl: authUrl.toString(),
+        resumeToken,
+        expiresAt,
+        scopes,
+        display,
+    });
+}
+export function hasSensitiveScopes(scopes) {
+    const sensitivePatterns = [
+        'write',
+        'delete',
+        'admin',
+        'payment',
+        'transfer',
+        'execute',
+        'modify',
+    ];
+    return scopes.some((scope) => sensitivePatterns.some((pattern) => scope.toLowerCase().includes(pattern)));
+}
+//# sourceMappingURL=handshake.js.map

package/dist/auth/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../../src/auth/handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAgG7C,MAAM,OAAO,sBAAsB;IACzB,MAAM,GAAG,IAAI,GAAG,EAUrB,CAAC;IACI,GAAG,CAAS;IAEpB,YAAY,KAAK,GAAG,OAAO;QACzB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,MAAgB,EAChB,QAAkC;QAElC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,MAAM,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG;YACzB,QAAQ;YACR,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QAOrB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAEhC,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,MAAgB,EAChB,MAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,UAAuC,CAAC;IAC5C,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,aAAa,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACtF,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;QAEnF,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4EAA4E,EAAE,KAAK,CAAC,CAAC;YAClG,UAAU,GAAG;gBACX,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,qCAAqC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,qCAAqC;QACrC,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAClD,QAAQ,EACR,MAAM,EACN,MAAM,EACN,gCAAgC,CACjC,CAAC;gBACF,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,SAAS;oBACT,UAAU;oBACV,MAAM,EAAE,8BAA8B;iBACvC,CAAC;YACJ,CAAC;YAED,IAAI,aAAa,KAAK,iBAAiB,EAAE,CAAC;gBACxC,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAClD,QAAQ,EACR,MAAM,EACN,MAAM,EACN,gCAAgC,CACjC,CAAC;gBACF,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,SAAS;oBACT,UAAU;oBACV,MAAM,EAAE,yCAAyC;iBAClD,CAAC;YACJ,CAAC;YAED,iFAAiF;YACjF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,IAAI,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC;YAC5F,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,CACV,8BAA8B,UAAU,CAAC,KAAK,MAAM,MAAM,CAAC,aAAa,CAAC,kBAAkB,2BAA2B,CACvH,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAClD,QAAQ,EACR,MAAM,EACN,MAAM,EACN,wCAAwC,CACzC,CAAC;YAEF,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,SAAS;gBACT,UAAU;gBACV,MAAM,EAAE,sBAAsB;aAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,gBAAwC,CAAC;IAE7C,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QAElH,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAE7F,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,SAAS;YACT,MAAM,EAAE,YAAY;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,KAAK,IAAI,gBAAgB,CAAC,UAAU,EAAE,CAAC;QAC1D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CACV,iDAAiD,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,KAAK,CAC7E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,gBAAgB,CAAC,UAAU;YACvC,UAAU,EAAE,gBAAgB,CAAC,UAAU;YACvC,UAAU;YACV,MAAM,EAAE,wBAAwB;SACjC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CACV,uEAAuE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,KAAK,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAClD,QAAQ,EACR,MAAM,EACN,MAAM,EACN,gBAAgB,CAAC,MAAM,IAAI,2BAA2B,CACvD,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,SAAS;QACT,UAAU;QACV,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,eAAe;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAgB,EAChB,gBAA8E;IAE9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,WAAW,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,KAAK,IAAI,CAAC;IACvD,IAAI,QAAkB,CAAC;IAEvB,IAAI,UAAU,EAAE,CAAC;QACf,QAAQ,GAAG,MAAM,KAAK,CACpB,GAAG,MAAM,kBAAkB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACzD;YACE,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;SACjD,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,KAAK,CACpB,GAAG,MAAM,sBAAsB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAC7D,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAC3B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO;gBACL,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAEhE,MAAM,KAAK,GAAI,IAAI,CAAC,OAAO,CAAwB,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,CACd,IAAI,CAAC,OAAO,CAAwB;QACpC,IAAI,CAAC,WAAW,CAAwB;QACzC,SAAS,CACV,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,SAAS,GACb,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5F,OAAO;QACL,QAAQ,EACL,IAAI,CAAC,WAAW,CAAwB;YACxC,IAAI,CAAC,UAAU,CAAwB;YACxC,QAAQ;QACV,KAAK;QACL,iBAAiB,EAAG,IAAI,CAAC,mBAAmB,CAAwB,IAAI,CAAC;QACzE,WAAW,EAAG,IAAI,CAAC,aAAa,CAAwB,IAAI,CAAC;QAC7D,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC;YAC7B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAW,CAAC,CAAC,OAAO,EAAE;YACpD,CAAC,CAAC,CAAE,IAAI,CAAC,WAAW,CAAwB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,QAAgB,EAChB,MAAgB,EAChB,MAA2B,EAC3B,OAAe;IAEf,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE;QACzE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,IAAI,OAAO,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC/D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAE3D,MAAM,OAAO,GAAyB;QACpC,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;QACpB,iBAAiB,EAAE,QAAQ;QAC3B,KAAK,EAAE,oDAAoD,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE;KACpG,CAAC;IAEF,OAAO,6BAA6B,CAAC;QACnC,OAAO;QACP,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE;QACpC,WAAW;QACX,SAAS;QACT,MAAM;QACN,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAgB;IACjD,MAAM,iBAAiB,GAAG;QACxB,OAAO;QACP,QAAQ;QACR,OAAO;QACP,SAAS;QACT,UAAU;QACV,SAAS;QACT,QAAQ;KACT,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,3 @@
+export { verifyOrHints, hasSensitiveScopes, MemoryResumeTokenStore, type AuthHandshakeConfig, type VerifyOrHintsResult, type AgentReputation, type ResumeTokenStore, type UnknownAgentPolicy, } from './handshake.js';
+export type { DelegationVerifier, VerifyDelegationResult } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,2 @@
+export { verifyOrHints, hasSensitiveScopes, MemoryResumeTokenStore, } from './handshake.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,sBAAsB,GAMvB,MAAM,gBAAgB,CAAC"}