@lelu-auth/lelu 0.1.0

package/dist/express/index.js

@@ -0,0 +1,277 @@
+'use strict';
+
+var zod = require('zod');
+
+// src/types.ts
+var AuthRequestSchema = zod.z.object({
+  userId: zod.z.string().min(1, "userId is required"),
+  action: zod.z.string().min(1, "action is required"),
+  resource: zod.z.record(zod.z.string()).optional()
+});
+var AgentContextSchema = zod.z.object({
+  /** LLM confidence score — 0.0 to 1.0 */
+  confidence: zod.z.number().min(0).max(1),
+  /** User the agent is acting on behalf of */
+  actingFor: zod.z.string().optional(),
+  /** Requested agent scope */
+  scope: zod.z.string().optional()
+});
+var AgentAuthRequestSchema = zod.z.object({
+  actor: zod.z.string().min(1, "actor is required"),
+  action: zod.z.string().min(1, "action is required"),
+  resource: zod.z.record(zod.z.string()).optional(),
+  context: AgentContextSchema
+});
+var MintTokenRequestSchema = zod.z.object({
+  scope: zod.z.string().min(1),
+  actingFor: zod.z.string().optional(),
+  ttlSeconds: zod.z.number().int().positive().optional()
+});
+var DelegateScopeRequestSchema = zod.z.object({
+  delegator: zod.z.string().min(1, "delegator is required"),
+  delegatee: zod.z.string().min(1, "delegatee is required"),
+  scopedTo: zod.z.array(zod.z.string().min(1)).optional(),
+  ttlSeconds: zod.z.number().int().positive().optional(),
+  confidence: zod.z.number().min(0).max(1).optional(),
+  actingFor: zod.z.string().optional(),
+  tenantId: zod.z.string().optional()
+});
+var AuthEngineError = class extends Error {
+  constructor(message, status, details) {
+    super(message);
+    this.status = status;
+    this.details = details;
+    this.name = "AuthEngineError";
+  }
+};
+
+// src/client.ts
+var LeluClient = class {
+  baseUrl;
+  timeoutMs;
+  apiKey;
+  constructor(cfg = {}) {
+    this.baseUrl = (cfg.baseUrl ?? "http://localhost:8080").replace(/\/$/, "");
+    this.timeoutMs = cfg.timeoutMs ?? 5e3;
+    this.apiKey = cfg.apiKey;
+  }
+  // ── Human authorization ────────────────────────────────────────────────────
+  /**
+   * Checks whether a human user is permitted to perform an action.
+   */
+  async authorize(req) {
+    const validated = AuthRequestSchema.parse(req);
+    const body = {
+      user_id: validated.userId,
+      action: validated.action,
+      resource: validated.resource
+    };
+    const data = await this.post("/v1/authorize", body);
+    return {
+      allowed: data.allowed,
+      reason: data.reason,
+      traceId: data.trace_id
+    };
+  }
+  // ── Agent authorization ────────────────────────────────────────────────────
+  /**
+   * Checks whether an AI agent is permitted to perform an action, taking the
+   * confidence score into account (Confidence-Aware Auth ★).
+   */
+  async agentAuthorize(req) {
+    const validated = AgentAuthRequestSchema.parse(req);
+    const body = {
+      actor: validated.actor,
+      action: validated.action,
+      resource: validated.resource,
+      confidence: validated.context.confidence,
+      acting_for: validated.context.actingFor,
+      scope: validated.context.scope
+    };
+    const data = await this.post("/v1/agent/authorize", body);
+    return {
+      allowed: data.allowed,
+      reason: data.reason,
+      traceId: data.trace_id,
+      downgradedScope: data.downgraded_scope,
+      requiresHumanReview: data.requires_human_review,
+      confidenceUsed: data.confidence_used
+    };
+  }
+  // ── JIT Token minting ──────────────────────────────────────────────────────
+  /**
+   * Mints a scoped JWT for an agent with an optional TTL.
+   * Default TTL is 60 seconds.
+   */
+  async mintToken(req) {
+    const validated = MintTokenRequestSchema.parse(req);
+    const body = {
+      scope: validated.scope,
+      acting_for: validated.actingFor,
+      ttl_seconds: validated.ttlSeconds ?? 60
+    };
+    const data = await this.post("/v1/tokens/mint", body);
+    return {
+      token: data.token,
+      tokenId: data.token_id,
+      expiresAt: new Date(data.expires_at * 1e3)
+    };
+  }
+  // ── Token revocation ───────────────────────────────────────────────────────
+  /**
+   * Immediately revokes a JIT token by its ID.
+   */
+  async revokeToken(tokenId) {
+    const data = await this.delete(
+      `/v1/tokens/${encodeURIComponent(tokenId)}`
+    );
+    return { success: data.success };
+  }
+  // ── Multi-agent delegation ─────────────────────────────────────────────────
+  /**
+   * Delegates a constrained sub-scope from one agent to another.
+   *
+   * Validates the delegation rule in the loaded policy, caps the TTL to the
+   * policy maximum, and mints a child JIT token scoped to the granted actions.
+   *
+   * The delegator's `confidence` score is checked against the policy's
+   * `require_confidence_above` before delegation is granted.
+   */
+  async delegateScope(req) {
+    const validated = DelegateScopeRequestSchema.parse(req);
+    const body = {
+      delegator: validated.delegator,
+      delegatee: validated.delegatee,
+      scoped_to: validated.scopedTo ?? [],
+      ttl_seconds: validated.ttlSeconds ?? 60,
+      confidence: validated.confidence ?? 1,
+      acting_for: validated.actingFor ?? "",
+      tenant_id: validated.tenantId ?? ""
+    };
+    const data = await this.post("/v1/agent/delegate", body);
+    return {
+      token: data.token,
+      tokenId: data.token_id,
+      expiresAt: new Date(data.expires_at * 1e3),
+      delegator: data.delegator,
+      delegatee: data.delegatee,
+      grantedScopes: data.granted_scopes,
+      traceId: data.trace_id
+    };
+  }
+  // ── Health check ───────────────────────────────────────────────────────────
+  /**
+   * Returns true if the engine is reachable and healthy.
+   */
+  async isHealthy() {
+    try {
+      const data = await this.get("/healthz");
+      return data.status === "ok";
+    } catch {
+      return false;
+    }
+  }
+  // ── HTTP helpers ───────────────────────────────────────────────────────────
+  headers() {
+    const h = { "Content-Type": "application/json" };
+    if (this.apiKey) {
+      h["Authorization"] = `Bearer ${this.apiKey}`;
+    }
+    return h;
+  }
+  async post(path, body) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+    try {
+      const res = await fetch(`${this.baseUrl}${path}`, {
+        method: "POST",
+        headers: this.headers(),
+        body: JSON.stringify(body),
+        signal: ctrl.signal
+      });
+      return this.parseResponse(res);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async delete(path) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+    try {
+      const res = await fetch(`${this.baseUrl}${path}`, {
+        method: "DELETE",
+        headers: this.headers(),
+        signal: ctrl.signal
+      });
+      return this.parseResponse(res);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async get(path) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+    try {
+      const res = await fetch(`${this.baseUrl}${path}`, {
+        method: "GET",
+        headers: this.headers(),
+        signal: ctrl.signal
+      });
+      return this.parseResponse(res);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async parseResponse(res) {
+    const json = await res.json();
+    if (!res.ok) {
+      throw new AuthEngineError(
+        json["error"] ?? "engine error",
+        res.status,
+        json
+      );
+    }
+    return json;
+  }
+};
+
+// src/express/index.ts
+function authorize(action, opts = {}) {
+  const clientConfig = {
+    baseUrl: opts.baseUrl ?? process.env["LELU_BASE_URL"] ?? "http://localhost:8080"
+  };
+  const apiKey = opts.apiKey ?? process.env["LELU_API_KEY"];
+  if (apiKey !== void 0) {
+    clientConfig.apiKey = apiKey;
+  }
+  const client = opts.client ?? new LeluClient(clientConfig);
+  const actorHeader = opts.actorHeader ?? "x-actor";
+  const confidence = opts.confidence ?? 1;
+  return async function leluAuthorize(req, res, next) {
+    const actor = req.headers[actorHeader] ?? "anonymous";
+    try {
+      const decision = await client.agentAuthorize({ actor, action, context: { confidence } });
+      if (decision.allowed) {
+        req.leluDecision = decision;
+        next();
+        return;
+      }
+      res.status(403).json({
+        error: "forbidden",
+        decision: decision.allowed,
+        reason: decision.reason ?? "denied by policy",
+        actor,
+        action
+      });
+    } catch (err) {
+      res.status(503).json({
+        error: "lelu_unavailable",
+        message: err instanceof Error ? err.message : String(err)
+      });
+    }
+  };
+}
+
+exports.authorize = authorize;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/express/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types.ts","../../src/client.ts","../../src/express/index.ts"],"names":["z"],"mappings":";;;;;AAIO,IAAM,iBAAA,GAAoBA,MAAE,MAAA,CAAO;AAAA,EACxC,QAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EAC9C,QAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EAC9C,UAAUA,KAAA,CAAE,MAAA,CAAOA,MAAE,MAAA,EAAQ,EAAE,QAAA;AACjC,CAAC,CAAA;AAEM,IAAM,kBAAA,GAAqBA,MAAE,MAAA,CAAO;AAAA;AAAA,EAEzC,UAAA,EAAYA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEnC,SAAA,EAAWA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAE/B,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACpB,CAAC,CAAA;AAEM,IAAM,sBAAA,GAAyBA,MAAE,MAAA,CAAO;AAAA,EAC7C,OAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,mBAAmB,CAAA;AAAA,EAC5C,QAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EAC9C,UAAUA,KAAA,CAAE,MAAA,CAAOA,MAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACxC,OAAA,EAAS;AACX,CAAC,CAAA;AAEM,IAAM,sBAAA,GAAyBA,MAAE,MAAA,CAAO;AAAA,EAC7C,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,SAAA,EAAWA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,UAAA,EAAYA,MAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA;AAC1C,CAAC,CAAA;AAEM,IAAM,0BAAA,GAA6BA,MAAE,MAAA,CAAO;AAAA,EACjD,WAAWA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,uBAAuB,CAAA;AAAA,EACpD,WAAWA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,uBAAuB,CAAA;AAAA,EACpD,QAAA,EAAUA,KAAA,CAAE,KAAA,CAAMA,KAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC9C,UAAA,EAAYA,MAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA,EAAS;AAAA,EACjD,UAAA,EAAYA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC9C,SAAA,EAAWA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,QAAA,EAAUA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACvB,CAAC,CAAA;AA2EM,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACzC,WAAA,CACE,OAAA,EACgB,MAAA,EACA,OAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AAAA,EACd;AACF,CAAA;;;ACrFO,IAAM,aAAN,MAAiB;AAAA,EACL,OAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EAEjB,WAAA,CAAY,GAAA,GAAoB,EAAC,EAAG;AAClC,IAAA,IAAA,CAAK,WAAW,GAAA,CAAI,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzE,IAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,IAAa,GAAA;AAClC,IAAA,IAAA,CAAK,SAAS,GAAA,CAAI,MAAA;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAU,GAAA,EAAyC;AACvD,IAAA,MAAM,SAAA,GAAY,iBAAA,CAAkB,KAAA,CAAM,GAAG,CAAA;AAC7C,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,SAAS,SAAA,CAAU,MAAA;AAAA,MACnB,QAAQ,SAAA,CAAU,MAAA;AAAA,MAClB,UAAU,SAAA,CAAU;AAAA,KACtB;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAIrB,iBAAiB,IAAI,CAAA;AAExB,IAAA,OAAO;AAAA,MACL,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,SAAS,IAAA,CAAK;AAAA,KAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,eAAe,GAAA,EAAmD;AACtE,IAAA,MAAM,SAAA,GAAY,sBAAA,CAAuB,KAAA,CAAM,GAAG,CAAA;AAClD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,OAAO,SAAA,CAAU,KAAA;AAAA,MACjB,QAAQ,SAAA,CAAU,MAAA;AAAA,MAClB,UAAU,SAAA,CAAU,QAAA;AAAA,MACpB,UAAA,EAAY,UAAU,OAAA,CAAQ,UAAA;AAAA,MAC9B,UAAA,EAAY,UAAU,OAAA,CAAQ,SAAA;AAAA,MAC9B,KAAA,EAAO,UAAU,OAAA,CAAQ;AAAA,KAC3B;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAOrB,uBAAuB,IAAI,CAAA;AAE9B,IAAA,OAAO;AAAA,MACL,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,SAAS,IAAA,CAAK,QAAA;AAAA,MACd,iBAAiB,IAAA,CAAK,gBAAA;AAAA,MACtB,qBAAqB,IAAA,CAAK,qBAAA;AAAA,MAC1B,gBAAgB,IAAA,CAAK;AAAA,KACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAU,GAAA,EAAiD;AAC/D,IAAA,MAAM,SAAA,GAAY,sBAAA,CAAuB,KAAA,CAAM,GAAG,CAAA;AAClD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,OAAO,SAAA,CAAU,KAAA;AAAA,MACjB,YAAY,SAAA,CAAU,SAAA;AAAA,MACtB,WAAA,EAAa,UAAU,UAAA,IAAc;AAAA,KACvC;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAIrB,mBAAmB,IAAI,CAAA;AAE1B,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,SAAS,IAAA,CAAK,QAAA;AAAA,MACd,SAAA,EAAW,IAAI,IAAA,CAAK,IAAA,CAAK,aAAa,GAAI;AAAA,KAC5C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,OAAA,EAA6C;AAC7D,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA;AAAA,MACtB,CAAA,WAAA,EAAc,kBAAA,CAAmB,OAAO,CAAC,CAAA;AAAA,KAC3C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,cAAc,GAAA,EAAyD;AAC3E,IAAA,MAAM,SAAA,GAAY,0BAAA,CAA2B,KAAA,CAAM,GAAG,CAAA;AACtD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,WAAW,SAAA,CAAU,SAAA;AAAA,MACrB,WAAW,SAAA,CAAU,SAAA;AAAA,MACrB,SAAA,EAAW,SAAA,CAAU,QAAA,IAAY,EAAC;AAAA,MAClC,WAAA,EAAa,UAAU,UAAA,IAAc,EAAA;AAAA,MACrC,UAAA,EAAY,UAAU,UAAA,IAAc,CAAA;AAAA,MACpC,UAAA,EAAY,UAAU,SAAA,IAAa,EAAA;AAAA,MACnC,SAAA,EAAW,UAAU,QAAA,IAAY;AAAA,KACnC;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAQrB,sBAAsB,IAAI,CAAA;AAE7B,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,SAAS,IAAA,CAAK,QAAA;AAAA,MACd,SAAA,EAAW,IAAI,IAAA,CAAK,IAAA,CAAK,aAAa,GAAI,CAAA;AAAA,MAC1C,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,eAAe,IAAA,CAAK,cAAA;AAAA,MACpB,SAAS,IAAA,CAAK;AAAA,KAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAA,GAA8B;AAClC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAwB,UAAU,CAAA;AAC1D,MAAA,OAAO,KAAK,MAAA,KAAW,IAAA;AAAA,IACzB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAIQ,OAAA,GAAkC;AACxC,IAAA,MAAM,CAAA,GAA4B,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AACvE,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,CAAA,CAAE,eAAe,CAAA,GAAI,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,CAAA;AAAA,EACT;AAAA,EAEA,MAAc,IAAA,CAAQ,IAAA,EAAc,IAAA,EAA2B;AAC7D,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,EAAgB;AACjC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,KAAK,KAAA,EAAM,EAAG,KAAK,SAAS,CAAA;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QAChD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,QACtB,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,QACzB,QAAQ,IAAA,CAAK;AAAA,OACd,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,IAClC,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,OAAU,IAAA,EAA0B;AAChD,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,EAAgB;AACjC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,KAAK,KAAA,EAAM,EAAG,KAAK,SAAS,CAAA;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QAChD,MAAA,EAAQ,QAAA;AAAA,QACR,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,QACtB,QAAQ,IAAA,CAAK;AAAA,OACd,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,IAClC,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,IAAO,IAAA,EAA0B;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,EAAgB;AACjC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,KAAK,KAAA,EAAM,EAAG,KAAK,SAAS,CAAA;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QAChD,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,QACtB,QAAQ,IAAA,CAAK;AAAA,OACd,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,IAClC,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACxD,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,eAAA;AAAA,QACP,IAAA,CAAK,OAAO,CAAA,IAAgB,cAAA;AAAA,QAC7B,GAAA,CAAI,MAAA;AAAA,QACJ;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAA;;;ACpPO,SAAS,SAAA,CAAU,MAAA,EAAgB,IAAA,GAAyB,EAAC,EAAmB;AACrF,EAAA,MAAM,YAAA,GAAoB;AAAA,IACxB,SAAS,IAAA,CAAK,OAAA,IAAW,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK;AAAA,GAC3D;AACA,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,OAAA,CAAQ,IAAI,cAAc,CAAA;AACxD,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,YAAA,CAAa,MAAA,GAAS,MAAA;AAAA,EACxB;AACA,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,IAAI,WAAW,YAAY,CAAA;AAEzD,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,SAAA;AACxC,EAAA,MAAM,UAAA,GAAa,KAAK,UAAA,IAAc,CAAA;AAEtC,EAAA,OAAO,eAAe,aAAA,CACpB,GAAA,EACA,GAAA,EACA,IAAA,EACe;AACf,IAAA,MAAM,KAAA,GAAS,GAAA,CAAI,OAAA,CAAQ,WAAW,CAAA,IAA4B,WAAA;AAElE,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,cAAA,CAAe,EAAE,KAAA,EAAO,MAAA,EAAQ,OAAA,EAAS,EAAE,UAAA,EAAW,EAAG,CAAA;AAEvF,MAAA,IAAI,SAAS,OAAA,EAAS;AAEpB,QAAC,IAAoD,YAAA,GAAe,QAAA;AACpE,QAAA,IAAA,EAAK;AACL,QAAA;AAAA,MACF;AAEA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,KAAA,EAAO,WAAA;AAAA,QACP,UAAU,QAAA,CAAS,OAAA;AAAA,QACnB,MAAA,EAAQ,SAAS,MAAA,IAAU,kBAAA;AAAA,QAC3B,KAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,KAAA,EAAO,kBAAA;AAAA,QACP,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,OACzD,CAAA;AAAA,IACH;AAAA,EACF,CAAA;AACF","file":"index.js","sourcesContent":["import { z } from \"zod\";\n\n// ─── Request / Response schemas ───────────────────────────────────────────────\n\nexport const AuthRequestSchema = z.object({\n  userId: z.string().min(1, \"userId is required\"),\n  action: z.string().min(1, \"action is required\"),\n  resource: z.record(z.string()).optional(),\n});\n\nexport const AgentContextSchema = z.object({\n  /** LLM confidence score — 0.0 to 1.0 */\n  confidence: z.number().min(0).max(1),\n  /** User the agent is acting on behalf of */\n  actingFor: z.string().optional(),\n  /** Requested agent scope */\n  scope: z.string().optional(),\n});\n\nexport const AgentAuthRequestSchema = z.object({\n  actor: z.string().min(1, \"actor is required\"),\n  action: z.string().min(1, \"action is required\"),\n  resource: z.record(z.string()).optional(),\n  context: AgentContextSchema,\n});\n\nexport const MintTokenRequestSchema = z.object({\n  scope: z.string().min(1),\n  actingFor: z.string().optional(),\n  ttlSeconds: z.number().int().positive().optional(),\n});\n\nexport const DelegateScopeRequestSchema = z.object({\n  delegator: z.string().min(1, \"delegator is required\"),\n  delegatee: z.string().min(1, \"delegatee is required\"),\n  scopedTo: z.array(z.string().min(1)).optional(),\n  ttlSeconds: z.number().int().positive().optional(),\n  confidence: z.number().min(0).max(1).optional(),\n  actingFor: z.string().optional(),\n  tenantId: z.string().optional(),\n});\n\n// ─── Decision types ───────────────────────────────────────────────────────────\n\nexport interface AuthDecision {\n  allowed: boolean;\n  reason: string;\n  traceId: string;\n}\n\nexport interface AgentAuthDecision {\n  allowed: boolean;\n  reason: string;\n  traceId: string;\n  downgradedScope: string | undefined;\n  requiresHumanReview: boolean;\n  confidenceUsed: number;\n}\n\nexport interface MintTokenResult {\n  token: string;\n  tokenId: string;\n  expiresAt: Date;\n}\n\nexport interface DelegateScopeRequest {\n  /** Agent delegating the scope */\n  delegator: string;\n  /** Agent receiving the constrained sub-scope */\n  delegatee: string;\n  /** Actions to grant (must be subset of policy's can_delegate.scoped_to) */\n  scopedTo?: string[];\n  /** Token TTL in seconds — capped by the policy's max_ttl_seconds */\n  ttlSeconds?: number;\n  /** Delegator's confidence score — checked against require_confidence_above */\n  confidence?: number;\n  /** User the delegated agent acts on behalf of */\n  actingFor?: string;\n  tenantId?: string;\n}\n\nexport interface DelegateScopeResult {\n  token: string;\n  tokenId: string;\n  expiresAt: Date;\n  delegator: string;\n  delegatee: string;\n  grantedScopes: string[];\n  traceId: string;\n}\n\nexport interface RevokeTokenResult {\n  success: boolean;\n}\n\n// ─── Typed Input types ───────────────────────────────────────────────────────\n\nexport type AuthRequest = z.infer<typeof AuthRequestSchema>;\nexport type AgentAuthRequest = z.infer<typeof AgentAuthRequestSchema>;\nexport type AgentContext = z.infer<typeof AgentContextSchema>;\nexport type MintTokenRequest = z.infer<typeof MintTokenRequestSchema>;\n\n// ─── Client config ────────────────────────────────────────────────────────────\n\nexport interface ClientConfig {\n  /** Base URL of the Auth Permission Engine (default: http://localhost:8080) */\n  baseUrl?: string;\n  /** Request timeout in milliseconds (default: 5000) */\n  timeoutMs?: number;\n  /** Optional bearer token for authenticating with the engine */\n  apiKey?: string;\n}\n\n// ─── Error type ───────────────────────────────────────────────────────────────\n\nexport class AuthEngineError extends Error {\n  constructor(\n    message: string,\n    public readonly status?: number,\n    public readonly details?: unknown\n  ) {\n    super(message);\n    this.name = \"AuthEngineError\";\n  }\n}\n","import {\n  AuthEngineError,\n  AuthRequestSchema,\n  AgentAuthRequestSchema,\n  MintTokenRequestSchema,\n  DelegateScopeRequestSchema,\n  type AuthDecision,\n  type AgentAuthDecision,\n  type MintTokenResult,\n  type DelegateScopeResult,\n  type DelegateScopeRequest,\n  type RevokeTokenResult,\n  type AuthRequest,\n  type AgentAuthRequest,\n  type MintTokenRequest,\n  type ClientConfig,\n} from \"./types.js\";\n\n// ─── Client ───────────────────────────────────────────────────────────────────\n\n/**\n * LeluClient is the core SDK entry-point. It communicates with the local\n * Auth Permission Engine sidecar over HTTP/JSON.\n *\n * @example\n * ```ts\n * const lelu = new LeluClient({ baseUrl: \"http://localhost:8080\" });\n *\n * const decision = await lelu.agentAuthorize({\n *   actor: \"invoice_bot\",\n *   action: \"approve_refunds\",\n *   context: { confidence: 0.92, actingFor: \"user_123\" },\n * });\n *\n * if (!decision.allowed) {\n *   console.log(decision.reason);\n * }\n * ```\n */\nexport class LeluClient {\n  private readonly baseUrl: string;\n  private readonly timeoutMs: number;\n  private readonly apiKey: string | undefined;\n\n  constructor(cfg: ClientConfig = {}) {\n    this.baseUrl = (cfg.baseUrl ?? \"http://localhost:8080\").replace(/\\/$/, \"\");\n    this.timeoutMs = cfg.timeoutMs ?? 5_000;\n    this.apiKey = cfg.apiKey;\n  }\n\n  // ── Human authorization ────────────────────────────────────────────────────\n\n  /**\n   * Checks whether a human user is permitted to perform an action.\n   */\n  async authorize(req: AuthRequest): Promise<AuthDecision> {\n    const validated = AuthRequestSchema.parse(req);\n    const body = {\n      user_id: validated.userId,\n      action: validated.action,\n      resource: validated.resource,\n    };\n    const data = await this.post<{\n      allowed: boolean;\n      reason: string;\n      trace_id: string;\n    }>(\"/v1/authorize\", body);\n\n    return {\n      allowed: data.allowed,\n      reason: data.reason,\n      traceId: data.trace_id,\n    };\n  }\n\n  // ── Agent authorization ────────────────────────────────────────────────────\n\n  /**\n   * Checks whether an AI agent is permitted to perform an action, taking the\n   * confidence score into account (Confidence-Aware Auth ★).\n   */\n  async agentAuthorize(req: AgentAuthRequest): Promise<AgentAuthDecision> {\n    const validated = AgentAuthRequestSchema.parse(req);\n    const body = {\n      actor: validated.actor,\n      action: validated.action,\n      resource: validated.resource,\n      confidence: validated.context.confidence,\n      acting_for: validated.context.actingFor,\n      scope: validated.context.scope,\n    };\n    const data = await this.post<{\n      allowed: boolean;\n      reason: string;\n      trace_id: string;\n      downgraded_scope?: string;\n      requires_human_review: boolean;\n      confidence_used: number;\n    }>(\"/v1/agent/authorize\", body);\n\n    return {\n      allowed: data.allowed,\n      reason: data.reason,\n      traceId: data.trace_id,\n      downgradedScope: data.downgraded_scope,\n      requiresHumanReview: data.requires_human_review,\n      confidenceUsed: data.confidence_used,\n    };\n  }\n\n  // ── JIT Token minting ──────────────────────────────────────────────────────\n\n  /**\n   * Mints a scoped JWT for an agent with an optional TTL.\n   * Default TTL is 60 seconds.\n   */\n  async mintToken(req: MintTokenRequest): Promise<MintTokenResult> {\n    const validated = MintTokenRequestSchema.parse(req);\n    const body = {\n      scope: validated.scope,\n      acting_for: validated.actingFor,\n      ttl_seconds: validated.ttlSeconds ?? 60,\n    };\n    const data = await this.post<{\n      token: string;\n      token_id: string;\n      expires_at: number;\n    }>(\"/v1/tokens/mint\", body);\n\n    return {\n      token: data.token,\n      tokenId: data.token_id,\n      expiresAt: new Date(data.expires_at * 1000),\n    };\n  }\n\n  // ── Token revocation ───────────────────────────────────────────────────────\n\n  /**\n   * Immediately revokes a JIT token by its ID.\n   */\n  async revokeToken(tokenId: string): Promise<RevokeTokenResult> {\n    const data = await this.delete<{ success: boolean }>(\n      `/v1/tokens/${encodeURIComponent(tokenId)}`\n    );\n    return { success: data.success };\n  }\n\n  // ── Multi-agent delegation ─────────────────────────────────────────────────\n\n  /**\n   * Delegates a constrained sub-scope from one agent to another.\n   *\n   * Validates the delegation rule in the loaded policy, caps the TTL to the\n   * policy maximum, and mints a child JIT token scoped to the granted actions.\n   *\n   * The delegator's `confidence` score is checked against the policy's\n   * `require_confidence_above` before delegation is granted.\n   */\n  async delegateScope(req: DelegateScopeRequest): Promise<DelegateScopeResult> {\n    const validated = DelegateScopeRequestSchema.parse(req);\n    const body = {\n      delegator: validated.delegator,\n      delegatee: validated.delegatee,\n      scoped_to: validated.scopedTo ?? [],\n      ttl_seconds: validated.ttlSeconds ?? 60,\n      confidence: validated.confidence ?? 1.0,\n      acting_for: validated.actingFor ?? \"\",\n      tenant_id: validated.tenantId ?? \"\",\n    };\n    const data = await this.post<{\n      token: string;\n      token_id: string;\n      expires_at: number;\n      delegator: string;\n      delegatee: string;\n      granted_scopes: string[];\n      trace_id: string;\n    }>(\"/v1/agent/delegate\", body);\n\n    return {\n      token: data.token,\n      tokenId: data.token_id,\n      expiresAt: new Date(data.expires_at * 1000),\n      delegator: data.delegator,\n      delegatee: data.delegatee,\n      grantedScopes: data.granted_scopes,\n      traceId: data.trace_id,\n    };\n  }\n\n  // ── Health check ───────────────────────────────────────────────────────────\n\n  /**\n   * Returns true if the engine is reachable and healthy.\n   */\n  async isHealthy(): Promise<boolean> {\n    try {\n      const data = await this.get<{ status: string }>(\"/healthz\");\n      return data.status === \"ok\";\n    } catch {\n      return false;\n    }\n  }\n\n  // ── HTTP helpers ───────────────────────────────────────────────────────────\n\n  private headers(): Record<string, string> {\n    const h: Record<string, string> = { \"Content-Type\": \"application/json\" };\n    if (this.apiKey) {\n      h[\"Authorization\"] = `Bearer ${this.apiKey}`;\n    }\n    return h;\n  }\n\n  private async post<T>(path: string, body: unknown): Promise<T> {\n    const ctrl = new AbortController();\n    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n    try {\n      const res = await fetch(`${this.baseUrl}${path}`, {\n        method: \"POST\",\n        headers: this.headers(),\n        body: JSON.stringify(body),\n        signal: ctrl.signal,\n      });\n      return this.parseResponse<T>(res);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async delete<T>(path: string): Promise<T> {\n    const ctrl = new AbortController();\n    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n    try {\n      const res = await fetch(`${this.baseUrl}${path}`, {\n        method: \"DELETE\",\n        headers: this.headers(),\n        signal: ctrl.signal,\n      });\n      return this.parseResponse<T>(res);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async get<T>(path: string): Promise<T> {\n    const ctrl = new AbortController();\n    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n    try {\n      const res = await fetch(`${this.baseUrl}${path}`, {\n        method: \"GET\",\n        headers: this.headers(),\n        signal: ctrl.signal,\n      });\n      return this.parseResponse<T>(res);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async parseResponse<T>(res: Response): Promise<T> {\n    const json = (await res.json()) as Record<string, unknown>;\n    if (!res.ok) {\n      throw new AuthEngineError(\n        (json[\"error\"] as string) ?? \"engine error\",\n        res.status,\n        json\n      );\n    }\n    return json as T;\n  }\n}\n","import type { Request, Response, NextFunction, RequestHandler } from \"express\";\nimport { LeluClient } from \"../client\";\n\nexport interface AuthorizeOptions {\n  /** Base URL of the Lelu engine (default: http://localhost:8080) */\n  baseUrl?: string;\n  /** API key for the Lelu engine */\n  apiKey?: string;\n  /** HTTP header that carries the actor identifier (default: x-actor) */\n  actorHeader?: string;\n  /** Confidence score to pass to the engine (default: 1.0) */\n  confidence?: number;\n  /** Explicit LeluClient instance (overrides baseUrl/apiKey) */\n  client?: LeluClient;\n}\n\n/**\n * Express middleware factory that calls the Lelu engine and either calls\n * `next()` (allowed) or returns a 403 JSON response (denied / human_review).\n *\n * ```ts\n * import express from \"express\";\n * import { authorize } from \"@lelu/sdk/express\";\n *\n * const app = express();\n * app.get(\"/sensitive\", authorize(\"files.read\", { confidence: 0.9 }), handler);\n * ```\n */\nexport function authorize(action: string, opts: AuthorizeOptions = {}): RequestHandler {\n  const clientConfig: any = {\n    baseUrl: opts.baseUrl ?? process.env[\"LELU_BASE_URL\"] ?? \"http://localhost:8080\",\n  };\n  const apiKey = opts.apiKey ?? process.env[\"LELU_API_KEY\"];\n  if (apiKey !== undefined) {\n    clientConfig.apiKey = apiKey;\n  }\n  const client = opts.client ?? new LeluClient(clientConfig);\n\n  const actorHeader = opts.actorHeader ?? \"x-actor\";\n  const confidence = opts.confidence ?? 1.0;\n\n  return async function leluAuthorize(\n    req: Request,\n    res: Response,\n    next: NextFunction\n  ): Promise<void> {\n    const actor = (req.headers[actorHeader] as string | undefined) ?? \"anonymous\";\n\n    try {\n      const decision = await client.agentAuthorize({ actor, action, context: { confidence } });\n\n      if (decision.allowed) {\n        // Attach decision to request for downstream handlers\n        (req as Request & { leluDecision: typeof decision }).leluDecision = decision;\n        next();\n        return;\n      }\n\n      res.status(403).json({\n        error: \"forbidden\",\n        decision: decision.allowed,\n        reason: decision.reason ?? \"denied by policy\",\n        actor,\n        action,\n      });\n    } catch (err) {\n      res.status(503).json({\n        error: \"lelu_unavailable\",\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  };\n}\n"]}

package/dist/express/index.mjs

@@ -0,0 +1,275 @@
+import { z } from 'zod';
+
+// src/types.ts
+var AuthRequestSchema = z.object({
+  userId: z.string().min(1, "userId is required"),
+  action: z.string().min(1, "action is required"),
+  resource: z.record(z.string()).optional()
+});
+var AgentContextSchema = z.object({
+  /** LLM confidence score — 0.0 to 1.0 */
+  confidence: z.number().min(0).max(1),
+  /** User the agent is acting on behalf of */
+  actingFor: z.string().optional(),
+  /** Requested agent scope */
+  scope: z.string().optional()
+});
+var AgentAuthRequestSchema = z.object({
+  actor: z.string().min(1, "actor is required"),
+  action: z.string().min(1, "action is required"),
+  resource: z.record(z.string()).optional(),
+  context: AgentContextSchema
+});
+var MintTokenRequestSchema = z.object({
+  scope: z.string().min(1),
+  actingFor: z.string().optional(),
+  ttlSeconds: z.number().int().positive().optional()
+});
+var DelegateScopeRequestSchema = z.object({
+  delegator: z.string().min(1, "delegator is required"),
+  delegatee: z.string().min(1, "delegatee is required"),
+  scopedTo: z.array(z.string().min(1)).optional(),
+  ttlSeconds: z.number().int().positive().optional(),
+  confidence: z.number().min(0).max(1).optional(),
+  actingFor: z.string().optional(),
+  tenantId: z.string().optional()
+});
+var AuthEngineError = class extends Error {
+  constructor(message, status, details) {
+    super(message);
+    this.status = status;
+    this.details = details;
+    this.name = "AuthEngineError";
+  }
+};
+
+// src/client.ts
+var LeluClient = class {
+  baseUrl;
+  timeoutMs;
+  apiKey;
+  constructor(cfg = {}) {
+    this.baseUrl = (cfg.baseUrl ?? "http://localhost:8080").replace(/\/$/, "");
+    this.timeoutMs = cfg.timeoutMs ?? 5e3;
+    this.apiKey = cfg.apiKey;
+  }
+  // ── Human authorization ────────────────────────────────────────────────────
+  /**
+   * Checks whether a human user is permitted to perform an action.
+   */
+  async authorize(req) {
+    const validated = AuthRequestSchema.parse(req);
+    const body = {
+      user_id: validated.userId,
+      action: validated.action,
+      resource: validated.resource
+    };
+    const data = await this.post("/v1/authorize", body);
+    return {
+      allowed: data.allowed,
+      reason: data.reason,
+      traceId: data.trace_id
+    };
+  }
+  // ── Agent authorization ────────────────────────────────────────────────────
+  /**
+   * Checks whether an AI agent is permitted to perform an action, taking the
+   * confidence score into account (Confidence-Aware Auth ★).
+   */
+  async agentAuthorize(req) {
+    const validated = AgentAuthRequestSchema.parse(req);
+    const body = {
+      actor: validated.actor,
+      action: validated.action,
+      resource: validated.resource,
+      confidence: validated.context.confidence,
+      acting_for: validated.context.actingFor,
+      scope: validated.context.scope
+    };
+    const data = await this.post("/v1/agent/authorize", body);
+    return {
+      allowed: data.allowed,
+      reason: data.reason,
+      traceId: data.trace_id,
+      downgradedScope: data.downgraded_scope,
+      requiresHumanReview: data.requires_human_review,
+      confidenceUsed: data.confidence_used
+    };
+  }
+  // ── JIT Token minting ──────────────────────────────────────────────────────
+  /**
+   * Mints a scoped JWT for an agent with an optional TTL.
+   * Default TTL is 60 seconds.
+   */
+  async mintToken(req) {
+    const validated = MintTokenRequestSchema.parse(req);
+    const body = {
+      scope: validated.scope,
+      acting_for: validated.actingFor,
+      ttl_seconds: validated.ttlSeconds ?? 60
+    };
+    const data = await this.post("/v1/tokens/mint", body);
+    return {
+      token: data.token,
+      tokenId: data.token_id,
+      expiresAt: new Date(data.expires_at * 1e3)
+    };
+  }
+  // ── Token revocation ───────────────────────────────────────────────────────
+  /**
+   * Immediately revokes a JIT token by its ID.
+   */
+  async revokeToken(tokenId) {
+    const data = await this.delete(
+      `/v1/tokens/${encodeURIComponent(tokenId)}`
+    );
+    return { success: data.success };
+  }
+  // ── Multi-agent delegation ─────────────────────────────────────────────────
+  /**
+   * Delegates a constrained sub-scope from one agent to another.
+   *
+   * Validates the delegation rule in the loaded policy, caps the TTL to the
+   * policy maximum, and mints a child JIT token scoped to the granted actions.
+   *
+   * The delegator's `confidence` score is checked against the policy's
+   * `require_confidence_above` before delegation is granted.
+   */
+  async delegateScope(req) {
+    const validated = DelegateScopeRequestSchema.parse(req);
+    const body = {
+      delegator: validated.delegator,
+      delegatee: validated.delegatee,
+      scoped_to: validated.scopedTo ?? [],
+      ttl_seconds: validated.ttlSeconds ?? 60,
+      confidence: validated.confidence ?? 1,
+      acting_for: validated.actingFor ?? "",
+      tenant_id: validated.tenantId ?? ""
+    };
+    const data = await this.post("/v1/agent/delegate", body);
+    return {
+      token: data.token,
+      tokenId: data.token_id,
+      expiresAt: new Date(data.expires_at * 1e3),
+      delegator: data.delegator,
+      delegatee: data.delegatee,
+      grantedScopes: data.granted_scopes,
+      traceId: data.trace_id
+    };
+  }
+  // ── Health check ───────────────────────────────────────────────────────────
+  /**
+   * Returns true if the engine is reachable and healthy.
+   */
+  async isHealthy() {
+    try {
+      const data = await this.get("/healthz");
+      return data.status === "ok";
+    } catch {
+      return false;
+    }
+  }
+  // ── HTTP helpers ───────────────────────────────────────────────────────────
+  headers() {
+    const h = { "Content-Type": "application/json" };
+    if (this.apiKey) {
+      h["Authorization"] = `Bearer ${this.apiKey}`;
+    }
+    return h;
+  }
+  async post(path, body) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+    try {
+      const res = await fetch(`${this.baseUrl}${path}`, {
+        method: "POST",
+        headers: this.headers(),
+        body: JSON.stringify(body),
+        signal: ctrl.signal
+      });
+      return this.parseResponse(res);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async delete(path) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+    try {
+      const res = await fetch(`${this.baseUrl}${path}`, {
+        method: "DELETE",
+        headers: this.headers(),
+        signal: ctrl.signal
+      });
+      return this.parseResponse(res);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async get(path) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+    try {
+      const res = await fetch(`${this.baseUrl}${path}`, {
+        method: "GET",
+        headers: this.headers(),
+        signal: ctrl.signal
+      });
+      return this.parseResponse(res);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async parseResponse(res) {
+    const json = await res.json();
+    if (!res.ok) {
+      throw new AuthEngineError(
+        json["error"] ?? "engine error",
+        res.status,
+        json
+      );
+    }
+    return json;
+  }
+};
+
+// src/express/index.ts
+function authorize(action, opts = {}) {
+  const clientConfig = {
+    baseUrl: opts.baseUrl ?? process.env["LELU_BASE_URL"] ?? "http://localhost:8080"
+  };
+  const apiKey = opts.apiKey ?? process.env["LELU_API_KEY"];
+  if (apiKey !== void 0) {
+    clientConfig.apiKey = apiKey;
+  }
+  const client = opts.client ?? new LeluClient(clientConfig);
+  const actorHeader = opts.actorHeader ?? "x-actor";
+  const confidence = opts.confidence ?? 1;
+  return async function leluAuthorize(req, res, next) {
+    const actor = req.headers[actorHeader] ?? "anonymous";
+    try {
+      const decision = await client.agentAuthorize({ actor, action, context: { confidence } });
+      if (decision.allowed) {
+        req.leluDecision = decision;
+        next();
+        return;
+      }
+      res.status(403).json({
+        error: "forbidden",
+        decision: decision.allowed,
+        reason: decision.reason ?? "denied by policy",
+        actor,
+        action
+      });
+    } catch (err) {
+      res.status(503).json({
+        error: "lelu_unavailable",
+        message: err instanceof Error ? err.message : String(err)
+      });
+    }
+  };
+}
+
+export { authorize };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/express/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types.ts","../../src/client.ts","../../src/express/index.ts"],"names":[],"mappings":";;;AAIO,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,QAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EAC9C,QAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EAC9C,UAAU,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAQ,EAAE,QAAA;AACjC,CAAC,CAAA;AAEM,IAAM,kBAAA,GAAqB,EAAE,MAAA,CAAO;AAAA;AAAA,EAEzC,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEnC,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAE/B,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACpB,CAAC,CAAA;AAEM,IAAM,sBAAA,GAAyB,EAAE,MAAA,CAAO;AAAA,EAC7C,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,mBAAmB,CAAA;AAAA,EAC5C,QAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,oBAAoB,CAAA;AAAA,EAC9C,UAAU,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACxC,OAAA,EAAS;AACX,CAAC,CAAA;AAEM,IAAM,sBAAA,GAAyB,EAAE,MAAA,CAAO;AAAA,EAC7C,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA;AAC1C,CAAC,CAAA;AAEM,IAAM,0BAAA,GAA6B,EAAE,MAAA,CAAO;AAAA,EACjD,WAAW,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,uBAAuB,CAAA;AAAA,EACpD,WAAW,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,uBAAuB,CAAA;AAAA,EACpD,QAAA,EAAU,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC9C,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA,EAAS;AAAA,EACjD,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC9C,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACvB,CAAC,CAAA;AA2EM,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACzC,WAAA,CACE,OAAA,EACgB,MAAA,EACA,OAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AAAA,EACd;AACF,CAAA;;;ACrFO,IAAM,aAAN,MAAiB;AAAA,EACL,OAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EAEjB,WAAA,CAAY,GAAA,GAAoB,EAAC,EAAG;AAClC,IAAA,IAAA,CAAK,WAAW,GAAA,CAAI,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzE,IAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,IAAa,GAAA;AAClC,IAAA,IAAA,CAAK,SAAS,GAAA,CAAI,MAAA;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAU,GAAA,EAAyC;AACvD,IAAA,MAAM,SAAA,GAAY,iBAAA,CAAkB,KAAA,CAAM,GAAG,CAAA;AAC7C,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,SAAS,SAAA,CAAU,MAAA;AAAA,MACnB,QAAQ,SAAA,CAAU,MAAA;AAAA,MAClB,UAAU,SAAA,CAAU;AAAA,KACtB;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAIrB,iBAAiB,IAAI,CAAA;AAExB,IAAA,OAAO;AAAA,MACL,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,SAAS,IAAA,CAAK;AAAA,KAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,eAAe,GAAA,EAAmD;AACtE,IAAA,MAAM,SAAA,GAAY,sBAAA,CAAuB,KAAA,CAAM,GAAG,CAAA;AAClD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,OAAO,SAAA,CAAU,KAAA;AAAA,MACjB,QAAQ,SAAA,CAAU,MAAA;AAAA,MAClB,UAAU,SAAA,CAAU,QAAA;AAAA,MACpB,UAAA,EAAY,UAAU,OAAA,CAAQ,UAAA;AAAA,MAC9B,UAAA,EAAY,UAAU,OAAA,CAAQ,SAAA;AAAA,MAC9B,KAAA,EAAO,UAAU,OAAA,CAAQ;AAAA,KAC3B;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAOrB,uBAAuB,IAAI,CAAA;AAE9B,IAAA,OAAO;AAAA,MACL,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,SAAS,IAAA,CAAK,QAAA;AAAA,MACd,iBAAiB,IAAA,CAAK,gBAAA;AAAA,MACtB,qBAAqB,IAAA,CAAK,qBAAA;AAAA,MAC1B,gBAAgB,IAAA,CAAK;AAAA,KACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAU,GAAA,EAAiD;AAC/D,IAAA,MAAM,SAAA,GAAY,sBAAA,CAAuB,KAAA,CAAM,GAAG,CAAA;AAClD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,OAAO,SAAA,CAAU,KAAA;AAAA,MACjB,YAAY,SAAA,CAAU,SAAA;AAAA,MACtB,WAAA,EAAa,UAAU,UAAA,IAAc;AAAA,KACvC;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAIrB,mBAAmB,IAAI,CAAA;AAE1B,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,SAAS,IAAA,CAAK,QAAA;AAAA,MACd,SAAA,EAAW,IAAI,IAAA,CAAK,IAAA,CAAK,aAAa,GAAI;AAAA,KAC5C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,OAAA,EAA6C;AAC7D,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA;AAAA,MACtB,CAAA,WAAA,EAAc,kBAAA,CAAmB,OAAO,CAAC,CAAA;AAAA,KAC3C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,cAAc,GAAA,EAAyD;AAC3E,IAAA,MAAM,SAAA,GAAY,0BAAA,CAA2B,KAAA,CAAM,GAAG,CAAA;AACtD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,WAAW,SAAA,CAAU,SAAA;AAAA,MACrB,WAAW,SAAA,CAAU,SAAA;AAAA,MACrB,SAAA,EAAW,SAAA,CAAU,QAAA,IAAY,EAAC;AAAA,MAClC,WAAA,EAAa,UAAU,UAAA,IAAc,EAAA;AAAA,MACrC,UAAA,EAAY,UAAU,UAAA,IAAc,CAAA;AAAA,MACpC,UAAA,EAAY,UAAU,SAAA,IAAa,EAAA;AAAA,MACnC,SAAA,EAAW,UAAU,QAAA,IAAY;AAAA,KACnC;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAQrB,sBAAsB,IAAI,CAAA;AAE7B,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,SAAS,IAAA,CAAK,QAAA;AAAA,MACd,SAAA,EAAW,IAAI,IAAA,CAAK,IAAA,CAAK,aAAa,GAAI,CAAA;AAAA,MAC1C,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,eAAe,IAAA,CAAK,cAAA;AAAA,MACpB,SAAS,IAAA,CAAK;AAAA,KAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAA,GAA8B;AAClC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAwB,UAAU,CAAA;AAC1D,MAAA,OAAO,KAAK,MAAA,KAAW,IAAA;AAAA,IACzB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAIQ,OAAA,GAAkC;AACxC,IAAA,MAAM,CAAA,GAA4B,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AACvE,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,CAAA,CAAE,eAAe,CAAA,GAAI,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,CAAA;AAAA,EACT;AAAA,EAEA,MAAc,IAAA,CAAQ,IAAA,EAAc,IAAA,EAA2B;AAC7D,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,EAAgB;AACjC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,KAAK,KAAA,EAAM,EAAG,KAAK,SAAS,CAAA;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QAChD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,QACtB,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,QACzB,QAAQ,IAAA,CAAK;AAAA,OACd,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,IAClC,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,OAAU,IAAA,EAA0B;AAChD,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,EAAgB;AACjC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,KAAK,KAAA,EAAM,EAAG,KAAK,SAAS,CAAA;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QAChD,MAAA,EAAQ,QAAA;AAAA,QACR,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,QACtB,QAAQ,IAAA,CAAK;AAAA,OACd,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,IAClC,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,IAAO,IAAA,EAA0B;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAI,eAAA,EAAgB;AACjC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,KAAK,KAAA,EAAM,EAAG,KAAK,SAAS,CAAA;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QAChD,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,QACtB,QAAQ,IAAA,CAAK;AAAA,OACd,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,IAClC,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACxD,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,eAAA;AAAA,QACP,IAAA,CAAK,OAAO,CAAA,IAAgB,cAAA;AAAA,QAC7B,GAAA,CAAI,MAAA;AAAA,QACJ;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAA;;;ACpPO,SAAS,SAAA,CAAU,MAAA,EAAgB,IAAA,GAAyB,EAAC,EAAmB;AACrF,EAAA,MAAM,YAAA,GAAoB;AAAA,IACxB,SAAS,IAAA,CAAK,OAAA,IAAW,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK;AAAA,GAC3D;AACA,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,OAAA,CAAQ,IAAI,cAAc,CAAA;AACxD,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,YAAA,CAAa,MAAA,GAAS,MAAA;AAAA,EACxB;AACA,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,IAAI,WAAW,YAAY,CAAA;AAEzD,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,SAAA;AACxC,EAAA,MAAM,UAAA,GAAa,KAAK,UAAA,IAAc,CAAA;AAEtC,EAAA,OAAO,eAAe,aAAA,CACpB,GAAA,EACA,GAAA,EACA,IAAA,EACe;AACf,IAAA,MAAM,KAAA,GAAS,GAAA,CAAI,OAAA,CAAQ,WAAW,CAAA,IAA4B,WAAA;AAElE,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,cAAA,CAAe,EAAE,KAAA,EAAO,MAAA,EAAQ,OAAA,EAAS,EAAE,UAAA,EAAW,EAAG,CAAA;AAEvF,MAAA,IAAI,SAAS,OAAA,EAAS;AAEpB,QAAC,IAAoD,YAAA,GAAe,QAAA;AACpE,QAAA,IAAA,EAAK;AACL,QAAA;AAAA,MACF;AAEA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,KAAA,EAAO,WAAA;AAAA,QACP,UAAU,QAAA,CAAS,OAAA;AAAA,QACnB,MAAA,EAAQ,SAAS,MAAA,IAAU,kBAAA;AAAA,QAC3B,KAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,KAAA,EAAO,kBAAA;AAAA,QACP,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,OACzD,CAAA;AAAA,IACH;AAAA,EACF,CAAA;AACF","file":"index.mjs","sourcesContent":["import { z } from \"zod\";\n\n// ─── Request / Response schemas ───────────────────────────────────────────────\n\nexport const AuthRequestSchema = z.object({\n  userId: z.string().min(1, \"userId is required\"),\n  action: z.string().min(1, \"action is required\"),\n  resource: z.record(z.string()).optional(),\n});\n\nexport const AgentContextSchema = z.object({\n  /** LLM confidence score — 0.0 to 1.0 */\n  confidence: z.number().min(0).max(1),\n  /** User the agent is acting on behalf of */\n  actingFor: z.string().optional(),\n  /** Requested agent scope */\n  scope: z.string().optional(),\n});\n\nexport const AgentAuthRequestSchema = z.object({\n  actor: z.string().min(1, \"actor is required\"),\n  action: z.string().min(1, \"action is required\"),\n  resource: z.record(z.string()).optional(),\n  context: AgentContextSchema,\n});\n\nexport const MintTokenRequestSchema = z.object({\n  scope: z.string().min(1),\n  actingFor: z.string().optional(),\n  ttlSeconds: z.number().int().positive().optional(),\n});\n\nexport const DelegateScopeRequestSchema = z.object({\n  delegator: z.string().min(1, \"delegator is required\"),\n  delegatee: z.string().min(1, \"delegatee is required\"),\n  scopedTo: z.array(z.string().min(1)).optional(),\n  ttlSeconds: z.number().int().positive().optional(),\n  confidence: z.number().min(0).max(1).optional(),\n  actingFor: z.string().optional(),\n  tenantId: z.string().optional(),\n});\n\n// ─── Decision types ───────────────────────────────────────────────────────────\n\nexport interface AuthDecision {\n  allowed: boolean;\n  reason: string;\n  traceId: string;\n}\n\nexport interface AgentAuthDecision {\n  allowed: boolean;\n  reason: string;\n  traceId: string;\n  downgradedScope: string | undefined;\n  requiresHumanReview: boolean;\n  confidenceUsed: number;\n}\n\nexport interface MintTokenResult {\n  token: string;\n  tokenId: string;\n  expiresAt: Date;\n}\n\nexport interface DelegateScopeRequest {\n  /** Agent delegating the scope */\n  delegator: string;\n  /** Agent receiving the constrained sub-scope */\n  delegatee: string;\n  /** Actions to grant (must be subset of policy's can_delegate.scoped_to) */\n  scopedTo?: string[];\n  /** Token TTL in seconds — capped by the policy's max_ttl_seconds */\n  ttlSeconds?: number;\n  /** Delegator's confidence score — checked against require_confidence_above */\n  confidence?: number;\n  /** User the delegated agent acts on behalf of */\n  actingFor?: string;\n  tenantId?: string;\n}\n\nexport interface DelegateScopeResult {\n  token: string;\n  tokenId: string;\n  expiresAt: Date;\n  delegator: string;\n  delegatee: string;\n  grantedScopes: string[];\n  traceId: string;\n}\n\nexport interface RevokeTokenResult {\n  success: boolean;\n}\n\n// ─── Typed Input types ───────────────────────────────────────────────────────\n\nexport type AuthRequest = z.infer<typeof AuthRequestSchema>;\nexport type AgentAuthRequest = z.infer<typeof AgentAuthRequestSchema>;\nexport type AgentContext = z.infer<typeof AgentContextSchema>;\nexport type MintTokenRequest = z.infer<typeof MintTokenRequestSchema>;\n\n// ─── Client config ────────────────────────────────────────────────────────────\n\nexport interface ClientConfig {\n  /** Base URL of the Auth Permission Engine (default: http://localhost:8080) */\n  baseUrl?: string;\n  /** Request timeout in milliseconds (default: 5000) */\n  timeoutMs?: number;\n  /** Optional bearer token for authenticating with the engine */\n  apiKey?: string;\n}\n\n// ─── Error type ───────────────────────────────────────────────────────────────\n\nexport class AuthEngineError extends Error {\n  constructor(\n    message: string,\n    public readonly status?: number,\n    public readonly details?: unknown\n  ) {\n    super(message);\n    this.name = \"AuthEngineError\";\n  }\n}\n","import {\n  AuthEngineError,\n  AuthRequestSchema,\n  AgentAuthRequestSchema,\n  MintTokenRequestSchema,\n  DelegateScopeRequestSchema,\n  type AuthDecision,\n  type AgentAuthDecision,\n  type MintTokenResult,\n  type DelegateScopeResult,\n  type DelegateScopeRequest,\n  type RevokeTokenResult,\n  type AuthRequest,\n  type AgentAuthRequest,\n  type MintTokenRequest,\n  type ClientConfig,\n} from \"./types.js\";\n\n// ─── Client ───────────────────────────────────────────────────────────────────\n\n/**\n * LeluClient is the core SDK entry-point. It communicates with the local\n * Auth Permission Engine sidecar over HTTP/JSON.\n *\n * @example\n * ```ts\n * const lelu = new LeluClient({ baseUrl: \"http://localhost:8080\" });\n *\n * const decision = await lelu.agentAuthorize({\n *   actor: \"invoice_bot\",\n *   action: \"approve_refunds\",\n *   context: { confidence: 0.92, actingFor: \"user_123\" },\n * });\n *\n * if (!decision.allowed) {\n *   console.log(decision.reason);\n * }\n * ```\n */\nexport class LeluClient {\n  private readonly baseUrl: string;\n  private readonly timeoutMs: number;\n  private readonly apiKey: string | undefined;\n\n  constructor(cfg: ClientConfig = {}) {\n    this.baseUrl = (cfg.baseUrl ?? \"http://localhost:8080\").replace(/\\/$/, \"\");\n    this.timeoutMs = cfg.timeoutMs ?? 5_000;\n    this.apiKey = cfg.apiKey;\n  }\n\n  // ── Human authorization ────────────────────────────────────────────────────\n\n  /**\n   * Checks whether a human user is permitted to perform an action.\n   */\n  async authorize(req: AuthRequest): Promise<AuthDecision> {\n    const validated = AuthRequestSchema.parse(req);\n    const body = {\n      user_id: validated.userId,\n      action: validated.action,\n      resource: validated.resource,\n    };\n    const data = await this.post<{\n      allowed: boolean;\n      reason: string;\n      trace_id: string;\n    }>(\"/v1/authorize\", body);\n\n    return {\n      allowed: data.allowed,\n      reason: data.reason,\n      traceId: data.trace_id,\n    };\n  }\n\n  // ── Agent authorization ────────────────────────────────────────────────────\n\n  /**\n   * Checks whether an AI agent is permitted to perform an action, taking the\n   * confidence score into account (Confidence-Aware Auth ★).\n   */\n  async agentAuthorize(req: AgentAuthRequest): Promise<AgentAuthDecision> {\n    const validated = AgentAuthRequestSchema.parse(req);\n    const body = {\n      actor: validated.actor,\n      action: validated.action,\n      resource: validated.resource,\n      confidence: validated.context.confidence,\n      acting_for: validated.context.actingFor,\n      scope: validated.context.scope,\n    };\n    const data = await this.post<{\n      allowed: boolean;\n      reason: string;\n      trace_id: string;\n      downgraded_scope?: string;\n      requires_human_review: boolean;\n      confidence_used: number;\n    }>(\"/v1/agent/authorize\", body);\n\n    return {\n      allowed: data.allowed,\n      reason: data.reason,\n      traceId: data.trace_id,\n      downgradedScope: data.downgraded_scope,\n      requiresHumanReview: data.requires_human_review,\n      confidenceUsed: data.confidence_used,\n    };\n  }\n\n  // ── JIT Token minting ──────────────────────────────────────────────────────\n\n  /**\n   * Mints a scoped JWT for an agent with an optional TTL.\n   * Default TTL is 60 seconds.\n   */\n  async mintToken(req: MintTokenRequest): Promise<MintTokenResult> {\n    const validated = MintTokenRequestSchema.parse(req);\n    const body = {\n      scope: validated.scope,\n      acting_for: validated.actingFor,\n      ttl_seconds: validated.ttlSeconds ?? 60,\n    };\n    const data = await this.post<{\n      token: string;\n      token_id: string;\n      expires_at: number;\n    }>(\"/v1/tokens/mint\", body);\n\n    return {\n      token: data.token,\n      tokenId: data.token_id,\n      expiresAt: new Date(data.expires_at * 1000),\n    };\n  }\n\n  // ── Token revocation ───────────────────────────────────────────────────────\n\n  /**\n   * Immediately revokes a JIT token by its ID.\n   */\n  async revokeToken(tokenId: string): Promise<RevokeTokenResult> {\n    const data = await this.delete<{ success: boolean }>(\n      `/v1/tokens/${encodeURIComponent(tokenId)}`\n    );\n    return { success: data.success };\n  }\n\n  // ── Multi-agent delegation ─────────────────────────────────────────────────\n\n  /**\n   * Delegates a constrained sub-scope from one agent to another.\n   *\n   * Validates the delegation rule in the loaded policy, caps the TTL to the\n   * policy maximum, and mints a child JIT token scoped to the granted actions.\n   *\n   * The delegator's `confidence` score is checked against the policy's\n   * `require_confidence_above` before delegation is granted.\n   */\n  async delegateScope(req: DelegateScopeRequest): Promise<DelegateScopeResult> {\n    const validated = DelegateScopeRequestSchema.parse(req);\n    const body = {\n      delegator: validated.delegator,\n      delegatee: validated.delegatee,\n      scoped_to: validated.scopedTo ?? [],\n      ttl_seconds: validated.ttlSeconds ?? 60,\n      confidence: validated.confidence ?? 1.0,\n      acting_for: validated.actingFor ?? \"\",\n      tenant_id: validated.tenantId ?? \"\",\n    };\n    const data = await this.post<{\n      token: string;\n      token_id: string;\n      expires_at: number;\n      delegator: string;\n      delegatee: string;\n      granted_scopes: string[];\n      trace_id: string;\n    }>(\"/v1/agent/delegate\", body);\n\n    return {\n      token: data.token,\n      tokenId: data.token_id,\n      expiresAt: new Date(data.expires_at * 1000),\n      delegator: data.delegator,\n      delegatee: data.delegatee,\n      grantedScopes: data.granted_scopes,\n      traceId: data.trace_id,\n    };\n  }\n\n  // ── Health check ───────────────────────────────────────────────────────────\n\n  /**\n   * Returns true if the engine is reachable and healthy.\n   */\n  async isHealthy(): Promise<boolean> {\n    try {\n      const data = await this.get<{ status: string }>(\"/healthz\");\n      return data.status === \"ok\";\n    } catch {\n      return false;\n    }\n  }\n\n  // ── HTTP helpers ───────────────────────────────────────────────────────────\n\n  private headers(): Record<string, string> {\n    const h: Record<string, string> = { \"Content-Type\": \"application/json\" };\n    if (this.apiKey) {\n      h[\"Authorization\"] = `Bearer ${this.apiKey}`;\n    }\n    return h;\n  }\n\n  private async post<T>(path: string, body: unknown): Promise<T> {\n    const ctrl = new AbortController();\n    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n    try {\n      const res = await fetch(`${this.baseUrl}${path}`, {\n        method: \"POST\",\n        headers: this.headers(),\n        body: JSON.stringify(body),\n        signal: ctrl.signal,\n      });\n      return this.parseResponse<T>(res);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async delete<T>(path: string): Promise<T> {\n    const ctrl = new AbortController();\n    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n    try {\n      const res = await fetch(`${this.baseUrl}${path}`, {\n        method: \"DELETE\",\n        headers: this.headers(),\n        signal: ctrl.signal,\n      });\n      return this.parseResponse<T>(res);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async get<T>(path: string): Promise<T> {\n    const ctrl = new AbortController();\n    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n    try {\n      const res = await fetch(`${this.baseUrl}${path}`, {\n        method: \"GET\",\n        headers: this.headers(),\n        signal: ctrl.signal,\n      });\n      return this.parseResponse<T>(res);\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async parseResponse<T>(res: Response): Promise<T> {\n    const json = (await res.json()) as Record<string, unknown>;\n    if (!res.ok) {\n      throw new AuthEngineError(\n        (json[\"error\"] as string) ?? \"engine error\",\n        res.status,\n        json\n      );\n    }\n    return json as T;\n  }\n}\n","import type { Request, Response, NextFunction, RequestHandler } from \"express\";\nimport { LeluClient } from \"../client\";\n\nexport interface AuthorizeOptions {\n  /** Base URL of the Lelu engine (default: http://localhost:8080) */\n  baseUrl?: string;\n  /** API key for the Lelu engine */\n  apiKey?: string;\n  /** HTTP header that carries the actor identifier (default: x-actor) */\n  actorHeader?: string;\n  /** Confidence score to pass to the engine (default: 1.0) */\n  confidence?: number;\n  /** Explicit LeluClient instance (overrides baseUrl/apiKey) */\n  client?: LeluClient;\n}\n\n/**\n * Express middleware factory that calls the Lelu engine and either calls\n * `next()` (allowed) or returns a 403 JSON response (denied / human_review).\n *\n * ```ts\n * import express from \"express\";\n * import { authorize } from \"@lelu/sdk/express\";\n *\n * const app = express();\n * app.get(\"/sensitive\", authorize(\"files.read\", { confidence: 0.9 }), handler);\n * ```\n */\nexport function authorize(action: string, opts: AuthorizeOptions = {}): RequestHandler {\n  const clientConfig: any = {\n    baseUrl: opts.baseUrl ?? process.env[\"LELU_BASE_URL\"] ?? \"http://localhost:8080\",\n  };\n  const apiKey = opts.apiKey ?? process.env[\"LELU_API_KEY\"];\n  if (apiKey !== undefined) {\n    clientConfig.apiKey = apiKey;\n  }\n  const client = opts.client ?? new LeluClient(clientConfig);\n\n  const actorHeader = opts.actorHeader ?? \"x-actor\";\n  const confidence = opts.confidence ?? 1.0;\n\n  return async function leluAuthorize(\n    req: Request,\n    res: Response,\n    next: NextFunction\n  ): Promise<void> {\n    const actor = (req.headers[actorHeader] as string | undefined) ?? \"anonymous\";\n\n    try {\n      const decision = await client.agentAuthorize({ actor, action, context: { confidence } });\n\n      if (decision.allowed) {\n        // Attach decision to request for downstream handlers\n        (req as Request & { leluDecision: typeof decision }).leluDecision = decision;\n        next();\n        return;\n      }\n\n      res.status(403).json({\n        error: \"forbidden\",\n        decision: decision.allowed,\n        reason: decision.reason ?? \"denied by policy\",\n        actor,\n        action,\n      });\n    } catch (err) {\n      res.status(503).json({\n        error: \"lelu_unavailable\",\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  };\n}\n"]}