@noodleseed/one 0.121.0 → 0.123.0

package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.js.map

@@ -1 +1 @@
-{"version":3,"file":"consent-claims.js","sourceRoot":"","sources":["../../src/oauth/consent-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAInE,OAAO,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AAwBjF,MAAM,UAAU,eAAe,CAAC,OAAmB;IACjD,OAAO,CACJ,OAA8B,CAAC,IAAI,KAAK,SAAS;QAClD,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAqC,CAAC,WAAW,KAAK,QAAQ;QACtE,OAAQ,OAAuC,CAAC,aAAa,KAAK,QAAQ;QAC1E,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAsC,CAAC,YAAY,KAAK,QAAQ;QACxE,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC/C,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzC,oCAAoC,CAAC;YACnC,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,QAAQ,EAAE,OAAO,CAAC,aAAa;SAChC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAmB;IAEnB,OAAO,CACJ,OAA8B,CAAC,IAAI,KAAK,iBAAiB;QAC1D,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAqC,CAAC,WAAW,KAAK,QAAQ;QACtE,OAAQ,OAAuC,CAAC,aAAa,KAAK,QAAQ;QAC1E,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAsC,CAAC,YAAY,KAAK,QAAQ;QACxE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9B,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAC7C,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC/C,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzC,oCAAoC,CAAC;YACnC,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,QAAQ,EAAE,OAAO,CAAC,aAAa;SAChC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC;AACzE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,CAAC,OAAO,KAAK,KAAK,QAAQ;YACxB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACvB,KAAK,IAAI,CAAC;YACV,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CACL,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC;QAC5E,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QAClC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC9B,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC;QAC3E,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QAClC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC9B,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,qBAAqB,CAAC,CACjD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"consent-claims.js","sourceRoot":"","sources":["../../src/oauth/consent-claims.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AAuBjF,MAAM,UAAU,eAAe,CAAC,OAAmB;IACjD,OAAO,CACJ,OAA8B,CAAC,IAAI,KAAK,SAAS;QAClD,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAqC,CAAC,WAAW,KAAK,QAAQ;QACtE,OAAQ,OAAuC,CAAC,aAAa,KAAK,QAAQ;QAC1E,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAsC,CAAC,YAAY,KAAK,QAAQ;QACxE,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC/C,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzC,oCAAoC,CAAC;YACnC,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,QAAQ,EAAE,OAAO,CAAC,aAAa;SAChC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAmB;IAEnB,OAAO,CACJ,OAA8B,CAAC,IAAI,KAAK,iBAAiB;QAC1D,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAqC,CAAC,WAAW,KAAK,QAAQ;QACtE,OAAQ,OAAuC,CAAC,aAAa,KAAK,QAAQ;QAC1E,OAAQ,OAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,OAAQ,OAAsC,CAAC,YAAY,KAAK,QAAQ;QACxE,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC/C,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzC,oCAAoC,CAAC;YACnC,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,QAAQ,EAAE,OAAO,CAAC,aAAa;SAChC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC;AACzE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,CAAC,OAAO,KAAK,KAAK,QAAQ;YACxB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACvB,KAAK,IAAI,CAAC;YACV,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-authorizer.d.ts

@@ -1,42 +1,17 @@
-import { type DeveloperCapability } from '@noodle-borg/developer-mcp';
-import type { AppSummary, ControlPlaneStore, EnvSummary } from '../store.js';
 import type { DeveloperAccessGrant, DeveloperGrantStore } from './developer-grant.js';
-export interface DeveloperGrantChoice {
-    readonly org: string;
-    readonly displayName?: string;
-    readonly environments: readonly string[];
-    readonly capabilities: readonly DeveloperCapability[];
-}
-export interface DeveloperGrantInventory {
-    listApps(org: string, opts?: {
-        readonly includeArchived?: boolean;
-        readonly limit?: number;
-    }): Promise<{
-        readonly apps: readonly AppSummary[];
-        readonly truncated: boolean;
-    }>;
-    listEnvironments(org: string, app: string, opts?: {
-        readonly includeArchived?: boolean;
-    }): Promise<readonly EnvSummary[]>;
-}
-export interface DeveloperGrantSelectionInput {
+export interface DeveloperGrantIdentityInput {
     readonly clientId: string;
     readonly subject: string;
     readonly resource: string;
-    readonly choices: readonly DeveloperGrantChoice[];
-    readonly org: string;
-    readonly environments: readonly string[];
 }
 export interface DeveloperGrantAuthorizerOptions {
-    readonly controlPlane: ControlPlaneStore;
-    readonly inventory: DeveloperGrantInventory;
     readonly grants: DeveloperGrantStore;
 }
 export declare class DeveloperGrantAuthorizer {
     #private;
     constructor(options: DeveloperGrantAuthorizerOptions);
-    listChoices(subject: string, resource: string): Promise<readonly DeveloperGrantChoice[]>;
-    create(input: DeveloperGrantSelectionInput): Promise<DeveloperAccessGrant>;
+    findActive(input: DeveloperGrantIdentityInput): Promise<DeveloperAccessGrant | undefined>;
+    authorize(input: DeveloperGrantIdentityInput): Promise<DeveloperAccessGrant>;
     /** Revoke only the exact grant carried by a verified subject/client token. */
     revoke(input: {
         readonly id: string;

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"developer-grant-authorizer.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAItF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACvD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACrE,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClF,gBAAgB,CACd,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5C,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED,qBAAa,wBAAwB;;gBAKvB,OAAO,EAAE,+BAA+B;IAM9C,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC;IAoCxF,MAAM,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2BhF,8EAA8E;IACxE,MAAM,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;CAW9C"}
+{"version":3,"file":"developer-grant-authorizer.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEtF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED,qBAAa,wBAAwB;;gBAGvB,OAAO,EAAE,+BAA+B;IAI9C,UAAU,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAKzF,SAAS,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQlF,8EAA8E;IACxE,MAAM,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;CAW9C"}

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-authorizer.js

@@ -1,74 +1,21 @@
-import { capabilitiesForDeveloperResource, isDeveloperResource, } from '@noodle-borg/developer-mcp';
-const STANDARD_ENVIRONMENTS = ['dev', 'staging', 'prod'];
+import { capabilitiesForDeveloperResource, isDeveloperResource } from '@noodle-borg/developer-mcp';
 export class DeveloperGrantAuthorizer {
-    #controlPlane;
-    #inventory;
     #grants;
     constructor(options) {
-        this.#controlPlane = options.controlPlane;
-        this.#inventory = options.inventory;
         this.#grants = options.grants;
     }
-    async listChoices(subject, resource) {
-        if (!isDeveloperResource(resource))
-            return [];
-        const organizations = await this.#controlPlane.listOrgsForSubject(subject);
-        return Promise.all(organizations.map(async (organization) => {
-            const member = await this.#controlPlane.getOrgMember({
-                org: organization.slug,
-                subject,
-            });
-            const inventory = await this.#inventory.listApps(organization.slug, {
-                includeArchived: false,
-                limit: Number.MAX_SAFE_INTEGER,
-            });
-            const environments = new Set(STANDARD_ENVIRONMENTS);
-            await Promise.all(inventory.apps.map(async (app) => {
-                for (const environment of app.environments)
-                    environments.add(environment);
-                const appEnvironments = await this.#inventory.listEnvironments(organization.slug, app.appSlug);
-                for (const environment of appEnvironments)
-                    environments.add(environment.envName);
-            }));
-            return {
-                org: organization.slug,
-                ...(organization.displayName === undefined
-                    ? {}
-                    : { displayName: organization.displayName }),
-                environments: [...environments].sort(),
-                capabilities: capabilitiesForMember(resource, member?.role),
-            };
-        }));
+    async findActive(input) {
+        if (!isDeveloperResource(input.resource))
+            return undefined;
+        return this.#grants.getActive(input);
     }
-    async create(input) {
+    async authorize(input) {
         if (!isDeveloperResource(input.resource))
             throw new Error('invalid developer resource');
-        const choice = input.choices.find((candidate) => candidate.org === input.org);
-        if (choice === undefined)
-            throw new Error('organization is not available');
-        const environments = [...new Set(input.environments)];
-        if (environments.length === 0)
-            throw new Error('select at least one environment');
-        const availableEnvironments = new Set(choice.environments);
-        if (environments.some((environment) => !availableEnvironments.has(environment))) {
-            throw new Error('environment is not available');
-        }
-        const member = await this.#controlPlane.getOrgMember({
-            org: input.org,
-            subject: input.subject,
-        });
-        if (member === undefined)
-            throw new Error('organization membership is no longer active');
-        const capabilities = capabilitiesForMember(input.resource, member.role);
+        const capabilities = capabilitiesForDeveloperResource(input.resource);
         if (capabilities.length === 0)
             throw new Error('developer resource has no available capabilities');
-        return this.#grants.create({
-            clientId: input.clientId,
-            subject: input.subject,
-            org: input.org,
-            environments,
-            capabilities,
-        });
+        return this.#grants.getOrCreateActive({ ...input, capabilities });
     }
     /** Revoke only the exact grant carried by a verified subject/client token. */
     async revoke(input) {
@@ -81,10 +28,4 @@ export class DeveloperGrantAuthorizer {
         return this.#grants.revoke(input.id, input.at);
     }
 }
-function capabilitiesForMember(resource, role) {
-    const capabilities = capabilitiesForDeveloperResource(resource);
-    return role === 'owner'
-        ? capabilities
-        : capabilities.filter((capability) => capability !== 'deployments:rollback');
-}
 //# sourceMappingURL=developer-grant-authorizer.js.map

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"developer-grant-authorizer.js","sourceRoot":"","sources":["../../src/oauth/developer-grant-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAEhC,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAKpC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAoClE,MAAM,OAAO,wBAAwB;IAC1B,aAAa,CAAoB;IACjC,UAAU,CAA0B;IACpC,OAAO,CAAsB;IAEtC,YAAY,OAAwC;QAClD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,QAAgB;QACjD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC3E,OAAO,OAAO,CAAC,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;gBACnD,GAAG,EAAE,YAAY,CAAC,IAAI;gBACtB,OAAO;aACR,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE;gBAClE,eAAe,EAAE,KAAK;gBACtB,KAAK,EAAE,MAAM,CAAC,gBAAgB;aAC/B,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,qBAAqB,CAAC,CAAC;YAC5D,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC/B,KAAK,MAAM,WAAW,IAAI,GAAG,CAAC,YAAY;oBAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1E,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAC5D,YAAY,CAAC,IAAI,EACjB,GAAG,CAAC,OAAO,CACZ,CAAC;gBACF,KAAK,MAAM,WAAW,IAAI,eAAe;oBAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACnF,CAAC,CAAC,CACH,CAAC;YACF,OAAO;gBACL,GAAG,EAAE,YAAY,CAAC,IAAI;gBACtB,GAAG,CAAC,YAAY,CAAC,WAAW,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;gBACtC,YAAY,EAAE,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;aAC5D,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmC;QAC9C,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9E,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAClF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;YACnD,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACzF,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,KAKZ;QACC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/C,IACE,KAAK,KAAK,SAAS;YACnB,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACjC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAC/B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,QAAgB,EAChB,IAAuC;IAEvC,MAAM,YAAY,GAAG,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IAChE,OAAO,IAAI,KAAK,OAAO;QACrB,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,sBAAsB,CAAC,CAAC;AACjF,CAAC"}
+{"version":3,"file":"developer-grant-authorizer.js","sourceRoot":"","sources":["../../src/oauth/developer-grant-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAcnG,MAAM,OAAO,wBAAwB;IAC1B,OAAO,CAAsB;IAEtC,YAAY,OAAwC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAkC;QACjD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAkC;QAChD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACxF,MAAM,YAAY,GAAG,gCAAgC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,KAKZ;QACC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/C,IACE,KAAK,KAAK,SAAS;YACnB,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACjC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAC/B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-bootstrap.d.ts

@@ -1,6 +1,4 @@
 import type { Pool } from 'pg';
-import type { ServerRegistry } from '../registry.js';
-import type { ControlPlaneStore } from '../store.js';
 import type { DeveloperGrantStore } from './developer-grant.js';
 import { DeveloperGrantAuthorizer } from './developer-grant-authorizer.js';
 export interface DeveloperGrantStoreBootstrapOptions {
@@ -8,9 +6,7 @@ export interface DeveloperGrantStoreBootstrapOptions {
     readonly store?: DeveloperGrantStore;
 }
 export interface DeveloperGrantAuthorizerBootstrapOptions {
-    readonly controlPlane: ControlPlaneStore;
     readonly grants: DeveloperGrantStore;
-    readonly registry: () => ServerRegistry | undefined;
 }
 export declare function createDeveloperGrantAuthorizer(options: DeveloperGrantAuthorizerBootstrapOptions): DeveloperGrantAuthorizer;
 /** Resolve the OAuth grant store while preserving PostgreSQL schema initialization for injected stores. */

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"developer-grant-bootstrap.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;CACtC;AAED,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,cAAc,GAAG,SAAS,CAAC;CACrD;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,wCAAwC,GAChD,wBAAwB,CAc1B;AAED,2GAA2G;AAC3G,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,mBAAmB,CAAC,CAS9B"}
+{"version":3,"file":"developer-grant-bootstrap.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;CACtC;AAED,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,wCAAwC,GAChD,wBAAwB,CAE1B;AAED,2GAA2G;AAC3G,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,mBAAmB,CAAC,CAS9B"}

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-bootstrap.js

@@ -1,19 +1,6 @@
 import { DeveloperGrantAuthorizer } from './developer-grant-authorizer.js';
 export function createDeveloperGrantAuthorizer(options) {
-    const registry = () => {
-        const value = options.registry();
-        if (value === undefined)
-            throw new Error('developer inventory is not ready');
-        return value;
-    };
-    return new DeveloperGrantAuthorizer({
-        controlPlane: options.controlPlane,
-        grants: options.grants,
-        inventory: {
-            listApps: (org, request) => registry().listApps(org, request),
-            listEnvironments: (org, app, request) => registry().listEnvironments(org, app, request),
-        },
-    });
+    return new DeveloperGrantAuthorizer({ grants: options.grants });
 }
 /** Resolve the OAuth grant store while preserving PostgreSQL schema initialization for injected stores. */
 export async function resolveDeveloperGrantStore(options) {

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"developer-grant-bootstrap.js","sourceRoot":"","sources":["../../src/oauth/developer-grant-bootstrap.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAa3E,MAAM,UAAU,8BAA8B,CAC5C,OAAiD;IAEjD,MAAM,QAAQ,GAAG,GAAmB,EAAE;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,IAAI,wBAAwB,CAAC;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE;YACT,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;YAC7D,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACxF;KACF,CAAC,CAAC;AACL,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA4C;IAE5C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,IAAI,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;IACnC,CAAC;IACD,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,2BAA2B,EAAE,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"developer-grant-bootstrap.js","sourceRoot":"","sources":["../../src/oauth/developer-grant-bootstrap.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAW3E,MAAM,UAAU,8BAA8B,CAC5C,OAAiD;IAEjD,OAAO,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA4C;IAE5C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,IAAI,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;IACnC,CAAC;IACD,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,2BAA2B,EAAE,CAAC;AAC5D,CAAC"}

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.d.ts

@@ -15,7 +15,7 @@ export interface DeveloperGrantOAuthFlowOptions {
 export declare class DeveloperGrantOAuthFlow {
     #private;
     constructor(options: DeveloperGrantOAuthFlowOptions);
-    renderSelection(pending: PendingAuthorizationRecord, identity: GoogleIdentity & {
+    renderConsent(pending: PendingAuthorizationRecord, identity: GoogleIdentity & {
         readonly authTime?: number;
     }, res: Response): Promise<void>;
     handleDecision(req: Request, res: Response): Promise<void>;

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"developer-grant-flow.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKjD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,OAAO,KAAK,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,qBAAa,uBAAuB;;gBAGtB,OAAO,EAAE,8BAA8B;IAI7C,eAAe,CACnB,OAAO,EAAE,0BAA0B,EACnC,QAAQ,EAAE,cAAc,GAAG;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACzD,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC;IAkCV,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAoFjE;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAQtF"}
+{"version":3,"file":"developer-grant-flow.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKjD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,OAAO,KAAK,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,qBAAa,uBAAuB;;gBAGtB,OAAO,EAAE,8BAA8B;IAI7C,aAAa,CACjB,OAAO,EAAE,0BAA0B,EACnC,QAAQ,EAAE,cAAc,GAAG;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACzD,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC;IAkDV,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAuGjE;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAgBtF"}

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js

@@ -1,4 +1,4 @@
-import { isDeveloperResource } from '@noodle-borg/developer-mcp';
+import { capabilitiesForDeveloperResource, isDeveloperResource } from '@noodle-borg/developer-mcp';
 import { jwtVerify, SignJWT } from 'jose';
 import { redirectAuthorizationResponse } from './authorization-response.js';
 import { isDeveloperGrantClaims } from './consent-claims.js';
@@ -6,14 +6,24 @@ import { renderDeveloperGrantPage } from './developer-grant-page.js';
 import { storedOAuthOwnerPreferences } from './identity-preferences.js';
 import { hostOf } from './provider-util.js';
 const DEVELOPER_GRANT_PATH = '/oauth/developer-grant';
-const DEVELOPER_GRANT_FORM_FIELDS = new Set(['grant_token', 'org', 'environment', 'decision']);
+const DEVELOPER_GRANT_FORM_FIELDS = new Set(['grant_token', 'decision']);
 export class DeveloperGrantOAuthFlow {
     #options;
     constructor(options) {
         this.#options = options;
     }
-    async renderSelection(pending, identity, res) {
-        const choices = await this.#options.authorizer.listChoices(identity.subject, pending.resource);
+    async renderConsent(pending, identity, res) {
+        if (await this.#options.store.hasConsentGrant(pending.clientId, identity.subject, pending.resource, 'platform')) {
+            const active = await this.#options.authorizer.findActive({
+                clientId: pending.clientId,
+                subject: identity.subject,
+                resource: pending.resource,
+            });
+            if (active !== undefined) {
+                await this.#issueAuthorizationCode(res, pending, identity, active);
+                return;
+            }
+        }
         const grantToken = await this.#sign({
             kind: 'developer-grant',
             clientId: pending.clientId,
@@ -26,7 +36,6 @@ export class DeveloperGrantOAuthFlow {
             ...(identity.authTime !== undefined ? { authTime: identity.authTime } : {}),
             ...(pending.clientState !== undefined ? { clientState: pending.clientState } : {}),
             ...(pending.scope !== undefined ? { scope: pending.scope } : {}),
-            choices,
         });
         const client = await this.#options.store.getClient(pending.clientId);
         res
@@ -40,13 +49,13 @@ export class DeveloperGrantOAuthFlow {
             userEmail: identity.email,
             grantToken,
             grantAction: DEVELOPER_GRANT_PATH,
-            choices,
+            capabilities: capabilitiesForDeveloperResource(pending.resource),
         }));
     }
     async handleDecision(req, res) {
         const body = (req.body ?? {});
         if (Object.keys(body).some((key) => !DEVELOPER_GRANT_FORM_FIELDS.has(key))) {
-            res.status(400).type('text/plain').send('invalid developer access selection');
+            res.status(400).type('text/plain').send('invalid developer access consent');
             return;
         }
         const grantToken = typeof body.grant_token === 'string' ? body.grant_token : undefined;
@@ -60,7 +69,7 @@ export class DeveloperGrantOAuthFlow {
             claims = await this.#verify(grantToken);
         }
         catch {
-            res.status(400).type('text/plain').send('invalid or expired developer access selection');
+            res.status(400).type('text/plain').send('invalid or expired developer access consent');
             return;
         }
         const redirect = new URL(claims.redirectUri);
@@ -71,25 +80,16 @@ export class DeveloperGrantOAuthFlow {
             redirectAuthorizationResponse(res, redirect, this.#options.issuer);
             return;
         }
-        const org = typeof body.org === 'string' ? body.org : undefined;
-        const environments = formStrings(body.environment);
-        if (org === undefined || environments.length === 0) {
-            res.status(400).type('text/plain').send('invalid developer access selection');
-            return;
-        }
         let grant;
         try {
-            grant = await this.#options.authorizer.create({
+            grant = await this.#options.authorizer.authorize({
                 clientId: claims.clientId,
                 subject: claims.ownerSubject,
                 resource: claims.resource,
-                choices: claims.choices,
-                org,
-                environments,
             });
         }
         catch {
-            res.status(400).type('text/plain').send('invalid developer access selection');
+            res.status(400).type('text/plain').send('invalid developer access consent');
             return;
         }
         await this.#options.store.createConsentGrant({
@@ -98,18 +98,26 @@ export class DeveloperGrantOAuthFlow {
             resource: claims.resource,
             identityKind: 'platform',
         });
+        await this.#issueAuthorizationCode(res, claims, {
+            subject: claims.ownerSubject,
+            ...(claims.ownerEmail === undefined ? {} : { email: claims.ownerEmail }),
+            ...(claims.ownerLocale === undefined ? {} : { locale: claims.ownerLocale }),
+            ...(claims.ownerTimeZone === undefined ? {} : { timeZone: claims.ownerTimeZone }),
+            ...(claims.authTime === undefined ? {} : { authTime: claims.authTime }),
+        }, grant);
+    }
+    async #issueAuthorizationCode(res, pending, identity, grant) {
         await this.#options.tokenIssuer.issueAuthorizationCode(res, {
-            clientId: claims.clientId,
-            codeChallenge: claims.codeChallenge,
-            redirectUri: claims.redirectUri,
-            resource: claims.resource,
-            ownerSubject: claims.ownerSubject,
-            ...(claims.ownerEmail !== undefined ? { ownerEmail: claims.ownerEmail } : {}),
-            ...(claims.ownerLocale !== undefined ? { ownerLocale: claims.ownerLocale } : {}),
-            ...(claims.ownerTimeZone !== undefined ? { ownerTimeZone: claims.ownerTimeZone } : {}),
-            ...(claims.authTime !== undefined ? { authTime: claims.authTime } : {}),
-            ...(claims.clientState !== undefined ? { clientState: claims.clientState } : {}),
-            ...(claims.scope !== undefined ? { scope: claims.scope } : {}),
+            clientId: pending.clientId,
+            codeChallenge: pending.codeChallenge,
+            redirectUri: pending.redirectUri,
+            resource: pending.resource,
+            ownerSubject: identity.subject,
+            ...(identity.email === undefined ? {} : { ownerEmail: identity.email }),
+            ...storedOAuthOwnerPreferences(identity),
+            ...(identity.authTime === undefined ? {} : { authTime: identity.authTime }),
+            ...(pending.clientState === undefined ? {} : { clientState: pending.clientState }),
+            ...(pending.scope === undefined ? {} : { scope: pending.scope }),
             developerGrantId: grant.id,
         });
     }
@@ -134,15 +142,16 @@ export function isDeveloperResourceForIssuer(resource, issuer) {
     try {
         const resourceUrl = new URL(resource);
         const issuerUrl = new URL(issuer);
-        return resourceUrl.origin === issuerUrl.origin && isDeveloperResource(resourceUrl.pathname);
+        return (resourceUrl.origin === issuerUrl.origin &&
+            isDeveloperResource(resourceUrl.pathname) &&
+            !resourceUrl.pathname.endsWith('/') &&
+            resourceUrl.search === '' &&
+            resourceUrl.hash === '' &&
+            resourceUrl.username === '' &&
+            resourceUrl.password === '');
     }
     catch {
         return false;
     }
 }
-function formStrings(value) {
-    if (typeof value === 'string')
-        return [value];
-    return Array.isArray(value) && value.every((item) => typeof item === 'string') ? value : [];
-}
 //# sourceMappingURL=developer-grant-flow.js.map

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"developer-grant-flow.js","sourceRoot":"","sources":["../../src/oauth/developer-grant-flow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAA6B,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAI5C,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AACtD,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAW/F,MAAM,OAAO,uBAAuB;IACzB,QAAQ,CAAiC;IAElD,YAAY,OAAuC;QACjD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,OAAmC,EACnC,QAAyD,EACzD,GAAa;QAEb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,QAAQ,CAAC,OAAO;YAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK;YAC1B,GAAG,2BAA2B,CAAC,QAAQ,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO;SACR,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrE,GAAG;aACA,MAAM,CAAC,GAAG,CAAC;aACX,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC;aACtC,IAAI,CAAC,MAAM,CAAC;aACZ,IAAI,CACH,wBAAwB,CAAC;YACvB,UAAU,EAAE,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,QAAQ;YACnD,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;YACzC,SAAS,EAAE,QAAQ,CAAC,KAAK;YACzB,UAAU;YACV,WAAW,EAAE,oBAAoB;YACjC,OAAO;SACR,CAAC,CACH,CAAC;IACN,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,GAAa;QAC9C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,IAAI,MAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;gBAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7F,6BAA6B,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,KAA2B,CAAC;QAChC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,YAAY;gBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG;gBACH,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,UAAU;SACzB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,gBAAgB,EAAE,KAAK,CAAC,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAA4B;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;aAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;aAClD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;aAC/B,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC;aACtD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB,EAAE,MAAc;IAC3E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC"}
+{"version":3,"file":"developer-grant-flow.js","sourceRoot":"","sources":["../../src/oauth/developer-grant-flow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEnG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAA6B,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAI5C,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AACtD,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAWzE,MAAM,OAAO,uBAAuB;IACzB,QAAQ,CAAiC;IAElD,YAAY,OAAuC;QACjD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAmC,EACnC,QAAyD,EACzD,GAAa;QAEb,IACE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CACvC,OAAO,CAAC,QAAQ,EAChB,QAAQ,CAAC,OAAO,EAChB,OAAO,CAAC,QAAQ,EAChB,UAAU,CACX,EACD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;gBACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,QAAQ,CAAC,OAAO;YAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK;YAC1B,GAAG,2BAA2B,CAAC,QAAQ,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrE,GAAG;aACA,MAAM,CAAC,GAAG,CAAC;aACX,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC;aACtC,IAAI,CAAC,MAAM,CAAC;aACZ,IAAI,CACH,wBAAwB,CAAC;YACvB,UAAU,EAAE,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,QAAQ;YACnD,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;YACzC,SAAS,EAAE,QAAQ,CAAC,KAAK;YACzB,UAAU;YACV,WAAW,EAAE,oBAAoB;YACjC,YAAY,EAAE,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC;SACjE,CAAC,CACH,CAAC;IACN,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,GAAa;QAC9C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,IAAI,MAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;gBAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7F,6BAA6B,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,KAA2B,CAAC;QAChC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC/C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,YAAY;gBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,UAAU;SACzB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,uBAAuB,CAChC,GAAG,EACH,MAAM,EACN;YACE,OAAO,EAAE,MAAM,CAAC,YAAY;YAC5B,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;YACjF,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SACxE,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,GAAa,EACb,OAGC,EACD,QAMC,EACD,KAA2B;QAE3B,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,QAAQ,CAAC,OAAO;YAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YACvE,GAAG,2BAA2B,CAAC,QAAQ,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,gBAAgB,EAAE,KAAK,CAAC,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAA4B;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;aAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;aAClD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;aAC/B,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC;aACtD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB,EAAE,MAAc;IAC3E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CACL,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YACvC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC;YACzC,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACnC,WAAW,CAAC,MAAM,KAAK,EAAE;YACzB,WAAW,CAAC,IAAI,KAAK,EAAE;YACvB,WAAW,CAAC,QAAQ,KAAK,EAAE;YAC3B,WAAW,CAAC,QAAQ,KAAK,EAAE,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-page.d.ts

@@ -1,4 +1,4 @@
-import type { DeveloperGrantChoice } from './developer-grant-authorizer.js';
+import type { DeveloperCapability } from '@noodle-borg/developer-mcp';
 export interface DeveloperGrantPageInput {
     readonly clientName: string;
     readonly resourceHost: string;
@@ -6,7 +6,7 @@ export interface DeveloperGrantPageInput {
     readonly userEmail: string;
     readonly grantToken: string;
     readonly grantAction: string;
-    readonly choices: readonly DeveloperGrantChoice[];
+    readonly capabilities: readonly DeveloperCapability[];
 }
 export declare function renderDeveloperGrantPage(input: DeveloperGrantPageInput): string;
 //# sourceMappingURL=developer-grant-page.d.ts.map

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"developer-grant-page.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-page.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACnD;AAiID,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,CAuB/E"}
+{"version":3,"file":"developer-grant-page.d.ts","sourceRoot":"","sources":["../../src/oauth/developer-grant-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAItE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACvD;AASD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,CA0B/E"}