Open Action Consent

from oac import build_preview, make_consent, verify_consent, generate, KeySet, MemoryNonces

profile = {"oac": "0.2", "type": "action-profile", "tool": "send_email", "effect": "send",
           "undo": {"kind": "none", "window_s": 0}, "tier_floor": "A",
           "binds": {"to": "to", "title": "subject"}, "other_args": ["body"]}
action = {"tool": "send_email", "args": {"to": ["sam@example.com"], "subject": "Lunch?", "body": "Friday 1 pm?"}}

preview = build_preview(profile=profile, action=action, executor="mail.example", sub="person:1",
                        summary="Email sam@example.com: Lunch?", now=1793836800)
user_key = generate()                      # lives with the person's signer, never with the model
consent = make_consent(key=user_key, iss="signer.example", sub="person:1", aud="mail.example",
                       previews=[preview], now=1793836800)
verify_consent(consent, keys=KeySet({"signer.example": [user_key.jwk]}), executor="mail.example",
               sub="person:1", previews=[preview], actions=[action], profiles={"send_email": profile},
               now=1793836810, nonces=MemoryNonces())

import * as z from "zod";
import { McpServer } from "@modelcontextprotocol/server";
import { OAC, ID } from "open-action-consent/mcp";

const oac = new OAC({ executor: "https://tables.example/oac", key: executorKey, signers: signerKeys,
  consentUrl: (p) => `https://signer.example/consent?r=${p.id}`, person: (ctx) => userIdFromYourAuth(ctx),
  tainted: (ctx) => yourHostSaysOutsideTextEntered(ctx) });
const server = new McpServer({ name: "tables", version: "1.0.0" }, { capabilities: { tools: {}, extensions: { [ID]: oac.settings() } } });

oac.registerTool(server, "book_table",
  { description: "Book a table", inputSchema: z.object({ restaurant: z.string(), time: z.string(), party: z.number() }) },
  { effect: "write", undo: "compensate", windowS: 86400, binds: { payee: "restaurant", when: "time", count: "party" } },
  async ({ restaurant, time, party }) => ({ content: [{ type: "text", text: "Booked." }] }));