@agntcy/slim-bindings 2.0.0 → 2.1.0

package/named-exports.js

@@ -47,6 +47,9 @@ export const MulticastResponseReader = ns.MulticastResponseReader;
 export const MulticastStreamMessage = ns.MulticastStreamMessage;
 export const MulticastStreamMessage_Tags = ns.MulticastStreamMessage_Tags;
 export const Name = ns.Name;
+export const OidcConfig = ns.OidcConfig;
+export const OidcPolicyConfig = ns.OidcPolicyConfig;
+export const OidcPolicyConfig_Tags = ns.OidcPolicyConfig_Tags;
 export const ParticipantInfo = ns.ParticipantInfo;
 export const ParticipantStatus = ns.ParticipantStatus;
 export const PersistenceConfig = ns.PersistenceConfig;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agntcy/slim-bindings",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "SLIM Node.js bindings using UniFFI",
   "type": "module",
   "main": "index.js",
@@ -42,15 +42,15 @@
     "@ubjs/node": "0.31.0-3"
   },
   "optionalDependencies": {
-    "@agntcy/slim-bindings-darwin-arm64": "2.0.0",
-    "@agntcy/slim-bindings-darwin-x64": "2.0.0",
-    "@agntcy/slim-bindings-linux-arm64-gnu": "2.0.0",
-    "@agntcy/slim-bindings-linux-arm64-musl": "2.0.0",
-    "@agntcy/slim-bindings-linux-x64-gnu": "2.0.0",
-    "@agntcy/slim-bindings-linux-x64-musl": "2.0.0",
-    "@agntcy/slim-bindings-win32-arm64-msvc": "2.0.0",
-    "@agntcy/slim-bindings-win32-x64-gnu": "2.0.0",
-    "@agntcy/slim-bindings-win32-x64-msvc": "2.0.0"
+    "@agntcy/slim-bindings-darwin-arm64": "2.1.0",
+    "@agntcy/slim-bindings-darwin-x64": "2.1.0",
+    "@agntcy/slim-bindings-linux-arm64-gnu": "2.1.0",
+    "@agntcy/slim-bindings-linux-arm64-musl": "2.1.0",
+    "@agntcy/slim-bindings-linux-x64-gnu": "2.1.0",
+    "@agntcy/slim-bindings-linux-x64-musl": "2.1.0",
+    "@agntcy/slim-bindings-win32-arm64-msvc": "2.1.0",
+    "@agntcy/slim-bindings-win32-x64-gnu": "2.1.0",
+    "@agntcy/slim-bindings-win32-x64-msvc": "2.1.0"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",

package/types/slim_bindings.d.ts

@@ -1001,11 +1001,205 @@ export declare const ClientJwtAuth: Readonly<{
     new: (partial: Partial<ClientJwtAuth> & Required<Omit<ClientJwtAuth, "duration" | "key" | "audience" | "issuer" | "subject">>) => ClientJwtAuth;
     defaults: () => Partial<ClientJwtAuth>;
 }>;
+export declare enum OidcPolicyConfig_Tags {
+    Rego = "Rego",
+    RegoFile = "RegoFile",
+    Cel = "Cel"
+}
+/**
+ * Policy evaluated against JWT claims on every authenticated request (server-side OIDC only)
+ */
+export declare const OidcPolicyConfig: Readonly<{
+    instanceOf: (obj: any) => obj is OidcPolicyConfig;
+    Rego: {
+        new (inner: {
+            text: string;
+        }): {
+            readonly tag: OidcPolicyConfig_Tags.Rego;
+            readonly inner: Readonly<{
+                text: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+        "new"(inner: {
+            text: string;
+        }): {
+            readonly tag: OidcPolicyConfig_Tags.Rego;
+            readonly inner: Readonly<{
+                text: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+        instanceOf(obj: any): obj is {
+            readonly tag: OidcPolicyConfig_Tags.Rego;
+            readonly inner: Readonly<{
+                text: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+    };
+    RegoFile: {
+        new (inner: {
+            path: string;
+        }): {
+            readonly tag: OidcPolicyConfig_Tags.RegoFile;
+            readonly inner: Readonly<{
+                path: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+        "new"(inner: {
+            path: string;
+        }): {
+            readonly tag: OidcPolicyConfig_Tags.RegoFile;
+            readonly inner: Readonly<{
+                path: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+        instanceOf(obj: any): obj is {
+            readonly tag: OidcPolicyConfig_Tags.RegoFile;
+            readonly inner: Readonly<{
+                path: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+    };
+    Cel: {
+        new (inner: {
+            expression: string;
+        }): {
+            readonly tag: OidcPolicyConfig_Tags.Cel;
+            readonly inner: Readonly<{
+                expression: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+        "new"(inner: {
+            expression: string;
+        }): {
+            readonly tag: OidcPolicyConfig_Tags.Cel;
+            readonly inner: Readonly<{
+                expression: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+        instanceOf(obj: any): obj is {
+            readonly tag: OidcPolicyConfig_Tags.Cel;
+            readonly inner: Readonly<{
+                expression: string;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "OidcPolicyConfig";
+        };
+    };
+}>;
+/**
+ * Policy evaluated against JWT claims on every authenticated request (server-side OIDC only)
+ */
+export type OidcPolicyConfig = InstanceType<typeof OidcPolicyConfig['Rego' | 'RegoFile' | 'Cel']>;
+/**
+ * OIDC authentication configuration (client-credentials, refresh-token, or JWKS verification)
+ */
+export type OidcConfig = {
+    /**
+     * OIDC issuer URL (e.g., https://auth.example.com)
+     */
+    issuerUrl: string;
+    /**
+     * OAuth2 client ID (required for client-credentials and refresh-token flows)
+     */
+    clientId?: string;
+    /**
+     * OAuth2 client secret (for client-credentials flow)
+     */
+    clientSecret?: string;
+    /**
+     * Expected audience for JWT tokens (required for server-side verification)
+     */
+    audience?: string;
+    /**
+     * Inline refresh token (for authorization-code flow)
+     */
+    refreshToken?: string;
+    /**
+     * Path to file holding the refresh token (rotated tokens are written back automatically)
+     */
+    refreshTokenFile?: string;
+    /**
+     * Path to a file caching the current access token (optional companion to refresh_token_file)
+     */
+    accessTokenFile?: string;
+    /**
+     * OAuth2 scope parameter (client-side only)
+     */
+    scope?: string;
+    /**
+     * HTTP timeout for token requests in seconds (default: 30, client-side only)
+     */
+    timeout?: number;
+    /**
+     * JWKS cache TTL in seconds (default: 3600, server-side only)
+     */
+    jwksTtl?: number;
+    /**
+     * Cache TTL for merged JWT+userinfo claims in seconds (server-side only, absent = no cache)
+     */
+    claimCacheTtl?: number;
+    /**
+     * Policy evaluated against JWT claims on every authenticated request (server-side only)
+     */
+    policy?: OidcPolicyConfig;
+};
+/**
+ * Generated factory for {@link OidcConfig} record objects.
+ */
+export declare const OidcConfig: Readonly<{
+    create: (partial: Partial<OidcConfig> & Required<Omit<OidcConfig, "timeout" | "audience" | "issuerUrl" | "clientId" | "clientSecret" | "refreshToken" | "refreshTokenFile" | "accessTokenFile" | "scope" | "jwksTtl" | "claimCacheTtl" | "policy">>) => OidcConfig;
+    new: (partial: Partial<OidcConfig> & Required<Omit<OidcConfig, "timeout" | "audience" | "issuerUrl" | "clientId" | "clientSecret" | "refreshToken" | "refreshTokenFile" | "accessTokenFile" | "scope" | "jwksTtl" | "claimCacheTtl" | "policy">>) => OidcConfig;
+    defaults: () => Partial<OidcConfig>;
+}>;
 export declare enum ClientAuthenticationConfig_Tags {
     Basic = "Basic",
     StaticJwt = "StaticJwt",
     Jwt = "Jwt",
     Spire = "Spire",
+    Oidc = "Oidc",
     None = "None"
 }
 /**
@@ -1169,6 +1363,45 @@ export declare const ClientAuthenticationConfig: Readonly<{
             readonly [uniffiTypeNameSymbol]: "ClientAuthenticationConfig";
         };
     };
+    Oidc: {
+        new (inner: {
+            config: OidcConfig;
+        }): {
+            readonly tag: ClientAuthenticationConfig_Tags.Oidc;
+            readonly inner: Readonly<{
+                config: OidcConfig;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "ClientAuthenticationConfig";
+        };
+        "new"(inner: {
+            config: OidcConfig;
+        }): {
+            readonly tag: ClientAuthenticationConfig_Tags.Oidc;
+            readonly inner: Readonly<{
+                config: OidcConfig;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "ClientAuthenticationConfig";
+        };
+        instanceOf(obj: any): obj is {
+            readonly tag: ClientAuthenticationConfig_Tags.Oidc;
+            readonly inner: Readonly<{
+                config: OidcConfig;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "ClientAuthenticationConfig";
+        };
+    };
     None: {
         new (): {
             readonly tag: ClientAuthenticationConfig_Tags.None;
@@ -1199,7 +1432,7 @@ export declare const ClientAuthenticationConfig: Readonly<{
 /**
  * Authentication configuration enum for client
  */
-export type ClientAuthenticationConfig = InstanceType<typeof ClientAuthenticationConfig['Basic' | 'StaticJwt' | 'Jwt' | 'Spire' | 'None']>;
+export type ClientAuthenticationConfig = InstanceType<typeof ClientAuthenticationConfig['Basic' | 'StaticJwt' | 'Jwt' | 'Spire' | 'Oidc' | 'None']>;
 /**
  * Exponential backoff configuration
  */
@@ -1533,6 +1766,7 @@ export declare enum ServerAuthenticationConfig_Tags {
     Basic = "Basic",
     Jwt = "Jwt",
     Spire = "Spire",
+    Oidc = "Oidc",
     None = "None"
 }
 /**
@@ -1657,6 +1891,45 @@ export declare const ServerAuthenticationConfig: Readonly<{
             readonly [uniffiTypeNameSymbol]: "ServerAuthenticationConfig";
         };
     };
+    Oidc: {
+        new (inner: {
+            config: OidcConfig;
+        }): {
+            readonly tag: ServerAuthenticationConfig_Tags.Oidc;
+            readonly inner: Readonly<{
+                config: OidcConfig;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "ServerAuthenticationConfig";
+        };
+        "new"(inner: {
+            config: OidcConfig;
+        }): {
+            readonly tag: ServerAuthenticationConfig_Tags.Oidc;
+            readonly inner: Readonly<{
+                config: OidcConfig;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "ServerAuthenticationConfig";
+        };
+        instanceOf(obj: any): obj is {
+            readonly tag: ServerAuthenticationConfig_Tags.Oidc;
+            readonly inner: Readonly<{
+                config: OidcConfig;
+            }>;
+            /**
+             * @private
+             * This field is private and should not be used, use `tag` instead.
+             */
+            readonly [uniffiTypeNameSymbol]: "ServerAuthenticationConfig";
+        };
+    };
     None: {
         new (): {
             readonly tag: ServerAuthenticationConfig_Tags.None;
@@ -1687,7 +1960,7 @@ export declare const ServerAuthenticationConfig: Readonly<{
 /**
  * Authentication configuration enum for server
  */
-export type ServerAuthenticationConfig = InstanceType<typeof ServerAuthenticationConfig['Basic' | 'Jwt' | 'Spire' | 'None']>;
+export type ServerAuthenticationConfig = InstanceType<typeof ServerAuthenticationConfig['Basic' | 'Jwt' | 'Spire' | 'Oidc' | 'None']>;
 /**
  * Server configuration for running a SLIM server
  */
@@ -5034,6 +5307,20 @@ declare const _default: Readonly<{
             lower(value: MlsSettings, alloc: import("@ubjs/core").RustBufferAllocator): UniffiByteArray;
         };
         FfiConverterTypeName: FfiConverterObject<NameLike>;
+        FfiConverterTypeOidcConfig: {
+            read(from: RustBuffer): OidcConfig;
+            write(value: OidcConfig, into: RustBuffer): void;
+            allocationSize(value: OidcConfig): number;
+            lift(value: UniffiByteArray): OidcConfig;
+            lower(value: OidcConfig, alloc: import("@ubjs/core").RustBufferAllocator): UniffiByteArray;
+        };
+        FfiConverterTypeOidcPolicyConfig: {
+            read(from: RustBuffer): OidcPolicyConfig;
+            write(value: OidcPolicyConfig, into: RustBuffer): void;
+            allocationSize(value: OidcPolicyConfig): number;
+            lift(value: UniffiByteArray): OidcPolicyConfig;
+            lower(value: OidcPolicyConfig, alloc: import("@ubjs/core").RustBufferAllocator): UniffiByteArray;
+        };
         FfiConverterTypeParticipantInfo: {
             read(from: RustBuffer): ParticipantInfo;
             write(value: ParticipantInfo, into: RustBuffer): void;