@elaraai/e3-api-server 0.0.2-beta.12 → 0.0.2-beta.13

package/README.md

@@ -12,88 +12,183 @@ npm install @elaraai/e3-api-server
 
 REST API server exposing e3-core operations over HTTP. Uses BEAST2 binary serialization for efficient request/response encoding.
 
+Supports two modes:
+- **Single-repo mode**: Serve one repository, accessed via `/repos/default`
+- **Multi-repo mode**: Serve multiple repositories from a directory, accessed via `/repos/:name`
+
 ## CLI Usage
 
 ```bash
-# Start server on default port 3000
-e3-api-server /path/to/.e3
+# Single repository mode
+e3-api-server --repo /path/to/repo
+e3-api-server --repo /path/to/repo --port 8080 --cors
+
+# Multi-repository mode (serves repos from subdirectories)
+e3-api-server --repos /path/to/repos-dir
+
+# With OIDC authentication
+e3-api-server --repo /path/to/repo --oidc
 
 # Custom port and host
-e3-api-server /path/to/.e3 --port 8080 --host 0.0.0.0
+e3-api-server --repo /path/to/repo --port 8080 --host 0.0.0.0
 ```
 
+### CLI Options
+
+| Option | Description |
+|--------|-------------|
+| `--repo <path>` | Single repository mode - serve one repo at `/repos/default` |
+| `--repos <dir>` | Multi-repo mode - serve repos from subdirectories |
+| `-p, --port <port>` | HTTP port (default: 3000) |
+| `-H, --host <host>` | Bind address (default: localhost) |
+| `--cors` | Enable CORS for cross-origin requests |
+| `--oidc` | Enable built-in OIDC authentication provider |
+| `--token-expiry <duration>` | Access token expiry, e.g., "5s", "15m", "1h" (default: 1h) |
+| `--refresh-token-expiry <duration>` | Refresh token expiry, e.g., "7d", "90d" (default: 90d) |
+
 ## Programmatic Usage
 
+### Single Repository (Embedded Server)
+
+For embedding in applications like VS Code extensions:
+
 ```typescript
 import { createServer } from '@elaraai/e3-api-server';
 
-const server = createServer({
-  repo: '/path/to/.e3',
+// createServer is async
+const server = await createServer({
+  singleRepoPath: '/path/to/repo',
   port: 3000,
   host: 'localhost',
+  cors: true,  // Enable for webview/cross-origin access
 });
 
 await server.start();
-console.log(`Server listening on port ${server.port}`);
+console.log(`Server listening on http://localhost:${server.port}`);
+console.log('Access repository via: /repos/default');
 
 // Graceful shutdown
 await server.stop();
 ```
 
+### Multi-Repository Mode
+
+For serving multiple repositories:
+
+```typescript
+import { createServer } from '@elaraai/e3-api-server';
+
+const server = await createServer({
+  reposDir: '/path/to/repos',  // Each subdirectory is a repo
+  port: 3000,
+  host: 'localhost',
+});
+
+await server.start();
+// Repos accessible at /repos/repo1, /repos/repo2, etc.
+```
+
+### With Authentication
+
+```typescript
+import { createServer } from '@elaraai/e3-api-server';
+
+const server = await createServer({
+  singleRepoPath: '/path/to/repo',
+  port: 3000,
+  oidc: {
+    baseUrl: 'http://localhost:3000',
+    tokenExpiry: '1h',
+    refreshTokenExpiry: '90d',
+  },
+});
+
+await server.start();
+// OIDC endpoints available at /.well-known/*, /oauth2/*, /device
+```
+
+### ServerConfig Options
+
+```typescript
+interface ServerConfig {
+  // Repository mode (specify exactly one)
+  singleRepoPath?: string;  // Single repo at /repos/default
+  reposDir?: string;        // Multi-repo from subdirectories
+
+  // Server options
+  port?: number;            // Default: 3000
+  host?: string;            // Default: 'localhost'
+  cors?: boolean;           // Enable CORS (default: false)
+
+  // Authentication (optional)
+  auth?: AuthConfig;        // External JWT validation
+  oidc?: OidcConfig;        // Built-in OIDC provider
+}
+```
+
 ## API Endpoints
 
+All endpoints are prefixed with `/api/repos/:repo` where `:repo` is:
+- `default` in single-repo mode
+- The repository name in multi-repo mode
+
 ### Repository
 
 | Method | Endpoint | Description |
 |--------|----------|-------------|
-| GET | `/api/status` | Repository status (path, object/package/workspace counts) |
-| POST | `/api/gc` | Garbage collection |
+| GET | `/api/repos` | List available repositories (multi-repo mode) |
+| PUT | `/api/repos/:repo` | Create repository (multi-repo mode) |
+| DELETE | `/api/repos/:repo` | Delete repository (multi-repo mode, async) |
+| GET | `/api/repos/:repo/status` | Repository status (counts) |
+| POST | `/api/repos/:repo/gc` | Start garbage collection (async) |
+| GET | `/api/repos/:repo/gc/:id` | Get GC status |
 
 ### Packages
 
 | Method | Endpoint | Description |
 |--------|----------|-------------|
-| GET | `/api/packages` | List all packages |
-| GET | `/api/packages/:name/:version` | Get package details |
-| POST | `/api/packages` | Import package (zip body) |
-| GET | `/api/packages/:name/:version/export` | Export package as zip |
-| DELETE | `/api/packages/:name/:version` | Remove package |
+| GET | `/api/repos/:repo/packages` | List all packages |
+| GET | `/api/repos/:repo/packages/:name/:version` | Get package details |
+| POST | `/api/repos/:repo/packages` | Import package (zip body) |
+| GET | `/api/repos/:repo/packages/:name/:version/export` | Export package as zip |
+| DELETE | `/api/repos/:repo/packages/:name/:version` | Remove package |
 
 ### Workspaces
 
 | Method | Endpoint | Description |
 |--------|----------|-------------|
-| GET | `/api/workspaces` | List all workspaces |
-| POST | `/api/workspaces` | Create workspace |
-| GET | `/api/workspaces/:ws` | Get workspace info |
-| GET | `/api/workspaces/:ws/status` | Get workspace status (datasets, tasks, summary) |
-| POST | `/api/workspaces/:ws/deploy` | Deploy package to workspace |
-| DELETE | `/api/workspaces/:ws` | Remove workspace |
+| GET | `/api/repos/:repo/workspaces` | List all workspaces |
+| POST | `/api/repos/:repo/workspaces` | Create workspace |
+| GET | `/api/repos/:repo/workspaces/:ws` | Get workspace info |
+| GET | `/api/repos/:repo/workspaces/:ws/status` | Get workspace status (datasets, tasks, summary) |
+| POST | `/api/repos/:repo/workspaces/:ws/deploy` | Deploy package to workspace |
+| DELETE | `/api/repos/:repo/workspaces/:ws` | Remove workspace |
+| GET | `/api/repos/:repo/workspaces/:ws/export` | Export workspace as package zip |
 
 ### Datasets
 
 | Method | Endpoint | Description |
 |--------|----------|-------------|
-| GET | `/api/workspaces/:ws/list` | List root dataset fields |
-| GET | `/api/workspaces/:ws/list/*path` | List nested dataset fields |
-| GET | `/api/workspaces/:ws/get/*path` | Get dataset value (BEAST2) |
-| PUT | `/api/workspaces/:ws/set/*path` | Set dataset value (BEAST2) |
+| GET | `/api/repos/:repo/workspaces/:ws/datasets` | List root datasets |
+| GET | `/api/repos/:repo/workspaces/:ws/datasets/*path` | Get dataset value (BEAST2) |
+| PUT | `/api/repos/:repo/workspaces/:ws/datasets/*path` | Set dataset value (BEAST2) |
 
 ### Tasks
 
 | Method | Endpoint | Description |
 |--------|----------|-------------|
-| GET | `/api/workspaces/:ws/tasks` | List tasks |
-| GET | `/api/workspaces/:ws/tasks/:task` | Get task details |
+| GET | `/api/repos/:repo/workspaces/:ws/tasks` | List tasks |
+| GET | `/api/repos/:repo/workspaces/:ws/tasks/:task` | Get task details |
 
 ### Execution
 
 | Method | Endpoint | Description |
 |--------|----------|-------------|
-| POST | `/api/workspaces/:ws/start` | Start dataflow (non-blocking) |
-| POST | `/api/workspaces/:ws/execute` | Execute dataflow (blocking, returns result) |
-| GET | `/api/workspaces/:ws/graph` | Get dependency graph |
-| GET | `/api/workspaces/:ws/logs/:task` | Read task logs |
+| POST | `/api/repos/:repo/workspaces/:ws/dataflow/start` | Start dataflow (async, returns immediately) |
+| POST | `/api/repos/:repo/workspaces/:ws/dataflow/execute` | Execute dataflow (blocking, returns result) |
+| GET | `/api/repos/:repo/workspaces/:ws/dataflow/graph` | Get dependency graph |
+| GET | `/api/repos/:repo/workspaces/:ws/dataflow/logs/:task` | Read task logs |
+| GET | `/api/repos/:repo/workspaces/:ws/dataflow/state` | Get current execution state |
 
 ## Request/Response Format
 
@@ -113,6 +208,26 @@ Error variants include:
 - `task_not_found` - Task doesn't exist
 - `internal` - Internal server error
 
+## Using with e3-api-client
+
+```typescript
+import { workspaceList, workspaceStatus, datasetGet } from '@elaraai/e3-api-client';
+
+const baseUrl = 'http://localhost:3000';
+const repo = 'default';  // In single-repo mode
+const options = { token: '' };  // Empty token if no auth configured
+
+// List workspaces
+const workspaces = await workspaceList(baseUrl, repo, options);
+
+// Get workspace status
+const status = await workspaceStatus(baseUrl, repo, 'my-workspace', options);
+
+// Get dataset value
+const path = [{ value: 'inputs' }, { value: 'data' }];
+const data = await datasetGet(baseUrl, repo, 'my-workspace', path, options);
+```
+
 ## License
 
 BSL 1.1. See [LICENSE.md](./LICENSE.md).

package/dist/src/async-operation-state.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import type { GcResult, GcStatusResult, RepoDeleteStatusResult } from './types.js';
+/**
+ * Create a new GC operation and return its execution ID.
+ */
+export declare function createGcOperation(): string;
+/**
+ * Mark a GC operation as succeeded with stats.
+ */
+export declare function completeGcOperation(executionId: string, stats: GcResult): void;
+/**
+ * Mark a GC operation as failed with error message.
+ */
+export declare function failGcOperation(executionId: string, error: string): void;
+/**
+ * Get the status of a GC operation.
+ * Returns null if operation doesn't exist.
+ */
+export declare function getGcOperationStatus(executionId: string): GcStatusResult | null;
+/**
+ * Check if a GC operation exists.
+ */
+export declare function hasGcOperation(executionId: string): boolean;
+/**
+ * Clear a GC operation.
+ * Useful for cleanup in tests.
+ */
+export declare function clearGcOperation(executionId: string): void;
+/**
+ * Create a new repo delete operation and return its execution ID.
+ */
+export declare function createRepoDeleteOperation(): string;
+/**
+ * Mark a repo delete operation as succeeded.
+ */
+export declare function completeRepoDeleteOperation(executionId: string): void;
+/**
+ * Mark a repo delete operation as failed with error message.
+ */
+export declare function failRepoDeleteOperation(executionId: string, error: string): void;
+/**
+ * Get the status of a repo delete operation.
+ * Returns null if operation doesn't exist.
+ */
+export declare function getRepoDeleteOperationStatus(executionId: string): RepoDeleteStatusResult | null;
+/**
+ * Check if a repo delete operation exists.
+ */
+export declare function hasRepoDeleteOperation(executionId: string): boolean;
+/**
+ * Clear a repo delete operation.
+ * Useful for cleanup in tests.
+ */
+export declare function clearRepoDeleteOperation(executionId: string): void;
+/**
+ * Clear all async operation states.
+ * Useful for cleanup in tests.
+ */
+export declare function clearAllAsyncOperations(): void;
+//# sourceMappingURL=async-operation-state.d.ts.map

package/dist/src/async-operation-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-operation-state.d.ts","sourceRoot":"","sources":["../../src/async-operation-state.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAuBnF;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAO1C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,CAa9E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAOxE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAoC/E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAE1D;AAgBD;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAOlD;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAMrE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAOhF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAwB/F;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAElE;AAMD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C"}

package/dist/src/async-operation-state.js

@@ -0,0 +1,193 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+/**
+ * In-memory state storage for async operations (GC, repo deletion).
+ *
+ * Tracks operation status for each execution, allowing clients to poll
+ * for progress updates during long-running operations.
+ *
+ * This serves as a development/test mock for the Step Function-based
+ * execution tracking in e3-aws.
+ */
+import { randomUUID } from 'crypto';
+import { variant, some, none } from '@elaraai/east';
+// Key: executionId (UUID)
+const gcOperations = new Map();
+/**
+ * Create a new GC operation and return its execution ID.
+ */
+export function createGcOperation() {
+    const executionId = randomUUID();
+    gcOperations.set(executionId, {
+        status: 'running',
+        startedAt: new Date(),
+    });
+    return executionId;
+}
+/**
+ * Mark a GC operation as succeeded with stats.
+ */
+export function completeGcOperation(executionId, stats) {
+    const op = gcOperations.get(executionId);
+    if (op) {
+        op.status = 'succeeded';
+        op.completedAt = new Date();
+        op.stats = {
+            deletedObjects: stats.deletedObjects,
+            deletedPartials: stats.deletedPartials,
+            retainedObjects: stats.retainedObjects,
+            skippedYoung: stats.skippedYoung,
+            bytesFreed: stats.bytesFreed,
+        };
+    }
+}
+/**
+ * Mark a GC operation as failed with error message.
+ */
+export function failGcOperation(executionId, error) {
+    const op = gcOperations.get(executionId);
+    if (op) {
+        op.status = 'failed';
+        op.completedAt = new Date();
+        op.error = error;
+    }
+}
+/**
+ * Get the status of a GC operation.
+ * Returns null if operation doesn't exist.
+ */
+export function getGcOperationStatus(executionId) {
+    const op = gcOperations.get(executionId);
+    if (!op) {
+        return null;
+    }
+    // Convert status to East variant
+    let status;
+    switch (op.status) {
+        case 'running':
+            status = variant('running', null);
+            break;
+        case 'succeeded':
+            status = variant('succeeded', null);
+            break;
+        case 'failed':
+            status = variant('failed', null);
+            break;
+    }
+    // Convert stats to East option
+    const stats = op.stats
+        ? some({
+            deletedObjects: op.stats.deletedObjects,
+            deletedPartials: op.stats.deletedPartials,
+            retainedObjects: op.stats.retainedObjects,
+            skippedYoung: op.stats.skippedYoung,
+            bytesFreed: op.stats.bytesFreed,
+        })
+        : none;
+    return {
+        status,
+        stats,
+        error: op.error ? some(op.error) : none,
+    };
+}
+/**
+ * Check if a GC operation exists.
+ */
+export function hasGcOperation(executionId) {
+    return gcOperations.has(executionId);
+}
+/**
+ * Clear a GC operation.
+ * Useful for cleanup in tests.
+ */
+export function clearGcOperation(executionId) {
+    gcOperations.delete(executionId);
+}
+// Key: executionId (UUID)
+const repoDeleteOperations = new Map();
+/**
+ * Create a new repo delete operation and return its execution ID.
+ */
+export function createRepoDeleteOperation() {
+    const executionId = randomUUID();
+    repoDeleteOperations.set(executionId, {
+        status: 'running',
+        startedAt: new Date(),
+    });
+    return executionId;
+}
+/**
+ * Mark a repo delete operation as succeeded.
+ */
+export function completeRepoDeleteOperation(executionId) {
+    const op = repoDeleteOperations.get(executionId);
+    if (op) {
+        op.status = 'succeeded';
+        op.completedAt = new Date();
+    }
+}
+/**
+ * Mark a repo delete operation as failed with error message.
+ */
+export function failRepoDeleteOperation(executionId, error) {
+    const op = repoDeleteOperations.get(executionId);
+    if (op) {
+        op.status = 'failed';
+        op.completedAt = new Date();
+        op.error = error;
+    }
+}
+/**
+ * Get the status of a repo delete operation.
+ * Returns null if operation doesn't exist.
+ */
+export function getRepoDeleteOperationStatus(executionId) {
+    const op = repoDeleteOperations.get(executionId);
+    if (!op) {
+        return null;
+    }
+    // Convert status to East variant
+    let status;
+    switch (op.status) {
+        case 'running':
+            status = variant('running', null);
+            break;
+        case 'succeeded':
+            status = variant('succeeded', null);
+            break;
+        case 'failed':
+            status = variant('failed', null);
+            break;
+    }
+    return {
+        status,
+        error: op.error ? some(op.error) : none,
+    };
+}
+/**
+ * Check if a repo delete operation exists.
+ */
+export function hasRepoDeleteOperation(executionId) {
+    return repoDeleteOperations.has(executionId);
+}
+/**
+ * Clear a repo delete operation.
+ * Useful for cleanup in tests.
+ */
+export function clearRepoDeleteOperation(executionId) {
+    repoDeleteOperations.delete(executionId);
+}
+// =============================================================================
+// Test Utilities
+// =============================================================================
+/**
+ * Clear all async operation states.
+ * Useful for cleanup in tests.
+ */
+export function clearAllAsyncOperations() {
+    gcOperations.clear();
+    repoDeleteOperations.clear();
+}
+//# sourceMappingURL=async-operation-state.js.map

package/dist/src/async-operation-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-operation-state.js","sourceRoot":"","sources":["../../src/async-operation-state.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAqBpD,0BAA0B;AAC1B,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;AAE5D;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAe;IACtE,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC;QACxB,EAAE,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,EAAE,CAAC,KAAK,GAAG;YACT,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,KAAa;IAChE,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC;QACrB,EAAE,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAgC,CAAC;IACrC,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM;QACR,KAAK,WAAW;YACd,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM;IACV,CAAC;IAED,+BAA+B;IAC/B,MAAM,KAAK,GAA4B,EAAE,CAAC,KAAK;QAC7C,CAAC,CAAC,IAAI,CAAC;YACH,cAAc,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc;YACvC,eAAe,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe;YACzC,eAAe,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe;YACzC,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY;YACnC,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU;SAChC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;QACL,MAAM;QACN,KAAK;QACL,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;KACxC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,OAAO,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC;AAaD,0BAA0B;AAC1B,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAuC,CAAC;AAE5E;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,WAAmB;IAC7D,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC;QACxB,EAAE,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,EAAE,KAAa;IACxE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC;QACrB,EAAE,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,WAAmB;IAC9D,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAwC,CAAC;IAC7C,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM;QACR,KAAK,WAAW;YACd,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM;IACV,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;KACxC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,OAAO,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC"}

package/dist/src/auth/device.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+import { Hono } from 'hono';
+import type { KeyPair } from './keys.js';
+/**
+ * Device flow configuration.
+ */
+export interface DeviceFlowConfig {
+    /** Server base URL (e.g., http://localhost:3000) */
+    baseUrl: string;
+    /** RSA keypair for signing tokens */
+    keys: KeyPair;
+    /** Access token expiry in seconds (default: 3600 = 1 hour) */
+    accessTokenExpiry: number;
+    /** Refresh token expiry in seconds (default: 7776000 = 90 days) */
+    refreshTokenExpiry: number;
+    /** Auto-approve device codes (for CI testing) */
+    autoApprove: boolean;
+}
+/**
+ * Create device flow routes.
+ */
+export declare function createDeviceRoutes(config: DeviceFlowConfig): Hono;
+//# sourceMappingURL=device.d.ts.map

package/dist/src/auth/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../src/auth/device.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,OAAO,EAAc,MAAM,WAAW,CAAC;AAYrD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,IAAI,EAAE,OAAO,CAAC;IACd,8DAA8D;IAC9D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,WAAW,EAAE,OAAO,CAAC;CACtB;AAqCD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CA0MjE"}