@fentaris/edge 0.2.0

package/dist/agent.d.ts

@@ -0,0 +1,46 @@
+import { EdgeEnrollmentService, type DeviceAuthorizationRequest, type EdgeConnection, type EdgeConnectionClient } from "./enrollment.js";
+import { type EdgePlatform } from "./platform.js";
+import { type EdgeConnectionRuntime, type EdgeRuntimeSummary, type EdgeRuntimeSummaryProvider } from "./runtime.js";
+export type { EdgeRuntimeSummary, EdgeRuntimeSummaryProvider } from "./runtime.js";
+export interface EdgeAgentStatus extends EdgeRuntimeSummary {
+    readonly enrolled: boolean;
+    readonly connected: boolean;
+    readonly edgeNodeId?: string;
+    readonly tenantId?: string;
+    readonly enrolledAt?: number;
+    readonly connectedAt?: number;
+}
+export interface EdgeAgentOptions {
+    enrollment: EdgeEnrollmentService;
+    connection: EdgeConnectionClient;
+    platform: EdgePlatform;
+    runtime?: EdgeConnectionRuntime;
+    runtimeSummary?: EdgeRuntimeSummaryProvider;
+}
+/** Enrollment and connection lifecycle used by the CLI and embedders. */
+export declare class EdgeAgent {
+    private readonly options;
+    private active?;
+    constructor(options: EdgeAgentOptions);
+    login(): Promise<import("./enrollment.js").EdgeLoginResult>;
+    connect(): Promise<void>;
+    reconnect(): Promise<void>;
+    status(): Promise<EdgeAgentStatus>;
+    disconnect(): Promise<void>;
+    revoke(): Promise<void>;
+}
+/** WebSocket connector that proves possession of the enrolled device key. */
+export declare class WebSocketEdgeConnectionClient implements EdgeConnectionClient {
+    private readonly webSocketFactory;
+    constructor(webSocketFactory?: (url: string) => WebSocket);
+    connect(input: Parameters<EdgeConnectionClient["connect"]>[0]): Promise<EdgeConnection>;
+}
+export interface DefaultAgentOptions {
+    readonly controlPlaneUrl: string;
+    readonly platform?: EdgePlatform;
+    readonly onVerification: (request: DeviceAuthorizationRequest) => void | Promise<void>;
+    readonly executableAllowlist?: readonly string[];
+    readonly packageAllowlist?: readonly string[];
+}
+export declare function createDefaultEdgeAgent(options: DefaultAgentOptions): EdgeAgent;
+//# sourceMappingURL=agent.d.ts.map

package/dist/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,qBAAqB,EAGrB,KAAK,0BAA0B,EAC/B,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAChC,MAAM,cAAc,CAAC;AAatB,YAAY,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAEnF,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,qBAAqB,CAAC;IAClC,UAAU,EAAE,oBAAoB,CAAC;IACjC,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,cAAc,CAAC,EAAE,0BAA0B,CAAC;CAC7C;AAED,yEAAyE;AACzE,qBAAa,SAAS;IAGR,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,MAAM,CAAC,CAAiB;gBAEH,OAAO,EAAE,gBAAgB;IAEhD,KAAK;IAML,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAmBxB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAK1B,MAAM,IAAI,OAAO,CAAC,eAAe,CAAC;IAoBlC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAM9B;AAED,6EAA6E;AAC7E,qBAAa,6BAA8B,YAAW,oBAAoB;IAC5D,OAAO,CAAC,QAAQ,CAAC,gBAAgB;gBAAhB,gBAAgB,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAuC;IAEjG,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;CAgI9F;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,0BAA0B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,CA0C9E"}

package/dist/agent.js

@@ -0,0 +1,271 @@
+import { randomBytes, sign } from "node:crypto";
+import { hostname } from "node:os";
+import path from "node:path";
+import { EDGE_PROTOCOL_VERSION, edgeError, parseEdgeProtocolMessage, } from "@fentaris/core";
+import { EdgeEnrollmentService, HttpDeviceAuthorizationProvider, HttpEdgeEnrollmentClient, } from "./enrollment.js";
+import { ProtectedJsonStore, nodeEdgePlatform, } from "./platform.js";
+import { EdgeAgentRuntime, } from "./runtime.js";
+import { LocalSetupManager, NodeTerminalSetupPrompter, TerminalSetupProvider, } from "./setup.js";
+import { EdgeWorkloadSupervisor, ExecutableAllowlistPolicy, } from "./supervisor.js";
+import { StdioEdgeWorkloadFactory } from "./stdioWorkload.js";
+/** Enrollment and connection lifecycle used by the CLI and embedders. */
+export class EdgeAgent {
+    options;
+    active;
+    constructor(options) {
+        this.options = options;
+    }
+    async login() {
+        const login = await this.options.enrollment.login();
+        await this.connect();
+        return login;
+    }
+    async connect() {
+        if (this.active)
+            return;
+        const credentials = await this.options.enrollment.connectionCredentials();
+        this.active = await this.options.connection.connect({
+            gatewayUrl: credentials.config.gatewayUrl,
+            edgeNodeId: credentials.config.edgeNodeId,
+            tenantId: credentials.config.tenantId,
+            deviceCredential: credentials.deviceCredential,
+            accessToken: credentials.accessToken,
+            publicKey: credentials.keyPair.publicKey,
+            privateKey: credentials.keyPair.privateKey,
+            runtime: this.options.runtime,
+        });
+        const active = this.active;
+        void active.closed?.finally(() => {
+            if (this.active === active)
+                this.active = undefined;
+        });
+    }
+    async reconnect() {
+        await this.disconnect();
+        await this.connect();
+    }
+    async status() {
+        const config = await this.options.platform.configStore.load();
+        const summary = await this.options.runtimeSummary?.summary() ?? {
+            desiredDeployments: 0,
+            readyDeployments: 0,
+            blockedDeployments: 0,
+        };
+        return {
+            ...summary,
+            enrolled: Boolean(config),
+            connected: Boolean(this.active),
+            ...(config ? {
+                edgeNodeId: config.edgeNodeId,
+                tenantId: config.tenantId,
+                enrolledAt: config.enrolledAt,
+            } : {}),
+            ...(this.active ? { connectedAt: this.active.connectedAt } : {}),
+        };
+    }
+    async disconnect() {
+        const active = this.active;
+        this.active = undefined;
+        await active?.close();
+    }
+    async revoke() {
+        await this.options.enrollment.revokeRemote();
+        await this.disconnect();
+        await this.options.runtime?.clearLocalState?.();
+        await this.options.enrollment.clearLocalIdentity();
+    }
+}
+/** WebSocket connector that proves possession of the enrolled device key. */
+export class WebSocketEdgeConnectionClient {
+    webSocketFactory;
+    constructor(webSocketFactory = (url) => new WebSocket(url)) {
+        this.webSocketFactory = webSocketFactory;
+    }
+    async connect(input) {
+        const url = new URL(input.gatewayUrl);
+        if (url.protocol !== "wss:" && !(url.protocol === "ws:" && isLoopback(url.hostname))) {
+            throw new Error("Edge gateway must use wss:// except for loopback development");
+        }
+        const socket = this.webSocketFactory(url.toString());
+        const nonce = randomBytes(32).toString("base64url");
+        const proof = sign(null, Buffer.from(`${input.edgeNodeId}.${nonce}`), input.privateKey).toString("base64url");
+        let ack;
+        let heartbeat;
+        let runtimeDisconnected = false;
+        let resolveClosed;
+        const closed = new Promise((resolve) => {
+            resolveClosed = resolve;
+        });
+        const disconnectRuntime = async () => {
+            if (runtimeDisconnected)
+                return;
+            runtimeDisconnected = true;
+            if (heartbeat)
+                clearInterval(heartbeat);
+            try {
+                await input.runtime?.disconnected();
+            }
+            finally {
+                resolveClosed();
+            }
+        };
+        const send = async (message) => {
+            if (socket.readyState !== WebSocket.OPEN) {
+                throw edgeError("EDGE_UNAVAILABLE", "Edge gateway connection is closed.");
+            }
+            socket.send(JSON.stringify(message));
+        };
+        let processing = Promise.resolve();
+        const authenticated = new Promise((resolve, reject) => {
+            const fail = (error) => {
+                reject(error);
+                try {
+                    socket.close(4403, "edge protocol rejected");
+                }
+                catch {
+                    void disconnectRuntime();
+                }
+            };
+            socket.addEventListener("error", () => {
+                if (!ack)
+                    reject(new Error("Unable to establish the edge gateway connection"));
+            });
+            socket.addEventListener("open", () => {
+                socket.send(JSON.stringify({
+                    version: EDGE_PROTOCOL_VERSION,
+                    kind: "edge.hello",
+                    tenantId: input.tenantId,
+                    edgeNodeId: input.edgeNodeId,
+                    supportedVersions: [EDGE_PROTOCOL_VERSION],
+                    nonce,
+                    proof,
+                    deviceCredential: input.deviceCredential,
+                    accessToken: input.accessToken,
+                    publicKey: input.publicKey,
+                }));
+            }, { once: true });
+            socket.addEventListener("message", (event) => {
+                processing = processing.then(async () => {
+                    try {
+                        const message = parseEdgeProtocolMessage(String(event.data));
+                        if (!ack) {
+                            if (message.kind !== "edge.hello.ack") {
+                                throw edgeError("EDGE_PROTOCOL", "Unexpected edge gateway handshake response.");
+                            }
+                            if (message.tenantId !== input.tenantId || message.edgeNodeId !== input.edgeNodeId) {
+                                throw edgeError("EDGE_PROTOCOL", "Edge gateway acknowledged a different device identity.");
+                            }
+                            ack = message;
+                            await input.runtime?.connected({
+                                claims: {
+                                    tenantId: message.tenantId,
+                                    edgeNodeId: message.edgeNodeId,
+                                    connectionGeneration: message.connectionGeneration,
+                                },
+                                send,
+                            });
+                            heartbeat = setInterval(() => {
+                                if (!ack || socket.readyState !== WebSocket.OPEN)
+                                    return;
+                                void send({
+                                    version: EDGE_PROTOCOL_VERSION,
+                                    kind: "edge.heartbeat",
+                                    tenantId: ack.tenantId,
+                                    edgeNodeId: ack.edgeNodeId,
+                                    connectionGeneration: ack.connectionGeneration,
+                                    sentAt: Date.now(),
+                                }).catch(() => socket.close(1011, "edge heartbeat failed"));
+                            }, 10_000);
+                            heartbeat.unref?.();
+                            resolve(message);
+                            return;
+                        }
+                        if (message.kind === "edge.hello.ack" || message.kind === "edge.hello") {
+                            throw edgeError("EDGE_PROTOCOL", "Unexpected edge handshake frame after authentication.");
+                        }
+                        if (message.kind !== "edge.desired-state"
+                            && message.kind !== "mcp.request"
+                            && message.kind !== "mcp.cancel") {
+                            throw edgeError("EDGE_PROTOCOL", "Unexpected message kind from the edge control plane.");
+                        }
+                        await input.runtime?.handle(message);
+                    }
+                    catch (error) {
+                        fail(error);
+                    }
+                });
+            });
+            socket.addEventListener("close", () => {
+                void disconnectRuntime();
+                if (!ack)
+                    reject(edgeError("EDGE_UNAVAILABLE", "Edge socket closed during authentication."));
+            }, { once: true });
+        });
+        const authenticatedAck = await authenticated;
+        return {
+            connectedAt: authenticatedAck.serverTime,
+            closed,
+            close: () => new Promise((resolve) => {
+                if (socket.readyState === WebSocket.CLOSED) {
+                    void disconnectRuntime().then(resolve);
+                    return;
+                }
+                closed.then(resolve);
+                socket.close(1000, "local disconnect");
+            }),
+        };
+    }
+}
+export function createDefaultEdgeAgent(options) {
+    const platform = options.platform ?? nodeEdgePlatform();
+    const enrollment = new EdgeEnrollmentService({
+        platform,
+        authorization: new HttpDeviceAuthorizationProvider(options.controlPlaneUrl),
+        enrollment: new HttpEdgeEnrollmentClient(options.controlPlaneUrl),
+        callbacks: { onVerification: options.onVerification },
+        hostnameLabel: hostname,
+    });
+    const runtimeRef = {};
+    const setup = new LocalSetupManager({
+        store: new ProtectedJsonStore(path.join(platform.paths.dataDir, "grants.json")),
+        credentials: platform.credentialStore,
+        provider: new TerminalSetupProvider(new NodeTerminalSetupPrompter()),
+        onGrantRevoked: async (_grantId, deploymentIds) => {
+            const activeSupervisor = supervisor;
+            await Promise.all(deploymentIds.map((deploymentId) => activeSupervisor.blockDeployment(deploymentId)));
+        },
+    });
+    const supervisor = new EdgeWorkloadSupervisor({
+        setup,
+        factory: new StdioEdgeWorkloadFactory(),
+        executablePolicy: new ExecutableAllowlistPolicy({
+            executables: options.executableAllowlist ?? environmentList("FENTARIS_EDGE_ALLOWED_EXECUTABLES"),
+            packages: options.packageAllowlist ?? environmentList("FENTARIS_EDGE_ALLOWED_PACKAGES"),
+        }),
+        reportCapabilityManifest: (deploymentId, recipeDigest, manifest) => {
+            if (!runtimeRef.current) {
+                throw edgeError("EDGE_UNAVAILABLE", "Edge runtime is not initialized.");
+            }
+            return runtimeRef.current.reportCapabilityManifest(deploymentId, recipeDigest, manifest);
+        },
+    });
+    const runtime = new EdgeAgentRuntime({ setup, supervisor });
+    runtimeRef.current = runtime;
+    return new EdgeAgent({
+        enrollment,
+        connection: new WebSocketEdgeConnectionClient(),
+        platform,
+        runtime,
+        runtimeSummary: runtime,
+    });
+}
+function isLoopback(host) {
+    return host === "localhost" || host === "127.0.0.1" || host === "::1";
+}
+function environmentList(name) {
+    return (process.env[name] ?? "")
+        .split(",")
+        .map((value) => value.trim())
+        .filter(Boolean);
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,wBAAwB,GAIzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAC/B,wBAAwB,GAIzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,GAIjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,GAEtB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAqB9D,yEAAyE;AACzE,MAAM,OAAO,SAAS;IAGS;IAFrB,MAAM,CAAkB;IAEhC,YAA6B,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;IAAG,CAAC;IAE1D,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACpD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC;QAC1E,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAClD,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU;YACzC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU;YACzC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ;YACrC,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;YAC9C,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS;YACxC,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU;YAC1C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE;YAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI;YAC9D,kBAAkB,EAAE,CAAC;YACrB,gBAAgB,EAAE,CAAC;YACnB,kBAAkB,EAAE,CAAC;SACtB,CAAC;QACF,OAAO;YACL,GAAG,OAAO;YACV,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;YACzB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBACX,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;IACrD,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,6BAA6B;IACX;IAA7B,YAA6B,mBAA+C,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;QAA1E,qBAAgB,GAAhB,gBAAgB,CAA0D;IAAG,CAAC;IAE3G,KAAK,CAAC,OAAO,CAAC,KAAqD;QACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9G,IAAI,GAAoC,CAAC;QACzC,IAAI,SAAqD,CAAC;QAC1D,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,aAA0B,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC3C,aAAa,GAAG,OAAO,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE;YACnC,IAAI,mBAAmB;gBAAE,OAAO;YAChC,mBAAmB,GAAG,IAAI,CAAC;YAC3B,IAAI,SAAS;gBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;YACtC,CAAC;oBAAS,CAAC;gBACT,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,EAAE,OAAyB,EAAE,EAAE;YAC/C,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,SAAS,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,IAAI,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzE,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;gBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,iBAAiB,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBACpC,IAAI,CAAC,GAAG;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;gBACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,OAAO,EAAE,qBAAqB;oBAC9B,IAAI,EAAE,YAAY;oBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,iBAAiB,EAAE,CAAC,qBAAqB,CAAC;oBAC1C,KAAK;oBACL,KAAK;oBACL,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC,CAAC;YACN,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3C,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBACtC,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;4BACT,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gCACtC,MAAM,SAAS,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;4BAClF,CAAC;4BACD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gCACnF,MAAM,SAAS,CAAC,eAAe,EAAE,wDAAwD,CAAC,CAAC;4BAC7F,CAAC;4BACD,GAAG,GAAG,OAAO,CAAC;4BACd,MAAM,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;gCAC7B,MAAM,EAAE;oCACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;oCAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;oCAC9B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;iCACnD;gCACD,IAAI;6BACL,CAAC,CAAC;4BACH,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gCAC3B,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;oCAAE,OAAO;gCACzD,KAAK,IAAI,CAAC;oCACR,OAAO,EAAE,qBAAqB;oCAC9B,IAAI,EAAE,gBAAgB;oCACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oCACtB,UAAU,EAAE,GAAG,CAAC,UAAU;oCAC1B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;oCAC9C,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE;iCACnB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;4BAC9D,CAAC,EAAE,MAAM,CAAC,CAAC;4BACX,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;4BACpB,OAAO,CAAC,OAAO,CAAC,CAAC;4BACjB,OAAO;wBACT,CAAC;wBACD,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;4BACvE,MAAM,SAAS,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC;wBAC5F,CAAC;wBACD,IACE,OAAO,CAAC,IAAI,KAAK,oBAAoB;+BAClC,OAAO,CAAC,IAAI,KAAK,aAAa;+BAC9B,OAAO,CAAC,IAAI,KAAK,YAAY,EAChC,CAAC;4BACD,MAAM,SAAS,CAAC,eAAe,EAAE,sDAAsD,CAAC,CAAC;wBAC3F,CAAC;wBACD,MAAM,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAuE,CAAC,CAAC;oBACvG,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,KAAK,CAAC,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBACpC,KAAK,iBAAiB,EAAE,CAAC;gBACzB,IAAI,CAAC,GAAG;oBAAE,MAAM,CAAC,SAAS,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC,CAAC;YAC/F,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC;QAC7C,OAAO;YACL,WAAW,EAAE,gBAAgB,CAAC,UAAU;YACxC,MAAM;YACN,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACzC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;oBAC3C,KAAK,iBAAiB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACvC,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACzC,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;CACF;AAUD,MAAM,UAAU,sBAAsB,CAAC,OAA4B;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC;QAC3C,QAAQ;QACR,aAAa,EAAE,IAAI,+BAA+B,CAAC,OAAO,CAAC,eAAe,CAAC;QAC3E,UAAU,EAAE,IAAI,wBAAwB,CAAC,OAAO,CAAC,eAAe,CAAC;QACjE,SAAS,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;QACrD,aAAa,EAAE,QAAQ;KACxB,CAAC,CAAC;IACH,MAAM,UAAU,GAAmC,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC;QAClC,KAAK,EAAE,IAAI,kBAAkB,CAAqB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnG,WAAW,EAAE,QAAQ,CAAC,eAAe;QACrC,QAAQ,EAAE,IAAI,qBAAqB,CAAC,IAAI,yBAAyB,EAAE,CAAC;QACpE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE;YAChD,MAAM,gBAAgB,GAAG,UAAU,CAAC;YACpC,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzG,CAAC;KACF,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC;QAC5C,KAAK;QACL,OAAO,EAAE,IAAI,wBAAwB,EAAE;QACvC,gBAAgB,EAAE,IAAI,yBAAyB,CAAC;YAC9C,WAAW,EAAE,OAAO,CAAC,mBAAmB,IAAI,eAAe,CAAC,mCAAmC,CAAC;YAChG,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,eAAe,CAAC,gCAAgC,CAAC;SACxF,CAAC;QACF,wBAAwB,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE;YACjE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,SAAS,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,UAAU,CAAC,OAAO,CAAC,wBAAwB,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC3F,CAAC;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5D,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,OAAO,IAAI,SAAS,CAAC;QACnB,UAAU;QACV,UAAU,EAAE,IAAI,6BAA6B,EAAE;QAC/C,QAAQ;QACR,OAAO;QACP,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC;AACxE,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC7B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,7 @@
+import type { EdgeAgent } from "./agent.js";
+export interface EdgeCliIo {
+    out(value: string): void;
+    error(value: string): void;
+}
+export declare function runEdgeCli(argv: readonly string[], agent: EdgeAgent, io: EdgeCliIo): Promise<number>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG5C,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAoC1G"}

package/dist/cli.js

@@ -0,0 +1,40 @@
+import { redactEdgeValue, safeEdgeError } from "./redaction.js";
+export async function runEdgeCli(argv, agent, io) {
+    const command = argv[0] ?? "status";
+    try {
+        switch (command) {
+            case "login": {
+                const result = await agent.login();
+                io.out(JSON.stringify(redactEdgeValue({
+                    status: result.repeated ? "already-enrolled" : "enrolled",
+                    edgeNodeId: result.config.edgeNodeId,
+                    tenantId: result.config.tenantId,
+                    connected: true,
+                })));
+                return 0;
+            }
+            case "status":
+                io.out(JSON.stringify(redactEdgeValue(await agent.status())));
+                return 0;
+            case "disconnect":
+                await agent.disconnect();
+                io.out(JSON.stringify({ status: "disconnected" }));
+                return 0;
+            case "revoke":
+                await agent.revoke();
+                io.out(JSON.stringify({ status: "revoked" }));
+                return 0;
+            case "add":
+                io.error("MCP definitions and assignments are managed by Fentaris; fentaris-edge has no add command.");
+                return 2;
+            default:
+                io.error("Usage: fentaris-edge <login|status|disconnect|revoke>");
+                return 2;
+        }
+    }
+    catch (error) {
+        io.error(JSON.stringify(safeEdgeError(error)));
+        return 1;
+    }
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAOhE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB,EAAE,KAAgB,EAAE,EAAa;IACvF,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IACpC,IAAI,CAAC;QACH,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACnC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;oBACpC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU;oBACzD,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;oBACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;oBAChC,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC,CAAC,CAAC;gBACL,OAAO,CAAC,CAAC;YACX,CAAC;YACD,KAAK,QAAQ;gBACX,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC9D,OAAO,CAAC,CAAC;YACX,KAAK,YAAY;gBACf,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO,CAAC,CAAC;YACX,KAAK,QAAQ;gBACX,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;gBACrB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC;YACX,KAAK,KAAK;gBACR,EAAE,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC;gBACvG,OAAO,CAAC,CAAC;YACX;gBACE,EAAE,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAClE,OAAO,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/enrollment.d.ts

@@ -0,0 +1,117 @@
+import type { EdgeLocalConfig, EdgePlatform, StoredDeviceKeyPair } from "./platform.js";
+import type { EdgeConnectionRuntime } from "./runtime.js";
+export interface DeviceAuthorizationRequest {
+    readonly deviceCode: string;
+    readonly userCode: string;
+    readonly verificationUri: string;
+    readonly verificationUriComplete?: string;
+    readonly expiresIn: number;
+    readonly interval: number;
+}
+export interface EdgeAuthorizationTokens {
+    readonly accessToken: string;
+    readonly refreshToken: string;
+    readonly expiresAt: number;
+}
+export type DeviceAuthorizationPollResult = {
+    readonly status: "pending" | "slow-down";
+} | {
+    readonly status: "authorized";
+    readonly tokens: EdgeAuthorizationTokens;
+} | {
+    readonly status: "denied" | "expired";
+};
+export interface DeviceAuthorizationProvider {
+    begin(): Promise<DeviceAuthorizationRequest>;
+    poll(deviceCode: string): Promise<DeviceAuthorizationPollResult>;
+    refresh(refreshToken: string): Promise<EdgeAuthorizationTokens>;
+}
+export interface EdgeEnrollmentRequest {
+    readonly accessToken: string;
+    readonly publicKey: string;
+    readonly deviceCode: string;
+    readonly nonce: string;
+    readonly proof: string;
+    readonly hostnameLabel?: string;
+}
+export interface EdgeEnrollmentResult {
+    readonly edgeNodeId: string;
+    readonly tenantId: string;
+    readonly gatewayUrl: string;
+    readonly deviceCredential: string;
+}
+export interface EdgeEnrollmentClient {
+    enroll(request: EdgeEnrollmentRequest): Promise<EdgeEnrollmentResult>;
+    revoke(edgeNodeId: string, accessToken: string): Promise<void>;
+}
+export interface EdgeConnection {
+    readonly connectedAt: number;
+    readonly closed?: Promise<void>;
+    close(): Promise<void>;
+}
+export interface EdgeConnectionClient {
+    connect(input: {
+        gatewayUrl: string;
+        edgeNodeId: string;
+        tenantId: string;
+        deviceCredential: string;
+        accessToken: string;
+        publicKey: string;
+        privateKey: string;
+        runtime?: EdgeConnectionRuntime;
+    }): Promise<EdgeConnection>;
+}
+export interface EnrollmentCallbacks {
+    onVerification(request: DeviceAuthorizationRequest): void | Promise<void>;
+}
+export interface EdgeEnrollmentServiceOptions {
+    platform: EdgePlatform;
+    authorization: DeviceAuthorizationProvider;
+    enrollment: EdgeEnrollmentClient;
+    callbacks: EnrollmentCallbacks;
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+    hostnameLabel?: () => string | undefined;
+}
+export interface EdgeLoginResult {
+    readonly config: EdgeLocalConfig;
+    readonly authorization: DeviceAuthorizationRequest;
+    readonly repeated: boolean;
+}
+/** Device-authorization enrollment with random key creation and proof-of-possession. */
+export declare class EdgeEnrollmentService {
+    private readonly options;
+    private readonly now;
+    private readonly sleep;
+    constructor(options: EdgeEnrollmentServiceOptions);
+    login(): Promise<EdgeLoginResult>;
+    validAccessToken(): Promise<string>;
+    connectionCredentials(): Promise<{
+        config: EdgeLocalConfig;
+        keyPair: StoredDeviceKeyPair;
+        deviceCredential: string;
+        accessToken: string;
+    }>;
+    revokeRemote(): Promise<void>;
+    clearLocalIdentity(): Promise<void>;
+    private loadOrCreateKeyPair;
+    private awaitAuthorization;
+    private saveTokens;
+}
+/** HTTP device authorization provider for self-hosted or managed control planes. */
+export declare class HttpDeviceAuthorizationProvider implements DeviceAuthorizationProvider {
+    private readonly baseUrl;
+    private readonly clientId;
+    constructor(baseUrl: string, clientId?: string);
+    begin(): Promise<DeviceAuthorizationRequest>;
+    poll(deviceCode: string): Promise<DeviceAuthorizationPollResult>;
+    refresh(refreshToken: string): Promise<EdgeAuthorizationTokens>;
+}
+/** HTTP enrollment client. Sensitive authorization fields are never included in errors. */
+export declare class HttpEdgeEnrollmentClient implements EdgeEnrollmentClient {
+    private readonly baseUrl;
+    constructor(baseUrl: string);
+    enroll(request: EdgeEnrollmentRequest): Promise<EdgeEnrollmentResult>;
+    revoke(edgeNodeId: string, accessToken: string): Promise<void>;
+}
+//# sourceMappingURL=enrollment.d.ts.map

package/dist/enrollment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrollment.d.ts","sourceRoot":"","sources":["../src/enrollment.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,6BAA6B,GACrC;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAA;CAAE,GAC5C;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,2BAA2B;IAC1C,KAAK,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACjE,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,KAAK,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,qBAAqB,CAAC;KACjC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,OAAO,EAAE,0BAA0B,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,EAAE,2BAA2B,CAAC;IAC3C,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,mBAAmB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAOD,wFAAwF;AACxF,qBAAa,qBAAqB;IAIpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;gBAEzB,OAAO,EAAE,4BAA4B;IAK5D,KAAK,IAAI,OAAO,CAAC,eAAe,CAAC;IAgDjC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAanC,qBAAqB;;;;;;IAerB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;YAW3B,mBAAmB;YAgBnB,kBAAkB;YAclB,UAAU;CAOzB;AAED,oFAAoF;AACpF,qBAAa,+BAAgC,YAAW,2BAA2B;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAU,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAA1C,OAAO,EAAE,MAAM,EAAmB,QAAQ,SAAkB;IACnF,KAAK,IAAI,OAAO,CAAC,0BAA0B,CAAC;IAG5C,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAGhE,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAGtE;AAED,2FAA2F;AAC3F,qBAAa,wBAAyB,YAAW,oBAAoB;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,MAAM;IACtC,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAGrE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGrE"}