@inixiative/signet 0.12.1 → 0.12.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +2 -2
- package/src/client.ts +3 -1
package/README.md
CHANGED
|
@@ -16,7 +16,7 @@ This package is the one implementation of that protocol, shared by Kingdom (whic
|
|
|
16
16
|
- a **person or their agent** acts as themselves with a Kingdom API token plus a proof from its key: `requestSignet` asks for a Signet on an integration (a `signetRequest` Inquiry, approved at once when the caller manages the integration), `awaitSignet` polls `collectSignet` until it is approved, and `enrollSignet` enrolls the key on a Signet an owner granted directly (`owner/grant`). `saveCollectedSignet` writes either result next to the key;
|
|
17
17
|
- `installation`: the layout every installation shares, under one root per product (a Foundry's `kingdom/`, `~/.kcp`): one directory per Kingdom host with its key and one file per Signet (`installationPaths`, `installationDirectory`, `signetCredentialFile`, `heldCredentials`), `privateDirectory`, and `defaultInstallationName(product)`. `listedSignets`, `heldSignetFile` and `withdrawRegistration` read and act on it. `holdPersonSignets` enrolls the key on Signets issued to a person, under the same per-directory `withHoldLock` as `holdInstallationSignets`, so a person login and an installation sync never enroll over each other;
|
|
18
18
|
- `SignetHolders`, a cache of each held Signet's `access/describe` (with its `holder`), keyed by credential file or by the caller's own `keyOf`, refreshed after `stale()`;
|
|
19
|
-
- `SignetClient`, which renews its access token and signs each call: `describe`, `execute`, task settlement, and the run actions a Foundry uses for inference (`resolveRun`, `delegateRun`, `renewRun`, `revokeRun`), and for a subscription run `releaseSubscription` and `
|
|
19
|
+
- `SignetClient`, which renews its access token and signs each call: `describe`, `execute`, task settlement, and the run actions a Foundry uses for inference (`resolveRun`, `delegateRun`, `renewRun`, `revokeRun`), and for a subscription run `releaseSubscription`, `reportSubscriptionLimits` and `reportCredentialRejected` (the provider rejected the login a release handed out).
|
|
20
20
|
|
|
21
21
|
```ts
|
|
22
22
|
import { holdInstallationSignets, InstallationSocket, pairInstallation, SignetClient } from '@inixiative/signet';
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@inixiative/signet",
|
|
3
|
-
"version": "0.12.
|
|
3
|
+
"version": "0.12.2",
|
|
4
4
|
"description": "Present Kingdom Signets: the wire contracts, DPoP proofs, device pairing and a renewing client shared by Kingdom, Archive, Foundry and Oracle.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "src/index.ts",
|
|
@@ -35,7 +35,7 @@
|
|
|
35
35
|
"devDependencies": {
|
|
36
36
|
"@asteasolutions/zod-to-openapi": "^9.1.0",
|
|
37
37
|
"@biomejs/biome": "2.5.2",
|
|
38
|
-
"@inixiative/config": "^0.5.
|
|
38
|
+
"@inixiative/config": "^0.5.178",
|
|
39
39
|
"@inixiative/json-rules": "^3.16.0",
|
|
40
40
|
"@types/bun": "1.4.4",
|
|
41
41
|
"lefthook": "2.1.9",
|
package/src/client.ts
CHANGED
|
@@ -500,7 +500,8 @@ export type SignetAction =
|
|
|
500
500
|
| 'renewRun'
|
|
501
501
|
| 'revokeRun'
|
|
502
502
|
| 'releaseSubscription'
|
|
503
|
-
| 'reportSubscriptionLimits'
|
|
503
|
+
| 'reportSubscriptionLimits'
|
|
504
|
+
| 'reportCredentialRejected';
|
|
504
505
|
const signetActions: SignetAction[] = [
|
|
505
506
|
'describe',
|
|
506
507
|
'execute',
|
|
@@ -513,6 +514,7 @@ const signetActions: SignetAction[] = [
|
|
|
513
514
|
'revokeRun',
|
|
514
515
|
'releaseSubscription',
|
|
515
516
|
'reportSubscriptionLimits',
|
|
517
|
+
'reportCredentialRejected',
|
|
516
518
|
];
|
|
517
519
|
|
|
518
520
|
/** Presents one enrolled Signet: renews its access token and signs each call with the device key. */
|