@kanonak-protocol/cli 4.19.0 → 5.0.0

package/dist/resolution/LocalResolution.d.ts

@@ -6,8 +6,8 @@ export { LocalFirstRepository };
  * Walks up through publisher domain directories (names containing a dot)
  * and their subdirectories, so sibling publisher directories are included.
  *
- * Example: given kanonak/kanonak.com/platform-connections/,
- * walks up through kanonak.com (publisher domain) to kanonak/.
+ * Example: given kanonak/example.com/platform-connections/,
+ * walks up through example.com (publisher domain) to kanonak/.
  */
 export declare function findWorkspaceRoot(dir: string): string;
 export declare function collectKanonakFiles(dir: string, files: string[]): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kanonak-protocol/cli",
-  "version": "4.19.0",
+  "version": "5.0.0",
   "description": "Command-line tool for the Kanonak Protocol — validate, resolve, preview, and publish semantic ontology packages.",
   "type": "module",
   "main": "./dist/index.js",
@@ -35,8 +35,8 @@
     "semantic-web"
   ],
   "dependencies": {
-    "@kanonak-protocol/sdk": "^4.19.0",
-    "@kanonak-protocol/types": "^4.19.0",
+    "@kanonak-protocol/sdk": "^5.0.0",
+    "@kanonak-protocol/types": "^5.0.0",
     "@peculiar/x509": "^2.0.0",
     "commander": "^13.0.0",
     "js-yaml": "^4.1.1",

package/dist/auth/OAuthDiscovery.d.ts

@@ -1,47 +0,0 @@
-/**
- * OAuth 2.0 Authorization Server Metadata (RFC 8414).
- */
-export interface OAuthServerMetadata {
-    issuer?: string | null;
-    authorizationEndpoint?: string | null;
-    tokenEndpoint?: string | null;
-    registrationEndpoint?: string | null;
-    revocationEndpoint?: string | null;
-    scopesSupported?: string[] | null;
-    responseTypesSupported?: string[] | null;
-    grantTypesSupported?: string[] | null;
-    codeChallengeMethodsSupported?: string[] | null;
-    tokenEndpointAuthMethodsSupported?: string[] | null;
-    dpopSigningAlgValuesSupported?: string[] | null;
-    /** Endpoint that signs a submitted CSR after consent. */
-    enrollmentEndpoint?: string | null;
-    /** Issuance protocols the endpoint speaks, e.g. `["native"]`, `["est"]`, `["acme"]`. */
-    enrollmentIssuanceProtocols?: string[] | null;
-    /** Device key types accepted, e.g. `["ec-p256"]`. */
-    enrollmentKeyTypes?: string[] | null;
-    /** Scopes grantable to a device certificate. */
-    enrollmentScopesSupported?: string[] | null;
-    /**
-     * Authorization-request parameter that carries the CSR key's RFC 7638
-     * thumbprint to bind consent to that key (anti-substitution). Defaults to
-     * `key_thumbprint` when the server advertises enrollment without naming it.
-     */
-    enrollmentConsentBindingParam?: string | null;
-}
-/** Default authorization-request parameter for the consent↔key binding. */
-export declare const DEFAULT_CONSENT_BINDING_PARAM = "key_thumbprint";
-/**
- * Discovers OAuth server metadata using RFC 8414.
- * Falls back to OpenID Connect discovery.
- * Port of C# OAuthDiscoveryService.
- */
-export declare class OAuthDiscovery {
-    private readonly cache;
-    discover(host: string): Promise<OAuthServerMetadata | null>;
-    supportsOAuth(host: string): Promise<boolean>;
-    static supportsPkceS256(m: OAuthServerMetadata): boolean;
-    static supportsDynamicRegistration(m: OAuthServerMetadata): boolean;
-    static supportsAuthorizationCode(m: OAuthServerMetadata): boolean;
-    static supportsEnrollment(m: OAuthServerMetadata): boolean;
-    private tryEndpoint;
-}

package/dist/auth/OAuthFlow.d.ts

@@ -1,33 +0,0 @@
-import { CredentialStore } from '@kanonak-protocol/sdk';
-import { OAuthDiscovery } from './OAuthDiscovery.js';
-/**
- * OAuth 2.0 Authorization Code Flow with PKCE and DPoP.
- * Supports Dynamic Client Registration (RFC 7591).
- * Port of C# OAuthFlowService.
- */
-export declare class OAuthFlow {
-    private readonly discovery;
-    private readonly credentialStore;
-    constructor(discovery?: OAuthDiscovery, credentialStore?: CredentialStore);
-    /**
-     * Full OAuth authorization flow.
-     */
-    authorize(host: string, scopes?: string[]): Promise<OAuthResult>;
-    /**
-     * Refresh an expired access token.
-     */
-    refresh(host: string): Promise<OAuthResult>;
-    /**
-     * Revoke tokens and remove credentials.
-     */
-    logout(host: string): Promise<OAuthResult>;
-    private registerClient;
-    private exchangeCode;
-    private refreshTokenRequest;
-    private revokeToken;
-}
-export interface OAuthResult {
-    success: boolean;
-    host?: string;
-    error?: string;
-}

package/dist/commands/login.d.ts

@@ -1,11 +0,0 @@
-/**
- * kanonak login <publisher>
- *
- * Authenticate with a package publisher using OAuth 2.0.
- * Supports Dynamic Client Registration (RFC 7591), PKCE (RFC 7636),
- * and DPoP proof-of-possession tokens (RFC 9449).
- *
- * Credentials are stored in the OS credential store (macOS Keychain,
- * Windows Credential Manager, or Linux Secret Service).
- */
-export declare function loginCommand(publisher: string): Promise<void>;

package/dist/commands/logout.d.ts

@@ -1,6 +0,0 @@
-/**
- * kanonak logout <publisher>
- *
- * Revoke tokens and remove stored credentials for a publisher.
- */
-export declare function logoutCommand(publisher: string): Promise<void>;