@kanonak-protocol/cli 5.6.0 → 5.8.0

package/dist/auth/sessionFetch.d.ts

@@ -0,0 +1,21 @@
+import { CredentialResolver } from '@kanonak-protocol/sdk';
+import type { AuthenticatedFetchFn } from '@kanonak-protocol/sdk';
+/**
+ * A fetch transport that authenticates GATED reads with the device session.
+ *
+ * Per host, it resolves the publisher → authority → device session
+ * (CredentialResolver) and presents the session token as `Authorization: Bearer`.
+ * A public publisher resolves to no credential and the request goes out
+ * anonymously. This is what makes `install` / `connect` read a gated publisher's
+ * `kanonak.json` / `kanonak.lock` / package sources — without it, those requests
+ * hit the gate unauthenticated.
+ *
+ * Crucially it uses `redirect: 'manual'`: a gated endpoint 302-redirects an
+ * unauthenticated request (e.g. to a login), and Node's default auto-following
+ * turns that into a redirect LOOP. Not following means a gated 302 surfaces as a
+ * clean non-OK response the caller reports, instead of spinning.
+ *
+ * The resolved credential is cached per host so one `connect`/`install` doesn't
+ * re-mint a session for every package in the closure.
+ */
+export declare function createSessionFetch(resolver?: CredentialResolver): AuthenticatedFetchFn;

package/dist/commands/connect.d.ts

@@ -1,4 +1,4 @@
-import type { LockFile, LockEntry, PublisherConfig, DeviceEnrollmentRecord, SessionRecord, AuthenticatedFetchFn } from '@kanonak-protocol/sdk';
+import type { LockFile, LockEntry, PublisherConfig, DeviceEnrollmentRecord, AuthenticatedFetchFn } from '@kanonak-protocol/sdk';
 /** The outcome of a connect, for a host (CLI / VS Code) to report. */
 export interface ConnectResult {
     connected: boolean;
@@ -27,9 +27,6 @@ export interface ConnectDeps {
     publisherIndex?: {
         getLock(host: string): Promise<LockFile | null>;
     };
-    sessionManager?: {
-        getValidSession(host: string): Promise<SessionRecord | null>;
-    };
     /** Run device enrollment for a publisher (resolves its authority internally). */
     enroll?: (publisher: string) => Promise<{
         success: boolean;