@kubun/credential-types 0.16.0 → 0.17.1

package/lib/index.d.ts

@@ -1,11 +1,3 @@
-export type OAuthProviderDefinition = {
-    name: string;
-    authorizationEndpoint: string;
-    tokenEndpoint: string;
-    baseScopes?: Array<string>;
-    clientID?: string;
-    clientSecret?: string;
-};
 export type Credential = {
     accessToken: string;
     refreshToken?: string;
@@ -36,10 +28,29 @@ export type CredentialProvider = {
     }): Promise<void>;
     delete(providerName: string, ownerDID: string): Promise<void>;
 };
-export type TokenResponse = {
-    access_token: string;
-    refresh_token?: string;
-    expires_in?: number;
-    token_type: string;
-    scope?: string;
+/**
+ * Opt-in capability: point `(providerName, ownerDID)` at an entry the
+ * provider already holds, without minting anything. A `CredentialProvider`
+ * that also implements this can bind an alias to an entry created out of
+ * band (e.g. a device-to-device credential handoff).
+ */
+export type AliasBindingCredentialProvider = {
+    bindAlias(providerName: string, ownerDID: string, entryID: string): Promise<void>;
+};
+/**
+ * Opt-in capability: read and write a credential together with the entryID
+ * it resolves to, so a caller can target that entry directly on a
+ * subsequent write without re-resolving the alias.
+ */
+export type EntryPairedCredentialProvider = {
+    getCredentialRef(providerName: string, ownerDID: string): Promise<{
+        credential: Credential;
+        entryID: string;
+    } | null>;
+    setCredentialForEntry(params: {
+        providerName: string;
+        ownerDID: string;
+        entryID: string;
+        credential: Credential;
+    }): Promise<'updated' | 'absent'>;
 };

package/lib/index.js

@@ -1,5 +1,9 @@
-// Credential-domain contracts: the OAuth credential bundle and the provider port
+// Credential-domain contracts: the credential bundle and the provider port
 // that stores/refreshes it. Kept in this leaf package so both the low-level
 // `@kubun/connector` (which consumes the port) and `@kubun/credential` (which
 // implements it) can depend on the types without depending on each other.
-export { };
+/**
+ * Opt-in capability: read and write a credential together with the entryID
+ * it resolves to, so a caller can target that entry directly on a
+ * subsequent write without re-resolving the alias.
+ */ export { };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubun/credential-types",
-  "version": "0.16.0",
+  "version": "0.17.1",
   "keywords": [],
   "license": "see LICENSE.md",
   "sideEffects": false,
@@ -20,8 +20,8 @@
   "scripts": {
     "build": "pnpm run build:clean && pnpm run build:js && pnpm run build:types",
     "build:clean": "del lib",
-    "build:js": "swc src -d ./lib --config-file ../../node_modules/@kigu/dev/swc.json --strip-leading-paths",
-    "build:types": "tsc --emitDeclarationOnly --skipLibCheck",
+    "build:js": "del 'lib/**/*.js' && swc src -d ./lib --config-file ../../node_modules/@kigu/dev/swc.json --strip-leading-paths",
+    "build:types": "del 'lib/**/*.d.ts' 'lib/**/*.d.ts.map' && tsc --emitDeclarationOnly --skipLibCheck",
     "build:types:ci": "tsc --emitDeclarationOnly --declarationMap false",
     "test": "pnpm run test:types && pnpm run test:unit",
     "test:types": "tsc --noEmit -p tsconfig.test.json",