@mattstack/rt-client 0.1.1 → 0.2.0

package/dist/client.d.ts

@@ -1,5 +1,5 @@
 import type { RtResponse, RtClientOptions } from "./transport.ts";
-import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData } from "./commands.ts";
+import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData, ForgeSlug, ForgeTokenData } from "./commands.ts";
 /**
  * One repo's project open-MR store. A cold repo forces a full paginated sync
  * on the daemon side when maxAgeMs demands it, which can run tens of seconds
@@ -13,3 +13,11 @@ import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData } from
 export declare function readProjectMRs(repoName: string, maxAgeMs?: number, opts?: RtClientOptions, demand?: DemandDecl): Promise<RtResponse<ProjectMRsData>>;
 export declare function readDiscussions(repoName: string, iid: number, opts?: RtClientOptions): Promise<RtResponse<DiscussionsData>>;
 export declare function readMrsByBranch(repoName: string, branches: string[], opts?: RtClientOptions): Promise<RtResponse<MrByBranchData>>;
+/**
+ * The forge token for one tracked repo (MAT-33). Grant-gated on the daemon
+ * side: an untracked repo comes back `ok: false` with the `rt daemon track`
+ * command to run, which is the fail-closed shape callers should surface
+ * verbatim. Callers keep env-var precedence on their own side; this is the
+ * fallback that replaces reading ~/.rt/secrets.json directly.
+ */
+export declare function resolveForgeToken(repoName: string, forge: ForgeSlug, opts?: RtClientOptions): Promise<RtResponse<ForgeTokenData>>;

package/dist/commands.d.ts

@@ -40,6 +40,11 @@ export interface MrByBranchData {
     byBranch: Record<string, MrByBranchEntry | null>;
     syncedAt: number;
 }
+/** Forges the daemon can hold a token for. */
+export type ForgeSlug = "gitlab" | "github";
+export interface ForgeTokenData {
+    token: string;
+}
 export interface Commands {
     "project-mrs:read": {
         payload: {
@@ -63,6 +68,20 @@ export interface Commands {
         };
         data: MrByBranchData;
     };
+    /**
+     * The forge token for one tracked repo (MAT-33). Repo-scoped on purpose:
+     * rt gates access per repo through repo-tracking.json, and this verb is
+     * what lets consumers stop reading ~/.rt/secrets.json directly, which
+     * walked around that grant model entirely. An untracked repo is refused;
+     * the caller's env vars keep precedence on the caller's side.
+     */
+    "secrets:forge-token": {
+        payload: {
+            repoName: string;
+            forge: ForgeSlug;
+        };
+        data: ForgeTokenData;
+    };
 }
 export type CommandName = keyof Commands;
 export declare const COMMAND_NAMES: readonly CommandName[];

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 export { rtCommand, DEFAULT_SOCK } from "./transport.ts";
 export type { RtResponse, RtClientOptions } from "./transport.ts";
-export { readProjectMRs, readDiscussions, readMrsByBranch } from "./client.ts";
+export { readProjectMRs, readDiscussions, readMrsByBranch, resolveForgeToken } from "./client.ts";
 export { COMMAND_NAMES } from "./commands.ts";
-export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, Commands, CommandName, } from "./commands.ts";
+export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, Commands, CommandName, ForgeSlug, ForgeTokenData, } from "./commands.ts";
 export { subscribe, DEFAULT_WS_URL } from "./relay.ts";
 export type { RelayEventType } from "./relay.ts";
 export { repoNameForPath } from "./repos.ts";

package/dist/index.js

@@ -33,8 +33,16 @@ function readDiscussions(repoName, iid, opts = {}) {
 function readMrsByBranch(repoName, branches, opts = {}) {
   return rtCommand("mr:by-branch", { repoName, branches }, { sockPath: opts.sockPath, timeoutMs: 60000 });
 }
+function resolveForgeToken(repoName, forge, opts = {}) {
+  return rtCommand("secrets:forge-token", { repoName, forge }, { sockPath: opts.sockPath, timeoutMs: 1e4 });
+}
 // src/commands.ts
-var COMMAND_NAMES = ["project-mrs:read", "discussions:read", "mr:by-branch"];
+var COMMAND_NAMES = [
+  "project-mrs:read",
+  "discussions:read",
+  "mr:by-branch",
+  "secrets:forge-token"
+];
 // src/relay.ts
 var DEFAULT_WS_URL = "ws://127.0.0.1:9401/ws";
 function subscribe(onEvent, opts = {}) {
@@ -104,6 +112,7 @@ function repoNameForPath(repoPath, reposJsonPath) {
 export {
   subscribe,
   rtCommand,
+  resolveForgeToken,
   repoNameForPath,
   readProjectMRs,
   readMrsByBranch,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mattstack/rt-client",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "type": "module",
   "exports": {
     ".": {

package/src/client.ts

@@ -5,7 +5,7 @@
  */
 import { rtCommand } from "./transport.ts";
 import type { RtResponse, RtClientOptions } from "./transport.ts";
-import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData } from "./commands.ts";
+import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData, ForgeSlug, ForgeTokenData } from "./commands.ts";
 
 /**
  * One repo's project open-MR store. A cold repo forces a full paginated sync
@@ -52,3 +52,22 @@ export function readMrsByBranch(
     { sockPath: opts.sockPath, timeoutMs: 60_000 },
   );
 }
+
+/**
+ * The forge token for one tracked repo (MAT-33). Grant-gated on the daemon
+ * side: an untracked repo comes back `ok: false` with the `rt daemon track`
+ * command to run, which is the fail-closed shape callers should surface
+ * verbatim. Callers keep env-var precedence on their own side; this is the
+ * fallback that replaces reading ~/.rt/secrets.json directly.
+ */
+export function resolveForgeToken(
+  repoName: string,
+  forge: ForgeSlug,
+  opts: RtClientOptions = {},
+): Promise<RtResponse<ForgeTokenData>> {
+  return rtCommand<ForgeTokenData>(
+    "secrets:forge-token",
+    { repoName, forge },
+    { sockPath: opts.sockPath, timeoutMs: 10_000 },
+  );
+}

package/src/commands.ts

@@ -45,12 +45,32 @@ export interface MrByBranchData {
   syncedAt: number;
 }
 
+/** Forges the daemon can hold a token for. */
+export type ForgeSlug = "gitlab" | "github";
+
+export interface ForgeTokenData {
+  token: string;
+}
+
 export interface Commands {
   "project-mrs:read": { payload: { repoName: string; maxAgeMs?: number; demand?: DemandDecl }; data: ProjectMRsData };
   "discussions:read": { payload: { repoName: string; iid: number }; data: DiscussionsData };
   "mr:by-branch": { payload: { repoName: string; branches: string[] }; data: MrByBranchData };
+  /**
+   * The forge token for one tracked repo (MAT-33). Repo-scoped on purpose:
+   * rt gates access per repo through repo-tracking.json, and this verb is
+   * what lets consumers stop reading ~/.rt/secrets.json directly, which
+   * walked around that grant model entirely. An untracked repo is refused;
+   * the caller's env vars keep precedence on the caller's side.
+   */
+  "secrets:forge-token": { payload: { repoName: string; forge: ForgeSlug }; data: ForgeTokenData };
 }
 
 export type CommandName = keyof Commands;
 
-export const COMMAND_NAMES: readonly CommandName[] = ["project-mrs:read", "discussions:read", "mr:by-branch"];
+export const COMMAND_NAMES: readonly CommandName[] = [
+  "project-mrs:read",
+  "discussions:read",
+  "mr:by-branch",
+  "secrets:forge-token",
+];

package/src/index.ts

@@ -1,7 +1,7 @@
 export { rtCommand, DEFAULT_SOCK } from "./transport.ts";
 export type { RtResponse, RtClientOptions } from "./transport.ts";
 
-export { readProjectMRs, readDiscussions, readMrsByBranch } from "./client.ts";
+export { readProjectMRs, readDiscussions, readMrsByBranch, resolveForgeToken } from "./client.ts";
 
 export { COMMAND_NAMES } from "./commands.ts";
 export type {
@@ -14,6 +14,8 @@ export type {
   MrByBranchData,
   Commands,
   CommandName,
+  ForgeSlug,
+  ForgeTokenData,
 } from "./commands.ts";
 
 export { subscribe, DEFAULT_WS_URL } from "./relay.ts";