@oneie/sdk 0.8.0 → 0.10.0

package/dist/auth.d.ts

@@ -0,0 +1,102 @@
+/**
+ * SDK auth-client wrapper (T10 — auth-client surface)
+ *
+ * Wraps Better Auth's createAuthClient to expose signIn.{passkey,email,google,wallet}
+ * matching the web auth-client shape (one.ie/web/src/lib/auth-client.ts).
+ *
+ * Better Auth's native client surfaces signIn.email and signIn.social (for google).
+ * passkey and wallet are custom server-side plugins; their sign-in flows are exposed
+ * here as typed wrappers over the auth endpoints.
+ */
+import { clearToken } from "./storage.js";
+export interface AuthClientOptions {
+    /** Defaults to https://one.ie in production, http://localhost:4321 in dev. */
+    baseURL?: string;
+}
+export interface EmailSignInOpts {
+    email: string;
+    password: string;
+    /** Redirect URL after sign-in (browser only). */
+    callbackURL?: string;
+}
+export interface PasskeySignInOpts {
+    /** Optional hint — browser credential ID to pre-select. */
+    credentialId?: string;
+}
+export interface WalletSignInOpts {
+    /** Sui wallet address (0x...). */
+    address: string;
+    /** HMAC-signed nonce from GET /api/auth/sui-wallet/nonce. */
+    nonce: string;
+    /** Ed25519 personal-message signature over the nonce message. */
+    signature: string;
+}
+export interface AuthSession {
+    token: string;
+    user: {
+        id: string;
+        email?: string | null;
+        name?: string | null;
+    };
+}
+export interface SignInResult {
+    data: AuthSession | null;
+    error: {
+        message: string;
+        status: number;
+    } | null;
+}
+/**
+ * Creates the SDK auth client.  Returns a `signIn` namespace with four methods:
+ *  - `signIn.email(opts)` — email + password → session token
+ *  - `signIn.google(opts?)` — Google OAuth redirect (browser) or URL (Node)
+ *  - `signIn.passkey(opts?)` — WebAuthn assertion via custom passkey-webauthn plugin
+ *  - `signIn.wallet(opts)` — Sui SIWE via custom sui-wallet plugin
+ *
+ * Token is persisted to localStorage (browser) or ~/.config/oneie/token (Node).
+ */
+export declare function createSdkAuthClient(options?: AuthClientOptions): {
+    signIn: {
+        /**
+         * Sign in with email + password.
+         * POST /api/auth/sign-in/email → session; persists token.
+         */
+        email(opts: EmailSignInOpts): Promise<SignInResult>;
+        /**
+         * Sign in with Google OAuth.
+         * In the browser: triggers redirect. In Node: returns the redirect URL.
+         * No token returned synchronously — the callback URL handles session creation.
+         */
+        google(opts?: {
+            callbackURL?: string;
+        }): Promise<{
+            redirectURL?: string;
+        }>;
+        /**
+         * Sign in with a passkey (WebAuthn assertion).
+         * Calls the custom passkey-webauthn plugin's assert endpoint directly
+         * since Better Auth v1.x does not ship a standard passkey client plugin.
+         *
+         * Callers must supply the WebAuthn assertion object; this method handles
+         * the HTTP round-trip and token persistence.
+         */
+        passkey(opts: PasskeySignInOpts & {
+            assertion: Record<string, unknown>;
+            challenge: string;
+            token: string;
+        }): Promise<SignInResult>;
+        /**
+         * Sign in with a Sui wallet (SIWE).
+         * Calls the custom sui-wallet plugin's verify endpoint.
+         * address + nonce + signature → session token.
+         */
+        wallet(opts: WalletSignInOpts): Promise<SignInResult>;
+    };
+    signOut: () => Promise<void>;
+    getToken: () => string | null;
+    clearToken: typeof clearToken;
+    /** Underlying Better Auth client — for session, useSession, etc. */
+    _client: unknown;
+};
+export type SdkAuthClient = ReturnType<typeof createSdkAuthClient>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAsB,UAAU,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACnD;AAWD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,iBAAiB;;QAc3D;;;WAGG;oBACe,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;QAYzD;;;;WAIG;sBACiB;YAAE,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAShF;;;;;;;WAOG;sBACiB,iBAAiB,GAAG;YACtC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnC,SAAS,EAAE,MAAM,CAAC;YAClB,KAAK,EAAE,MAAM,CAAC;SACf,GAAG,OAAO,CAAC,YAAY,CAAC;QA0BzB;;;;WAIG;qBACgB,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;;mBA2BnC,OAAO,CAAC,IAAI,CAAC;oBAMd,MAAM,GAAG,IAAI;;IASpC,oEAAoE;aAGtC,OAAO;EAExC;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/auth.js

@@ -0,0 +1,156 @@
+/**
+ * SDK auth-client wrapper (T10 — auth-client surface)
+ *
+ * Wraps Better Auth's createAuthClient to expose signIn.{passkey,email,google,wallet}
+ * matching the web auth-client shape (one.ie/web/src/lib/auth-client.ts).
+ *
+ * Better Auth's native client surfaces signIn.email and signIn.social (for google).
+ * passkey and wallet are custom server-side plugins; their sign-in flows are exposed
+ * here as typed wrappers over the auth endpoints.
+ */
+import { createAuthClient } from "better-auth/client";
+import { getToken, setToken, clearToken } from "./storage.js";
+function resolveBaseURL(opt) {
+    if (opt)
+        return opt;
+    if (typeof process !== "undefined" && process.env["BETTER_AUTH_URL"]) {
+        return process.env["BETTER_AUTH_URL"];
+    }
+    if (typeof window !== "undefined")
+        return window.location.origin;
+    return "https://one.ie";
+}
+/**
+ * Creates the SDK auth client.  Returns a `signIn` namespace with four methods:
+ *  - `signIn.email(opts)` — email + password → session token
+ *  - `signIn.google(opts?)` — Google OAuth redirect (browser) or URL (Node)
+ *  - `signIn.passkey(opts?)` — WebAuthn assertion via custom passkey-webauthn plugin
+ *  - `signIn.wallet(opts)` — Sui SIWE via custom sui-wallet plugin
+ *
+ * Token is persisted to localStorage (browser) or ~/.config/oneie/token (Node).
+ */
+export function createSdkAuthClient(options) {
+    const baseURL = resolveBaseURL(options?.baseURL);
+    const _betterAuthClient = createAuthClient({ baseURL });
+    async function persistToken(res) {
+        // Better Auth v1.x returns the token inside data.token on email/social sign-in.
+        const data = res?.data;
+        if (data && typeof data["token"] === "string") {
+            setToken(data["token"]);
+        }
+    }
+    const signIn = {
+        /**
+         * Sign in with email + password.
+         * POST /api/auth/sign-in/email → session; persists token.
+         */
+        async email(opts) {
+            const res = await _betterAuthClient.signIn.email({
+                email: opts.email,
+                password: opts.password,
+                ...(opts.callbackURL ? { callbackURL: opts.callbackURL } : {}),
+            });
+            await persistToken(res);
+            const data = res.data;
+            const error = res.error;
+            return { data: data ?? null, error: error ?? null };
+        },
+        /**
+         * Sign in with Google OAuth.
+         * In the browser: triggers redirect. In Node: returns the redirect URL.
+         * No token returned synchronously — the callback URL handles session creation.
+         */
+        async google(opts) {
+            const res = await _betterAuthClient.signIn.social({
+                provider: "google",
+                callbackURL: opts?.callbackURL ?? (typeof window !== "undefined" ? window.location.href : baseURL),
+            });
+            const data = res.data;
+            return { redirectURL: data?.url };
+        },
+        /**
+         * Sign in with a passkey (WebAuthn assertion).
+         * Calls the custom passkey-webauthn plugin's assert endpoint directly
+         * since Better Auth v1.x does not ship a standard passkey client plugin.
+         *
+         * Callers must supply the WebAuthn assertion object; this method handles
+         * the HTTP round-trip and token persistence.
+         */
+        async passkey(opts) {
+            const res = await fetch(`${baseURL}/api/auth/passkey-webauthn/assert`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    assertion: opts.assertion,
+                    challenge: opts.challenge,
+                    token: opts.token,
+                    ...(opts.credentialId ? { credentialId: opts.credentialId } : {}),
+                }),
+                credentials: "include",
+            });
+            if (!res.ok) {
+                const msg = await res.text().catch(() => "passkey assert failed");
+                return { data: null, error: { message: msg, status: res.status } };
+            }
+            const body = await res.json();
+            const token = body["token"];
+            if (token)
+                setToken(token);
+            const session = body["session"];
+            return {
+                data: session ?? null,
+                error: null,
+            };
+        },
+        /**
+         * Sign in with a Sui wallet (SIWE).
+         * Calls the custom sui-wallet plugin's verify endpoint.
+         * address + nonce + signature → session token.
+         */
+        async wallet(opts) {
+            const res = await fetch(`${baseURL}/api/auth/sui-wallet/verify`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    address: opts.address,
+                    nonce: opts.nonce,
+                    signature: opts.signature,
+                }),
+                credentials: "include",
+            });
+            if (!res.ok) {
+                const msg = await res.text().catch(() => "wallet verify failed");
+                return { data: null, error: { message: msg, status: res.status } };
+            }
+            const body = await res.json();
+            const token = body["token"];
+            if (token)
+                setToken(token);
+            const session = body["session"];
+            return {
+                data: session ?? null,
+                error: null,
+            };
+        },
+    };
+    /** Sign out — clears the server session and removes the persisted token. */
+    async function signOut() {
+        await _betterAuthClient.signOut();
+        clearToken();
+    }
+    /** Return the currently persisted token, or null. */
+    function getAuthToken() {
+        return getToken();
+    }
+    return {
+        signIn,
+        signOut,
+        getToken: getAuthToken,
+        clearToken,
+        /** Underlying Better Auth client — for session, useSession, etc. */
+        // Typed opaque: the inferred better-auth client type references a non-portable
+        // internal module (@better-auth/core/oauth2) and breaks .d.ts emit (TS2742).
+        _client: _betterAuthClient,
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA0C9D,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrE,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjE,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEjD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAExD,KAAK,UAAU,YAAY,CAAC,GAAwC;QAClE,gFAAgF;QAChF,MAAM,IAAI,GAAG,GAAG,EAAE,IAAkD,CAAC;QACrE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG;QACb;;;WAGG;QACH,KAAK,CAAC,KAAK,CAAC,IAAqB;YAC/B,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC,CAAC;YACH,MAAM,YAAY,CAAC,GAA8B,CAAC,CAAC;YACnD,MAAM,IAAI,GAAI,GAA+B,CAAC,IAA0B,CAAC;YACzE,MAAM,KAAK,GAAI,GAA+B,CAAC,KAAmD,CAAC;YACnG,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;QACtD,CAAC;QAED;;;;WAIG;QACH,KAAK,CAAC,MAAM,CAAC,IAA+B;YAC1C,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChD,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;aACnG,CAAC,CAAC;YACH,MAAM,IAAI,GAAI,GAA+B,CAAC,IAA+B,CAAC;YAC9E,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACpC,CAAC;QAED;;;;;;;WAOG;QACH,KAAK,CAAC,OAAO,CAAC,IAIb;YACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mCAAmC,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC;gBACF,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;gBAClE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;YACzD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAuB,CAAC;YAClD,IAAI,KAAK;gBAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAA4B,CAAC;YAC3D,OAAO;gBACL,IAAI,EAAE,OAAO,IAAI,IAAI;gBACrB,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;QAED;;;;WAIG;QACH,KAAK,CAAC,MAAM,CAAC,IAAsB;YACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,6BAA6B,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC;gBACF,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC;gBACjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;YACzD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAuB,CAAC;YAClD,IAAI,KAAK;gBAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAA4B,CAAC;YAC3D,OAAO;gBACL,IAAI,EAAE,OAAO,IAAI,IAAI;gBACrB,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,4EAA4E;IAC5E,KAAK,UAAU,OAAO;QACpB,MAAM,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAClC,UAAU,EAAE,CAAC;IACf,CAAC;IAED,qDAAqD;IACrD,SAAS,YAAY;QACnB,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO;QACP,QAAQ,EAAE,YAAY;QACtB,UAAU;QACV,oEAAoE;QACpE,+EAA+E;QAC/E,6EAA6E;QAC7E,OAAO,EAAE,iBAA4B;KACtC,CAAC;AACJ,CAAC"}

package/dist/brain.d.ts

@@ -0,0 +1,36 @@
+/**
+ * BrainClient — thin transport to the graph-in-RAM gateway (BrainDO).
+ *
+ * Reads (`isToxic`) hit DO memory and are always fresh; writes (`mark`, `warn`)
+ * patch memory and return immediately while TypeDB is written async. `subscribe`
+ * opens the WebSocket the DO pushes mutations and outcomes over (see C4).
+ *
+ * All calls go through the api.one.ie gateway with the existing GATEWAY_API_KEY —
+ * no new bindings, identical transport to the prior `callGateway` pattern.
+ */
+export interface BrainEnv {
+    GATEWAY_URL?: string;
+    GATEWAY_API_KEY?: string;
+}
+export declare class BrainClient {
+    private base;
+    private key;
+    constructor(env: BrainEnv);
+    private headers;
+    isToxic(src: string, tgt: string): Promise<boolean>;
+    mark(src: string, tgt: string, delta?: number): Promise<void>;
+    warn(src: string, tgt: string, delta?: number): Promise<void>;
+    /** Open the push WebSocket. The DO broadcasts `{ type: 'mark'|'warn'|'reload'|'outcome', ... }`. */
+    subscribe(): Promise<WebSocket>;
+    /** Push a signal outcome to all subscribers. Replaces the KV-poll producer side. */
+    notify(id: string, outcome: string, payload?: unknown): Promise<void>;
+    /**
+     * Resolve when the outcome for `id` arrives on an open subscription socket — replaces
+     * 40 KV reads with a single push. `ws` comes from subscribe().
+     */
+    waitForOutcome(id: string, ws: WebSocket, timeoutMs?: number): Promise<{
+        outcome: string;
+        payload?: unknown;
+    }>;
+}
+//# sourceMappingURL=brain.d.ts.map

package/dist/brain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain.d.ts","sourceRoot":"","sources":["../src/brain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,QAAQ;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAID,qBAAa,WAAW;IACtB,OAAO,CAAC,IAAI,CAAQ;IACpB,OAAO,CAAC,GAAG,CAAQ;gBAEP,GAAG,EAAE,QAAQ;IAKzB,OAAO,CAAC,OAAO;IAIT,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUnD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IASxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,oGAAoG;IAC9F,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAWrC,oFAAoF;IAC9E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3E;;;OAGG;IACH,cAAc,CACZ,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,SAAS,EACb,SAAS,SAAS,GACjB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CA8BnD"}

package/dist/brain.js

@@ -0,0 +1,99 @@
+/**
+ * BrainClient — thin transport to the graph-in-RAM gateway (BrainDO).
+ *
+ * Reads (`isToxic`) hit DO memory and are always fresh; writes (`mark`, `warn`)
+ * patch memory and return immediately while TypeDB is written async. `subscribe`
+ * opens the WebSocket the DO pushes mutations and outcomes over (see C4).
+ *
+ * All calls go through the api.one.ie gateway with the existing GATEWAY_API_KEY —
+ * no new bindings, identical transport to the prior `callGateway` pattern.
+ */
+const DEFAULT_GATEWAY = 'https://api.one.ie';
+export class BrainClient {
+    base;
+    key;
+    constructor(env) {
+        this.base = `${env.GATEWAY_URL ?? DEFAULT_GATEWAY}/brain`;
+        this.key = env.GATEWAY_API_KEY ?? '';
+    }
+    headers() {
+        return { Authorization: `Bearer ${this.key}`, 'Content-Type': 'application/json' };
+    }
+    async isToxic(src, tgt) {
+        const res = await fetch(`${this.base}/toxic?src=${encodeURIComponent(src)}&tgt=${encodeURIComponent(tgt)}`, { headers: this.headers() });
+        if (!res.ok)
+            throw new Error(`brain/toxic ${res.status}`);
+        const data = (await res.json());
+        return data.toxic;
+    }
+    async mark(src, tgt, delta = 1) {
+        const res = await fetch(`${this.base}/mark`, {
+            method: 'POST',
+            headers: this.headers(),
+            body: JSON.stringify({ src, tgt, delta }),
+        });
+        if (!res.ok)
+            throw new Error(`brain/mark ${res.status}`);
+    }
+    async warn(src, tgt, delta = 1) {
+        const res = await fetch(`${this.base}/warn`, {
+            method: 'POST',
+            headers: this.headers(),
+            body: JSON.stringify({ src, tgt, delta }),
+        });
+        if (!res.ok)
+            throw new Error(`brain/warn ${res.status}`);
+    }
+    /** Open the push WebSocket. The DO broadcasts `{ type: 'mark'|'warn'|'reload'|'outcome', ... }`. */
+    async subscribe() {
+        const res = await fetch(`${this.base}/ws`, {
+            headers: { ...this.headers(), Upgrade: 'websocket' },
+        });
+        const ws = res.webSocket;
+        if (!ws)
+            throw new Error('brain/ws: no webSocket on response');
+        ws.accept?.();
+        return ws;
+    }
+    /** Push a signal outcome to all subscribers. Replaces the KV-poll producer side. */
+    async notify(id, outcome, payload) {
+        const res = await fetch(`${this.base}/notify`, {
+            method: 'POST',
+            headers: this.headers(),
+            body: JSON.stringify({ id, outcome, payload }),
+        });
+        if (!res.ok)
+            throw new Error(`brain/notify ${res.status}`);
+    }
+    /**
+     * Resolve when the outcome for `id` arrives on an open subscription socket — replaces
+     * 40 KV reads with a single push. `ws` comes from subscribe().
+     */
+    waitForOutcome(id, ws, timeoutMs = 10_000) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                ws.removeEventListener('message', onMessage);
+                resolve({ outcome: 'timeout' });
+            }, timeoutMs);
+            const onMessage = (ev) => {
+                try {
+                    const msg = JSON.parse(typeof ev.data === 'string' ? ev.data : '');
+                    if (msg.type === 'outcome' && msg.id === id) {
+                        clearTimeout(timer);
+                        ws.removeEventListener('message', onMessage);
+                        resolve({ outcome: msg.outcome ?? 'result', payload: msg.payload });
+                    }
+                }
+                catch {
+                    /* ignore non-JSON frames (e.g. 'pong') */
+                }
+            };
+            ws.addEventListener('message', onMessage);
+            ws.addEventListener('error', () => {
+                clearTimeout(timer);
+                reject(new Error('brain/ws error'));
+            });
+        });
+    }
+}
+//# sourceMappingURL=brain.js.map

package/dist/brain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain.js","sourceRoot":"","sources":["../src/brain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,MAAM,eAAe,GAAG,oBAAoB,CAAA;AAE5C,MAAM,OAAO,WAAW;IACd,IAAI,CAAQ;IACZ,GAAG,CAAQ;IAEnB,YAAY,GAAa;QACvB,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,eAAe,QAAQ,CAAA;QACzD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAA;IACtC,CAAC;IAEO,OAAO;QACb,OAAO,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAA;IACpF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,GAAW;QACpC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,IAAI,CAAC,IAAI,cAAc,kBAAkB,CAAC,GAAG,CAAC,QAAQ,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAClF,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAC5B,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAA;QACrD,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,GAAW,EAAE,KAAK,GAAG,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,OAAO,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,GAAW,EAAE,KAAK,GAAG,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,OAAO,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,SAAS;QACb,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,EAAE;YACzC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;SACrD,CAAC,CAAA;QACF,MAAM,EAAE,GAAI,GAA4C,CAAC,SAAS,CAAA;QAClE,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAE7D;QAAC,EAAyC,CAAC,MAAM,EAAE,EAAE,CAAA;QACtD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAAe,EAAE,OAAiB;QACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;SAC/C,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED;;;OAGG;IACH,cAAc,CACZ,EAAU,EACV,EAAa,EACb,SAAS,GAAG,MAAM;QAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;gBAC5C,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;YACjC,CAAC,EAAE,SAAS,CAAC,CAAA;YACb,MAAM,SAAS,GAAG,CAAC,EAAgB,EAAE,EAAE;gBACrC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAKhE,CAAA;oBACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;wBAC5C,YAAY,CAAC,KAAK,CAAC,CAAA;wBACnB,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;wBAC5C,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;oBACrE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;YACH,CAAC,CAAA;YACD,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YACzC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBAChC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAA;YACrC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}