@polyester/sdk 0.0.0

package/dist/services/api-keys/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","names":["#client","Proto.ApiKeyService","#realtime","#resolver","ApiKeySchema","Proto.ApiKeySchema"],"sources":["../../../src/services/api-keys/api-keys.ts"],"sourcesContent":["import { createClient, type Client, type Transport } from \"@connectrpc/connect\";\nimport * as Proto from \"../../gen/auth/v1/api_keys_pb.js\";\nimport * as v from \"valibot\";\nimport { removeUndefined } from \"../../utils/remove-undefined.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport { type SubaccountResolver, resolveAccountScopedInput } from \"../subaccount-resolver.js\";\nimport { bytesToHex } from \"@noble/hashes/utils.js\";\nimport { keygenAsync } from \"@noble/ed25519\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport type { BaseSubscribeInput } from \"../../shared/types.js\";\nimport { ApiKeyPoliciesService } from \"../policies/api-key-policies/index.js\";\nimport {\n    ApiKeyIdInputSchema,\n    ApiKeysListInputSchema,\n    ApiKeysCreateInputSchema,\n    ApiKeysUpdateInputSchema,\n    ApiKeySchema,\n    ApiKeysSchema,\n    type ApiKey,\n} from \"./api-keys.schemas.js\";\n\ninterface SubscribeApiKeysInput extends BaseSubscribeInput<ApiKey> {\n    accountId: string;\n}\n\n/**\n * Manages API key metadata, client-generated Ed25519 keypairs, policies, and realtime API key updates.\n */\nexport class ApiKeysService {\n    readonly policies: ApiKeyPoliciesService;\n\n    #client: Client<typeof Proto.ApiKeyService>;\n    #realtime: PolyesterRealtime;\n    #resolver?: SubaccountResolver;\n\n    constructor(transport: Transport, realtime: PolyesterRealtime, resolver?: SubaccountResolver) {\n        this.policies = new ApiKeyPoliciesService(transport);\n        this.#client = createClient(Proto.ApiKeyService, transport);\n        this.#realtime = realtime;\n        this.#resolver = resolver;\n    }\n\n    /**\n     * Returns non-revoked API keys owned by the caller, newest first, optionally scoped through an explicit or resolver-provided subaccount ID.\n     */\n    async list(\n        params: v.InferInput<typeof ApiKeysListInputSchema> = {},\n        options?: PolyesterRequestOptions,\n    ): Promise<ApiKey[]> {\n        const resolved = resolveAccountScopedInput(params, this.#resolver);\n        const validatedParams = v.parse(ApiKeysListInputSchema, resolved);\n        const res = await this.#client.listApiKeys(\n            removeUndefined(validatedParams),\n            toConnectCallOptions(options),\n        );\n\n        return v.parse(ApiKeysSchema, res.apiKeys);\n    }\n\n    /**\n     * Fetches one caller-owned API key by ak_... key ID and returns null when no matching key is returned.\n     */\n    async get(\n        input: v.InferInput<typeof ApiKeyIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<ApiKey | null> {\n        const validatedInput = v.parse(ApiKeyIdInputSchema, input);\n        const res = await this.#client.getApiKey(validatedInput, toConnectCallOptions(options));\n        return res.apiKey ? v.parse(ApiKeySchema, res.apiKey) : null;\n    }\n\n    /**\n     * Creates API key metadata using a client-generated Ed25519 public key; security settings may require MFA fresh step-up and retrying with stepUpToken.\n     */\n    async create(\n        payload: v.InferInput<typeof ApiKeysCreateInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<ApiKey | null> {\n        const resolved = resolveAccountScopedInput(payload, this.#resolver);\n        const validatedPayload = v.parse(ApiKeysCreateInputSchema, resolved);\n        const res = await this.#client.createApiKey(\n            removeUndefined(validatedPayload),\n            toConnectCallOptions(options),\n        );\n        return res.apiKey ? v.parse(ApiKeySchema, res.apiKey) : null;\n    }\n\n    /**\n     * Permanently revokes the specified API key; revoked keys cannot authenticate again.\n     */\n    async delete(\n        input: v.InferInput<typeof ApiKeyIdInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<void> {\n        const validatedInput = v.parse(ApiKeyIdInputSchema, input);\n        await this.#client.deleteApiKey(validatedInput, toConnectCallOptions(options));\n    }\n\n    /**\n     * Updates mutable key metadata, ACTIVE/DISABLED status, IP whitelist replacement/clearing, and optional expiry; revocation must use delete.\n     */\n    async update(\n        payload: v.InferInput<typeof ApiKeysUpdateInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<ApiKey | null> {\n        const validatedPayload = v.parse(ApiKeysUpdateInputSchema, payload);\n        const res = await this.#client.updateApiKey(\n            removeUndefined(validatedPayload),\n            toConnectCallOptions(options),\n        );\n        return res.apiKey ? v.parse(ApiKeySchema, res.apiKey) : null;\n    }\n\n    /**\n     * Generates an Ed25519 keypair locally and returns public and secret key material as both hex strings and byte arrays; only the public key should be sent to the API.\n     */\n    async generateKeypair(): Promise<{\n        publicKey: { hex: string; bytes: Uint8Array };\n        secretKey: { hex: string; bytes: Uint8Array };\n    }> {\n        const { secretKey, publicKey } = await keygenAsync();\n        return {\n            publicKey: {\n                hex: bytesToHex(publicKey),\n                bytes: publicKey,\n            },\n            secretKey: {\n                hex: bytesToHex(secretKey),\n                bytes: secretKey,\n            },\n        };\n    }\n\n    /**\n     * Subscribes to private API key updates for an account and emits normalized API key metadata from realtime protobuf publications.\n     */\n    subscribe(input: SubscribeApiKeysInput) {\n        const channel = `private:auth:api-keys:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.ApiKeySchema,\n            onPublication: (data) => {\n                const apiKey = v.parse(ApiKeySchema, data);\n                input.onEvent(apiKey);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: (ctx) => input.onError?.(ctx),\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAgCA,IAAa,iBAAb,MAA4B;CACxB;CAEA;CACA;CACA;CAEA,YAAY,WAAsB,UAA6B,UAA+B;EAC1F,KAAK,WAAW,IAAI,sBAAsB,SAAS;EACnD,KAAKA,UAAU,aAAaC,eAAqB,SAAS;EAC1D,KAAKC,YAAY;EACjB,KAAKC,YAAY;CACrB;;;;CAKA,MAAM,KACF,SAAsD,CAAC,GACvD,SACiB;EACjB,MAAM,WAAW,0BAA0B,QAAQ,KAAKA,SAAS;EACjE,MAAM,kBAAkB,EAAE,MAAM,wBAAwB,QAAQ;EAChE,MAAM,MAAM,MAAM,KAAKH,QAAQ,YAC3B,gBAAgB,eAAe,GAC/B,qBAAqB,OAAO,CAChC;EAEA,OAAO,EAAE,MAAM,eAAe,IAAI,OAAO;CAC7C;;;;CAKA,MAAM,IACF,OACA,SACsB;EACtB,MAAM,iBAAiB,EAAE,MAAM,qBAAqB,KAAK;EACzD,MAAM,MAAM,MAAM,KAAKA,QAAQ,UAAU,gBAAgB,qBAAqB,OAAO,CAAC;EACtF,OAAO,IAAI,SAAS,EAAE,MAAMI,gBAAc,IAAI,MAAM,IAAI;CAC5D;;;;CAKA,MAAM,OACF,SACA,SACsB;EACtB,MAAM,WAAW,0BAA0B,SAAS,KAAKD,SAAS;EAClE,MAAM,mBAAmB,EAAE,MAAM,0BAA0B,QAAQ;EACnE,MAAM,MAAM,MAAM,KAAKH,QAAQ,aAC3B,gBAAgB,gBAAgB,GAChC,qBAAqB,OAAO,CAChC;EACA,OAAO,IAAI,SAAS,EAAE,MAAMI,gBAAc,IAAI,MAAM,IAAI;CAC5D;;;;CAKA,MAAM,OACF,OACA,SACa;EACb,MAAM,iBAAiB,EAAE,MAAM,qBAAqB,KAAK;EACzD,MAAM,KAAKJ,QAAQ,aAAa,gBAAgB,qBAAqB,OAAO,CAAC;CACjF;;;;CAKA,MAAM,OACF,SACA,SACsB;EACtB,MAAM,mBAAmB,EAAE,MAAM,0BAA0B,OAAO;EAClE,MAAM,MAAM,MAAM,KAAKA,QAAQ,aAC3B,gBAAgB,gBAAgB,GAChC,qBAAqB,OAAO,CAChC;EACA,OAAO,IAAI,SAAS,EAAE,MAAMI,gBAAc,IAAI,MAAM,IAAI;CAC5D;;;;CAKA,MAAM,kBAGH;EACC,MAAM,EAAE,WAAW,cAAc,MAAM,YAAY;EACnD,OAAO;GACH,WAAW;IACP,KAAK,WAAW,SAAS;IACzB,OAAO;GACX;GACA,WAAW;IACP,KAAK,WAAW,SAAS;IACzB,OAAO;GACX;EACJ;CACJ;;;;CAKA,UAAU,OAA8B;EACpC,MAAM,UAAU,yBAAyB,MAAM,UAAU;EAEzD,OAAO,KAAKF,UAAU,oBAAoB;GACtC;GACA,QAAQG;GACR,gBAAgB,SAAS;IACrB,MAAM,SAAS,EAAE,MAAMD,gBAAc,IAAI;IACzC,MAAM,QAAQ,MAAM;GACxB;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,UAAU,QAAQ,MAAM,UAAU,GAAG;EACzC,CAAC;CACL;AACJ"}

package/dist/services/api-keys/api-keys.schemas.d.ts

@@ -0,0 +1,181 @@
+import { ApiKeyStatus as ApiKeyStatus$1 } from "../../gen/auth/v1/api_keys_pb.js";
+import * as v from "valibot";
+//#region src/services/api-keys/api-keys.schemas.d.ts
+declare const ApiKeyStatusSchema: v.PicklistSchema<readonly ["active", "revoked", "disabled"], undefined>;
+type ApiKeyStatus = v.InferOutput<typeof ApiKeyStatusSchema>;
+declare const ApiKeysListInputSchema: v.SchemaWithPipe<readonly [v.StrictObjectSchema<{
+  readonly account: v.OptionalSchema<v.UnionSchema<[v.PicklistSchema<["active", "main"], undefined>, v.StrictObjectSchema<{
+    readonly subaccountId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>]>;
+  }, undefined>], undefined>, undefined>;
+}, undefined>, v.TransformAction<{
+  account?: "active" | "main" | {
+    subaccountId: string;
+  } | undefined;
+}, {
+  subaccountId: bigint | undefined;
+}>]>;
+type ApiKeysListInput = v.InferInput<typeof ApiKeysListInputSchema>;
+declare const ApiKeyIdInputSchema: v.StrictObjectSchema<{
+  readonly keyId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, "keyId is required">]>;
+}, undefined>;
+type ApiKeyIdInput = v.InferInput<typeof ApiKeyIdInputSchema>;
+declare const ApiKeysCreateInputSchema: v.SchemaWithPipe<readonly [v.StrictObjectSchema<{
+  readonly ipWhitelist: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, readonly []>;
+  readonly publicKeyEd25519: v.InstanceSchema<{
+    new (buffer: ArrayBufferLike, byteOffset?: number, length?: number): Uint8Array<ArrayBufferLike>;
+    readonly prototype: Uint8Array<ArrayBufferLike>;
+    readonly BYTES_PER_ELEMENT: number;
+    of(...items: number[]): Uint8Array<ArrayBuffer>;
+    from(arrayLike: ArrayLike<number>): Uint8Array<ArrayBuffer>;
+    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Uint8Array<ArrayBuffer>;
+    from(elements: Iterable<number>): Uint8Array<ArrayBuffer>;
+    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Uint8Array<ArrayBuffer>;
+  }, undefined>;
+  readonly account: v.OptionalSchema<v.UnionSchema<[v.PicklistSchema<["active", "main"], undefined>, v.StrictObjectSchema<{
+    readonly subaccountId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>]>;
+  }, undefined>], undefined>, undefined>;
+  readonly label: v.StringSchema<undefined>;
+  readonly icon: v.OptionalSchema<v.StringSchema<undefined>, "">;
+  readonly color: v.OptionalSchema<v.StringSchema<undefined>, "">;
+}, undefined>, v.TransformAction<{
+  ipWhitelist: string[];
+  publicKeyEd25519: Uint8Array<ArrayBufferLike>;
+  account?: "active" | "main" | {
+    subaccountId: string;
+  } | undefined;
+  label: string;
+  icon: string;
+  color: string;
+}, {
+  subaccountId: bigint | undefined;
+  ipWhitelist: string[];
+  publicKeyEd25519: Uint8Array<ArrayBufferLike>;
+  label: string;
+  icon: string;
+  color: string;
+}>]>;
+type ApiKeysCreateInput = v.InferInput<typeof ApiKeysCreateInputSchema>;
+declare const ApiKeysUpdateInputSchema: v.SchemaWithPipe<readonly [v.StrictObjectSchema<{
+  readonly keyId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, "keyId is required">]>;
+  readonly expectedRevision: v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction]>, v.RegexAction<string, `${string} must be a decimal integer`>, v.TransformAction<string, bigint>]>, v.CheckAction<bigint, `${string} must be greater than 0`>]>;
+  readonly label: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly icon: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly color: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly status: v.OptionalSchema<v.PicklistSchema<readonly ["active", "disabled"], undefined>, undefined>;
+  readonly ipWhitelist: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+  readonly expiresAtIso: v.OptionalSchema<v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "expiresAtIso must be a valid timestamp">]>, undefined>, undefined>;
+}, undefined>, v.CheckAction<{
+  keyId: string;
+  expectedRevision: bigint;
+  label?: string | undefined;
+  icon?: string | undefined;
+  color?: string | undefined;
+  status?: "disabled" | "active" | undefined;
+  ipWhitelist?: string[] | undefined;
+  expiresAtIso?: string | null | undefined;
+}, "At least one API key field must be provided">, v.TransformAction<{
+  keyId: string;
+  expectedRevision: bigint;
+  label?: string | undefined;
+  icon?: string | undefined;
+  color?: string | undefined;
+  status?: "disabled" | "active" | undefined;
+  ipWhitelist?: string[] | undefined;
+  expiresAtIso?: string | null | undefined;
+}, {
+  keyId: string;
+  apiKey: never;
+  updateMask: {
+    paths: string[];
+  };
+  expectedRevision: bigint;
+}>]>;
+type ApiKeysUpdateInput = v.InferInput<typeof ApiKeysUpdateInputSchema>;
+declare const ApiKeySchema: v.SchemaWithPipe<readonly [v.ObjectSchema<{
+  readonly keyId: v.StringSchema<undefined>;
+  readonly label: v.OptionalSchema<v.StringSchema<undefined>, "">;
+  readonly icon: v.OptionalSchema<v.StringSchema<undefined>, "">;
+  readonly color: v.OptionalSchema<v.StringSchema<undefined>, "">;
+  readonly ipWhitelist: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, readonly []>;
+  readonly subaccountId: v.SchemaWithPipe<readonly [v.OptionalSchema<v.BigintSchema<undefined>, undefined>, v.TransformAction<bigint | undefined, string | undefined>]>;
+  readonly policyId: v.SchemaWithPipe<readonly [v.OptionalSchema<v.BigintSchema<undefined>, undefined>, v.TransformAction<bigint | undefined, string | undefined>]>;
+  readonly createdAt: v.SchemaWithPipe<readonly [v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, v.TransformAction<{
+    seconds: bigint;
+    nanos: number;
+  }, number>]>;
+  readonly updatedAt: v.OptionalSchema<v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>;
+  readonly lastUsedAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, v.TransformAction<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, number | undefined>]>;
+  readonly publicKeyEd25519: v.InstanceSchema<{
+    new (buffer: ArrayBufferLike, byteOffset?: number, length?: number): Uint8Array<ArrayBufferLike>;
+    readonly prototype: Uint8Array<ArrayBufferLike>;
+    readonly BYTES_PER_ELEMENT: number;
+    of(...items: number[]): Uint8Array<ArrayBuffer>;
+    from(arrayLike: ArrayLike<number>): Uint8Array<ArrayBuffer>;
+    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Uint8Array<ArrayBuffer>;
+    from(elements: Iterable<number>): Uint8Array<ArrayBuffer>;
+    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Uint8Array<ArrayBuffer>;
+  }, undefined>;
+  readonly expiresAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, v.TransformAction<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, string | undefined>]>;
+  readonly status: v.SchemaWithPipe<readonly [v.EnumSchema<typeof ApiKeyStatus$1, undefined>, v.TransformAction<ApiKeyStatus$1, "disabled" | "active" | "unspecified" | "revoked">]>;
+  readonly createdByActor: v.StringSchema<undefined>;
+  readonly revision: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
+}, undefined>, v.TransformAction<{
+  keyId: string;
+  label: string;
+  icon: string;
+  color: string;
+  ipWhitelist: string[];
+  subaccountId?: string | undefined;
+  policyId?: string | undefined;
+  createdAt: number;
+  updatedAt?: {
+    seconds: bigint;
+    nanos: number;
+  } | undefined;
+  lastUsedAt?: number | undefined;
+  publicKeyEd25519: Uint8Array<ArrayBufferLike>;
+  expiresAt?: string | undefined;
+  status: "disabled" | "active" | "unspecified" | "revoked";
+  createdByActor: string;
+  revision: string;
+}, {
+  subaccountId: string | undefined;
+  updatedAt: number | undefined;
+  updatedAtNs: string | undefined;
+  publicKeyHex: string;
+  keyId: string;
+  label: string;
+  icon: string;
+  color: string;
+  ipWhitelist: string[];
+  policyId?: string | undefined;
+  createdAt: number;
+  lastUsedAt?: number | undefined;
+  publicKeyEd25519: Uint8Array<ArrayBufferLike>;
+  expiresAt?: string | undefined;
+  status: "disabled" | "active" | "unspecified" | "revoked";
+  createdByActor: string;
+  revision: string;
+}>]>;
+type ApiKey = v.InferOutput<typeof ApiKeySchema>;
+//#endregion
+export { ApiKey, ApiKeyIdInput, ApiKeyIdInputSchema, ApiKeySchema, ApiKeyStatus, ApiKeysCreateInput, ApiKeysCreateInputSchema, ApiKeysListInput, ApiKeysListInputSchema, ApiKeysUpdateInput, ApiKeysUpdateInputSchema };
+//# sourceMappingURL=api-keys.schemas.d.ts.map

package/dist/services/api-keys/api-keys.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.schemas.d.ts","names":[],"sources":["../../../src/services/api-keys/api-keys.schemas.ts"],"mappings":";;;cAyBM,oBAAkB,EAAA;KAGZ,eAAe,EAAE,mBAAmB;cAEnC,wBAAsB,EAAA,yBAAA,EAAA;;;;;;;;;;;KASvB,mBAAmB,EAAE,kBAAkB;cAEtC,qBAAmB,EAAA;;;KAIpB,gBAAgB,EAAE,kBAAkB;cAEnC,0BAAwB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAezB,qBAAqB,EAAE,kBAAkB;cAsCxC,0BAAwB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAqCzB,qBAAqB,EAAE,kBAAkB;cAExC,cAAY,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8Cb,SAAS,EAAE,mBAAmB"}

package/dist/services/api-keys/api-keys.schemas.js

@@ -0,0 +1,111 @@
+import { ApiKeyStatus } from "../../gen/auth/v1/api_keys_pb.js";
+import { tsObjToMs, tsObjToNsString } from "../../utils/time.js";
+import { BigIntStringSchema, OptionalPublicIdSchema, OptionalTimestampMsSchema, TimestampMsSchema, TimestampSchema, positiveBigintStringInputSchema } from "../../shared/schemas.js";
+import { requiredEnumLabel } from "../../shared/proto-enum-codec.js";
+import { buildProtoPatch, defineProtoPatchFields } from "../../utils/proto-patch.js";
+import { toTimestamp } from "../../utils/timestamp.js";
+import { AccountScopeInputEntries, accountScopeToSubaccountId } from "../../shared/account-scope.js";
+import { API_KEY_STATUS_VALUES, API_KEY_UPDATE_STATUS_VALUES, ApiKeyStatusCodec } from "./api-keys.codecs.js";
+import * as v from "valibot";
+import { bytesToHex } from "@noble/hashes/utils.js";
+//#region src/services/api-keys/api-keys.schemas.ts
+v.picklist(API_KEY_STATUS_VALUES);
+const ApiKeyUpdateStatusSchema = v.picklist(API_KEY_UPDATE_STATUS_VALUES);
+const ApiKeysListInputSchema = v.pipe(v.strictObject({ ...AccountScopeInputEntries }), v.transform(({ account }) => ({ subaccountId: accountScopeToSubaccountId(account) })));
+const ApiKeyIdInputSchema = v.strictObject({ keyId: v.pipe(v.string(), v.trim(), v.minLength(1, "keyId is required")) });
+const ApiKeysCreateInputSchema = v.pipe(v.strictObject({
+	label: v.string(),
+	icon: v.optional(v.string(), ""),
+	color: v.optional(v.string(), ""),
+	...AccountScopeInputEntries,
+	ipWhitelist: v.optional(v.array(v.string()), []),
+	publicKeyEd25519: v.instance(Uint8Array)
+}), v.transform(({ account, ...input }) => ({
+	...input,
+	subaccountId: accountScopeToSubaccountId(account)
+})));
+const API_KEY_PATCH_FIELDS = defineProtoPatchFields()({
+	label: {
+		path: "label",
+		encode: (label) => ({ label })
+	},
+	icon: {
+		path: "icon",
+		encode: (icon) => ({ icon })
+	},
+	color: {
+		path: "color",
+		encode: (color) => ({ color })
+	},
+	status: {
+		path: "status",
+		encode: (status) => ({ status: ApiKeyStatusCodec.inputToProto[status] })
+	},
+	ipWhitelist: {
+		path: "ip_whitelist",
+		encode: (ipWhitelist) => ({ ipWhitelist })
+	},
+	expiresAtIso: {
+		path: "expires_at",
+		encode: (expiresAtIso) => {
+			if (expiresAtIso === null) return {};
+			const expiresAtMs = new Date(expiresAtIso).getTime();
+			return { expiresAt: toTimestamp({
+				seconds: BigInt(Math.floor(expiresAtMs / 1e3)),
+				nanos: expiresAtMs % 1e3 * 1e6
+			}) };
+		}
+	}
+});
+const ApiKeysUpdateInputSchema = v.pipe(v.strictObject({
+	keyId: v.pipe(v.string(), v.trim(), v.minLength(1, "keyId is required")),
+	expectedRevision: positiveBigintStringInputSchema("expectedRevision"),
+	label: v.optional(v.string()),
+	icon: v.optional(v.string()),
+	color: v.optional(v.string()),
+	status: v.optional(ApiKeyUpdateStatusSchema),
+	ipWhitelist: v.optional(v.array(v.string())),
+	expiresAtIso: v.optional(v.nullable(v.pipe(v.string(), v.check((value) => Number.isFinite(Date.parse(value)), "expiresAtIso must be a valid timestamp"))))
+}), v.check(({ label, icon, color, status, ipWhitelist, expiresAtIso }) => label !== void 0 || icon !== void 0 || color !== void 0 || status !== void 0 || ipWhitelist !== void 0 || expiresAtIso !== void 0, "At least one API key field must be provided"), v.transform(({ keyId, expectedRevision, ...input }) => {
+	const { patch: apiKey, updateMask } = buildProtoPatch(input, API_KEY_PATCH_FIELDS);
+	return {
+		keyId,
+		apiKey,
+		updateMask,
+		expectedRevision
+	};
+}));
+const ApiKeySchema = v.pipe(v.object({
+	keyId: v.string(),
+	label: v.optional(v.string(), ""),
+	icon: v.optional(v.string(), ""),
+	color: v.optional(v.string(), ""),
+	ipWhitelist: v.optional(v.array(v.string()), []),
+	subaccountId: OptionalPublicIdSchema,
+	policyId: OptionalPublicIdSchema,
+	createdAt: TimestampMsSchema,
+	updatedAt: v.optional(TimestampSchema),
+	lastUsedAt: OptionalTimestampMsSchema,
+	publicKeyEd25519: v.instance(Uint8Array),
+	expiresAt: v.pipe(v.optional(TimestampSchema), v.transform((v) => {
+		const ms = tsObjToMs(v);
+		return ms ? new Date(ms).toISOString() : void 0;
+	})),
+	status: v.pipe(v.enum(ApiKeyStatus), v.transform((v) => requiredEnumLabel(ApiKeyStatusCodec.protoToOutput, v, "PolyesterClient.ApiKeySchema", "status"))),
+	createdByActor: v.string(),
+	revision: BigIntStringSchema
+}), v.transform(({ subaccountId, updatedAt, ...rest }) => {
+	const hex = bytesToHex(rest.publicKeyEd25519);
+	return {
+		...rest,
+		subaccountId,
+		updatedAt: tsObjToMs(updatedAt),
+		updatedAtNs: tsObjToNsString(updatedAt),
+		publicKeyHex: hex
+	};
+}));
+const ApiKeysSchema = v.array(ApiKeySchema);
+//#endregion
+export { ApiKeyIdInputSchema, ApiKeySchema, ApiKeysCreateInputSchema, ApiKeysListInputSchema, ApiKeysSchema, ApiKeysUpdateInputSchema };
+
+//# sourceMappingURL=api-keys.schemas.js.map

package/dist/services/api-keys/api-keys.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.schemas.js","names":["Proto.ApiKeyStatus"],"sources":["../../../src/services/api-keys/api-keys.schemas.ts"],"sourcesContent":["import * as Proto from \"../../gen/auth/v1/api_keys_pb.js\";\nimport * as v from \"valibot\";\nimport { toTimestamp } from \"../../utils/timestamp.js\";\nimport { tsObjToMs, tsObjToNsString } from \"../../utils/time.js\";\nimport {\n    OptionalPublicIdSchema,\n    OptionalTimestampMsSchema,\n    BigIntStringSchema,\n    TimestampMsSchema,\n    TimestampSchema,\n    positiveBigintStringInputSchema,\n} from \"../../shared/schemas.js\";\nimport {\n    AccountScopeInputEntries,\n    accountScopeToSubaccountId,\n} from \"../../shared/account-scope.js\";\nimport { requiredEnumLabel } from \"../../shared/proto-enum-codec.js\";\nimport { bytesToHex } from \"@noble/hashes/utils.js\";\nimport {\n    API_KEY_STATUS_VALUES,\n    API_KEY_UPDATE_STATUS_VALUES,\n    ApiKeyStatusCodec,\n} from \"./api-keys.codecs.js\";\nimport { buildProtoPatch, defineProtoPatchFields } from \"../../utils/proto-patch.js\";\n\nconst ApiKeyStatusSchema = v.picklist(API_KEY_STATUS_VALUES);\nconst ApiKeyUpdateStatusSchema = v.picklist(API_KEY_UPDATE_STATUS_VALUES);\n\nexport type ApiKeyStatus = v.InferOutput<typeof ApiKeyStatusSchema>;\n\nexport const ApiKeysListInputSchema = v.pipe(\n    v.strictObject({\n        ...AccountScopeInputEntries,\n    }),\n    v.transform(({ account }) => ({\n        subaccountId: accountScopeToSubaccountId(account),\n    })),\n);\n\nexport type ApiKeysListInput = v.InferInput<typeof ApiKeysListInputSchema>;\n\nexport const ApiKeyIdInputSchema = v.strictObject({\n    keyId: v.pipe(v.string(), v.trim(), v.minLength(1, \"keyId is required\")),\n});\n\nexport type ApiKeyIdInput = v.InferInput<typeof ApiKeyIdInputSchema>;\n\nexport const ApiKeysCreateInputSchema = v.pipe(\n    v.strictObject({\n        label: v.string(),\n        icon: v.optional(v.string(), \"\"),\n        color: v.optional(v.string(), \"\"),\n        ...AccountScopeInputEntries,\n        ipWhitelist: v.optional(v.array(v.string()), []),\n        publicKeyEd25519: v.instance(Uint8Array<ArrayBufferLike>),\n    }),\n    v.transform(({ account, ...input }) => ({\n        ...input,\n        subaccountId: accountScopeToSubaccountId(account),\n    })),\n);\n\nexport type ApiKeysCreateInput = v.InferInput<typeof ApiKeysCreateInputSchema>;\n\ntype ApiKeyPatch = {\n    label?: string;\n    icon?: string;\n    color?: string;\n    status?: v.InferOutput<typeof ApiKeyUpdateStatusSchema>;\n    ipWhitelist?: string[];\n    expiresAtIso?: string | null;\n};\n\nconst API_KEY_PATCH_FIELDS = defineProtoPatchFields<ApiKeyPatch>()({\n    label: { path: \"label\", encode: (label) => ({ label }) },\n    icon: { path: \"icon\", encode: (icon) => ({ icon }) },\n    color: { path: \"color\", encode: (color) => ({ color }) },\n    status: {\n        path: \"status\",\n        encode: (status) => ({ status: ApiKeyStatusCodec.inputToProto[status] }),\n    },\n    ipWhitelist: {\n        path: \"ip_whitelist\",\n        encode: (ipWhitelist) => ({ ipWhitelist }),\n    },\n    expiresAtIso: {\n        path: \"expires_at\",\n        encode: (expiresAtIso) => {\n            if (expiresAtIso === null) return {};\n            const expiresAtMs = new Date(expiresAtIso).getTime();\n            return {\n                expiresAt: toTimestamp({\n                    seconds: BigInt(Math.floor(expiresAtMs / 1000)),\n                    nanos: (expiresAtMs % 1000) * 1_000_000,\n                }),\n            };\n        },\n    },\n});\n\nexport const ApiKeysUpdateInputSchema = v.pipe(\n    v.strictObject({\n        keyId: v.pipe(v.string(), v.trim(), v.minLength(1, \"keyId is required\")),\n        expectedRevision: positiveBigintStringInputSchema(\"expectedRevision\"),\n        label: v.optional(v.string()),\n        icon: v.optional(v.string()),\n        color: v.optional(v.string()),\n        status: v.optional(ApiKeyUpdateStatusSchema),\n        ipWhitelist: v.optional(v.array(v.string())),\n        expiresAtIso: v.optional(\n            v.nullable(\n                v.pipe(\n                    v.string(),\n                    v.check(\n                        (value) => Number.isFinite(Date.parse(value)),\n                        \"expiresAtIso must be a valid timestamp\",\n                    ),\n                ),\n            ),\n        ),\n    }),\n    v.check(\n        ({ label, icon, color, status, ipWhitelist, expiresAtIso }) =>\n            label !== undefined ||\n            icon !== undefined ||\n            color !== undefined ||\n            status !== undefined ||\n            ipWhitelist !== undefined ||\n            expiresAtIso !== undefined,\n        \"At least one API key field must be provided\",\n    ),\n    v.transform(({ keyId, expectedRevision, ...input }) => {\n        const { patch: apiKey, updateMask } = buildProtoPatch(input, API_KEY_PATCH_FIELDS);\n        return { keyId, apiKey, updateMask, expectedRevision };\n    }),\n);\n\nexport type ApiKeysUpdateInput = v.InferInput<typeof ApiKeysUpdateInputSchema>;\n\nexport const ApiKeySchema = v.pipe(\n    v.object({\n        keyId: v.string(),\n        label: v.optional(v.string(), \"\"),\n        icon: v.optional(v.string(), \"\"),\n        color: v.optional(v.string(), \"\"),\n        ipWhitelist: v.optional(v.array(v.string()), []),\n        subaccountId: OptionalPublicIdSchema,\n        policyId: OptionalPublicIdSchema,\n        createdAt: TimestampMsSchema,\n        updatedAt: v.optional(TimestampSchema),\n        lastUsedAt: OptionalTimestampMsSchema,\n        publicKeyEd25519: v.instance(Uint8Array<ArrayBufferLike>),\n        expiresAt: v.pipe(\n            v.optional(TimestampSchema),\n            v.transform((v) => {\n                const ms = tsObjToMs(v);\n                return ms ? new Date(ms).toISOString() : undefined;\n            }),\n        ),\n        status: v.pipe(\n            v.enum(Proto.ApiKeyStatus),\n            v.transform((v) =>\n                requiredEnumLabel(\n                    ApiKeyStatusCodec.protoToOutput,\n                    v,\n                    \"PolyesterClient.ApiKeySchema\",\n                    \"status\",\n                ),\n            ),\n        ),\n        createdByActor: v.string(),\n        revision: BigIntStringSchema,\n    }),\n    v.transform(({ subaccountId, updatedAt, ...rest }) => {\n        const hex = bytesToHex(rest.publicKeyEd25519);\n        return {\n            ...rest,\n            subaccountId,\n            updatedAt: tsObjToMs(updatedAt),\n            updatedAtNs: tsObjToNsString(updatedAt),\n            publicKeyHex: hex,\n        };\n    }),\n);\n\nexport type ApiKey = v.InferOutput<typeof ApiKeySchema>;\n\nexport const ApiKeysSchema = v.array(ApiKeySchema);\n"],"mappings":";;;;;;;;;;;AAyB2B,EAAE,SAAS,qBAAqB;AAC3D,MAAM,2BAA2B,EAAE,SAAS,4BAA4B;AAIxE,MAAa,yBAAyB,EAAE,KACpC,EAAE,aAAa,EACX,GAAG,yBACP,CAAC,GACD,EAAE,WAAW,EAAE,eAAe,EAC1B,cAAc,2BAA2B,OAAO,EACpD,EAAE,CACN;AAIA,MAAa,sBAAsB,EAAE,aAAa,EAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,KAAK,GAAG,EAAE,UAAU,GAAG,mBAAmB,CAAC,EAC3E,CAAC;AAID,MAAa,2BAA2B,EAAE,KACtC,EAAE,aAAa;CACX,OAAO,EAAE,OAAO;CAChB,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC/B,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,GAAG;CACH,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;CAC/C,kBAAkB,EAAE,SAAS,UAA2B;AAC5D,CAAC,GACD,EAAE,WAAW,EAAE,SAAS,GAAG,aAAa;CACpC,GAAG;CACH,cAAc,2BAA2B,OAAO;AACpD,EAAE,CACN;AAaA,MAAM,uBAAuB,uBAAoC,CAAC,CAAC;CAC/D,OAAO;EAAE,MAAM;EAAS,SAAS,WAAW,EAAE,MAAM;CAAG;CACvD,MAAM;EAAE,MAAM;EAAQ,SAAS,UAAU,EAAE,KAAK;CAAG;CACnD,OAAO;EAAE,MAAM;EAAS,SAAS,WAAW,EAAE,MAAM;CAAG;CACvD,QAAQ;EACJ,MAAM;EACN,SAAS,YAAY,EAAE,QAAQ,kBAAkB,aAAa,QAAQ;CAC1E;CACA,aAAa;EACT,MAAM;EACN,SAAS,iBAAiB,EAAE,YAAY;CAC5C;CACA,cAAc;EACV,MAAM;EACN,SAAS,iBAAiB;GACtB,IAAI,iBAAiB,MAAM,OAAO,CAAC;GACnC,MAAM,cAAc,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ;GACnD,OAAO,EACH,WAAW,YAAY;IACnB,SAAS,OAAO,KAAK,MAAM,cAAc,GAAI,CAAC;IAC9C,OAAQ,cAAc,MAAQ;GAClC,CAAC,EACL;EACJ;CACJ;AACJ,CAAC;AAED,MAAa,2BAA2B,EAAE,KACtC,EAAE,aAAa;CACX,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,KAAK,GAAG,EAAE,UAAU,GAAG,mBAAmB,CAAC;CACvE,kBAAkB,gCAAgC,kBAAkB;CACpE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;CAC3B,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,QAAQ,EAAE,SAAS,wBAAwB;CAC3C,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C,cAAc,EAAE,SACZ,EAAE,SACE,EAAE,KACE,EAAE,OAAO,GACT,EAAE,OACG,UAAU,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,GAC5C,wCACJ,CACJ,CACJ,CACJ;AACJ,CAAC,GACD,EAAE,OACG,EAAE,OAAO,MAAM,OAAO,QAAQ,aAAa,mBACxC,UAAU,KAAA,KACV,SAAS,KAAA,KACT,UAAU,KAAA,KACV,WAAW,KAAA,KACX,gBAAgB,KAAA,KAChB,iBAAiB,KAAA,GACrB,6CACJ,GACA,EAAE,WAAW,EAAE,OAAO,kBAAkB,GAAG,YAAY;CACnD,MAAM,EAAE,OAAO,QAAQ,eAAe,gBAAgB,OAAO,oBAAoB;CACjF,OAAO;EAAE;EAAO;EAAQ;EAAY;CAAiB;AACzD,CAAC,CACL;AAIA,MAAa,eAAe,EAAE,KAC1B,EAAE,OAAO;CACL,OAAO,EAAE,OAAO;CAChB,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC/B,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;CAC/C,cAAc;CACd,UAAU;CACV,WAAW;CACX,WAAW,EAAE,SAAS,eAAe;CACrC,YAAY;CACZ,kBAAkB,EAAE,SAAS,UAA2B;CACxD,WAAW,EAAE,KACT,EAAE,SAAS,eAAe,GAC1B,EAAE,WAAW,MAAM;EACf,MAAM,KAAK,UAAU,CAAC;EACtB,OAAO,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC,YAAY,IAAI,KAAA;CAC7C,CAAC,CACL;CACA,QAAQ,EAAE,KACN,EAAE,KAAKA,YAAkB,GACzB,EAAE,WAAW,MACT,kBACI,kBAAkB,eAClB,GACA,gCACA,QACJ,CACJ,CACJ;CACA,gBAAgB,EAAE,OAAO;CACzB,UAAU;AACd,CAAC,GACD,EAAE,WAAW,EAAE,cAAc,WAAW,GAAG,WAAW;CAClD,MAAM,MAAM,WAAW,KAAK,gBAAgB;CAC5C,OAAO;EACH,GAAG;EACH;EACA,WAAW,UAAU,SAAS;EAC9B,aAAa,gBAAgB,SAAS;EACtC,cAAc;CAClB;AACJ,CAAC,CACL;AAIA,MAAa,gBAAgB,EAAE,MAAM,YAAY"}

package/dist/services/api-keys/api-keys.types.d.ts

@@ -0,0 +1,2 @@
+import { ApiKey, ApiKeyIdInput, ApiKeyStatus, ApiKeysCreateInput, ApiKeysListInput, ApiKeysUpdateInput } from "./api-keys.schemas.js";
+export type { ApiKey, ApiKeyIdInput, ApiKeyStatus, ApiKeysCreateInput, ApiKeysListInput, ApiKeysUpdateInput };

package/dist/services/api-keys/index.d.ts

@@ -0,0 +1,3 @@
+import { ApiKey, ApiKeyIdInput, ApiKeyIdInputSchema, ApiKeySchema, ApiKeyStatus, ApiKeysCreateInput, ApiKeysCreateInputSchema, ApiKeysListInput, ApiKeysListInputSchema, ApiKeysUpdateInput, ApiKeysUpdateInputSchema } from "./api-keys.schemas.js";
+import { ApiKeysService } from "./api-keys.js";
+export { ApiKey, ApiKeyIdInput, ApiKeyIdInputSchema, ApiKeySchema, ApiKeyStatus, ApiKeysCreateInput, ApiKeysCreateInputSchema, ApiKeysListInput, ApiKeysListInputSchema, ApiKeysService, ApiKeysUpdateInput, ApiKeysUpdateInputSchema };

package/dist/services/auth/account-signer-auth.d.ts

@@ -0,0 +1,131 @@
+import { AccountSigner, AccountSignerConfig } from "../../account-signer/types.js";
+import { PolyesterEnvironment } from "../../environment.js";
+import { PolyesterRealtime } from "../../realtime/types.js";
+import "../../realtime/index.js";
+import { AuthService, AuthServiceTransports } from "./auth.js";
+import { SubaccountsService } from "../subaccounts/subaccounts.js";
+import "../subaccounts/index.js";
+import { AuthTokenStorage } from "./token-storage.js";
+import { AuthHydrationData, AuthLoginMethod, AuthState } from "./session.types.js";
+import { AuthSessionStore } from "./session.js";
+import { EventEmitter } from "../../utils/event-emitter.js";
+//#region src/services/auth/account-signer-auth.d.ts
+interface AccountSignerAuthEvents {
+  authenticated: {
+    accountId: string;
+    username: string;
+  };
+  loggedOut: void;
+  error: {
+    code: string;
+    message: string;
+  };
+  servicesReady: void;
+  stateChange: AuthState;
+}
+interface LoginResult {
+  accountId: string;
+  username: string;
+  expiresAt: Date;
+}
+interface LoginOptions {
+  /**
+   * The wallet provider to use for login.
+   */
+  provider: "metamask" | "turnkey" | "other";
+  loginMethod?: AuthLoginMethod | null;
+}
+interface CreateSubaccountParams {
+  /** The account signer for the new subaccount (caller derives this, e.g. via Turnkey saltNonce) */
+  accountSigner: AccountSigner;
+  /** Optional human-readable label for this subaccount */
+  label?: string;
+  /** Wallet provider hint (e.g. "turnkey", "metamask"). Defaults to "wallet" */
+  walletProvider?: string;
+}
+interface CreateSubaccountResult {
+  subaccountId: string;
+  smartAccountSaltNonce: number;
+  revision: string;
+}
+/**
+ * Coordinates wallet/account-signer authentication, session storage, subaccount selection, and session refresh.
+ */
+declare class AccountSignerAuthService extends AuthService {
+  #private;
+  readonly events: EventEmitter<AccountSignerAuthEvents>;
+  constructor({ transports, accountSignerConfig, environment, subaccounts, realtime, tokenStorage, sessionStore }: {
+    transports: AuthServiceTransports;
+    accountSignerConfig?: AccountSignerConfig;
+    environment: PolyesterEnvironment;
+    subaccounts: SubaccountsService;
+    realtime: PolyesterRealtime;
+    tokenStorage: AuthTokenStorage;
+    sessionStore?: AuthSessionStore;
+  });
+  /**
+   * Attaches the subaccounts service used when creating a subaccount during authenticated flows.
+   */
+  setSubaccountsService(subaccounts: SubaccountsService): void;
+  /**
+   * Sets the account signer used to sign login and account-switch challenges.
+   */
+  setAccountSigner(accountSigner: AccountSigner | null): void;
+  /**
+   * Returns the active account signer, throwing if one has not been configured.
+   */
+  getAccountSigner(): AccountSigner | null;
+  /**
+   * Signs a short-lived login nonce with the configured account signer, exchanges it for a session token, and stores the hydrated account/subaccount session state.
+   */
+  login(options: LoginOptions): Promise<LoginResult>;
+  /**
+   * Builds auth state from a session token and optional active account override.
+   */
+  hydrateAuthState(state: AuthHydrationData): void;
+  /**
+   * Loads the stored token, validates that it still belongs to this environment, and restores auth state when possible.
+   */
+  restoreSession(): Promise<{
+    accountId: string;
+    username: string;
+  } | null>;
+  /**
+   * Clears stored auth state and removes the persisted auth token.
+   */
+  logout(): Promise<void>;
+  /**
+   * Returns the remaining lifetime of the stored session token in milliseconds.
+   */
+  getSessionTimeToExpiry(): number;
+  /**
+   * Refreshes the active account-signer session and updates persisted auth state.
+   */
+  refreshSession(params?: {
+    provider?: "metamask" | "turnkey" | "other";
+    loginMethod?: AuthLoginMethod | null;
+  }): Promise<LoginResult>;
+  /**
+   * Switches the active account/subaccount by signing the required account switch flow.
+   */
+  switchAccount(accountId: string, options?: {
+    smartAccountAddress?: string;
+    label?: string;
+  }): {
+    accountId: string;
+    isMain: boolean;
+  };
+  /** Keeps the display-session identity current for the next server render. */
+  syncSessionUsername(username: string | null): void;
+  /**
+   * Creates a subaccount for the authenticated account and makes it available to the session state.
+   */
+  createSubaccount(params: CreateSubaccountParams): Promise<CreateSubaccountResult>;
+  /**
+   * Returns the current account-signer auth state snapshot.
+   */
+  getState(): AuthState;
+}
+//#endregion
+export { AccountSignerAuthEvents, AccountSignerAuthService, CreateSubaccountParams, CreateSubaccountResult, LoginOptions, LoginResult };
+//# sourceMappingURL=account-signer-auth.d.ts.map

package/dist/services/auth/account-signer-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-signer-auth.d.ts","names":[],"sources":["../../../src/services/auth/account-signer-auth.ts"],"mappings":";;;;;;;;;;;;UAuBiB;EACb;IAAiB;IAAmB;;EACpC;EACA;IAAS;IAAc;;EACvB;EACA,aAAa;;UAGA;EACb;EACA;EACA,WAAW;;UAGE;;;;EAIb;EACA,cAAc;;UAGD;;EAEb,eAAe;;EAEf;;EAEA;;UAGa;EACb;EACA;EACA;;;;;cAWS,iCAAiC;;WACjC,QAAM,aAAA;EAgBH,cACR,YACA,qBACA,aACA,aACA,UACA,cACA;IAEA,YAAY;IACZ,sBAAsB;IACtB,aAAa;IACb,aAAa;IACb,UAAU;IACV,cAAc;IACd,eAAe;;;;;EAmBnB,sBAAsB,aAAa;;;;EAOnC,iBAAiB,eAAe;;;;EAUhC,oBAAoB;;;;EAOd,MAAM,SAAS,eAAe,QAAQ;;;;EA2F5C,iBAAiB,OAAO;;;;EAwBlB,kBAAkB;IAAU;IAAmB;;;;;EA6D/C,UAAU;;;;EAkChB;;;;EASM,eAAe;IACjB;IACA,cAAc;MACd,QAAQ;;;;EAkBZ,cACI,mBACA;IAAY;IAA8B;;IACzC;IAAmB;;;EAuBxB,oBAAoB;;;;EASd,iBAAiB,QAAQ,yBAAyB,QAAQ;;;;EA+ChE,YAAY"}