@qlever-llc/trellis 0.10.17 → 0.10.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (65) hide show
  1. package/esm/auth/browser/portal.d.ts.map +1 -1
  2. package/esm/auth/browser/portal.js +2 -0
  3. package/esm/auth/browser.d.ts +2 -0
  4. package/esm/auth/browser.d.ts.map +1 -1
  5. package/esm/auth/browser.js +1 -0
  6. package/esm/auth/browser_recovery.d.ts +22 -0
  7. package/esm/auth/browser_recovery.d.ts.map +1 -0
  8. package/esm/auth/browser_recovery.js +238 -0
  9. package/esm/auth/mod.d.ts +2 -2
  10. package/esm/auth/mod.d.ts.map +1 -1
  11. package/esm/auth/mod.js +2 -2
  12. package/esm/auth/protocol.d.ts +362 -398
  13. package/esm/auth/protocol.d.ts.map +1 -1
  14. package/esm/auth/protocol.js +36 -33
  15. package/esm/browser.d.ts +2 -2
  16. package/esm/browser.d.ts.map +1 -1
  17. package/esm/browser.js +1 -1
  18. package/esm/client_connect.js +1 -1
  19. package/esm/generated-sdk/auth/contract.d.ts +1 -1
  20. package/esm/generated-sdk/auth/contract.d.ts.map +1 -1
  21. package/esm/generated-sdk/auth/contract.js +1236 -1079
  22. package/esm/generated-sdk/auth/schemas.d.ts +1428 -1578
  23. package/esm/generated-sdk/auth/schemas.d.ts.map +1 -1
  24. package/esm/generated-sdk/auth/schemas.js +725 -669
  25. package/esm/generated-sdk/auth/types.d.ts +239 -281
  26. package/esm/generated-sdk/auth/types.d.ts.map +1 -1
  27. package/esm/generated-sdk/auth/types.js +1 -1
  28. package/package.json +2 -2
  29. package/script/auth/browser/portal.d.ts.map +1 -1
  30. package/script/auth/browser/portal.js +2 -0
  31. package/script/auth/browser.d.ts +2 -0
  32. package/script/auth/browser.d.ts.map +1 -1
  33. package/script/auth/browser.js +4 -1
  34. package/script/auth/browser_recovery.d.ts +22 -0
  35. package/script/auth/browser_recovery.d.ts.map +1 -0
  36. package/script/auth/browser_recovery.js +242 -0
  37. package/script/auth/mod.d.ts +2 -2
  38. package/script/auth/mod.d.ts.map +1 -1
  39. package/script/auth/mod.js +17 -6
  40. package/script/auth/protocol.d.ts +362 -398
  41. package/script/auth/protocol.d.ts.map +1 -1
  42. package/script/auth/protocol.js +41 -37
  43. package/script/browser.d.ts +2 -2
  44. package/script/browser.d.ts.map +1 -1
  45. package/script/browser.js +4 -2
  46. package/script/client_connect.js +1 -1
  47. package/script/generated-sdk/auth/contract.d.ts +1 -1
  48. package/script/generated-sdk/auth/contract.d.ts.map +1 -1
  49. package/script/generated-sdk/auth/contract.js +1236 -1079
  50. package/script/generated-sdk/auth/schemas.d.ts +1428 -1578
  51. package/script/generated-sdk/auth/schemas.d.ts.map +1 -1
  52. package/script/generated-sdk/auth/schemas.js +725 -669
  53. package/script/generated-sdk/auth/types.d.ts +239 -281
  54. package/script/generated-sdk/auth/types.d.ts.map +1 -1
  55. package/script/generated-sdk/auth/types.js +1 -1
  56. package/src/auth/browser/portal.ts +1 -0
  57. package/src/auth/browser.ts +8 -0
  58. package/src/auth/browser_recovery.ts +319 -0
  59. package/src/auth/mod.ts +25 -2
  60. package/src/auth/protocol.ts +73 -37
  61. package/src/browser.ts +4 -0
  62. package/src/client_connect.ts +1 -1
  63. package/src/sdk/_generated/auth/contract.ts +1477 -1320
  64. package/src/sdk/_generated/auth/schemas.ts +919 -863
  65. package/src/sdk/_generated/auth/types.ts +242 -304
@@ -4,7 +4,7 @@ import type { API } from "./api.js";
4
4
 
5
5
  export const CONTRACT_ID = "trellis.auth@v1" as const;
6
6
  export const CONTRACT_DIGEST =
7
- "XdqgSxkrIhWOu1ODbOk6-QHLTlI52ZP-6qhYJpIdCMc" as const;
7
+ "U-Y6P1smzJB4MeG6NdhDuZ0CTT2BWOud9iL1zIQktMM" as const;
8
8
 
9
9
  export type AuthCapabilitiesListInput = { limit: number; offset?: number };
10
10
  export type AuthCapabilitiesListOutput = {
@@ -186,32 +186,27 @@ export type AuthDeploymentAuthorityAcceptMigrationOutput = {
186
186
  deploymentId: string;
187
187
  desiredState: {
188
188
  capabilities: Array<string>;
189
- needs: Array<
190
- (
191
- | { contractId: string; kind: "contract"; required: boolean }
192
- | {
193
- kind: "surface";
189
+ needs: {
190
+ capabilities: Array<{ capability: string; required: boolean }>;
191
+ contracts: Array<{ contractId: string; required: boolean }>;
192
+ resources: Array<
193
+ {
194
+ alias: string;
195
+ definition?: {};
196
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
194
197
  required: boolean;
195
- surface: {
196
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
197
- contractId: string;
198
- kind: "rpc" | "operation" | "event" | "feed";
199
- name: string;
200
- };
201
198
  }
202
- | { capability: string; kind: "capability"; required: boolean }
203
- | {
204
- kind: "resource";
199
+ >;
200
+ surfaces: Array<
201
+ {
202
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
203
+ contractId: string;
204
+ kind: "rpc" | "operation" | "event" | "feed";
205
+ name: string;
205
206
  required: boolean;
206
- resource: {
207
- alias: string;
208
- definition?: {};
209
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
210
- required: boolean;
211
- };
212
207
  }
213
- )
214
- >;
208
+ >;
209
+ };
215
210
  resources: Array<
216
211
  {
217
212
  alias: string;
@@ -246,32 +241,27 @@ export type AuthDeploymentAuthorityAcceptUpdateOutput = {
246
241
  deploymentId: string;
247
242
  desiredState: {
248
243
  capabilities: Array<string>;
249
- needs: Array<
250
- (
251
- | { contractId: string; kind: "contract"; required: boolean }
252
- | {
253
- kind: "surface";
244
+ needs: {
245
+ capabilities: Array<{ capability: string; required: boolean }>;
246
+ contracts: Array<{ contractId: string; required: boolean }>;
247
+ resources: Array<
248
+ {
249
+ alias: string;
250
+ definition?: {};
251
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
254
252
  required: boolean;
255
- surface: {
256
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
257
- contractId: string;
258
- kind: "rpc" | "operation" | "event" | "feed";
259
- name: string;
260
- };
261
253
  }
262
- | { capability: string; kind: "capability"; required: boolean }
263
- | {
264
- kind: "resource";
254
+ >;
255
+ surfaces: Array<
256
+ {
257
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
258
+ contractId: string;
259
+ kind: "rpc" | "operation" | "event" | "feed";
260
+ name: string;
265
261
  required: boolean;
266
- resource: {
267
- alias: string;
268
- definition?: {};
269
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
270
- required: boolean;
271
- };
272
262
  }
273
- )
274
- >;
263
+ >;
264
+ };
275
265
  resources: Array<
276
266
  {
277
267
  alias: string;
@@ -303,32 +293,27 @@ export type AuthDeploymentAuthorityGetOutput = {
303
293
  deploymentId: string;
304
294
  desiredState: {
305
295
  capabilities: Array<string>;
306
- needs: Array<
307
- (
308
- | { contractId: string; kind: "contract"; required: boolean }
309
- | {
310
- kind: "surface";
296
+ needs: {
297
+ capabilities: Array<{ capability: string; required: boolean }>;
298
+ contracts: Array<{ contractId: string; required: boolean }>;
299
+ resources: Array<
300
+ {
301
+ alias: string;
302
+ definition?: {};
303
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
311
304
  required: boolean;
312
- surface: {
313
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
314
- contractId: string;
315
- kind: "rpc" | "operation" | "event" | "feed";
316
- name: string;
317
- };
318
305
  }
319
- | { capability: string; kind: "capability"; required: boolean }
320
- | {
321
- kind: "resource";
306
+ >;
307
+ surfaces: Array<
308
+ {
309
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
310
+ contractId: string;
311
+ kind: "rpc" | "operation" | "event" | "feed";
312
+ name: string;
322
313
  required: boolean;
323
- resource: {
324
- alias: string;
325
- definition?: {};
326
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
327
- required: boolean;
328
- };
329
314
  }
330
- )
331
- >;
315
+ >;
316
+ };
332
317
  resources: Array<
333
318
  {
334
319
  alias: string;
@@ -394,32 +379,36 @@ export type AuthDeploymentAuthorityGetOutput = {
394
379
  deploymentId: string;
395
380
  desiredVersion: string;
396
381
  error?: string;
397
- grants: Array<
398
- ({ capability: string; kind: "capability" } | {
399
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
400
- contractId: string;
401
- kind: "surface";
402
- name: string;
403
- surfaceKind: "rpc" | "operation" | "event" | "feed";
404
- } | {
405
- direction: "publish" | "subscribe";
406
- grantSource:
407
- | "owned-surface"
408
- | "used-surface"
409
- | "resource-binding"
410
- | "platform-service"
411
- | "transfer";
412
- kind: "nats";
413
- requiredCapabilities: Array<string>;
414
- subject: string;
415
- surface?: {
382
+ grants: {
383
+ capabilities: Array<{ capability: string }>;
384
+ nats: Array<
385
+ {
386
+ direction: "publish" | "subscribe";
387
+ grantSource:
388
+ | "owned-surface"
389
+ | "used-surface"
390
+ | "resource-binding"
391
+ | "platform-service"
392
+ | "transfer";
393
+ requiredCapabilities: Array<string>;
394
+ subject: string;
395
+ surface?: {
396
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
397
+ contractId: string;
398
+ kind: "rpc" | "operation" | "event" | "feed";
399
+ name: string;
400
+ };
401
+ }
402
+ >;
403
+ surfaces: Array<
404
+ {
416
405
  action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
417
406
  contractId: string;
418
- kind: "rpc" | "operation" | "event" | "feed";
419
407
  name: string;
420
- };
421
- })
422
- >;
408
+ surfaceKind: "rpc" | "operation" | "event" | "feed";
409
+ }
410
+ >;
411
+ };
423
412
  reconciledAt: string | null;
424
413
  resourceBindings: Array<
425
414
  {
@@ -675,37 +664,27 @@ export type AuthDeploymentAuthorityListOutput = {
675
664
  deploymentId: string;
676
665
  desiredState: {
677
666
  capabilities: Array<string>;
678
- needs: Array<
679
- (
680
- | { contractId: string; kind: "contract"; required: boolean }
681
- | {
682
- kind: "surface";
667
+ needs: {
668
+ capabilities: Array<{ capability: string; required: boolean }>;
669
+ contracts: Array<{ contractId: string; required: boolean }>;
670
+ resources: Array<
671
+ {
672
+ alias: string;
673
+ definition?: {};
674
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
683
675
  required: boolean;
684
- surface: {
685
- action?:
686
- | "call"
687
- | "publish"
688
- | "subscribe"
689
- | "observe"
690
- | "cancel";
691
- contractId: string;
692
- kind: "rpc" | "operation" | "event" | "feed";
693
- name: string;
694
- };
695
676
  }
696
- | { capability: string; kind: "capability"; required: boolean }
697
- | {
698
- kind: "resource";
677
+ >;
678
+ surfaces: Array<
679
+ {
680
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
681
+ contractId: string;
682
+ kind: "rpc" | "operation" | "event" | "feed";
683
+ name: string;
699
684
  required: boolean;
700
- resource: {
701
- alias: string;
702
- definition?: {};
703
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
704
- required: boolean;
705
- };
706
685
  }
707
- )
708
- >;
686
+ >;
687
+ };
709
688
  resources: Array<
710
689
  {
711
690
  alias: string;
@@ -765,32 +744,27 @@ export type AuthDeploymentAuthorityPlanOutput = {
765
744
  name: string;
766
745
  }
767
746
  >;
768
- requestedNeeds: Array<
769
- (
770
- | { contractId: string; kind: "contract"; required: boolean }
771
- | {
772
- kind: "surface";
747
+ requestedNeeds: {
748
+ capabilities: Array<{ capability: string; required: boolean }>;
749
+ contracts: Array<{ contractId: string; required: boolean }>;
750
+ resources: Array<
751
+ {
752
+ alias: string;
753
+ definition?: {};
754
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
773
755
  required: boolean;
774
- surface: {
775
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
776
- contractId: string;
777
- kind: "rpc" | "operation" | "event" | "feed";
778
- name: string;
779
- };
780
756
  }
781
- | { capability: string; kind: "capability"; required: boolean }
782
- | {
783
- kind: "resource";
757
+ >;
758
+ surfaces: Array<
759
+ {
760
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
761
+ contractId: string;
762
+ kind: "rpc" | "operation" | "event" | "feed";
763
+ name: string;
784
764
  required: boolean;
785
- resource: {
786
- alias: string;
787
- definition?: {};
788
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
789
- required: boolean;
790
- };
791
765
  }
792
- )
793
- >;
766
+ >;
767
+ };
794
768
  summary?: {};
795
769
  };
796
770
  state?: "pending" | "accepted" | "rejected" | "expired";
@@ -821,32 +795,27 @@ export type AuthDeploymentAuthorityPlanOutput = {
821
795
  name: string;
822
796
  }
823
797
  >;
824
- requestedNeeds: Array<
825
- (
826
- | { contractId: string; kind: "contract"; required: boolean }
827
- | {
828
- kind: "surface";
798
+ requestedNeeds: {
799
+ capabilities: Array<{ capability: string; required: boolean }>;
800
+ contracts: Array<{ contractId: string; required: boolean }>;
801
+ resources: Array<
802
+ {
803
+ alias: string;
804
+ definition?: {};
805
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
829
806
  required: boolean;
830
- surface: {
831
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
832
- contractId: string;
833
- kind: "rpc" | "operation" | "event" | "feed";
834
- name: string;
835
- };
836
807
  }
837
- | { capability: string; kind: "capability"; required: boolean }
838
- | {
839
- kind: "resource";
808
+ >;
809
+ surfaces: Array<
810
+ {
811
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
812
+ contractId: string;
813
+ kind: "rpc" | "operation" | "event" | "feed";
814
+ name: string;
840
815
  required: boolean;
841
- resource: {
842
- alias: string;
843
- definition?: {};
844
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
845
- required: boolean;
846
- };
847
816
  }
848
- )
849
- >;
817
+ >;
818
+ };
850
819
  summary?: {};
851
820
  };
852
821
  state?: "pending" | "accepted" | "rejected" | "expired";
@@ -881,32 +850,27 @@ export type AuthDeploymentAuthorityPlansGetOutput = {
881
850
  name: string;
882
851
  }
883
852
  >;
884
- requestedNeeds: Array<
885
- (
886
- | { contractId: string; kind: "contract"; required: boolean }
887
- | {
888
- kind: "surface";
853
+ requestedNeeds: {
854
+ capabilities: Array<{ capability: string; required: boolean }>;
855
+ contracts: Array<{ contractId: string; required: boolean }>;
856
+ resources: Array<
857
+ {
858
+ alias: string;
859
+ definition?: {};
860
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
889
861
  required: boolean;
890
- surface: {
891
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
892
- contractId: string;
893
- kind: "rpc" | "operation" | "event" | "feed";
894
- name: string;
895
- };
896
862
  }
897
- | { capability: string; kind: "capability"; required: boolean }
898
- | {
899
- kind: "resource";
863
+ >;
864
+ surfaces: Array<
865
+ {
866
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
867
+ contractId: string;
868
+ kind: "rpc" | "operation" | "event" | "feed";
869
+ name: string;
900
870
  required: boolean;
901
- resource: {
902
- alias: string;
903
- definition?: {};
904
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
905
- required: boolean;
906
- };
907
871
  }
908
- )
909
- >;
872
+ >;
873
+ };
910
874
  summary?: {};
911
875
  };
912
876
  state?: "pending" | "accepted" | "rejected" | "expired";
@@ -937,32 +901,27 @@ export type AuthDeploymentAuthorityPlansGetOutput = {
937
901
  name: string;
938
902
  }
939
903
  >;
940
- requestedNeeds: Array<
941
- (
942
- | { contractId: string; kind: "contract"; required: boolean }
943
- | {
944
- kind: "surface";
904
+ requestedNeeds: {
905
+ capabilities: Array<{ capability: string; required: boolean }>;
906
+ contracts: Array<{ contractId: string; required: boolean }>;
907
+ resources: Array<
908
+ {
909
+ alias: string;
910
+ definition?: {};
911
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
945
912
  required: boolean;
946
- surface: {
947
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
948
- contractId: string;
949
- kind: "rpc" | "operation" | "event" | "feed";
950
- name: string;
951
- };
952
913
  }
953
- | { capability: string; kind: "capability"; required: boolean }
954
- | {
955
- kind: "resource";
914
+ >;
915
+ surfaces: Array<
916
+ {
917
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
918
+ contractId: string;
919
+ kind: "rpc" | "operation" | "event" | "feed";
920
+ name: string;
956
921
  required: boolean;
957
- resource: {
958
- alias: string;
959
- definition?: {};
960
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
961
- required: boolean;
962
- };
963
922
  }
964
- )
965
- >;
923
+ >;
924
+ };
966
925
  summary?: {};
967
926
  };
968
927
  state?: "pending" | "accepted" | "rejected" | "expired";
@@ -1006,37 +965,27 @@ export type AuthDeploymentAuthorityPlansListOutput = {
1006
965
  name: string;
1007
966
  }
1008
967
  >;
1009
- requestedNeeds: Array<
1010
- (
1011
- | { contractId: string; kind: "contract"; required: boolean }
1012
- | {
1013
- kind: "surface";
968
+ requestedNeeds: {
969
+ capabilities: Array<{ capability: string; required: boolean }>;
970
+ contracts: Array<{ contractId: string; required: boolean }>;
971
+ resources: Array<
972
+ {
973
+ alias: string;
974
+ definition?: {};
975
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
1014
976
  required: boolean;
1015
- surface: {
1016
- action?:
1017
- | "call"
1018
- | "publish"
1019
- | "subscribe"
1020
- | "observe"
1021
- | "cancel";
1022
- contractId: string;
1023
- kind: "rpc" | "operation" | "event" | "feed";
1024
- name: string;
1025
- };
1026
977
  }
1027
- | { capability: string; kind: "capability"; required: boolean }
1028
- | {
1029
- kind: "resource";
978
+ >;
979
+ surfaces: Array<
980
+ {
981
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
982
+ contractId: string;
983
+ kind: "rpc" | "operation" | "event" | "feed";
984
+ name: string;
1030
985
  required: boolean;
1031
- resource: {
1032
- alias: string;
1033
- definition?: {};
1034
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
1035
- required: boolean;
1036
- };
1037
986
  }
1038
- )
1039
- >;
987
+ >;
988
+ };
1040
989
  summary?: {};
1041
990
  };
1042
991
  state?: "pending" | "accepted" | "rejected" | "expired";
@@ -1067,37 +1016,27 @@ export type AuthDeploymentAuthorityPlansListOutput = {
1067
1016
  name: string;
1068
1017
  }
1069
1018
  >;
1070
- requestedNeeds: Array<
1071
- (
1072
- | { contractId: string; kind: "contract"; required: boolean }
1073
- | {
1074
- kind: "surface";
1019
+ requestedNeeds: {
1020
+ capabilities: Array<{ capability: string; required: boolean }>;
1021
+ contracts: Array<{ contractId: string; required: boolean }>;
1022
+ resources: Array<
1023
+ {
1024
+ alias: string;
1025
+ definition?: {};
1026
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
1075
1027
  required: boolean;
1076
- surface: {
1077
- action?:
1078
- | "call"
1079
- | "publish"
1080
- | "subscribe"
1081
- | "observe"
1082
- | "cancel";
1083
- contractId: string;
1084
- kind: "rpc" | "operation" | "event" | "feed";
1085
- name: string;
1086
- };
1087
1028
  }
1088
- | { capability: string; kind: "capability"; required: boolean }
1089
- | {
1090
- kind: "resource";
1029
+ >;
1030
+ surfaces: Array<
1031
+ {
1032
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
1033
+ contractId: string;
1034
+ kind: "rpc" | "operation" | "event" | "feed";
1035
+ name: string;
1091
1036
  required: boolean;
1092
- resource: {
1093
- alias: string;
1094
- definition?: {};
1095
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
1096
- required: boolean;
1097
- };
1098
1037
  }
1099
- )
1100
- >;
1038
+ >;
1039
+ };
1101
1040
  summary?: {};
1102
1041
  };
1103
1042
  state?: "pending" | "accepted" | "rejected" | "expired";
@@ -1119,32 +1058,27 @@ export type AuthDeploymentAuthorityReconcileOutput = {
1119
1058
  deploymentId: string;
1120
1059
  desiredState: {
1121
1060
  capabilities: Array<string>;
1122
- needs: Array<
1123
- (
1124
- | { contractId: string; kind: "contract"; required: boolean }
1125
- | {
1126
- kind: "surface";
1061
+ needs: {
1062
+ capabilities: Array<{ capability: string; required: boolean }>;
1063
+ contracts: Array<{ contractId: string; required: boolean }>;
1064
+ resources: Array<
1065
+ {
1066
+ alias: string;
1067
+ definition?: {};
1068
+ kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
1127
1069
  required: boolean;
1128
- surface: {
1129
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
1130
- contractId: string;
1131
- kind: "rpc" | "operation" | "event" | "feed";
1132
- name: string;
1133
- };
1134
1070
  }
1135
- | { capability: string; kind: "capability"; required: boolean }
1136
- | {
1137
- kind: "resource";
1071
+ >;
1072
+ surfaces: Array<
1073
+ {
1074
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
1075
+ contractId: string;
1076
+ kind: "rpc" | "operation" | "event" | "feed";
1077
+ name: string;
1138
1078
  required: boolean;
1139
- resource: {
1140
- alias: string;
1141
- definition?: {};
1142
- kind: "kv" | "store" | "jobs" | "event-consumer" | "transfer";
1143
- required: boolean;
1144
- };
1145
1079
  }
1146
- )
1147
- >;
1080
+ >;
1081
+ };
1148
1082
  resources: Array<
1149
1083
  {
1150
1084
  alias: string;
@@ -1171,32 +1105,36 @@ export type AuthDeploymentAuthorityReconcileOutput = {
1171
1105
  deploymentId: string;
1172
1106
  desiredVersion: string;
1173
1107
  error?: string;
1174
- grants: Array<
1175
- ({ capability: string; kind: "capability" } | {
1176
- action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
1177
- contractId: string;
1178
- kind: "surface";
1179
- name: string;
1180
- surfaceKind: "rpc" | "operation" | "event" | "feed";
1181
- } | {
1182
- direction: "publish" | "subscribe";
1183
- grantSource:
1184
- | "owned-surface"
1185
- | "used-surface"
1186
- | "resource-binding"
1187
- | "platform-service"
1188
- | "transfer";
1189
- kind: "nats";
1190
- requiredCapabilities: Array<string>;
1191
- subject: string;
1192
- surface?: {
1108
+ grants: {
1109
+ capabilities: Array<{ capability: string }>;
1110
+ nats: Array<
1111
+ {
1112
+ direction: "publish" | "subscribe";
1113
+ grantSource:
1114
+ | "owned-surface"
1115
+ | "used-surface"
1116
+ | "resource-binding"
1117
+ | "platform-service"
1118
+ | "transfer";
1119
+ requiredCapabilities: Array<string>;
1120
+ subject: string;
1121
+ surface?: {
1122
+ action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
1123
+ contractId: string;
1124
+ kind: "rpc" | "operation" | "event" | "feed";
1125
+ name: string;
1126
+ };
1127
+ }
1128
+ >;
1129
+ surfaces: Array<
1130
+ {
1193
1131
  action?: "call" | "publish" | "subscribe" | "observe" | "cancel";
1194
1132
  contractId: string;
1195
- kind: "rpc" | "operation" | "event" | "feed";
1196
1133
  name: string;
1197
- };
1198
- })
1199
- >;
1134
+ surfaceKind: "rpc" | "operation" | "event" | "feed";
1135
+ }
1136
+ >;
1137
+ };
1200
1138
  reconciledAt: string | null;
1201
1139
  resourceBindings: Array<
1202
1140
  {