@qlever-llc/trellis 0.10.18 → 0.10.20

package/script/auth/browser/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/auth/browser/session.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG,YAAY,CAAC;AAEnE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gDAAgD;IAChD,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAWF,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED,wBAAsB,cAAc,CAClC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEpE;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAC1C,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,eAAe,CACnC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,aAAa,CACjC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,OAAO,CAAC,CAIlB"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/auth/browser/session.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,eAAe,CAAC;AASvB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG,YAAY,CAAC;AAEnE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gDAAgD;IAChD,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAWF,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED,wBAAsB,cAAc,CAClC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEpE;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAC1C,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,eAAe,CACnC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,aAAa,CACjC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,OAAO,CAAC,CAIlB"}

package/script/auth/browser/session.js

@@ -8,11 +8,13 @@ exports.getPublicSessionKey = getPublicSessionKey;
 exports.oauthInitSig = oauthInitSig;
 exports.bindFlowSig = bindFlowSig;
 exports.natsConnectSigForIat = natsConnectSigForIat;
+exports.logoutSessionSig = logoutSessionSig;
 exports.createRpcProof = createRpcProof;
 exports.clearSessionKey = clearSessionKey;
 exports.hasSessionKey = hasSessionKey;
 const utils_js_1 = require("../utils.js");
 const proof_js_1 = require("../proof.js");
+const schemas_js_1 = require("../schemas.js");
 const session_auth_js_1 = require("../session_auth.js");
 const storage_js_1 = require("./storage.js");
 let temporarySessionKey = null;
@@ -95,6 +97,11 @@ async function natsConnectSigForIat(handle, iat, contractDigest) {
     const sig = await signBytes(handle, digest);
     return (0, utils_js_1.base64urlEncode)(sig);
 }
+async function logoutSessionSig(handle, input) {
+    const digest = await (0, utils_js_1.sha256)((0, utils_js_1.utf8)(`logout-session:${(0, schemas_js_1.buildLogoutSignaturePayload)(input)}`));
+    const sig = await signBytes(handle, digest);
+    return (0, utils_js_1.base64urlEncode)(sig);
+}
 async function createRpcProof(handle, subject, payload, requestId, iat) {
     const payloadHash = await (0, utils_js_1.sha256)(payload);
     return await (0, proof_js_1.createProof)(handle.privateKey, {

package/script/auth/browser.d.ts

@@ -5,12 +5,13 @@
  */
 import "../_dnt.polyfills.js";
 export { type AuthConfig, type AuthStartFlowResponse, type AuthStartRequest, type AuthStartResponse, bindFlow, type BindResponse, type BindSuccessResponse, buildLoginUrl, isBindSuccessResponse, type SentinelCreds, startAuthRequest, } from "./browser/login.js";
+export { completeSessionLogout, type CompleteSessionLogoutArgs, logoutSession, } from "./browser/logout.js";
 export { type ApprovalDecision, fetchPortalFlowState, portalFlowIdFromUrl, type PortalFlowState, type PortalFlowState as BrowserPortalFlowState, portalProviderLoginUrl, portalRedirectLocation, submitPortalApproval, } from "./browser/portal.js";
-export { bindFlowSig, clearSessionKey, createRpcProof, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, loadSessionKey, natsConnectSigForIat, type SessionKeyHandle, type SessionKeyOptions, type SessionKeyPersistenceMode, signBytes, } from "./browser/session.js";
+export { bindFlowSig, clearSessionKey, createRpcProof, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, loadSessionKey, logoutSessionSig, natsConnectSigForIat, type SessionKeyHandle, type SessionKeyOptions, type SessionKeyPersistenceMode, signBytes, } from "./browser/session.js";
 export { deleteKeyPair, hasKeyPair } from "./browser/storage.js";
 export { classifyBrowserAuthError, isRecoverableBrowserAuthError, } from "./browser_recovery.js";
 export type { BrowserAuthRecoveryClassification, BrowserAuthRecoveryKind, } from "./browser_recovery.js";
-export { approvalCapabilityKeys, type ApprovalDecision as ApprovalDecisionData, ApprovalDecisionSchema, type AuthStartFlowResponse as AuthStartFlowResponseData, AuthStartFlowResponseSchema, type AuthStartRequest as AuthStartRequestData, AuthStartRequestSchema, type AuthStartResponse as AuthStartResponseData, AuthStartResponseSchema, type BindResponse as BindResponseData, BindResponseSchema, type BindSuccessResponse as BindSuccessResponseData, BindSuccessResponseSchema, type ClientTransportEndpoints as ClientTransportEndpointsData, ClientTransportEndpointsSchema, type ClientTransports as ClientTransportsData, ClientTransportsSchema, type ContractApproval as ContractApprovalData, type ContractApprovalCapability as ContractApprovalCapabilityData, ContractApprovalSchema, type NatsAuthTokenV1 as NatsAuthTokenV1Data, NatsAuthTokenV1Schema, type SentinelCreds as SentinelCredsData, SentinelCredsSchema, } from "./schemas.js";
+export { approvalCapabilityKeys, type ApprovalDecision as ApprovalDecisionData, ApprovalDecisionSchema, type AuthLogoutRequest as AuthLogoutRequestData, AuthLogoutRequestSchema, type AuthLogoutResponse as AuthLogoutResponseData, type AuthLogoutResponseMode as AuthLogoutResponseModeData, AuthLogoutResponseModeSchema, AuthLogoutResponseSchema, type AuthStartFlowResponse as AuthStartFlowResponseData, AuthStartFlowResponseSchema, type AuthStartRequest as AuthStartRequestData, AuthStartRequestSchema, type AuthStartResponse as AuthStartResponseData, AuthStartResponseSchema, type BindResponse as BindResponseData, BindResponseSchema, type BindSuccessResponse as BindSuccessResponseData, BindSuccessResponseSchema, buildLogoutSignaturePayload, type ClientTransportEndpoints as ClientTransportEndpointsData, ClientTransportEndpointsSchema, type ClientTransports as ClientTransportsData, ClientTransportsSchema, type ContractApproval as ContractApprovalData, type ContractApprovalCapability as ContractApprovalCapabilityData, ContractApprovalSchema, type LogoutSignaturePayloadInput as LogoutSignaturePayloadInputData, type NatsAuthTokenV1 as NatsAuthTokenV1Data, NatsAuthTokenV1Schema, type SentinelCreds as SentinelCredsData, SentinelCredsSchema, } from "./schemas.js";
 export type { NatsAuthTokenV1 } from "./types.js";
 export { base64urlDecode, base64urlEncode, sha256, toArrayBuffer, utf8, } from "./utils.js";
 //# sourceMappingURL=browser.d.ts.map

package/script/auth/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,sBAAsB,CAAC;AAG9B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,aAAa,EACb,qBAAqB,EACrB,KAAK,aAAa,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,IAAI,sBAAsB,EAC9C,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,qBAAqB,IAAI,yBAAyB,EACvD,2BAA2B,EAC3B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,iBAAiB,IAAI,qBAAqB,EAC/C,uBAAuB,EACvB,KAAK,YAAY,IAAI,gBAAgB,EACrC,kBAAkB,EAClB,KAAK,mBAAmB,IAAI,uBAAuB,EACnD,yBAAyB,EACzB,KAAK,wBAAwB,IAAI,4BAA4B,EAC7D,8BAA8B,EAC9B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,KAAK,0BAA0B,IAAI,8BAA8B,EACjE,sBAAsB,EACtB,KAAK,eAAe,IAAI,mBAAmB,EAC3C,qBAAqB,EACrB,KAAK,aAAa,IAAI,iBAAiB,EACvC,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,eAAe,EACf,eAAe,EACf,MAAM,EACN,aAAa,EACb,IAAI,GACL,MAAM,YAAY,CAAC"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,sBAAsB,CAAC;AAG9B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,aAAa,EACb,qBAAqB,EACrB,KAAK,aAAa,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,IAAI,sBAAsB,EAC9C,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,iBAAiB,IAAI,qBAAqB,EAC/C,uBAAuB,EACvB,KAAK,kBAAkB,IAAI,sBAAsB,EACjD,KAAK,sBAAsB,IAAI,0BAA0B,EACzD,4BAA4B,EAC5B,wBAAwB,EACxB,KAAK,qBAAqB,IAAI,yBAAyB,EACvD,2BAA2B,EAC3B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,iBAAiB,IAAI,qBAAqB,EAC/C,uBAAuB,EACvB,KAAK,YAAY,IAAI,gBAAgB,EACrC,kBAAkB,EAClB,KAAK,mBAAmB,IAAI,uBAAuB,EACnD,yBAAyB,EACzB,2BAA2B,EAC3B,KAAK,wBAAwB,IAAI,4BAA4B,EAC7D,8BAA8B,EAC9B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,KAAK,0BAA0B,IAAI,8BAA8B,EACjE,sBAAsB,EACtB,KAAK,2BAA2B,IAAI,+BAA+B,EACnE,KAAK,eAAe,IAAI,mBAAmB,EAC3C,qBAAqB,EACrB,KAAK,aAAa,IAAI,iBAAiB,EACvC,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,eAAe,EACf,eAAe,EACf,MAAM,EACN,aAAa,EACb,IAAI,GACL,MAAM,YAAY,CAAC"}

package/script/auth/browser.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.utf8 = exports.toArrayBuffer = exports.sha256 = exports.base64urlEncode = exports.base64urlDecode = exports.SentinelCredsSchema = exports.NatsAuthTokenV1Schema = exports.ContractApprovalSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.BindSuccessResponseSchema = exports.BindResponseSchema = exports.AuthStartResponseSchema = exports.AuthStartRequestSchema = exports.AuthStartFlowResponseSchema = exports.ApprovalDecisionSchema = exports.approvalCapabilityKeys = exports.isRecoverableBrowserAuthError = exports.classifyBrowserAuthError = exports.hasKeyPair = exports.deleteKeyPair = exports.signBytes = exports.natsConnectSigForIat = exports.loadSessionKey = exports.hasSessionKey = exports.getPublicSessionKey = exports.getOrCreateSessionKey = exports.generateSessionKey = exports.createRpcProof = exports.clearSessionKey = exports.bindFlowSig = exports.submitPortalApproval = exports.portalRedirectLocation = exports.portalProviderLoginUrl = exports.portalFlowIdFromUrl = exports.fetchPortalFlowState = exports.startAuthRequest = exports.isBindSuccessResponse = exports.buildLoginUrl = exports.bindFlow = void 0;
+exports.utf8 = exports.toArrayBuffer = exports.sha256 = exports.base64urlEncode = exports.base64urlDecode = exports.SentinelCredsSchema = exports.NatsAuthTokenV1Schema = exports.ContractApprovalSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.buildLogoutSignaturePayload = exports.BindSuccessResponseSchema = exports.BindResponseSchema = exports.AuthStartResponseSchema = exports.AuthStartRequestSchema = exports.AuthStartFlowResponseSchema = exports.AuthLogoutResponseSchema = exports.AuthLogoutResponseModeSchema = exports.AuthLogoutRequestSchema = exports.ApprovalDecisionSchema = exports.approvalCapabilityKeys = exports.isRecoverableBrowserAuthError = exports.classifyBrowserAuthError = exports.hasKeyPair = exports.deleteKeyPair = exports.signBytes = exports.natsConnectSigForIat = exports.logoutSessionSig = exports.loadSessionKey = exports.hasSessionKey = exports.getPublicSessionKey = exports.getOrCreateSessionKey = exports.generateSessionKey = exports.createRpcProof = exports.clearSessionKey = exports.bindFlowSig = exports.submitPortalApproval = exports.portalRedirectLocation = exports.portalProviderLoginUrl = exports.portalFlowIdFromUrl = exports.fetchPortalFlowState = exports.logoutSession = exports.completeSessionLogout = exports.startAuthRequest = exports.isBindSuccessResponse = exports.buildLoginUrl = exports.bindFlow = void 0;
 /**
  * @module
  * Browser-based authentication utilities for session-key based authentication.
@@ -11,6 +11,9 @@ Object.defineProperty(exports, "bindFlow", { enumerable: true, get: function ()
 Object.defineProperty(exports, "buildLoginUrl", { enumerable: true, get: function () { return login_js_1.buildLoginUrl; } });
 Object.defineProperty(exports, "isBindSuccessResponse", { enumerable: true, get: function () { return login_js_1.isBindSuccessResponse; } });
 Object.defineProperty(exports, "startAuthRequest", { enumerable: true, get: function () { return login_js_1.startAuthRequest; } });
+var logout_js_1 = require("./browser/logout.js");
+Object.defineProperty(exports, "completeSessionLogout", { enumerable: true, get: function () { return logout_js_1.completeSessionLogout; } });
+Object.defineProperty(exports, "logoutSession", { enumerable: true, get: function () { return logout_js_1.logoutSession; } });
 var portal_js_1 = require("./browser/portal.js");
 Object.defineProperty(exports, "fetchPortalFlowState", { enumerable: true, get: function () { return portal_js_1.fetchPortalFlowState; } });
 Object.defineProperty(exports, "portalFlowIdFromUrl", { enumerable: true, get: function () { return portal_js_1.portalFlowIdFromUrl; } });
@@ -26,6 +29,7 @@ Object.defineProperty(exports, "getOrCreateSessionKey", { enumerable: true, get:
 Object.defineProperty(exports, "getPublicSessionKey", { enumerable: true, get: function () { return session_js_1.getPublicSessionKey; } });
 Object.defineProperty(exports, "hasSessionKey", { enumerable: true, get: function () { return session_js_1.hasSessionKey; } });
 Object.defineProperty(exports, "loadSessionKey", { enumerable: true, get: function () { return session_js_1.loadSessionKey; } });
+Object.defineProperty(exports, "logoutSessionSig", { enumerable: true, get: function () { return session_js_1.logoutSessionSig; } });
 Object.defineProperty(exports, "natsConnectSigForIat", { enumerable: true, get: function () { return session_js_1.natsConnectSigForIat; } });
 Object.defineProperty(exports, "signBytes", { enumerable: true, get: function () { return session_js_1.signBytes; } });
 var storage_js_1 = require("./browser/storage.js");
@@ -37,11 +41,15 @@ Object.defineProperty(exports, "isRecoverableBrowserAuthError", { enumerable: tr
 var schemas_js_1 = require("./schemas.js");
 Object.defineProperty(exports, "approvalCapabilityKeys", { enumerable: true, get: function () { return schemas_js_1.approvalCapabilityKeys; } });
 Object.defineProperty(exports, "ApprovalDecisionSchema", { enumerable: true, get: function () { return schemas_js_1.ApprovalDecisionSchema; } });
+Object.defineProperty(exports, "AuthLogoutRequestSchema", { enumerable: true, get: function () { return schemas_js_1.AuthLogoutRequestSchema; } });
+Object.defineProperty(exports, "AuthLogoutResponseModeSchema", { enumerable: true, get: function () { return schemas_js_1.AuthLogoutResponseModeSchema; } });
+Object.defineProperty(exports, "AuthLogoutResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthLogoutResponseSchema; } });
 Object.defineProperty(exports, "AuthStartFlowResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartFlowResponseSchema; } });
 Object.defineProperty(exports, "AuthStartRequestSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartRequestSchema; } });
 Object.defineProperty(exports, "AuthStartResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartResponseSchema; } });
 Object.defineProperty(exports, "BindResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindResponseSchema; } });
 Object.defineProperty(exports, "BindSuccessResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindSuccessResponseSchema; } });
+Object.defineProperty(exports, "buildLogoutSignaturePayload", { enumerable: true, get: function () { return schemas_js_1.buildLogoutSignaturePayload; } });
 Object.defineProperty(exports, "ClientTransportEndpointsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportEndpointsSchema; } });
 Object.defineProperty(exports, "ClientTransportsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportsSchema; } });
 Object.defineProperty(exports, "ContractApprovalSchema", { enumerable: true, get: function () { return schemas_js_1.ContractApprovalSchema; } });

package/script/auth/mod.d.ts

@@ -8,10 +8,10 @@
  * - Services load their session key seed from `TRELLIS_SESSION_KEY_SEED`.
  */
 export { type AuthDeviceUserAuthoritiesListInput, type AuthDeviceUserAuthoritiesListOutput, type AuthDeviceUserAuthoritiesRevokeInput, type AuthDeviceUserAuthoritiesRevokeResponse, type AuthResolveDeviceUserAuthoritiesInput, type AuthResolveDeviceUserAuthoritiesOperation, type AuthResolveDeviceUserAuthoritiesOutput, type AuthResolveDeviceUserAuthoritiesProgress, buildDeviceActivationPayload, buildDeviceWaitProofInput, createDeviceActivationClient, createDeviceNatsAuthToken, deriveDeviceConfirmationCode, deriveDeviceIdentity, deriveDeviceQrMac, type DeviceActivationPayload, type DeviceActivationTransport, type DeviceActivationWaitRequest, type DeviceIdentity, encodeDeviceActivationPayload, getDeviceConnectInfo, type GetDeviceConnectInfoInput, type GetDeviceConnectInfoOutput, parseDeviceActivationPayload, signDeviceWaitRequest, startDeviceActivationRequest, verifyDeviceConfirmationCode, verifyDeviceWaitSignature, waitForDeviceActivation, type WaitForDeviceActivationResponse, } from "./device_activation.js";
-export { type AuthConfig, bindFlow, type BrowserAuthRecoveryClassification, type BrowserAuthRecoveryKind, buildLoginUrl, classifyBrowserAuthError, clearSessionKey, createRpcProof, fetchPortalFlowState, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, isBindSuccessResponse, isRecoverableBrowserAuthError, loadSessionKey, natsConnectSigForIat, portalFlowIdFromUrl, portalProviderLoginUrl, portalRedirectLocation, type SessionKeyHandle, type SessionKeyOptions, type SessionKeyPersistenceMode, signBytes, startAuthRequest, submitPortalApproval, } from "./browser.js";
+export { type AuthConfig, bindFlow, type BrowserAuthRecoveryClassification, type BrowserAuthRecoveryKind, buildLoginUrl, classifyBrowserAuthError, clearSessionKey, completeSessionLogout, type CompleteSessionLogoutArgs, createRpcProof, fetchPortalFlowState, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, isBindSuccessResponse, isRecoverableBrowserAuthError, loadSessionKey, logoutSession, logoutSessionSig, natsConnectSigForIat, portalFlowIdFromUrl, portalProviderLoginUrl, portalRedirectLocation, type SessionKeyHandle, type SessionKeyOptions, type SessionKeyPersistenceMode, signBytes, startAuthRequest, submitPortalApproval, } from "./browser.js";
 export { buildProofInput, createProof, type ProofParams, verifyProof, } from "./proof.js";
 export { ApprovalRecordViewSchema, AuthCapabilitiesListResponseSchema, AuthCapabilitiesListSchema, AuthCapabilityGroupsDeleteResponseSchema, AuthCapabilityGroupsDeleteSchema, AuthCapabilityGroupsGetResponseSchema, AuthCapabilityGroupsGetSchema, AuthCapabilityGroupsListResponseSchema, AuthCapabilityGroupsListSchema, AuthCapabilityGroupsPutResponseSchema, AuthCapabilityGroupsPutSchema, type AuthDeployment, type AuthDeploymentAuthorityAcceptMigrationInput, AuthDeploymentAuthorityAcceptMigrationSchema, type AuthDeploymentAuthorityAcceptResponse, AuthDeploymentAuthorityAcceptResponseSchema, type AuthDeploymentAuthorityAcceptUpdateInput, AuthDeploymentAuthorityAcceptUpdateSchema, type AuthDeploymentAuthorityGetInput, type AuthDeploymentAuthorityGetResponse, AuthDeploymentAuthorityGetResponseSchema, AuthDeploymentAuthorityGetSchema, type AuthDeploymentAuthorityGrantOverridesListInput, type AuthDeploymentAuthorityGrantOverridesListResponse, AuthDeploymentAuthorityGrantOverridesListResponseSchema, AuthDeploymentAuthorityGrantOverridesListSchema, type AuthDeploymentAuthorityGrantOverridesPutInput, AuthDeploymentAuthorityGrantOverridesPutSchema, type AuthDeploymentAuthorityGrantOverridesRemoveInput, AuthDeploymentAuthorityGrantOverridesRemoveSchema, type AuthDeploymentAuthorityGrantOverridesResponse, AuthDeploymentAuthorityGrantOverridesResponseSchema, type AuthDeploymentAuthorityListInput, type AuthDeploymentAuthorityListResponse, AuthDeploymentAuthorityListResponseSchema, AuthDeploymentAuthorityListSchema, type AuthDeploymentAuthorityPlanInput, type AuthDeploymentAuthorityPlanResponse, AuthDeploymentAuthorityPlanResponseSchema, AuthDeploymentAuthorityPlanSchema, type AuthDeploymentAuthorityPlansGetInput, type AuthDeploymentAuthorityPlansGetResponse, AuthDeploymentAuthorityPlansGetResponseSchema, AuthDeploymentAuthorityPlansGetSchema, type AuthDeploymentAuthorityPlansListInput, type AuthDeploymentAuthorityPlansListResponse, AuthDeploymentAuthorityPlansListResponseSchema, AuthDeploymentAuthorityPlansListSchema, type AuthDeploymentAuthorityReconcileInput, type AuthDeploymentAuthorityReconcileResponse, AuthDeploymentAuthorityReconcileResponseSchema, AuthDeploymentAuthorityReconcileSchema, type AuthDeploymentAuthorityRejectInput, type AuthDeploymentAuthorityRejectResponse, AuthDeploymentAuthorityRejectResponseSchema, AuthDeploymentAuthorityRejectSchema, type AuthDeploymentKind, AuthDeploymentKindSchema, AuthDeploymentSchema, AuthDeploymentsCreateResponseSchema, AuthDeploymentsCreateSchema, AuthDeploymentsDisableResponseSchema, AuthDeploymentsDisableSchema, AuthDeploymentsEnableResponseSchema, AuthDeploymentsEnableSchema, AuthDeploymentsListResponseSchema, AuthDeploymentsListSchema, AuthDeploymentsRemoveResponseSchema, AuthDeploymentsRemoveSchema, AuthDevicesConnectInfoGetResponseSchema, AuthDevicesConnectInfoGetSchema, AuthDevicesDisableResponseSchema, AuthDevicesDisableSchema, AuthDevicesEnableResponseSchema, AuthDevicesEnableSchema, AuthDevicesListResponseSchema, AuthDevicesListSchema, AuthDevicesProvisionResponseSchema, AuthDevicesProvisionSchema, AuthDevicesRemoveResponseSchema, AuthDevicesRemoveSchema, AuthDeviceUserAuthoritiesApprovedEventSchema, AuthDeviceUserAuthoritiesListResponseSchema, AuthDeviceUserAuthoritiesListSchema, AuthDeviceUserAuthoritiesRequestedEventSchema, AuthDeviceUserAuthoritiesResolvedEventSchema, AuthDeviceUserAuthoritiesReviewRequestedEventSchema, AuthDeviceUserAuthoritiesReviewsDecideResponseSchema, AuthDeviceUserAuthoritiesReviewsDecideSchema, AuthDeviceUserAuthoritiesReviewsListResponseSchema, AuthDeviceUserAuthoritiesReviewsListSchema, AuthDeviceUserAuthoritiesRevokeResponseSchema, AuthDeviceUserAuthoritiesRevokeSchema, type AuthenticatedDevice, AuthenticatedDeviceSchema, type AuthenticatedService, type AuthenticatedUser, AuthIdentitiesListResponseSchema, AuthIdentitiesListSchema, AuthIdentityGrantsListResponseSchema, AuthIdentityGrantsListSchema, AuthIdentityGrantsRevokeResponseSchema, AuthIdentityGrantsRevokeSchema, AuthPortalsGetResponseSchema, AuthPortalsGetSchema, AuthPortalsListResponseSchema, AuthPortalsListSchema, AuthPortalsLoginSettingsGetSchema, AuthPortalsLoginSettingsResponseSchema, AuthPortalsLoginSettingsUpdateSchema, AuthPortalsRoutesPutResponseSchema, AuthPortalsRoutesPutSchema, AuthPortalsRoutesRemoveResponseSchema, AuthPortalsRoutesRemoveSchema, AuthRequestsValidateResponseSchema, AuthRequestsValidateSchema, AuthResolveDeviceUserAuthoritiesProgressSchema, AuthResolveDeviceUserAuthoritiesResponseSchema, AuthResolveDeviceUserAuthoritiesSchema, AuthServiceInstancesDisableResponseSchema, AuthServiceInstancesDisableSchema, AuthServiceInstancesEnableResponseSchema, AuthServiceInstancesEnableSchema, AuthServiceInstancesListResponseSchema, AuthServiceInstancesListSchema, AuthServiceInstancesProvisionResponseSchema, AuthServiceInstancesProvisionSchema, AuthServiceInstancesRemoveResponseSchema, AuthServiceInstancesRemoveSchema, type AuthSessionsMeResponse, AuthSessionsMeResponseSchema, AuthSessionsMeSchema, AuthUserIdentitiesListResponseSchema, AuthUserIdentitiesListSchema, AuthUserIdentitiesUnlinkResponseSchema, AuthUserIdentitiesUnlinkSchema, AuthUsersAccountFlowCreateResponseSchema, AuthUsersCreateResponseSchema, AuthUsersCreateSchema, AuthUsersGetResponseSchema, AuthUsersGetSchema, AuthUsersIdentityLinkCreateSchema, AuthUsersListResponseSchema, AuthUsersListSchema, AuthUsersPasswordChangeResponseSchema, AuthUsersPasswordChangeSchema, AuthUsersPasswordResetCreateSchema, AuthUsersUpdateResponseSchema, AuthUsersUpdateSchema, CallerViewSchema, ContractAnalysisSchema, ContractAnalysisSummarySchema, type DeploymentAuthority, type DeploymentAuthorityCapability, type DeploymentAuthorityCapabilityNeed, DeploymentAuthorityCapabilityNeedSchema, DeploymentAuthorityCapabilitySchema, type DeploymentAuthorityContractNeed, DeploymentAuthorityContractNeedSchema, type DeploymentAuthorityGrantOverride, DeploymentAuthorityGrantOverrideSchema, type DeploymentAuthorityKind, DeploymentAuthorityKindSchema, type DeploymentAuthorityMaterialization, DeploymentAuthorityMaterializationSchema, type DeploymentAuthorityMigration, DeploymentAuthorityMigrationSchema, type DeploymentAuthorityNeeds, DeploymentAuthorityNeedsSchema, type DeploymentAuthorityPlan, DeploymentAuthorityPlanSchema, type DeploymentAuthorityProposal, DeploymentAuthorityProposalSchema, type DeploymentAuthorityReconciliationStatus, DeploymentAuthorityReconciliationStatusSchema, type DeploymentAuthorityResource, DeploymentAuthorityResourceKindSchema, type DeploymentAuthorityResourceNeed, DeploymentAuthorityResourceNeedSchema, DeploymentAuthorityResourceSchema, DeploymentAuthoritySchema, type DeploymentAuthoritySurface, DeploymentAuthoritySurfaceActionSchema, DeploymentAuthoritySurfaceKindSchema, type DeploymentAuthoritySurfaceNeed, DeploymentAuthoritySurfaceNeedSchema, DeploymentAuthoritySurfaceSchema, type DeploymentAuthorityUpdate, DeploymentAuthorityUpdateSchema, DeploymentPortalRouteSchema, DeploymentResourceBindingSchema, type DeviceActivationRecord, DeviceActivationRecordSchema, DeviceActivationReviewSchema, DeviceConnectInfoSchema, DeviceDeploymentSchema, DeviceSchema, DigestSchema, type FlowRegistrationAvailability, FlowRegistrationAvailabilitySchema, IdentityGrantViewSchema, ImplementationOfferSchema, type LoginPortalRecord, LoginPortalRecordSchema, type LoginPortalRoute, LoginPortalRouteSchema, type LoginPortalSettings, LoginPortalSettingsSchema, type LoginPortalSummary, LoginPortalSummarySchema, type MaterializedAuthorityCapabilityGrant, MaterializedAuthorityCapabilityGrantSchema, type MaterializedAuthorityGrant, type MaterializedAuthorityGrants, MaterializedAuthorityGrantsSchema, type MaterializedAuthorityNatsGrant, MaterializedAuthorityNatsGrantSchema, type MaterializedAuthorityNatsGrantSource, MaterializedAuthorityNatsGrantSourceSchema, type MaterializedAuthoritySurfaceGrant, MaterializedAuthoritySurfaceGrantSchema, OpenObjectSchema, type ParticipantKind, ParticipantKindSchema, type PortalFlowApp, type PortalFlowApproval, type PortalFlowApprovalDeniedState, type PortalFlowApprovalRequiredState, type PortalFlowChooseProviderState, type PortalFlowExpiredState, type PortalFlowInsufficientCapabilitiesState, type PortalFlowProvider, type PortalFlowRedirectState, type PortalFlowState, PortalFlowStateSchema, type PortalFlowUser, ServiceDeploymentSchema, ServiceInstanceSchema, UserViewSchema, WaitForDeviceActivationRequestSchema, WaitForDeviceActivationResponseSchema, } from "./protocol.js";
-export { approvalCapabilityKeys, type ApprovalDecision, ApprovalDecisionSchema, type AuthStartFlowResponse, AuthStartFlowResponseSchema, type AuthStartRequest, AuthStartRequestSchema, type AuthStartResponse, AuthStartResponseSchema, type BindResponse, BindResponseSchema, type BindSuccessResponse, BindSuccessResponseSchema, type ClientTransportEndpoints, ClientTransportEndpointsSchema, type ClientTransports, ClientTransportsSchema, type ContractApproval, type ContractApprovalCapability, ContractApprovalSchema, type NatsAuthTokenV1, NatsAuthTokenV1Schema, type SentinelCreds, SentinelCredsSchema, type UserParticipantKind, UserParticipantKindSchema, } from "./schemas.js";
+export { approvalCapabilityKeys, type ApprovalDecision, ApprovalDecisionSchema, type AuthLogoutRequest, AuthLogoutRequestSchema, type AuthLogoutResponse, type AuthLogoutResponseMode, AuthLogoutResponseModeSchema, AuthLogoutResponseSchema, type AuthStartFlowResponse, AuthStartFlowResponseSchema, type AuthStartRequest, AuthStartRequestSchema, type AuthStartResponse, AuthStartResponseSchema, type BindResponse, BindResponseSchema, type BindSuccessResponse, BindSuccessResponseSchema, buildLogoutSignaturePayload, type ClientTransportEndpoints, ClientTransportEndpointsSchema, type ClientTransports, ClientTransportsSchema, type ContractApproval, type ContractApprovalCapability, ContractApprovalSchema, type LogoutSignaturePayloadInput, type NatsAuthTokenV1, NatsAuthTokenV1Schema, type SentinelCreds, SentinelCredsSchema, type UserParticipantKind, UserParticipantKindSchema, } from "./schemas.js";
 export { buildNatsConnectSignaturePayload, createAuth, type NatsConnectOptions, type TrellisAuth, } from "./session_auth.js";
 export { correctedIatSeconds, estimateMidpointClockOffsetMs } from "./time.js";
 export { trellisIdFromOriginId } from "./trellis_id.js";

package/script/auth/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../src/auth/mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,KAAK,kCAAkC,EACvC,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EACzC,KAAK,uCAAuC,EAC5C,KAAK,qCAAqC,EAC1C,KAAK,yCAAyC,EAC9C,KAAK,sCAAsC,EAC3C,KAAK,wCAAwC,EAC7C,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,KAAK,cAAc,EACnB,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,4BAA4B,EAC5B,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,KAAK,+BAA+B,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,UAAU,EACf,QAAQ,EACR,KAAK,iCAAiC,EACtC,KAAK,uBAAuB,EAC5B,aAAa,EACb,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,qBAAqB,EACrB,6BAA6B,EAC7B,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,SAAS,EACT,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,WAAW,EACX,KAAK,WAAW,EAChB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,0BAA0B,EAC1B,wCAAwC,EACxC,gCAAgC,EAChC,qCAAqC,EACrC,6BAA6B,EAC7B,sCAAsC,EACtC,8BAA8B,EAC9B,qCAAqC,EACrC,6BAA6B,EAC7B,KAAK,cAAc,EACnB,KAAK,2CAA2C,EAChD,4CAA4C,EAC5C,KAAK,qCAAqC,EAC1C,2CAA2C,EAC3C,KAAK,wCAAwC,EAC7C,yCAAyC,EACzC,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,wCAAwC,EACxC,gCAAgC,EAChC,KAAK,8CAA8C,EACnD,KAAK,iDAAiD,EACtD,uDAAuD,EACvD,+CAA+C,EAC/C,KAAK,6CAA6C,EAClD,8CAA8C,EAC9C,KAAK,gDAAgD,EACrD,iDAAiD,EACjD,KAAK,6CAA6C,EAClD,mDAAmD,EACnD,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EACxC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EACxC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,oCAAoC,EACzC,KAAK,uCAAuC,EAC5C,6CAA6C,EAC7C,qCAAqC,EACrC,KAAK,qCAAqC,EAC1C,KAAK,wCAAwC,EAC7C,8CAA8C,EAC9C,sCAAsC,EACtC,KAAK,qCAAqC,EAC1C,KAAK,wCAAwC,EAC7C,8CAA8C,EAC9C,sCAAsC,EACtC,KAAK,kCAAkC,EACvC,KAAK,qCAAqC,EAC1C,2CAA2C,EAC3C,mCAAmC,EACnC,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,mCAAmC,EACnC,2BAA2B,EAC3B,oCAAoC,EACpC,4BAA4B,EAC5B,mCAAmC,EACnC,2BAA2B,EAC3B,iCAAiC,EACjC,yBAAyB,EACzB,mCAAmC,EACnC,2BAA2B,EAC3B,uCAAuC,EACvC,+BAA+B,EAC/B,gCAAgC,EAChC,wBAAwB,EACxB,+BAA+B,EAC/B,uBAAuB,EACvB,6BAA6B,EAC7B,qBAAqB,EACrB,kCAAkC,EAClC,0BAA0B,EAC1B,+BAA+B,EAC/B,uBAAuB,EACvB,4CAA4C,EAC5C,2CAA2C,EAC3C,mCAAmC,EACnC,6CAA6C,EAC7C,4CAA4C,EAC5C,mDAAmD,EACnD,oDAAoD,EACpD,4CAA4C,EAC5C,kDAAkD,EAClD,0CAA0C,EAC1C,6CAA6C,EAC7C,qCAAqC,EACrC,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,gCAAgC,EAChC,wBAAwB,EACxB,oCAAoC,EACpC,4BAA4B,EAC5B,sCAAsC,EACtC,8BAA8B,EAC9B,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,qBAAqB,EACrB,iCAAiC,EACjC,sCAAsC,EACtC,oCAAoC,EACpC,kCAAkC,EAClC,0BAA0B,EAC1B,qCAAqC,EACrC,6BAA6B,EAC7B,kCAAkC,EAClC,0BAA0B,EAC1B,8CAA8C,EAC9C,8CAA8C,EAC9C,sCAAsC,EACtC,yCAAyC,EACzC,iCAAiC,EACjC,wCAAwC,EACxC,gCAAgC,EAChC,sCAAsC,EACtC,8BAA8B,EAC9B,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EACxC,gCAAgC,EAChC,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,oCAAoC,EACpC,4BAA4B,EAC5B,sCAAsC,EACtC,8BAA8B,EAC9B,wCAAwC,EACxC,6BAA6B,EAC7B,qBAAqB,EACrB,0BAA0B,EAC1B,kBAAkB,EAClB,iCAAiC,EACjC,2BAA2B,EAC3B,mBAAmB,EACnB,qCAAqC,EACrC,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,KAAK,+BAA+B,EACpC,qCAAqC,EACrC,KAAK,gCAAgC,EACrC,sCAAsC,EACtC,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,KAAK,kCAAkC,EACvC,wCAAwC,EACxC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,KAAK,uCAAuC,EAC5C,6CAA6C,EAC7C,KAAK,2BAA2B,EAChC,qCAAqC,EACrC,KAAK,+BAA+B,EACpC,qCAAqC,EACrC,iCAAiC,EACjC,yBAAyB,EACzB,KAAK,0BAA0B,EAC/B,sCAAsC,EACtC,oCAAoC,EACpC,KAAK,8BAA8B,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,2BAA2B,EAC3B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,KAAK,8BAA8B,EACnC,oCAAoC,EACpC,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,KAAK,iCAAiC,EACtC,uCAAuC,EACvC,gBAAgB,EAChB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,6BAA6B,EAClC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,uCAAuC,EAC5C,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACd,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,2BAA2B,EAC3B,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,KAAK,YAAY,EACjB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gCAAgC,EAChC,UAAU,EACV,KAAK,kBAAkB,EACvB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,MAAM,EACN,aAAa,EACb,IAAI,GACL,MAAM,YAAY,CAAC"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../src/auth/mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,KAAK,kCAAkC,EACvC,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EACzC,KAAK,uCAAuC,EAC5C,KAAK,qCAAqC,EAC1C,KAAK,yCAAyC,EAC9C,KAAK,sCAAsC,EAC3C,KAAK,wCAAwC,EAC7C,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,KAAK,cAAc,EACnB,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,4BAA4B,EAC5B,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,KAAK,+BAA+B,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,UAAU,EACf,QAAQ,EACR,KAAK,iCAAiC,EACtC,KAAK,uBAAuB,EAC5B,aAAa,EACb,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,qBAAqB,EACrB,6BAA6B,EAC7B,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,SAAS,EACT,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,WAAW,EACX,KAAK,WAAW,EAChB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,0BAA0B,EAC1B,wCAAwC,EACxC,gCAAgC,EAChC,qCAAqC,EACrC,6BAA6B,EAC7B,sCAAsC,EACtC,8BAA8B,EAC9B,qCAAqC,EACrC,6BAA6B,EAC7B,KAAK,cAAc,EACnB,KAAK,2CAA2C,EAChD,4CAA4C,EAC5C,KAAK,qCAAqC,EAC1C,2CAA2C,EAC3C,KAAK,wCAAwC,EAC7C,yCAAyC,EACzC,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,wCAAwC,EACxC,gCAAgC,EAChC,KAAK,8CAA8C,EACnD,KAAK,iDAAiD,EACtD,uDAAuD,EACvD,+CAA+C,EAC/C,KAAK,6CAA6C,EAClD,8CAA8C,EAC9C,KAAK,gDAAgD,EACrD,iDAAiD,EACjD,KAAK,6CAA6C,EAClD,mDAAmD,EACnD,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EACxC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EACxC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,oCAAoC,EACzC,KAAK,uCAAuC,EAC5C,6CAA6C,EAC7C,qCAAqC,EACrC,KAAK,qCAAqC,EAC1C,KAAK,wCAAwC,EAC7C,8CAA8C,EAC9C,sCAAsC,EACtC,KAAK,qCAAqC,EAC1C,KAAK,wCAAwC,EAC7C,8CAA8C,EAC9C,sCAAsC,EACtC,KAAK,kCAAkC,EACvC,KAAK,qCAAqC,EAC1C,2CAA2C,EAC3C,mCAAmC,EACnC,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,mCAAmC,EACnC,2BAA2B,EAC3B,oCAAoC,EACpC,4BAA4B,EAC5B,mCAAmC,EACnC,2BAA2B,EAC3B,iCAAiC,EACjC,yBAAyB,EACzB,mCAAmC,EACnC,2BAA2B,EAC3B,uCAAuC,EACvC,+BAA+B,EAC/B,gCAAgC,EAChC,wBAAwB,EACxB,+BAA+B,EAC/B,uBAAuB,EACvB,6BAA6B,EAC7B,qBAAqB,EACrB,kCAAkC,EAClC,0BAA0B,EAC1B,+BAA+B,EAC/B,uBAAuB,EACvB,4CAA4C,EAC5C,2CAA2C,EAC3C,mCAAmC,EACnC,6CAA6C,EAC7C,4CAA4C,EAC5C,mDAAmD,EACnD,oDAAoD,EACpD,4CAA4C,EAC5C,kDAAkD,EAClD,0CAA0C,EAC1C,6CAA6C,EAC7C,qCAAqC,EACrC,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,gCAAgC,EAChC,wBAAwB,EACxB,oCAAoC,EACpC,4BAA4B,EAC5B,sCAAsC,EACtC,8BAA8B,EAC9B,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,qBAAqB,EACrB,iCAAiC,EACjC,sCAAsC,EACtC,oCAAoC,EACpC,kCAAkC,EAClC,0BAA0B,EAC1B,qCAAqC,EACrC,6BAA6B,EAC7B,kCAAkC,EAClC,0BAA0B,EAC1B,8CAA8C,EAC9C,8CAA8C,EAC9C,sCAAsC,EACtC,yCAAyC,EACzC,iCAAiC,EACjC,wCAAwC,EACxC,gCAAgC,EAChC,sCAAsC,EACtC,8BAA8B,EAC9B,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EACxC,gCAAgC,EAChC,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,oCAAoC,EACpC,4BAA4B,EAC5B,sCAAsC,EACtC,8BAA8B,EAC9B,wCAAwC,EACxC,6BAA6B,EAC7B,qBAAqB,EACrB,0BAA0B,EAC1B,kBAAkB,EAClB,iCAAiC,EACjC,2BAA2B,EAC3B,mBAAmB,EACnB,qCAAqC,EACrC,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,KAAK,+BAA+B,EACpC,qCAAqC,EACrC,KAAK,gCAAgC,EACrC,sCAAsC,EACtC,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,KAAK,kCAAkC,EACvC,wCAAwC,EACxC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,KAAK,uCAAuC,EAC5C,6CAA6C,EAC7C,KAAK,2BAA2B,EAChC,qCAAqC,EACrC,KAAK,+BAA+B,EACpC,qCAAqC,EACrC,iCAAiC,EACjC,yBAAyB,EACzB,KAAK,0BAA0B,EAC/B,sCAAsC,EACtC,oCAAoC,EACpC,KAAK,8BAA8B,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,2BAA2B,EAC3B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,iCAAiC,EACjC,KAAK,8BAA8B,EACnC,oCAAoC,EACpC,KAAK,oCAAoC,EACzC,0CAA0C,EAC1C,KAAK,iCAAiC,EACtC,uCAAuC,EACvC,gBAAgB,EAChB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,6BAA6B,EAClC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,uCAAuC,EAC5C,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACd,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,2BAA2B,EAC3B,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,KAAK,YAAY,EACjB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,KAAK,wBAAwB,EAC7B,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gCAAgC,EAChC,UAAU,EACV,KAAK,kBAAkB,EACvB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,MAAM,EACN,aAAa,EACb,IAAI,GACL,MAAM,YAAY,CAAC"}

package/script/auth/mod.js

@@ -9,11 +9,11 @@
  * - Services load their session key seed from `TRELLIS_SESSION_KEY_SEED`.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthDeploymentAuthorityAcceptMigrationSchema = exports.AuthCapabilityGroupsPutSchema = exports.AuthCapabilityGroupsPutResponseSchema = exports.AuthCapabilityGroupsListSchema = exports.AuthCapabilityGroupsListResponseSchema = exports.AuthCapabilityGroupsGetSchema = exports.AuthCapabilityGroupsGetResponseSchema = exports.AuthCapabilityGroupsDeleteSchema = exports.AuthCapabilityGroupsDeleteResponseSchema = exports.AuthCapabilitiesListSchema = exports.AuthCapabilitiesListResponseSchema = exports.ApprovalRecordViewSchema = exports.verifyProof = exports.createProof = exports.buildProofInput = exports.submitPortalApproval = exports.startAuthRequest = exports.signBytes = exports.portalRedirectLocation = exports.portalProviderLoginUrl = exports.portalFlowIdFromUrl = exports.natsConnectSigForIat = exports.loadSessionKey = exports.isRecoverableBrowserAuthError = exports.isBindSuccessResponse = exports.hasSessionKey = exports.getPublicSessionKey = exports.getOrCreateSessionKey = exports.generateSessionKey = exports.fetchPortalFlowState = exports.createRpcProof = exports.clearSessionKey = exports.classifyBrowserAuthError = exports.buildLoginUrl = exports.bindFlow = exports.waitForDeviceActivation = exports.verifyDeviceWaitSignature = exports.verifyDeviceConfirmationCode = exports.startDeviceActivationRequest = exports.signDeviceWaitRequest = exports.parseDeviceActivationPayload = exports.getDeviceConnectInfo = exports.encodeDeviceActivationPayload = exports.deriveDeviceQrMac = exports.deriveDeviceIdentity = exports.deriveDeviceConfirmationCode = exports.createDeviceNatsAuthToken = exports.createDeviceActivationClient = exports.buildDeviceWaitProofInput = exports.buildDeviceActivationPayload = void 0;
-exports.AuthDeviceUserAuthoritiesResolvedEventSchema = exports.AuthDeviceUserAuthoritiesRequestedEventSchema = exports.AuthDeviceUserAuthoritiesListSchema = exports.AuthDeviceUserAuthoritiesListResponseSchema = exports.AuthDeviceUserAuthoritiesApprovedEventSchema = exports.AuthDevicesRemoveSchema = exports.AuthDevicesRemoveResponseSchema = exports.AuthDevicesProvisionSchema = exports.AuthDevicesProvisionResponseSchema = exports.AuthDevicesListSchema = exports.AuthDevicesListResponseSchema = exports.AuthDevicesEnableSchema = exports.AuthDevicesEnableResponseSchema = exports.AuthDevicesDisableSchema = exports.AuthDevicesDisableResponseSchema = exports.AuthDevicesConnectInfoGetSchema = exports.AuthDevicesConnectInfoGetResponseSchema = exports.AuthDeploymentsRemoveSchema = exports.AuthDeploymentsRemoveResponseSchema = exports.AuthDeploymentsListSchema = exports.AuthDeploymentsListResponseSchema = exports.AuthDeploymentsEnableSchema = exports.AuthDeploymentsEnableResponseSchema = exports.AuthDeploymentsDisableSchema = exports.AuthDeploymentsDisableResponseSchema = exports.AuthDeploymentsCreateSchema = exports.AuthDeploymentsCreateResponseSchema = exports.AuthDeploymentSchema = exports.AuthDeploymentKindSchema = exports.AuthDeploymentAuthorityRejectSchema = exports.AuthDeploymentAuthorityRejectResponseSchema = exports.AuthDeploymentAuthorityReconcileSchema = exports.AuthDeploymentAuthorityReconcileResponseSchema = exports.AuthDeploymentAuthorityPlansListSchema = exports.AuthDeploymentAuthorityPlansListResponseSchema = exports.AuthDeploymentAuthorityPlansGetSchema = exports.AuthDeploymentAuthorityPlansGetResponseSchema = exports.AuthDeploymentAuthorityPlanSchema = exports.AuthDeploymentAuthorityPlanResponseSchema = exports.AuthDeploymentAuthorityListSchema = exports.AuthDeploymentAuthorityListResponseSchema = exports.AuthDeploymentAuthorityGrantOverridesResponseSchema = exports.AuthDeploymentAuthorityGrantOverridesRemoveSchema = exports.AuthDeploymentAuthorityGrantOverridesPutSchema = exports.AuthDeploymentAuthorityGrantOverridesListSchema = exports.AuthDeploymentAuthorityGrantOverridesListResponseSchema = exports.AuthDeploymentAuthorityGetSchema = exports.AuthDeploymentAuthorityGetResponseSchema = exports.AuthDeploymentAuthorityAcceptUpdateSchema = exports.AuthDeploymentAuthorityAcceptResponseSchema = void 0;
-exports.AuthUsersGetResponseSchema = exports.AuthUsersCreateSchema = exports.AuthUsersCreateResponseSchema = exports.AuthUsersAccountFlowCreateResponseSchema = exports.AuthUserIdentitiesUnlinkSchema = exports.AuthUserIdentitiesUnlinkResponseSchema = exports.AuthUserIdentitiesListSchema = exports.AuthUserIdentitiesListResponseSchema = exports.AuthSessionsMeSchema = exports.AuthSessionsMeResponseSchema = exports.AuthServiceInstancesRemoveSchema = exports.AuthServiceInstancesRemoveResponseSchema = exports.AuthServiceInstancesProvisionSchema = exports.AuthServiceInstancesProvisionResponseSchema = exports.AuthServiceInstancesListSchema = exports.AuthServiceInstancesListResponseSchema = exports.AuthServiceInstancesEnableSchema = exports.AuthServiceInstancesEnableResponseSchema = exports.AuthServiceInstancesDisableSchema = exports.AuthServiceInstancesDisableResponseSchema = exports.AuthResolveDeviceUserAuthoritiesSchema = exports.AuthResolveDeviceUserAuthoritiesResponseSchema = exports.AuthResolveDeviceUserAuthoritiesProgressSchema = exports.AuthRequestsValidateSchema = exports.AuthRequestsValidateResponseSchema = exports.AuthPortalsRoutesRemoveSchema = exports.AuthPortalsRoutesRemoveResponseSchema = exports.AuthPortalsRoutesPutSchema = exports.AuthPortalsRoutesPutResponseSchema = exports.AuthPortalsLoginSettingsUpdateSchema = exports.AuthPortalsLoginSettingsResponseSchema = exports.AuthPortalsLoginSettingsGetSchema = exports.AuthPortalsListSchema = exports.AuthPortalsListResponseSchema = exports.AuthPortalsGetSchema = exports.AuthPortalsGetResponseSchema = exports.AuthIdentityGrantsRevokeSchema = exports.AuthIdentityGrantsRevokeResponseSchema = exports.AuthIdentityGrantsListSchema = exports.AuthIdentityGrantsListResponseSchema = exports.AuthIdentitiesListSchema = exports.AuthIdentitiesListResponseSchema = exports.AuthenticatedDeviceSchema = exports.AuthDeviceUserAuthoritiesRevokeSchema = exports.AuthDeviceUserAuthoritiesRevokeResponseSchema = exports.AuthDeviceUserAuthoritiesReviewsListSchema = exports.AuthDeviceUserAuthoritiesReviewsListResponseSchema = exports.AuthDeviceUserAuthoritiesReviewsDecideSchema = exports.AuthDeviceUserAuthoritiesReviewsDecideResponseSchema = exports.AuthDeviceUserAuthoritiesReviewRequestedEventSchema = void 0;
-exports.MaterializedAuthorityNatsGrantSchema = exports.MaterializedAuthorityGrantsSchema = exports.MaterializedAuthorityCapabilityGrantSchema = exports.LoginPortalSummarySchema = exports.LoginPortalSettingsSchema = exports.LoginPortalRouteSchema = exports.LoginPortalRecordSchema = exports.ImplementationOfferSchema = exports.IdentityGrantViewSchema = exports.FlowRegistrationAvailabilitySchema = exports.DigestSchema = exports.DeviceSchema = exports.DeviceDeploymentSchema = exports.DeviceConnectInfoSchema = exports.DeviceActivationReviewSchema = exports.DeviceActivationRecordSchema = exports.DeploymentResourceBindingSchema = exports.DeploymentPortalRouteSchema = exports.DeploymentAuthorityUpdateSchema = exports.DeploymentAuthoritySurfaceSchema = exports.DeploymentAuthoritySurfaceNeedSchema = exports.DeploymentAuthoritySurfaceKindSchema = exports.DeploymentAuthoritySurfaceActionSchema = exports.DeploymentAuthoritySchema = exports.DeploymentAuthorityResourceSchema = exports.DeploymentAuthorityResourceNeedSchema = exports.DeploymentAuthorityResourceKindSchema = exports.DeploymentAuthorityReconciliationStatusSchema = exports.DeploymentAuthorityProposalSchema = exports.DeploymentAuthorityPlanSchema = exports.DeploymentAuthorityNeedsSchema = exports.DeploymentAuthorityMigrationSchema = exports.DeploymentAuthorityMaterializationSchema = exports.DeploymentAuthorityKindSchema = exports.DeploymentAuthorityGrantOverrideSchema = exports.DeploymentAuthorityContractNeedSchema = exports.DeploymentAuthorityCapabilitySchema = exports.DeploymentAuthorityCapabilityNeedSchema = exports.ContractAnalysisSummarySchema = exports.ContractAnalysisSchema = exports.CallerViewSchema = exports.AuthUsersUpdateSchema = exports.AuthUsersUpdateResponseSchema = exports.AuthUsersPasswordResetCreateSchema = exports.AuthUsersPasswordChangeSchema = exports.AuthUsersPasswordChangeResponseSchema = exports.AuthUsersListSchema = exports.AuthUsersListResponseSchema = exports.AuthUsersIdentityLinkCreateSchema = exports.AuthUsersGetSchema = void 0;
-exports.utf8 = exports.toArrayBuffer = exports.sha256 = exports.canonicalizeJsonValue = exports.base64urlEncode = exports.base64urlDecode = exports.trellisIdFromOriginId = exports.estimateMidpointClockOffsetMs = exports.correctedIatSeconds = exports.createAuth = exports.buildNatsConnectSignaturePayload = exports.UserParticipantKindSchema = exports.SentinelCredsSchema = exports.NatsAuthTokenV1Schema = exports.ContractApprovalSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.BindSuccessResponseSchema = exports.BindResponseSchema = exports.AuthStartResponseSchema = exports.AuthStartRequestSchema = exports.AuthStartFlowResponseSchema = exports.ApprovalDecisionSchema = exports.approvalCapabilityKeys = exports.WaitForDeviceActivationResponseSchema = exports.WaitForDeviceActivationRequestSchema = exports.UserViewSchema = exports.ServiceInstanceSchema = exports.ServiceDeploymentSchema = exports.PortalFlowStateSchema = exports.ParticipantKindSchema = exports.OpenObjectSchema = exports.MaterializedAuthoritySurfaceGrantSchema = exports.MaterializedAuthorityNatsGrantSourceSchema = void 0;
+exports.AuthCapabilityGroupsListSchema = exports.AuthCapabilityGroupsListResponseSchema = exports.AuthCapabilityGroupsGetSchema = exports.AuthCapabilityGroupsGetResponseSchema = exports.AuthCapabilityGroupsDeleteSchema = exports.AuthCapabilityGroupsDeleteResponseSchema = exports.AuthCapabilitiesListSchema = exports.AuthCapabilitiesListResponseSchema = exports.ApprovalRecordViewSchema = exports.verifyProof = exports.createProof = exports.buildProofInput = exports.submitPortalApproval = exports.startAuthRequest = exports.signBytes = exports.portalRedirectLocation = exports.portalProviderLoginUrl = exports.portalFlowIdFromUrl = exports.natsConnectSigForIat = exports.logoutSessionSig = exports.logoutSession = exports.loadSessionKey = exports.isRecoverableBrowserAuthError = exports.isBindSuccessResponse = exports.hasSessionKey = exports.getPublicSessionKey = exports.getOrCreateSessionKey = exports.generateSessionKey = exports.fetchPortalFlowState = exports.createRpcProof = exports.completeSessionLogout = exports.clearSessionKey = exports.classifyBrowserAuthError = exports.buildLoginUrl = exports.bindFlow = exports.waitForDeviceActivation = exports.verifyDeviceWaitSignature = exports.verifyDeviceConfirmationCode = exports.startDeviceActivationRequest = exports.signDeviceWaitRequest = exports.parseDeviceActivationPayload = exports.getDeviceConnectInfo = exports.encodeDeviceActivationPayload = exports.deriveDeviceQrMac = exports.deriveDeviceIdentity = exports.deriveDeviceConfirmationCode = exports.createDeviceNatsAuthToken = exports.createDeviceActivationClient = exports.buildDeviceWaitProofInput = exports.buildDeviceActivationPayload = void 0;
+exports.AuthDeviceUserAuthoritiesListResponseSchema = exports.AuthDeviceUserAuthoritiesApprovedEventSchema = exports.AuthDevicesRemoveSchema = exports.AuthDevicesRemoveResponseSchema = exports.AuthDevicesProvisionSchema = exports.AuthDevicesProvisionResponseSchema = exports.AuthDevicesListSchema = exports.AuthDevicesListResponseSchema = exports.AuthDevicesEnableSchema = exports.AuthDevicesEnableResponseSchema = exports.AuthDevicesDisableSchema = exports.AuthDevicesDisableResponseSchema = exports.AuthDevicesConnectInfoGetSchema = exports.AuthDevicesConnectInfoGetResponseSchema = exports.AuthDeploymentsRemoveSchema = exports.AuthDeploymentsRemoveResponseSchema = exports.AuthDeploymentsListSchema = exports.AuthDeploymentsListResponseSchema = exports.AuthDeploymentsEnableSchema = exports.AuthDeploymentsEnableResponseSchema = exports.AuthDeploymentsDisableSchema = exports.AuthDeploymentsDisableResponseSchema = exports.AuthDeploymentsCreateSchema = exports.AuthDeploymentsCreateResponseSchema = exports.AuthDeploymentSchema = exports.AuthDeploymentKindSchema = exports.AuthDeploymentAuthorityRejectSchema = exports.AuthDeploymentAuthorityRejectResponseSchema = exports.AuthDeploymentAuthorityReconcileSchema = exports.AuthDeploymentAuthorityReconcileResponseSchema = exports.AuthDeploymentAuthorityPlansListSchema = exports.AuthDeploymentAuthorityPlansListResponseSchema = exports.AuthDeploymentAuthorityPlansGetSchema = exports.AuthDeploymentAuthorityPlansGetResponseSchema = exports.AuthDeploymentAuthorityPlanSchema = exports.AuthDeploymentAuthorityPlanResponseSchema = exports.AuthDeploymentAuthorityListSchema = exports.AuthDeploymentAuthorityListResponseSchema = exports.AuthDeploymentAuthorityGrantOverridesResponseSchema = exports.AuthDeploymentAuthorityGrantOverridesRemoveSchema = exports.AuthDeploymentAuthorityGrantOverridesPutSchema = exports.AuthDeploymentAuthorityGrantOverridesListSchema = exports.AuthDeploymentAuthorityGrantOverridesListResponseSchema = exports.AuthDeploymentAuthorityGetSchema = exports.AuthDeploymentAuthorityGetResponseSchema = exports.AuthDeploymentAuthorityAcceptUpdateSchema = exports.AuthDeploymentAuthorityAcceptResponseSchema = exports.AuthDeploymentAuthorityAcceptMigrationSchema = exports.AuthCapabilityGroupsPutSchema = exports.AuthCapabilityGroupsPutResponseSchema = void 0;
+exports.AuthUsersAccountFlowCreateResponseSchema = exports.AuthUserIdentitiesUnlinkSchema = exports.AuthUserIdentitiesUnlinkResponseSchema = exports.AuthUserIdentitiesListSchema = exports.AuthUserIdentitiesListResponseSchema = exports.AuthSessionsMeSchema = exports.AuthSessionsMeResponseSchema = exports.AuthServiceInstancesRemoveSchema = exports.AuthServiceInstancesRemoveResponseSchema = exports.AuthServiceInstancesProvisionSchema = exports.AuthServiceInstancesProvisionResponseSchema = exports.AuthServiceInstancesListSchema = exports.AuthServiceInstancesListResponseSchema = exports.AuthServiceInstancesEnableSchema = exports.AuthServiceInstancesEnableResponseSchema = exports.AuthServiceInstancesDisableSchema = exports.AuthServiceInstancesDisableResponseSchema = exports.AuthResolveDeviceUserAuthoritiesSchema = exports.AuthResolveDeviceUserAuthoritiesResponseSchema = exports.AuthResolveDeviceUserAuthoritiesProgressSchema = exports.AuthRequestsValidateSchema = exports.AuthRequestsValidateResponseSchema = exports.AuthPortalsRoutesRemoveSchema = exports.AuthPortalsRoutesRemoveResponseSchema = exports.AuthPortalsRoutesPutSchema = exports.AuthPortalsRoutesPutResponseSchema = exports.AuthPortalsLoginSettingsUpdateSchema = exports.AuthPortalsLoginSettingsResponseSchema = exports.AuthPortalsLoginSettingsGetSchema = exports.AuthPortalsListSchema = exports.AuthPortalsListResponseSchema = exports.AuthPortalsGetSchema = exports.AuthPortalsGetResponseSchema = exports.AuthIdentityGrantsRevokeSchema = exports.AuthIdentityGrantsRevokeResponseSchema = exports.AuthIdentityGrantsListSchema = exports.AuthIdentityGrantsListResponseSchema = exports.AuthIdentitiesListSchema = exports.AuthIdentitiesListResponseSchema = exports.AuthenticatedDeviceSchema = exports.AuthDeviceUserAuthoritiesRevokeSchema = exports.AuthDeviceUserAuthoritiesRevokeResponseSchema = exports.AuthDeviceUserAuthoritiesReviewsListSchema = exports.AuthDeviceUserAuthoritiesReviewsListResponseSchema = exports.AuthDeviceUserAuthoritiesReviewsDecideSchema = exports.AuthDeviceUserAuthoritiesReviewsDecideResponseSchema = exports.AuthDeviceUserAuthoritiesReviewRequestedEventSchema = exports.AuthDeviceUserAuthoritiesResolvedEventSchema = exports.AuthDeviceUserAuthoritiesRequestedEventSchema = exports.AuthDeviceUserAuthoritiesListSchema = void 0;
+exports.LoginPortalSummarySchema = exports.LoginPortalSettingsSchema = exports.LoginPortalRouteSchema = exports.LoginPortalRecordSchema = exports.ImplementationOfferSchema = exports.IdentityGrantViewSchema = exports.FlowRegistrationAvailabilitySchema = exports.DigestSchema = exports.DeviceSchema = exports.DeviceDeploymentSchema = exports.DeviceConnectInfoSchema = exports.DeviceActivationReviewSchema = exports.DeviceActivationRecordSchema = exports.DeploymentResourceBindingSchema = exports.DeploymentPortalRouteSchema = exports.DeploymentAuthorityUpdateSchema = exports.DeploymentAuthoritySurfaceSchema = exports.DeploymentAuthoritySurfaceNeedSchema = exports.DeploymentAuthoritySurfaceKindSchema = exports.DeploymentAuthoritySurfaceActionSchema = exports.DeploymentAuthoritySchema = exports.DeploymentAuthorityResourceSchema = exports.DeploymentAuthorityResourceNeedSchema = exports.DeploymentAuthorityResourceKindSchema = exports.DeploymentAuthorityReconciliationStatusSchema = exports.DeploymentAuthorityProposalSchema = exports.DeploymentAuthorityPlanSchema = exports.DeploymentAuthorityNeedsSchema = exports.DeploymentAuthorityMigrationSchema = exports.DeploymentAuthorityMaterializationSchema = exports.DeploymentAuthorityKindSchema = exports.DeploymentAuthorityGrantOverrideSchema = exports.DeploymentAuthorityContractNeedSchema = exports.DeploymentAuthorityCapabilitySchema = exports.DeploymentAuthorityCapabilityNeedSchema = exports.ContractAnalysisSummarySchema = exports.ContractAnalysisSchema = exports.CallerViewSchema = exports.AuthUsersUpdateSchema = exports.AuthUsersUpdateResponseSchema = exports.AuthUsersPasswordResetCreateSchema = exports.AuthUsersPasswordChangeSchema = exports.AuthUsersPasswordChangeResponseSchema = exports.AuthUsersListSchema = exports.AuthUsersListResponseSchema = exports.AuthUsersIdentityLinkCreateSchema = exports.AuthUsersGetSchema = exports.AuthUsersGetResponseSchema = exports.AuthUsersCreateSchema = exports.AuthUsersCreateResponseSchema = void 0;
+exports.utf8 = exports.toArrayBuffer = exports.sha256 = exports.canonicalizeJsonValue = exports.base64urlEncode = exports.base64urlDecode = exports.trellisIdFromOriginId = exports.estimateMidpointClockOffsetMs = exports.correctedIatSeconds = exports.createAuth = exports.buildNatsConnectSignaturePayload = exports.UserParticipantKindSchema = exports.SentinelCredsSchema = exports.NatsAuthTokenV1Schema = exports.ContractApprovalSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.buildLogoutSignaturePayload = exports.BindSuccessResponseSchema = exports.BindResponseSchema = exports.AuthStartResponseSchema = exports.AuthStartRequestSchema = exports.AuthStartFlowResponseSchema = exports.AuthLogoutResponseSchema = exports.AuthLogoutResponseModeSchema = exports.AuthLogoutRequestSchema = exports.ApprovalDecisionSchema = exports.approvalCapabilityKeys = exports.WaitForDeviceActivationResponseSchema = exports.WaitForDeviceActivationRequestSchema = exports.UserViewSchema = exports.ServiceInstanceSchema = exports.ServiceDeploymentSchema = exports.PortalFlowStateSchema = exports.ParticipantKindSchema = exports.OpenObjectSchema = exports.MaterializedAuthoritySurfaceGrantSchema = exports.MaterializedAuthorityNatsGrantSourceSchema = exports.MaterializedAuthorityNatsGrantSchema = exports.MaterializedAuthorityGrantsSchema = exports.MaterializedAuthorityCapabilityGrantSchema = void 0;
 var device_activation_js_1 = require("./device_activation.js");
 Object.defineProperty(exports, "buildDeviceActivationPayload", { enumerable: true, get: function () { return device_activation_js_1.buildDeviceActivationPayload; } });
 Object.defineProperty(exports, "buildDeviceWaitProofInput", { enumerable: true, get: function () { return device_activation_js_1.buildDeviceWaitProofInput; } });
@@ -35,6 +35,7 @@ Object.defineProperty(exports, "bindFlow", { enumerable: true, get: function ()
 Object.defineProperty(exports, "buildLoginUrl", { enumerable: true, get: function () { return browser_js_1.buildLoginUrl; } });
 Object.defineProperty(exports, "classifyBrowserAuthError", { enumerable: true, get: function () { return browser_js_1.classifyBrowserAuthError; } });
 Object.defineProperty(exports, "clearSessionKey", { enumerable: true, get: function () { return browser_js_1.clearSessionKey; } });
+Object.defineProperty(exports, "completeSessionLogout", { enumerable: true, get: function () { return browser_js_1.completeSessionLogout; } });
 Object.defineProperty(exports, "createRpcProof", { enumerable: true, get: function () { return browser_js_1.createRpcProof; } });
 Object.defineProperty(exports, "fetchPortalFlowState", { enumerable: true, get: function () { return browser_js_1.fetchPortalFlowState; } });
 Object.defineProperty(exports, "generateSessionKey", { enumerable: true, get: function () { return browser_js_1.generateSessionKey; } });
@@ -44,6 +45,8 @@ Object.defineProperty(exports, "hasSessionKey", { enumerable: true, get: functio
 Object.defineProperty(exports, "isBindSuccessResponse", { enumerable: true, get: function () { return browser_js_1.isBindSuccessResponse; } });
 Object.defineProperty(exports, "isRecoverableBrowserAuthError", { enumerable: true, get: function () { return browser_js_1.isRecoverableBrowserAuthError; } });
 Object.defineProperty(exports, "loadSessionKey", { enumerable: true, get: function () { return browser_js_1.loadSessionKey; } });
+Object.defineProperty(exports, "logoutSession", { enumerable: true, get: function () { return browser_js_1.logoutSession; } });
+Object.defineProperty(exports, "logoutSessionSig", { enumerable: true, get: function () { return browser_js_1.logoutSessionSig; } });
 Object.defineProperty(exports, "natsConnectSigForIat", { enumerable: true, get: function () { return browser_js_1.natsConnectSigForIat; } });
 Object.defineProperty(exports, "portalFlowIdFromUrl", { enumerable: true, get: function () { return browser_js_1.portalFlowIdFromUrl; } });
 Object.defineProperty(exports, "portalProviderLoginUrl", { enumerable: true, get: function () { return browser_js_1.portalProviderLoginUrl; } });
@@ -231,11 +234,15 @@ Object.defineProperty(exports, "WaitForDeviceActivationResponseSchema", { enumer
 var schemas_js_1 = require("./schemas.js");
 Object.defineProperty(exports, "approvalCapabilityKeys", { enumerable: true, get: function () { return schemas_js_1.approvalCapabilityKeys; } });
 Object.defineProperty(exports, "ApprovalDecisionSchema", { enumerable: true, get: function () { return schemas_js_1.ApprovalDecisionSchema; } });
+Object.defineProperty(exports, "AuthLogoutRequestSchema", { enumerable: true, get: function () { return schemas_js_1.AuthLogoutRequestSchema; } });
+Object.defineProperty(exports, "AuthLogoutResponseModeSchema", { enumerable: true, get: function () { return schemas_js_1.AuthLogoutResponseModeSchema; } });
+Object.defineProperty(exports, "AuthLogoutResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthLogoutResponseSchema; } });
 Object.defineProperty(exports, "AuthStartFlowResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartFlowResponseSchema; } });
 Object.defineProperty(exports, "AuthStartRequestSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartRequestSchema; } });
 Object.defineProperty(exports, "AuthStartResponseSchema", { enumerable: true, get: function () { return schemas_js_1.AuthStartResponseSchema; } });
 Object.defineProperty(exports, "BindResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindResponseSchema; } });
 Object.defineProperty(exports, "BindSuccessResponseSchema", { enumerable: true, get: function () { return schemas_js_1.BindSuccessResponseSchema; } });
+Object.defineProperty(exports, "buildLogoutSignaturePayload", { enumerable: true, get: function () { return schemas_js_1.buildLogoutSignaturePayload; } });
 Object.defineProperty(exports, "ClientTransportEndpointsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportEndpointsSchema; } });
 Object.defineProperty(exports, "ClientTransportsSchema", { enumerable: true, get: function () { return schemas_js_1.ClientTransportsSchema; } });
 Object.defineProperty(exports, "ContractApprovalSchema", { enumerable: true, get: function () { return schemas_js_1.ContractApprovalSchema; } });

package/script/auth/schemas.d.ts

@@ -1,5 +1,16 @@
 import type { StaticDecode } from "typebox";
 import { Type } from "typebox";
+export declare const AuthLogoutResponseModeSchema: Type.TUnion<[Type.TLiteral<"json">, Type.TLiteral<"redirect">]>;
+export type AuthLogoutResponseMode = StaticDecode<typeof AuthLogoutResponseModeSchema>;
+export type LogoutSignaturePayloadInput = {
+    iat: number;
+    providerLogout?: boolean;
+    federatedProviderLogout?: boolean;
+    returnTo?: string;
+    responseMode?: AuthLogoutResponseMode;
+};
+/** Builds the canonical value signed for POST-based HTTP logout requests. */
+export declare function buildLogoutSignaturePayload(input: LogoutSignaturePayloadInput): string;
 export declare const ContractDigestSchema: Type.TString;
 export declare const SentinelCredsSchema: Type.TObject<{
     jwt: Type.TString;
@@ -123,6 +134,21 @@ export declare const AuthStartRequestSchema: Type.TObject<{
     contract: Type.TOptional<Type.TObject<{}>>;
     context: Type.TOptional<Type.TObject<{}>>;
 }>;
+export declare const AuthLogoutRequestSchema: Type.TObject<{
+    sessionKey: Type.TString;
+    iat: Type.TInteger;
+    sig: Type.TString;
+    providerLogout: Type.TOptional<Type.TBoolean>;
+    federatedProviderLogout: Type.TOptional<Type.TBoolean>;
+    returnTo: Type.TOptional<Type.TString>;
+    responseMode: Type.TOptional<Type.TUnion<[Type.TLiteral<"json">, Type.TLiteral<"redirect">]>>;
+}>;
+export declare const AuthLogoutResponseSchema: Type.TObject<{
+    success: Type.TLiteral<true>;
+    redirectTo: Type.TOptional<Type.TString>;
+}>;
+export type AuthLogoutRequest = StaticDecode<typeof AuthLogoutRequestSchema>;
+export type AuthLogoutResponse = StaticDecode<typeof AuthLogoutResponseSchema>;
 export declare const AuthStartFlowResponseSchema: Type.TObject<{
     status: Type.TLiteral<"flow_started">;
     flowId: Type.TString;

package/script/auth/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/auth/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAU/B,eAAO,MAAM,oBAAoB,cAE/B,CAAC;AAIH,eAAO,MAAM,mBAAmB;;;EAG9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,eAAO,MAAM,8BAA8B;;EAEzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,YAAY,CACjD,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;EAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,mEAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,yBAAyB,6DAGpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAC5C,OAAO,yBAAyB,CACjC,CAAC;AAEF,eAAO,MAAM,gCAAgC;;;;EAI3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,YAAY,CACnD,OAAO,gCAAgC,CACxC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;;;;EAOjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAE3E;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;EAMpC,CAAC;AAEH,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;EAKrD,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAC5C,OAAO,yBAAyB,CACjC,CAAC;AACF,MAAM,MAAM,oCAAoC,GAAG,YAAY,CAC7D,OAAO,0CAA0C,CAClD,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;EAQjC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;EAItC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;IAGlC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC3E,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAC9C,OAAO,2BAA2B,CACnC,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE7E,eAAO,MAAM,qBAAqB;;;;;;EAMhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/auth/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAW/B,eAAO,MAAM,4BAA4B,iEAGvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,YAAY,CAC/C,OAAO,4BAA4B,CACpC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,CAAC;AAEF,6EAA6E;AAC7E,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,2BAA2B,GACjC,MAAM,CAeR;AAED,eAAO,MAAM,oBAAoB,cAE/B,CAAC;AAIH,eAAO,MAAM,mBAAmB;;;EAG9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,eAAO,MAAM,8BAA8B;;EAEzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,YAAY,CACjD,OAAO,8BAA8B,CACtC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;EAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,mEAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,yBAAyB,6DAGpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAC5C,OAAO,yBAAyB,CACjC,CAAC;AAEF,eAAO,MAAM,gCAAgC;;;;EAI3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,YAAY,CACnD,OAAO,gCAAgC,CACxC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;;;;EAOjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAE3E;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;EAMpC,CAAC;AAEH,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;EAKrD,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAC5C,OAAO,yBAAyB,CACjC,CAAC;AACF,MAAM,MAAM,oCAAoC,GAAG,YAAY,CAC7D,OAAO,0CAA0C,CAClD,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;EAQjC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;EAQF,CAAC;AAEnC,eAAO,MAAM,wBAAwB;;;EAKF,CAAC;AAEpC,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC7E,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE/E,eAAO,MAAM,2BAA2B;;;;EAItC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;IAGlC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC3E,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAC9C,OAAO,2BAA2B,CACnC,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE7E,eAAO,MAAM,qBAAqB;;;;;;EAMhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/script/auth/schemas.js

@@ -1,14 +1,37 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NatsAuthTokenV1Schema = exports.AuthStartResponseSchema = exports.AuthStartFlowResponseSchema = exports.AuthStartRequestSchema = exports.BindResponseSchema = exports.BindInsufficientCapabilitiesResponseSchema = exports.BindSuccessResponseSchema = exports.ContractApprovalSchema = exports.ContractApprovalCapabilitySchema = exports.UserParticipantKindSchema = exports.ApprovalDecisionSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.SentinelCredsSchema = exports.ContractDigestSchema = void 0;
+exports.NatsAuthTokenV1Schema = exports.AuthStartResponseSchema = exports.AuthStartFlowResponseSchema = exports.AuthLogoutResponseSchema = exports.AuthLogoutRequestSchema = exports.AuthStartRequestSchema = exports.BindResponseSchema = exports.BindInsufficientCapabilitiesResponseSchema = exports.BindSuccessResponseSchema = exports.ContractApprovalSchema = exports.ContractApprovalCapabilitySchema = exports.UserParticipantKindSchema = exports.ApprovalDecisionSchema = exports.ClientTransportsSchema = exports.ClientTransportEndpointsSchema = exports.SentinelCredsSchema = exports.ContractDigestSchema = exports.AuthLogoutResponseModeSchema = void 0;
+exports.buildLogoutSignaturePayload = buildLogoutSignaturePayload;
 exports.approvalCapabilityKeys = approvalCapabilityKeys;
 const typebox_1 = require("typebox");
+const utils_js_1 = require("./utils.js");
 const SessionKeySchema = typebox_1.Type.String({
     pattern: "^[A-Za-z0-9_-]{43}$",
 });
 const SignatureSchema = typebox_1.Type.String({
     pattern: "^[A-Za-z0-9_-]{86}$",
 });
+exports.AuthLogoutResponseModeSchema = typebox_1.Type.Union([
+    typebox_1.Type.Literal("json"),
+    typebox_1.Type.Literal("redirect"),
+]);
+/** Builds the canonical value signed for POST-based HTTP logout requests. */
+function buildLogoutSignaturePayload(input) {
+    const payload = { iat: input.iat };
+    if (input.providerLogout !== undefined) {
+        payload.providerLogout = input.providerLogout;
+    }
+    if (input.federatedProviderLogout !== undefined) {
+        payload.federatedProviderLogout = input.federatedProviderLogout;
+    }
+    if (input.returnTo !== undefined) {
+        payload.returnTo = input.returnTo;
+    }
+    if (input.responseMode !== undefined) {
+        payload.responseMode = input.responseMode;
+    }
+    return (0, utils_js_1.canonicalizeJsonValue)(payload);
+}
 exports.ContractDigestSchema = typebox_1.Type.String({
     pattern: "^[A-Za-z0-9_-]+$",
 });
@@ -75,6 +98,19 @@ exports.AuthStartRequestSchema = typebox_1.Type.Object({
     contract: typebox_1.Type.Optional(OpenObjectSchema),
     context: typebox_1.Type.Optional(OpenObjectSchema),
 });
+exports.AuthLogoutRequestSchema = typebox_1.Type.Object({
+    sessionKey: SessionKeySchema,
+    iat: typebox_1.Type.Integer(),
+    sig: SignatureSchema,
+    providerLogout: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
+    federatedProviderLogout: typebox_1.Type.Optional(typebox_1.Type.Boolean()),
+    returnTo: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    responseMode: typebox_1.Type.Optional(exports.AuthLogoutResponseModeSchema),
+}, { additionalProperties: true });
+exports.AuthLogoutResponseSchema = typebox_1.Type.Object({
+    success: typebox_1.Type.Literal(true),
+    redirectTo: typebox_1.Type.Optional(typebox_1.Type.String({ format: "uri", pattern: "^https?://", minLength: 1 })),
+}, { additionalProperties: false });
 exports.AuthStartFlowResponseSchema = typebox_1.Type.Object({
     status: typebox_1.Type.Literal("flow_started"),
     flowId: typebox_1.Type.String({ minLength: 1 }),

package/script/browser.d.ts

@@ -11,7 +11,7 @@ export { TrellisConnection } from "./connection.js";
 export type { TrellisConnectionStatus } from "./connection.js";
 export { defineError } from "./contract_support/mod.js";
 export { buildCursorPage, buildPageResponse, CursorPageInfoSchema, CursorPageSchema, CursorQuerySchema, normalizeCursorQuery, normalizePageQuery, PageRequestSchema, PageResponseSchema, } from "./contract_support/mod.js";
-export type { CursorPage, CursorPageInfo, CursorQuery, CursorQueryOptions, ErrorClass, InferRuntimeRpcError, NormalizedCursorQuery, PageRequest, PageResponse, RpcErrorClass, RuntimeRpcErrorDesc, SerializableErrorData, } from "./contract_support/mod.js";
+export type { CursorPage, CursorPageInfo, CursorPageResponseSchema, CursorQuery, CursorQueryOptions, ErrorClass, InferRuntimeRpcError, NormalizedCursorQuery, PageRequest, PageResponse, RpcErrorClass, RuntimeRpcErrorDesc, SerializableErrorData, } from "./contract_support/mod.js";
 export { defineAgentContract, defineAppContract, defineDeviceContract, defineServiceContract, } from "./contract.js";
 export type { ContractApiViews, ContractDependencyUse, ContractModule, ContractUseFn, DefineContractInput, EmptyApi, SdkContractModule, TrellisApiLike, TrellisContractV1, UseSpec, } from "./contract.js";
 export { AsyncResult, BaseError, err, isErr, isOk, ok, Result, } from "@qlever-llc/result";

package/script/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,qBAAqB,CAAC;AAG7B,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,eAAe,EACf,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,qBAAqB,EACrB,6BAA6B,EAC7B,cAAc,EACd,SAAS,GACV,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iCAAiC,EACjC,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,MAAM,EACN,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,UAAU,EACV,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,SAAS,EACT,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,MAAM,GACP,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5E,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,SAAS,EACT,OAAO,EACP,6BAA6B,EAC7B,sBAAsB,EACtB,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,YAAY,EACV,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EACV,QAAQ,EACR,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,oCAAoC,EACpC,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,oBAAoB,EACpB,SAAS,EACT,SAAS,EACT,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,6BAA6B,EAC7B,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,qBAAqB,CAAC;AAG7B,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,eAAe,EACf,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,qBAAqB,EACrB,6BAA6B,EAC7B,cAAc,EACd,SAAS,GACV,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iCAAiC,EACjC,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,MAAM,EACN,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,UAAU,EACV,cAAc,EACd,wBAAwB,EACxB,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,SAAS,EACT,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,MAAM,GACP,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5E,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,SAAS,EACT,OAAO,EACP,6BAA6B,EAC7B,sBAAsB,EACtB,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,YAAY,EACV,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EACV,QAAQ,EACR,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,oCAAoC,EACpC,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,oBAAoB,EACpB,SAAS,EACT,SAAS,EACT,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,6BAA6B,EAC7B,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/script/contract_support/mod.d.ts

@@ -11,7 +11,7 @@ import { canonicalizeJson, digestJson, isJsonValue, type JsonValue } from "./can
 import { type EventDesc, type FeedDesc, type InferRuntimeRpcError, type InferSchemaType, type OperationDesc, type RPCDesc, type RpcErrorClass, type RuntimeRpcErrorDesc, type Schema, schema, type SchemaLike, type SerializableErrorData, type TrellisAPI, unwrapSchema } from "./runtime.js";
 import { type SubjectParam } from "./schema_pointers.js";
 import { type ContractEventConsumers } from "./protocol.js";
-export { buildCursorPage, buildPageResponse, type ContractEventConsumerGroup, ContractEventConsumerGroupSchema, type ContractEventConsumers, type ContractEventConsumerSelf, ContractEventConsumerSelfSchema, ContractEventConsumersSchema, type ContractEventConsumerUses, ContractEventConsumerUsesSchema, ContractJobQueueSchema, ContractJobsSchema, ContractKvResourceSchema, ContractResourceBindingsSchema, ContractResourcesSchema, ContractSchemaRefSchema, ContractStateSchema, ContractStateStoreSchema, ContractStoreResourceSchema, type CursorPage, type CursorPageInfo, CursorPageInfoSchema, CursorPageSchema, type CursorQuery, type CursorQueryOptions, CursorQuerySchema, type EventConsumerResourceBinding, EventConsumerResourceBindingSchema, type EventHeader, EventHeaderSchema, type InstalledServiceContract, InstalledServiceContractSchema, IsoDateSchema, type JobsQueueBinding, JobsQueueBindingSchema, type JobsResourceBinding, JobsResourceBindingSchema, type KvResourceBinding, KvResourceBindingSchema, normalizeCursorQuery, type NormalizedCursorQuery, normalizePageQuery, type PageRequest, PageRequestSchema, type PageResponse, PageResponseSchema, type StoreResourceBinding, StoreResourceBindingSchema, } from "./protocol.js";
+export { buildCursorPage, buildPageResponse, type ContractEventConsumerGroup, ContractEventConsumerGroupSchema, type ContractEventConsumers, type ContractEventConsumerSelf, ContractEventConsumerSelfSchema, ContractEventConsumersSchema, type ContractEventConsumerUses, ContractEventConsumerUsesSchema, ContractJobQueueSchema, ContractJobsSchema, ContractKvResourceSchema, ContractResourceBindingsSchema, ContractResourcesSchema, ContractSchemaRefSchema, ContractStateSchema, ContractStateStoreSchema, ContractStoreResourceSchema, type CursorPage, type CursorPageInfo, CursorPageInfoSchema, type CursorPageResponseSchema, CursorPageSchema, type CursorQuery, type CursorQueryOptions, CursorQuerySchema, type EventConsumerResourceBinding, EventConsumerResourceBindingSchema, type EventHeader, EventHeaderSchema, type InstalledServiceContract, InstalledServiceContractSchema, IsoDateSchema, type JobsQueueBinding, JobsQueueBindingSchema, type JobsResourceBinding, JobsResourceBindingSchema, type KvResourceBinding, KvResourceBindingSchema, normalizeCursorQuery, type NormalizedCursorQuery, normalizePageQuery, type PageRequest, PageRequestSchema, type PageResponse, PageResponseSchema, type StoreResourceBinding, StoreResourceBindingSchema, } from "./protocol.js";
 export { assertDataPointersExistAndAreTokenable, getSubschemaAtDataPointer, } from "./schema_pointers.js";
 export declare const CONTRACT_FORMAT_V1: "trellis.contract.v1";
 export declare const CATALOG_FORMAT_V1: "trellis.catalog.v1";