@qlever-llc/trellis 0.10.3-rc.2 → 0.10.3

package/esm/npm/src/auth/browser/portal.js

@@ -1,37 +0,0 @@
-import { PortalFlowStateSchema } from "../protocol.js";
-import { Value } from "typebox/value";
-function authBaseUrl(config) {
-    return config.authUrl.replace(/\/$/, "");
-}
-export function portalFlowIdFromUrl(url) {
-    return url.searchParams.get("flowId");
-}
-export async function fetchPortalFlowState(config, flowId) {
-    const response = await fetch(`${authBaseUrl(config)}/auth/flow/${encodeURIComponent(flowId)}`);
-    if (!response.ok) {
-        throw new Error(`Failed to load portal flow (${response.status})`);
-    }
-    return Value.Parse(PortalFlowStateSchema, await response.json());
-}
-export function portalProviderLoginUrl(config, providerId, flowId) {
-    const base = `${authBaseUrl(config)}/auth/login/${encodeURIComponent(providerId)}`;
-    return `${base}?flowId=${encodeURIComponent(flowId)}`;
-}
-export async function submitPortalApproval(config, flowId, decision) {
-    const response = await fetch(`${authBaseUrl(config)}/auth/flow/${encodeURIComponent(flowId)}/approval`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ approved: decision === "approved" }),
-    });
-    if (!response.ok) {
-        throw new Error(`Approval request failed (${response.status})`);
-    }
-    return Value.Parse(PortalFlowStateSchema, await response.json());
-}
-export function portalRedirectLocation(state) {
-    if (state?.status === "redirect")
-        return state.location;
-    if (state?.status === "approval_denied")
-        return state.returnLocation ?? null;
-    return null;
-}

package/esm/npm/src/auth/browser/session.d.ts

@@ -1,29 +0,0 @@
-export type SessionKeyHandle = {
-    privateKey: CryptoKey;
-    publicKey: CryptoKey;
-    publicKeyRaw: Uint8Array;
-    sessionKey: string;
-    persistence?: SessionKeyPersistenceMode;
-    expiresAt?: number;
-};
-export type SessionKeyPersistenceMode = "temporary" | "remembered";
-export type SessionKeyOptions = {
-    /** Defaults to remembered IndexedDB storage. */
-    persistence?: SessionKeyPersistenceMode;
-    /** Expiry for remembered keys, as epoch milliseconds or a Date. */
-    expiresAt?: number | Date;
-    /** Relative expiry for remembered keys. Ignored when expiresAt is set. */
-    ttlMs?: number;
-};
-export declare function generateSessionKey(options?: SessionKeyOptions): Promise<SessionKeyHandle>;
-export declare function loadSessionKey(options?: Pick<SessionKeyOptions, "persistence">): Promise<SessionKeyHandle | null>;
-export declare function getOrCreateSessionKey(options?: SessionKeyOptions): Promise<SessionKeyHandle>;
-export declare function signBytes(handle: SessionKeyHandle, data: Uint8Array): Promise<Uint8Array>;
-export declare function getPublicSessionKey(handle: SessionKeyHandle): string;
-export declare function oauthInitSig(handle: SessionKeyHandle, redirectTo: string, context?: unknown, provider?: string, contract?: Record<string, unknown> | string): Promise<string>;
-export declare function bindFlowSig(handle: SessionKeyHandle, flowId: string): Promise<string>;
-export declare function natsConnectSigForIat(handle: SessionKeyHandle, iat: number, contractDigest: string): Promise<string>;
-export declare function createRpcProof(handle: SessionKeyHandle, subject: string, payload: Uint8Array, requestId: string, iat: number): Promise<string>;
-export declare function clearSessionKey(options?: Pick<SessionKeyOptions, "persistence">): Promise<void>;
-export declare function hasSessionKey(options?: Pick<SessionKeyOptions, "persistence">): Promise<boolean>;
-//# sourceMappingURL=session.d.ts.map

package/esm/npm/src/auth/browser/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/session.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG,YAAY,CAAC;AAEnE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gDAAgD;IAChD,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAWF,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED,wBAAsB,cAAc,CAClC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEpE;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAC1C,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,cAAc,CAClC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,eAAe,CACnC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,aAAa,CACjC,OAAO,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,GACnD,OAAO,CAAC,OAAO,CAAC,CAIlB"}

package/esm/npm/src/auth/browser/session.js

@@ -1,109 +0,0 @@
-import { base64urlEncode, canonicalizeJsonValue, sha256, toArrayBuffer, utf8, } from "../utils.js";
-import { createProof } from "../proof.js";
-import { buildNatsConnectSignaturePayload } from "../session_auth.js";
-import { deleteKeyPair, hasKeyPair, loadKeyPair, storeKeyPair, } from "./storage.js";
-let temporarySessionKey = null;
-function resolveExpiresAt(options) {
-    if (options.expiresAt instanceof Date)
-        return options.expiresAt.getTime();
-    if (typeof options.expiresAt === "number")
-        return options.expiresAt;
-    if (typeof options.ttlMs === "number")
-        return Date.now() + options.ttlMs;
-    return undefined;
-}
-export async function generateSessionKey(options = {}) {
-    const persistence = options.persistence ?? "remembered";
-    const expiresAt = resolveExpiresAt(options);
-    const keyPair = await crypto.subtle.generateKey({ name: "Ed25519" }, false, ["sign", "verify"]);
-    const publicKeyRaw = new Uint8Array(await crypto.subtle.exportKey("raw", keyPair.publicKey));
-    const sessionKey = base64urlEncode(publicKeyRaw);
-    const handle = {
-        privateKey: keyPair.privateKey,
-        publicKey: keyPair.publicKey,
-        publicKeyRaw,
-        sessionKey,
-        persistence,
-        ...(expiresAt === undefined ? {} : { expiresAt }),
-    };
-    if (persistence === "temporary") {
-        temporarySessionKey = handle;
-    }
-    else {
-        await storeKeyPair(keyPair, publicKeyRaw, { expiresAt });
-    }
-    return handle;
-}
-export async function loadSessionKey(options = {}) {
-    const persistence = options.persistence ?? "remembered";
-    if (persistence === "temporary")
-        return temporarySessionKey;
-    const stored = await loadKeyPair();
-    if (!stored)
-        return null;
-    return {
-        privateKey: stored.privateKey,
-        publicKey: stored.publicKey,
-        publicKeyRaw: stored.publicKeyRaw,
-        sessionKey: base64urlEncode(stored.publicKeyRaw),
-        persistence: "remembered",
-        ...(stored.expiresAt === undefined ? {} : { expiresAt: stored.expiresAt }),
-    };
-}
-export async function getOrCreateSessionKey(options = {}) {
-    const existing = await loadSessionKey(options);
-    if (existing)
-        return existing;
-    return await generateSessionKey(options);
-}
-export async function signBytes(handle, data) {
-    const sig = await crypto.subtle.sign({ name: "Ed25519" }, handle.privateKey, toArrayBuffer(data));
-    return new Uint8Array(sig);
-}
-export function getPublicSessionKey(handle) {
-    return handle.sessionKey;
-}
-export async function oauthInitSig(handle, redirectTo, context, provider, contract) {
-    const canonicalContext = canonicalizeJsonValue(context ?? null);
-    const payload = contract === undefined
-        ? `${redirectTo}:${canonicalContext}`
-        : `${redirectTo}:${provider ?? ""}:${canonicalizeJsonValue(contract)}:${canonicalContext}`;
-    const digest = await sha256(utf8(`oauth-init:${payload}`));
-    const sig = await signBytes(handle, digest);
-    return base64urlEncode(sig);
-}
-export async function bindFlowSig(handle, flowId) {
-    const digest = await sha256(utf8(`bind-flow:${flowId}`));
-    const sig = await signBytes(handle, digest);
-    return base64urlEncode(sig);
-}
-export async function natsConnectSigForIat(handle, iat, contractDigest) {
-    const digest = await sha256(utf8(`nats-connect:${buildNatsConnectSignaturePayload(iat, contractDigest)}`));
-    const sig = await signBytes(handle, digest);
-    return base64urlEncode(sig);
-}
-export async function createRpcProof(handle, subject, payload, requestId, iat) {
-    const payloadHash = await sha256(payload);
-    return await createProof(handle.privateKey, {
-        sessionKey: handle.sessionKey,
-        subject,
-        payloadHash,
-        iat,
-        requestId,
-    });
-}
-export async function clearSessionKey(options = {}) {
-    const persistence = options.persistence;
-    if (persistence === undefined || persistence === "temporary") {
-        temporarySessionKey = null;
-    }
-    if (persistence === undefined || persistence === "remembered") {
-        await deleteKeyPair();
-    }
-}
-export async function hasSessionKey(options = {}) {
-    const persistence = options.persistence ?? "remembered";
-    if (persistence === "temporary")
-        return temporarySessionKey !== null;
-    return await hasKeyPair();
-}

package/esm/npm/src/auth/browser/storage.d.ts

@@ -1,17 +0,0 @@
-export type StoredKeyPair = {
-    id: string;
-    privateKey: CryptoKey;
-    publicKey: CryptoKey;
-    publicKeyRaw: Uint8Array;
-    createdAt: number;
-    persistence?: "remembered";
-    expiresAt?: number;
-};
-export type StoredKeyPairOptions = {
-    expiresAt?: number;
-};
-export declare function storeKeyPair(keyPair: CryptoKeyPair, publicKeyRaw: Uint8Array, options?: StoredKeyPairOptions): Promise<void>;
-export declare function loadKeyPair(): Promise<StoredKeyPair | null>;
-export declare function deleteKeyPair(): Promise<void>;
-export declare function hasKeyPair(): Promise<boolean>;
-//# sourceMappingURL=storage.d.ts.map

package/esm/npm/src/auth/browser/storage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../../src/auth/browser/storage.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAsB,YAAY,CAChC,OAAO,EAAE,aAAa,EACtB,YAAY,EAAE,UAAU,EACxB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAoBjE;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAYnD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAGnD"}

package/esm/npm/src/auth/browser/storage.js

@@ -1,73 +0,0 @@
-const DB_NAME = "trellis-auth";
-const DB_VERSION = 1;
-const STORE_NAME = "keys";
-const KEY_ID = "trellis-session-key";
-function openDB() {
-    return new Promise((resolve, reject) => {
-        const request = indexedDB.open(DB_NAME, DB_VERSION);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => resolve(request.result);
-        request.onupgradeneeded = () => {
-            const db = request.result;
-            if (!db.objectStoreNames.contains(STORE_NAME)) {
-                db.createObjectStore(STORE_NAME, { keyPath: "id" });
-            }
-        };
-    });
-}
-export async function storeKeyPair(keyPair, publicKeyRaw, options = {}) {
-    const db = await openDB();
-    return new Promise((resolve, reject) => {
-        const tx = db.transaction(STORE_NAME, "readwrite");
-        const store = tx.objectStore(STORE_NAME);
-        const record = {
-            id: KEY_ID,
-            privateKey: keyPair.privateKey,
-            publicKey: keyPair.publicKey,
-            publicKeyRaw,
-            createdAt: Date.now(),
-            persistence: "remembered",
-            ...(options.expiresAt === undefined
-                ? {}
-                : { expiresAt: options.expiresAt }),
-        };
-        const request = store.put(record);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => resolve();
-        tx.oncomplete = () => db.close();
-    });
-}
-export async function loadKeyPair() {
-    const db = await openDB();
-    return new Promise((resolve, reject) => {
-        const tx = db.transaction(STORE_NAME, "readwrite");
-        const store = tx.objectStore(STORE_NAME);
-        const request = store.get(KEY_ID);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => {
-            const result = request.result;
-            if (result?.expiresAt !== undefined && result.expiresAt <= Date.now()) {
-                store.delete(KEY_ID);
-                resolve(null);
-                return;
-            }
-            resolve(result ?? null);
-        };
-        tx.oncomplete = () => db.close();
-    });
-}
-export async function deleteKeyPair() {
-    const db = await openDB();
-    return new Promise((resolve, reject) => {
-        const tx = db.transaction(STORE_NAME, "readwrite");
-        const store = tx.objectStore(STORE_NAME);
-        const request = store.delete(KEY_ID);
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => resolve();
-        tx.oncomplete = () => db.close();
-    });
-}
-export async function hasKeyPair() {
-    const keyPair = await loadKeyPair();
-    return keyPair !== null;
-}

package/esm/npm/src/auth/browser.d.ts

@@ -1,14 +0,0 @@
-/**
- * @module
- * Browser-based authentication utilities for session-key based authentication.
- * Uses WebCrypto API and IndexedDB for secure key storage.
- */
-import "../_dnt.polyfills.js";
-export { type AuthConfig, type AuthStartFlowResponse, type AuthStartRequest, type AuthStartResponse, bindFlow, type BindResponse, type BindSuccessResponse, buildLoginUrl, isBindSuccessResponse, type SentinelCreds, startAuthRequest, } from "./browser/login.js";
-export { type ApprovalDecision, fetchPortalFlowState, portalFlowIdFromUrl, type PortalFlowState, type PortalFlowState as BrowserPortalFlowState, portalProviderLoginUrl, portalRedirectLocation, submitPortalApproval, } from "./browser/portal.js";
-export { bindFlowSig, clearSessionKey, createRpcProof, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, loadSessionKey, natsConnectSigForIat, type SessionKeyHandle, type SessionKeyOptions, type SessionKeyPersistenceMode, signBytes, } from "./browser/session.js";
-export { deleteKeyPair, hasKeyPair } from "./browser/storage.js";
-export { approvalCapabilityKeys, type ApprovalDecision as ApprovalDecisionData, ApprovalDecisionSchema, type AuthStartFlowResponse as AuthStartFlowResponseData, AuthStartFlowResponseSchema, type AuthStartRequest as AuthStartRequestData, AuthStartRequestSchema, type AuthStartResponse as AuthStartResponseData, AuthStartResponseSchema, type BindResponse as BindResponseData, BindResponseSchema, type BindSuccessResponse as BindSuccessResponseData, BindSuccessResponseSchema, type ClientTransportEndpoints as ClientTransportEndpointsData, ClientTransportEndpointsSchema, type ClientTransports as ClientTransportsData, ClientTransportsSchema, type ContractApproval as ContractApprovalData, type ContractApprovalCapability as ContractApprovalCapabilityData, ContractApprovalSchema, type NatsAuthTokenV1 as NatsAuthTokenV1Data, NatsAuthTokenV1Schema, type SentinelCreds as SentinelCredsData, SentinelCredsSchema, } from "./schemas.js";
-export type { NatsAuthTokenV1 } from "./types.js";
-export { base64urlDecode, base64urlEncode, sha256, toArrayBuffer, utf8, } from "./utils.js";
-//# sourceMappingURL=browser.d.ts.map

package/esm/npm/src/auth/browser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../../../src/auth/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,sBAAsB,CAAC;AAG9B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,aAAa,EACb,qBAAqB,EACrB,KAAK,aAAa,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,IAAI,sBAAsB,EAC9C,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,qBAAqB,IAAI,yBAAyB,EACvD,2BAA2B,EAC3B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,iBAAiB,IAAI,qBAAqB,EAC/C,uBAAuB,EACvB,KAAK,YAAY,IAAI,gBAAgB,EACrC,kBAAkB,EAClB,KAAK,mBAAmB,IAAI,uBAAuB,EACnD,yBAAyB,EACzB,KAAK,wBAAwB,IAAI,4BAA4B,EAC7D,8BAA8B,EAC9B,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,sBAAsB,EACtB,KAAK,gBAAgB,IAAI,oBAAoB,EAC7C,KAAK,0BAA0B,IAAI,8BAA8B,EACjE,sBAAsB,EACtB,KAAK,eAAe,IAAI,mBAAmB,EAC3C,qBAAqB,EACrB,KAAK,aAAa,IAAI,iBAAiB,EACvC,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,eAAe,EACf,eAAe,EACf,MAAM,EACN,aAAa,EACb,IAAI,GACL,MAAM,YAAY,CAAC"}

package/esm/npm/src/auth/browser.js

@@ -1,12 +0,0 @@
-/**
- * @module
- * Browser-based authentication utilities for session-key based authentication.
- * Uses WebCrypto API and IndexedDB for secure key storage.
- */
-import "../_dnt.polyfills.js";
-export { bindFlow, buildLoginUrl, isBindSuccessResponse, startAuthRequest, } from "./browser/login.js";
-export { fetchPortalFlowState, portalFlowIdFromUrl, portalProviderLoginUrl, portalRedirectLocation, submitPortalApproval, } from "./browser/portal.js";
-export { bindFlowSig, clearSessionKey, createRpcProof, generateSessionKey, getOrCreateSessionKey, getPublicSessionKey, hasSessionKey, loadSessionKey, natsConnectSigForIat, signBytes, } from "./browser/session.js";
-export { deleteKeyPair, hasKeyPair } from "./browser/storage.js";
-export { approvalCapabilityKeys, ApprovalDecisionSchema, AuthStartFlowResponseSchema, AuthStartRequestSchema, AuthStartResponseSchema, BindResponseSchema, BindSuccessResponseSchema, ClientTransportEndpointsSchema, ClientTransportsSchema, ContractApprovalSchema, NatsAuthTokenV1Schema, SentinelCredsSchema, } from "./schemas.js";
-export { base64urlDecode, base64urlEncode, sha256, toArrayBuffer, utf8, } from "./utils.js";

package/esm/npm/src/auth/device_activation.d.ts

@@ -1,146 +0,0 @@
-import type { StaticDecode } from "typebox";
-import { Type } from "typebox";
-import type { BaseError } from "@qlever-llc/result";
-import { AsyncResult } from "@qlever-llc/result";
-import type { OperationRef } from "../operations.js";
-import type { NatsAuthTokenV1 } from "./schemas.js";
-import { AuthDevicesConnectInfoGetResponseSchema, AuthDevicesConnectInfoGetSchema, AuthDeviceUserAuthoritiesListResponseSchema, AuthDeviceUserAuthoritiesListSchema, AuthDeviceUserAuthoritiesRevokeResponseSchema, AuthDeviceUserAuthoritiesRevokeSchema, AuthResolveDeviceUserAuthoritiesProgressSchema, AuthResolveDeviceUserAuthoritiesResponseSchema, AuthResolveDeviceUserAuthoritiesSchema, WaitForDeviceActivationResponseSchema } from "./protocol.js";
-export declare const DeviceActivationPayloadSchema: Type.TObject<{
-    v: Type.TLiteral<1>;
-    publicIdentityKey: Type.TString;
-    nonce: Type.TString;
-    qrMac: Type.TString;
-}>;
-export declare const DeviceActivationWaitRequestSchema: Type.TObject<{
-    flowId: Type.TString;
-    publicIdentityKey: Type.TString;
-    nonce: Type.TString;
-    contractDigest: Type.TString;
-    iat: Type.TNumber;
-    sig: Type.TString;
-}>;
-export type DeviceActivationPayload = StaticDecode<typeof DeviceActivationPayloadSchema>;
-export type DeviceActivationWaitRequest = StaticDecode<typeof DeviceActivationWaitRequestSchema>;
-export type WaitForDeviceActivationResponse = StaticDecode<typeof WaitForDeviceActivationResponseSchema>;
-export type AuthResolveDeviceUserAuthoritiesInput = StaticDecode<typeof AuthResolveDeviceUserAuthoritiesSchema>;
-export type AuthResolveDeviceUserAuthoritiesProgress = StaticDecode<typeof AuthResolveDeviceUserAuthoritiesProgressSchema>;
-export type AuthResolveDeviceUserAuthoritiesOutput = StaticDecode<typeof AuthResolveDeviceUserAuthoritiesResponseSchema>;
-export type AuthDeviceUserAuthoritiesListInput = StaticDecode<typeof AuthDeviceUserAuthoritiesListSchema>;
-export type AuthDeviceUserAuthoritiesListOutput = StaticDecode<typeof AuthDeviceUserAuthoritiesListResponseSchema>;
-export type AuthDeviceUserAuthoritiesRevokeInput = StaticDecode<typeof AuthDeviceUserAuthoritiesRevokeSchema>;
-export type AuthDeviceUserAuthoritiesRevokeResponse = StaticDecode<typeof AuthDeviceUserAuthoritiesRevokeResponseSchema>;
-export type GetDeviceConnectInfoInput = StaticDecode<typeof AuthDevicesConnectInfoGetSchema>;
-export type GetDeviceConnectInfoOutput = StaticDecode<typeof AuthDevicesConnectInfoGetResponseSchema>;
-export type DeviceIdentity = {
-    identitySeed: Uint8Array;
-    identitySeedBase64url: string;
-    publicIdentityKey: string;
-    activationKey: Uint8Array;
-    activationKeyBase64url: string;
-};
-type AuthResolveDeviceUserAuthoritiesOperationShape = {
-    subject: string;
-    input: typeof AuthResolveDeviceUserAuthoritiesSchema;
-    progress: typeof AuthResolveDeviceUserAuthoritiesProgressSchema;
-    output: typeof AuthResolveDeviceUserAuthoritiesResponseSchema;
-};
-export type AuthResolveDeviceUserAuthoritiesOperation = OperationRef<AuthResolveDeviceUserAuthoritiesOperationShape, AuthResolveDeviceUserAuthoritiesProgress, AuthResolveDeviceUserAuthoritiesOutput>;
-type RequestClient = {
-    rpc: {
-        auth: {
-            deviceUserAuthoritiesList(input: AuthDeviceUserAuthoritiesListInput): AsyncResult<AuthDeviceUserAuthoritiesListOutput, BaseError>;
-            deviceUserAuthoritiesRevoke(input: AuthDeviceUserAuthoritiesRevokeInput): AsyncResult<AuthDeviceUserAuthoritiesRevokeResponse, BaseError>;
-            devicesConnectInfoGet(input: GetDeviceConnectInfoInput): AsyncResult<GetDeviceConnectInfoOutput, BaseError>;
-        };
-    };
-};
-type ResolveDeviceUserAuthoritiesOperationClient = {
-    operation: {
-        auth: {
-            deviceUserAuthoritiesResolve: {
-                input(input: AuthResolveDeviceUserAuthoritiesInput): {
-                    start(): AsyncResult<AuthResolveDeviceUserAuthoritiesOperation, BaseError>;
-                };
-            };
-        };
-    };
-};
-export type DeviceActivationTransport = RequestClient & ResolveDeviceUserAuthoritiesOperationClient;
-export declare function deriveDeviceIdentity(deviceRootSecret: Uint8Array): Promise<DeviceIdentity>;
-export declare function deriveDeviceQrMac(input: {
-    activationKey: Uint8Array | string;
-    publicIdentityKey: string;
-    nonce: string;
-}): Promise<string>;
-export declare function buildDeviceActivationPayload(input: {
-    activationKey: Uint8Array | string;
-    publicIdentityKey: string;
-    nonce: string;
-}): Promise<DeviceActivationPayload>;
-export declare function encodeDeviceActivationPayload(payload: DeviceActivationPayload): string;
-export declare function parseDeviceActivationPayload(value: string): DeviceActivationPayload;
-export declare function startDeviceActivationRequest(args: {
-    trellisUrl: string;
-    payload: DeviceActivationPayload;
-}): Promise<{
-    flowId: string;
-    instanceId: string;
-    deploymentId: string;
-    activationUrl: string;
-}>;
-export declare function deriveDeviceConfirmationCode(input: {
-    activationKey: Uint8Array | string;
-    publicIdentityKey: string;
-    nonce: string;
-}): Promise<string>;
-export declare function verifyDeviceConfirmationCode(input: {
-    activationKey: Uint8Array | string;
-    publicIdentityKey: string;
-    nonce: string;
-    confirmationCode: string;
-}): Promise<boolean>;
-export declare function buildDeviceWaitProofInput(flowId: string, publicIdentityKey: string, nonce: string, iat: number, contractDigest: string): Uint8Array;
-export declare function signDeviceWaitRequest(args: {
-    flowId: string;
-    publicIdentityKey: string;
-    nonce: string;
-    identitySeed: Uint8Array | string;
-    contractDigest: string;
-    iat?: number;
-}): Promise<DeviceActivationWaitRequest>;
-export declare function createDeviceNatsAuthToken(args: {
-    publicIdentityKey: string;
-    identitySeed: Uint8Array | string;
-    contractDigest: string;
-    iat?: number;
-}): Promise<NatsAuthTokenV1 & {
-    contractDigest: string;
-}>;
-export declare function waitForDeviceActivation(args: {
-    trellisUrl: string;
-    flowId: string;
-    publicIdentityKey: string;
-    nonce: string;
-    identitySeed: Uint8Array | string;
-    contractDigest: string;
-    signal?: AbortSignal;
-    pollIntervalMs?: number;
-}): Promise<Extract<WaitForDeviceActivationResponse, {
-    status: "activated";
-}>>;
-export declare function getDeviceConnectInfo(args: {
-    trellisUrl: string;
-    publicIdentityKey: string;
-    identitySeed: Uint8Array | string;
-    contractDigest: string;
-    iat?: number;
-}): Promise<GetDeviceConnectInfoOutput>;
-export declare function createDeviceActivationClient(client: DeviceActivationTransport): {
-    resolveDeviceUserAuthorities(input: AuthResolveDeviceUserAuthoritiesInput): any;
-    listDeviceActivations(input: AuthDeviceUserAuthoritiesListInput): any;
-    revokeDeviceActivation(input: AuthDeviceUserAuthoritiesRevokeInput): any;
-    getDeviceConnectInfo(input: GetDeviceConnectInfoInput): any;
-};
-export declare function verifyDeviceWaitSignature(input: DeviceActivationWaitRequest): Promise<boolean>;
-export {};
-//# sourceMappingURL=device_activation.d.ts.map

package/esm/npm/src/auth/device_activation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"device_activation.d.ts","sourceRoot":"","sources":["../../../../src/auth/device_activation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAOrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,uCAAuC,EACvC,+BAA+B,EAC/B,2CAA2C,EAC3C,mCAAmC,EACnC,6CAA6C,EAC7C,qCAAqC,EACrC,8CAA8C,EAC9C,8CAA8C,EAC9C,sCAAsC,EAEtC,qCAAqC,EACtC,MAAM,eAAe,CAAC;AAiBvB,eAAO,MAAM,6BAA6B;;;;;EAKxC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;EACR,CAAC;AAEvC,MAAM,MAAM,uBAAuB,GAAG,YAAY,CAChD,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,YAAY,CACpD,OAAO,iCAAiC,CACzC,CAAC;AACF,MAAM,MAAM,+BAA+B,GAAG,YAAY,CACxD,OAAO,qCAAqC,CAC7C,CAAC;AACF,MAAM,MAAM,qCAAqC,GAAG,YAAY,CAC9D,OAAO,sCAAsC,CAC9C,CAAC;AACF,MAAM,MAAM,wCAAwC,GAAG,YAAY,CACjE,OAAO,8CAA8C,CACtD,CAAC;AACF,MAAM,MAAM,sCAAsC,GAAG,YAAY,CAC/D,OAAO,8CAA8C,CACtD,CAAC;AACF,MAAM,MAAM,kCAAkC,GAAG,YAAY,CAC3D,OAAO,mCAAmC,CAC3C,CAAC;AACF,MAAM,MAAM,mCAAmC,GAAG,YAAY,CAC5D,OAAO,2CAA2C,CACnD,CAAC;AACF,MAAM,MAAM,oCAAoC,GAAG,YAAY,CAC7D,OAAO,qCAAqC,CAC7C,CAAC;AACF,MAAM,MAAM,uCAAuC,GAAG,YAAY,CAChE,OAAO,6CAA6C,CACrD,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,YAAY,CAClD,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,YAAY,CACnD,OAAO,uCAAuC,CAC/C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,UAAU,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,UAAU,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,8CAA8C,GAAG;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,sCAAsC,CAAC;IACrD,QAAQ,EAAE,OAAO,8CAA8C,CAAC;IAChE,MAAM,EAAE,OAAO,8CAA8C,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,yCAAyC,GAAG,YAAY,CAClE,8CAA8C,EAC9C,wCAAwC,EACxC,sCAAsC,CACvC,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,GAAG,EAAE;QACH,IAAI,EAAE;YACJ,yBAAyB,CACvB,KAAK,EAAE,kCAAkC,GACxC,WAAW,CAAC,mCAAmC,EAAE,SAAS,CAAC,CAAC;YAC/D,2BAA2B,CACzB,KAAK,EAAE,oCAAoC,GAC1C,WAAW,CAAC,uCAAuC,EAAE,SAAS,CAAC,CAAC;YACnE,qBAAqB,CACnB,KAAK,EAAE,yBAAyB,GAC/B,WAAW,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;SACvD,CAAC;KACH,CAAC;CACH,CAAC;AAEF,KAAK,2CAA2C,GAAG;IACjD,SAAS,EAAE;QACT,IAAI,EAAE;YACJ,4BAA4B,EAAE;gBAC5B,KAAK,CACH,KAAK,EAAE,qCAAqC,GAC3C;oBACD,KAAK,IAAI,WAAW,CAClB,yCAAyC,EACzC,SAAS,CACV,CAAC;iBACH,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC,aAAa,GACb,2CAA2C,CAAC;AAyIhD,wBAAsB,oBAAoB,CACxC,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC,cAAc,CAAC,CA8BzB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,aAAa,EAAE,UAAU,GAAG,MAAM,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAclB;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,aAAa,EAAE,UAAU,GAAG,MAAM,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAQnC;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,uBAAuB,GAC/B,MAAM,CAER;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,GACZ,uBAAuB,CAOzB;AAED,wBAAsB,4BAA4B,CAAC,IAAI,EAAE;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,uBAAuB,CAAC;CAClC,GAAG,OAAO,CACT;IACE,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB,CACF,CAkCA;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,aAAa,EAAE,UAAU,GAAG,MAAM,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAclB;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,aAAa,EAAE,UAAU,GAAG,MAAM,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAInB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,GACrB,UAAU,CAoCZ;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,UAAU,GAAG,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA6BvC;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,UAAU,GAAG,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,eAAe,GAAG;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BxD;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,UAAU,GAAG,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CACT,OAAO,CAAC,+BAA+B,EAAE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAClE,CAuDA;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,UAAU,GAAG,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA+BtC;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,yBAAyB;wCAGK,qCAAqC;iCAK5C,kCAAkC;kCAGjC,oCAAoC;gCAItC,yBAAyB;EAIxD;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,OAAO,CAAC,CAmBlB"}